Public personal authentication service system and method therefor

Abstract

To improve convenience of user operation by utilizing a settlement terminal having both settlement and public personal authentication functions at a cashless settlement bland affiliated store.SOLUTION: A personal identification system server installed in an affiliated store management company is communicably connected to an authentication station system, and mediates a public personal authentication service to an electronic certificate of a customer. A settlement terminal individually installed in an affiliated store is communicably connected to the personal identification system server through a network. The settlement terminal reads an electronic certificate from an IC chip mounted device held by a customer by IC chip reading means on the basis of personal authentication by personal identification information inputted or acquired from the customer by screen display input means, transmits the electronic certificate to the personal identification system server, and makes the screen display input means display a validity confirmation result of the electronic certificate issued from the authentication station system or the personal identification system server to the customer and an operator of the affiliated store.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present invention relates to a public personal authentication service for a member store that enters into a member store contract with a member store management company that has a handling contract with a cashless payment brand. More specifically, the present invention relates to a system and method for using a public personal authentication service that utilizes a payment terminal or the like installed in such a member store. [Background technology]

[0002] In various industries, affiliated stores that have signed an affiliated store contract with an affiliated store management company that has a handling contract with a cashless payment brand use all-in-one terminals capable of various payment processes as a payment method that supports customers' use of cashless payment during accounting for retail sales. Some of these payment terminals are equipped with an operation panel function consisting of two screens, a screen for customers and a screen for stores. For example, Patent Document 1 discloses a payment terminal that includes a store screen and a customer screen as touch screens.

[0003] Such a payment terminal allows the customer and the store to confirm the details of the payment visually or audibly in a two-way payment procedure. The all-in-one terminal can efficiently perform various payment procedures, including contactless reading of various integrated circuit (IC) cards or smartphones using near field communication (NFC), contactless reading of one-dimensional or two-dimensional codes, electronic signature input, PIN input, and receipt output. In addition, between the payment terminal and the affiliated store management organization system, various application distribution services and various data transmission services are provided to support the store's accounting process.

[0004] Here, there are information processing terminals capable of reading necessary information from IC cards such as credit cards or individual number cards. For example, Patent Document 2 discloses an information processing terminal capable of contact or non-contact information reading from an IC card. In particular, when reading information from an individual number card, an electronic certificate for signature or user authentication is obtained, and the validity of the electronic certificate can be determined by transmitting the electronic certificate to a certification authority and receiving the determination result from the certification authority. [Prior art documents] [Patent documents]

[0005] [Patent Document 1] JP 2020-181331 A [Patent Document 2] JP 2022-174402 A Summary of the Invention [Problem to be solved by the invention]

[0006] However, the information processing terminal disclosed in Patent Document 2 is configured as a portable terminal applicable to uses other than cashless payment, in which the cardholder user holds the terminal and brings it close to the IC card to be read. Therefore, when reading an IC card such as a credit card or My Number card at a member store of a cashless payment brand as described above, the cardholder user needs to hold the terminal, which is inconvenient for the user and raises concerns that it may allow unauthorized access by the user.

[0007] Therefore, when applying the above-mentioned information processing terminal to the affiliated store's payment terminal in order to utilize the public personal authentication function, i.e., the eKYC (Electronic Know Your Customer) function, there was a problem in that it was not possible to provide sufficient functionality from the standpoint of improving the convenience of user operations and preventing unauthorized access associated with user operations.

[0008] The present invention has been made to solve these problems, and aims to provide a system and method for utilizing a public personal authentication service that enables affiliated stores of a cashless payment brand to utilize payment terminals that combine cashless payment functions with public personal authentication functions, while improving the convenience of user operations and preventing unauthorized access associated with user operations. [Means for solving the problem]

[0009] In order to solve the above problems, as one aspect of the present invention, a system for using a public personal authentication service is provided for enabling customers of a member store that has entered into a member store contract with a member store management company that has a handling contract with a payment brand to use a public personal authentication service, and includes the following components: (1) an identity verification system server that is installed in an affiliated store management company and is communicably connected to a certification authority system of a public personal authentication service and mediates the public personal authentication service for a customer's electronic certificate; and (2) A payment terminal that is installed individually at an affiliated store and receives payment results related to a transaction contract between the affiliated store and a customer from the payment institution of the payment brand, which is communicatively connected to an identity verification system server via a network, transmits an electronic certificate to the identity verification system server, and receives the validity confirmation results of the electronic certificate issued by the certification authority system or the identity verification system server.

[0010] The payment terminal (2) includes the following components: (2-1) a screen display input means for receiving the first identity information input or acquired from the customer and displaying the result of the validation check to the customer and an operator of the affiliated store; and (2-2) An IC chip reading means for reading second personal information from an IC chip-equipped device held by a customer, and for reading an electronic certificate based on a result of personal authentication by matching the first personal information with the second personal information.

[0011] Here, the affiliated store management company is either a platform operator that has established verification equipment to directly verify the validity of electronic certificates with the certification authority system, or a service provider operator that indirectly commissions the platform operator to verify the validity of electronic certificates.

[0012] In addition, the public personal authentication service performs at least one of the following: when the electronic certificate includes a signature electronic certificate, performing customer identity verification as a validity check for the signature electronic certificate; and when the electronic certificate includes a user authentication electronic certificate, performing customer qualification verification as a validity check for the user authentication electronic certificate.

[0013] The system further includes a PC server installed at the affiliated store, communicatively connected to the identity confirmation system server and the payment terminal via a network, and acquiring the recorded contents of identity confirmation from the identity confirmation system server or the payment terminal by querying. In this case, if the result of identity confirmation is valid, the PC server issues a membership card number linking the identity attribute information stored in the identity confirmation system server by identity confirmation and the additional attribute information input by the customer from the payment terminal based on a user identifier acquired from the result of identity confirmation, thereby registering the customer's membership card at the affiliated store. If the result of identity confirmation is valid and the customer has already registered a membership card at the affiliated store, the PC server extracts the membership card number corresponding to the customer based on the user identifier, executes a predetermined membership card process based on the updated contents of the incentive information input by the customer from the payment terminal, and stores the execution result.

[0014] In addition, the IC chip-equipped device is an IC card or smartphone that includes an IC chip that stores an electronic certificate as personal information related to the personal identification number, and outputs the electronic certificate to the payment terminal based on a contact or contactless reading format by the payment terminal.

[0015] In addition, identity authentication is performed using a matching process executed within the IC chip by comparing a first PIN number input by the customer into the screen display input means as first identity information with a second PIN number contained within the IC chip as second identity information.

[0016] Alternatively, authentication is performed using at least one of the following: (1) A verification process executed within the payment terminal by comparing a first face photograph image acquired from the customer by an imaging means included in the screen display input means as first personal information with a second face photograph image included in an IC chip as second personal information and read by an IC chip reading means; or (2) A matching process performed as a visual confirmation by an operator of the affiliated store to compare the customer's facial information obtained by visual inspection as the first personal information with the facial photo image contained in the IC chip as the second personal information, read by the IC chip reading means, and then displayed on the screen display input means.

[0017] Furthermore, as one aspect of the present invention, a method for verifying eligibility in a system for using a public personal authentication service that enables customers of a member store to use the public personal authentication service is for verifying customer eligibility at a member store that has entered into a member store contract with a member store management company that has a handling contract with a payment brand, and includes the following components: (1) A step of receiving, in a payment terminal that is individually installed in an affiliated store and receives payment results related to a transaction contract between the affiliated store and a customer from a payment institution of a payment brand, first personal information that is input or obtained by a customer through a screen display input means included in the payment terminal, or that is obtained by visual inspection by an operator of the affiliated store; (2) reading second personal information from an IC chip-equipped device held by the customer by an IC chip reading means included in the payment terminal; (3) displaying a result of the identity authentication by matching the first identity information and the second identity information on a screen display input means of the payment terminal as a result of the customer's qualification confirmation to an operator of the customer and the affiliated store; and (4) In the payment terminal, a step of transmitting the recorded contents of the qualification confirmation to an identity verification system server that is installed in the affiliated store management company and is communicatively connected via a network to the certification authority system of the public personal authentication service. Effect of the Invention

[0018] According to the present invention, by using a payment terminal that combines the functions of public personal authentication with the functions of cashless payment at affiliated stores of a cashless payment brand, a system and method for utilizing the public personal authentication service can fully improve the convenience of user operations and prevent unauthorized access associated with user operations. [Brief description of the drawings]

[0019] A more detailed understanding of the embodiments disclosed herein can be had from the following description, taken in conjunction with the accompanying drawings, in which: [Figure 1] 1 is a configuration diagram showing a connection form of various systems related to a public personal authentication service utilization system according to an embodiment of the present invention. [Diagram 2] 2 is a configuration diagram showing the internal configuration of a Web system server on the affiliated store management company side in the public personal authentication service utilization system shown in FIG. 1. [Diagram 3]2 is a configuration diagram showing the internal configuration of an identity verification system server on the member store management company side in the public personal authentication service utilization system shown in FIG. 1. [Figure 4] 2A and 2B are a top view and a side view showing the appearance of a settlement terminal on the affiliated store side in the public personal authentication service utilization system shown in FIG. [Diagram 5] 2 is a configuration diagram showing the internal configuration of a member store side settlement terminal in the public personal authentication service utilization system shown in FIG. 1. [Figure 6] 2A and 2B are a top view and a side view showing the appearance of a member store side PC (Personal Computer) server in the public personal authentication service utilization system shown in FIG. [Figure 7A] 2 is a flowchart showing a public personal authentication (identification / record inquiry) process in the public personal authentication service utilization system shown in FIG. 1. [Figure 7B] 1 is a flowchart showing a membership card replacement (membership card registration / membership card processing) process in a public personal authentication service utilization system according to an embodiment of the present invention. [Figure 8A] 2 is an integration diagram showing the flow of various data and operations / displays between various systems included in the public personal authentication (identification / record inquiry) process in the public personal authentication service utilization system shown in FIG. 1. [Figure 8B] This is an integration diagram showing the flow of various data and operations / displays between various systems included in the membership card replacement (membership card registration / membership card processing) process in the public personal authentication service utilization system shown in Figure 1. [Figure 9] 2 is a flowchart showing a qualification confirmation process in the public personal authentication service utilization system shown in FIG. 1. [Figure 10] 1 is an integration diagram showing the flow of various data and operations / displays between various systems included in the qualification confirmation process in a public personal authentication service utilization system according to an embodiment of the present invention. FIG. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0020] Hereinafter, an embodiment of the present invention will be described in detail with reference to the drawings. In the drawings, the same reference numerals denote the same components, and the description thereof will be omitted.

[0021] [Connections of various systems] Fig. 1 is a configuration diagram showing the connection form of various systems related to a public personal authentication service utilization system according to an embodiment of the present invention. In Fig. 1, a scene is assumed in which, at an affiliated store 120 having a handling contract with at least one of various cashless payment brands, a customer 110 who is a member of the cashless payment brand performs identity verification or qualification verification in connection with or in connection with a purchase transaction contract for a product or service in the store, in accordance with instructions from a staff member (operator) of the affiliated store 120, and performs operations such as payment, identity verification, or qualification verification on an affiliated store payment terminal 160, which is a client device of an affiliated store management company Web system server 140.

[0022] Here, the affiliated store payment terminal 160 is communicably connected to the affiliated store management company's Web system server 140 and the affiliated store's PC server 125 (described later) via the communication line 100. On the affiliated store management company's side, the Web system server 140 is internally communicably connected to a private identity verification system server 150 that is not publicly available. Furthermore, the public personal authentication service utilization system 130 is configured with these various system devices as components.

[0023] In the member store settlement terminal 160, the reading of various information stored in the IC chip included in the IC chip mounted device 115 held by the customer 110 is based on contactless / contact type reading from various cards, contactless code reading from various card compatible smartphone applications, or contactless reading of smartphone mounted electronic certificates. Here, the IC chip mounted device 115 includes a credit card / My Number card equipped with an IC chip, or a smartphone equipped with an IC chip including various card compatible applications / My Number card compatible electronic certificates. The My Number card is an IC card that includes My Number, i.e., a personal identification number (12 digits in decimal notation) as the information written on the card. The signature electronic certificate and user authentication electronic certificate included in the My Number card are equivalent to a public key corresponding to a private key in the public key cryptography.

[0024] 1, the communication line 100 communicatively connects each component constituting the public personal authentication service utilization system 130, as well as a payment agency system 170, a PF operator system 180, and a certification authority (JPKI) system 190, which will be described later. Note that the communication line 100 may be, for example, a public line type network that realizes telephone communication and data communication, or may include as a part thereof a dedicated line type network that communicatively connects only specific systems in a limited manner.

[0025] In the public personal authentication service utilization system 130, the payment agency has a handling contract with a payment institution belonging to at least one of various cashless payment brands, and is responsible for part of the payment flow related to the customer 110 and the payment institution via the payment agency system 170 between the affiliated store payment terminal 160 and the affiliated store management company Web system server 140. Here, in response to a payment request received from the payment terminal 160, the payment agency system 170 transmits the result of the payment processing by the relevant payment institution to the payment terminal 160 and the Web system server 140, respectively.

[0026] In particular, the affiliated store management company's Web system server 140 handles other parts of the payment flow related to the customer 110 and the affiliated store management company between the payment agency system 170 and the affiliated store payment terminal 160, based on the fact that the affiliated store management company has a handling contract with at least one of various cashless payment brands. This Web system server 140 transmits the result of the sales settlement for the sales transaction from the corresponding affiliated store 120 to the payment terminal 160 in response to the payment result received from the payment agency system 170. The types of cashless payment assumed here include card payment, electronic money payment, code payment, etc. In card payment, the card itself or a smartphone based on the customer's credit card, prepaid card, or debit card is read on the payment terminal 160.

[0027] The affiliated store payment terminal 160 is installed in the affiliated store 120 that has concluded an affiliated store contract with the affiliated store management company, and is an all-in-one payment terminal that supports various cashless payment processes and supports payments for the customer 110 to purchase goods or services, etc., during accounting for retail sales transactions carried out in the store. This payment terminal 160 is equipped with a customer screen and a store screen as a dual-screen operation panel function, and in particular, the customer screen makes it possible to display various information before and after payment, or various information before and after identity verification or qualification verification, etc.

[0028] The affiliated store PC server 125 uses various applications including a mailer and a web browser to receive identity verification records related to the customer 110 from the affiliated store management company Web system server 140 or the affiliated store payment terminal 160 as a storage target. The affiliated store PC server 125 is configured as a small server based on a personal computer (PC). User login authentication for the PC server 125 is managed by the affiliated store management company Web system server 140, and security is strengthened by two-step authentication, for example, email authentication that notifies the user of a two-step authentication code to their email address. Furthermore, affiliated store PCs (not shown) that can be connected to the affiliated store PC server 125 are restricted by, for example, IP addresses, and are subject to necessary security restrictions permitted for use by the affiliated store headquarters.

[0029] In the public personal authentication service utilization system 130, the platform (PF) operator has a handling contract for verifying the validity of electronic certificates with the Japan Agency for Local Authority Information Systems (JLIS), which manages the certification authority (JPKI: Japanese Public Key Infrastructure) that provides the public personal authentication service (eKYC). Based on this, the PF operator system 180 has developed signature verification equipment that directly verifies the validity of electronic certificates with the certification authority (JPKI) system 190, and provides this function to other service provider (SP) operators as a platform.

[0030] In the public personal authentication service utilization system 130, the affiliated store management company has a handling contract with the PF business operator as an SP business operator for validity confirmation of electronic certificates, and based on this, the affiliated store management company's identity confirmation system server 150 entrusts the validity confirmation of electronic certificates to the certification authority (JPKI) system 190. Therefore, the affiliated store management company's identity confirmation system server 150 mediates part of the personal authentication flow related to the customer 110 and the certification authority (JPKI) between the affiliated store payment terminal 160 and the certification authority (JPKI) 190. Here, the certification authority (JPKI) system 190 transmits the determination result for the authentication request received from the payment terminal 160 via the affiliated store management company's Web system server 140 and identity confirmation system server 150, and the PF business operator system 180, to the payment terminal 160 via the PF business operator system 180, and the Web system server 140 and identity confirmation system server 150.

[0031] Here, the validity of the electronic certificate included in the IC chip mounted on the IC chip mounted device 115 is confirmed by a CRL (Certification Revocation List) providing method or an OCSP (Online Certification Status Protocol) responder method. In the CRL providing method, a list of electronic certificate revocation information called CRL, which is issued periodically, is imported into the member store management company's identity confirmation system server 150 over time, and even if the identity confirmation system server 150 is temporarily offline, the identity confirmation system server 150 can confirm the validity of the issue number of the electronic certificate for the customer 110 (electronic certificate identification serial number (number of digits: maximum 20 octets, i.e. 40 digits in hexadecimal notation)) based on this revocation information. In the OCSP responder method, the identity confirmation system server 150 can confirm the validity of the issue number of the electronic certificate for the customer 110 in real time by performing online comparison based on revocation information updated at shorter intervals than the CRL based on a communication protocol called OCSP.

[0032] The electronic certificate included in the IC chip mounted on the IC chip mounted device 115 includes an electronic certificate for signature and an electronic certificate for user authentication. The electronic certificate for signature makes it possible to confirm the authenticity of various electronic documents such as applications or contracts when creating and transmitting the documents. The electronic certificate for user authentication makes it possible to confirm that a person who uses various systems after receiving user authentication is the user himself / herself. The basic information held by the electronic certificate for signature includes the four basic pieces of information (name, date of birth, sex, and address), as well as the subject, the date of issue, the expiration date of the validity period, and the issuer. The basic information held by the electronic certificate for user authentication includes the subject, the date of issue, the expiration date of the validity period, and the issuer. The main difference between the information held by these electronic certificates is that the electronic certificate for signature holds the four basic pieces of information, while the electronic certificate for user authentication does not hold the four basic pieces of information.

[0033] Here, the eKYC method requested to the certification authority (JPKI) system 190 is based on the "Wa" method (see Article 6, Paragraph 1, Item 1 of the Enforcement Regulations of the Criminal Proceeds Act), which is one of the three methods using IC chips among the various methods stipulated in the "Act on Prevention of Transfer of Criminal Proceeds (Criminal Proceeds Act)." This "Wa" method is a method for officially authenticating an individual based on a signature electronic certificate read from an IC chip included in an IC chip-equipped device 115 held by the customer and PIN (Personal Identification Number) information presented by the customer 110, and does not require the submission of an ID image or visual confirmation.

[0034] In addition, in the present invention, the method of performing identity authentication is not limited to the "Wa" method, and other methods include, for example, using a face photo image as identity information to replace the above-mentioned PIN authentication. More specifically, the face photo image of customer 110 captured by affiliated store payment terminal 160 is compared with the reading result of the face photo image contained in the IC chip by internal processing of payment terminal 160, and further, the face information of customer 110 visually observed by the operator of affiliated store 120 is compared with the face photo image displayed on payment terminal 160 as a visual confirmation by the operator.

[0035] [Internal configuration of the affiliated store management company's system server] Figure 2 is a configuration diagram showing the internal configuration of the affiliated store management company's Web system server 140 shown in Figure 1. Figure 3 is a configuration diagram showing the internal configuration of the affiliated store management company's identity verification system server 150 shown in Figure 1. As shown in Figures 2 and 3, the Web system server 140 and the identity verification system server 150 are each configured in the same way as a computer for general server use, and support processing functions related to affiliated store management operations and customer verification operations, respectively.

[0036] More specifically, in the affiliated store management company's Web system server 140 and the identity verification system server 150, control units 210 and 310, main memory units 212 and 312, input units 214 and 314, output units 216 and 316, communication IFs (Interfaces) 218 ​​and 318, and auxiliary memory units 220 and 320 are connected to each other so as to be able to communicate with each other via system buses 200 and 300, respectively.

[0037] The auxiliary storage unit 220 contains an affiliated store information management unit 230, a customer information management unit 232, a payment information management unit 234, an incentive information management unit 236, and an identity verification control unit 238, each of which will have application programs for processing various payment-related data. The programs held in these components are loaded into the main storage unit 212 based on a call instruction from the control unit 210, and execute various calculation processes.

[0038] The auxiliary storage unit 220 also includes an affiliated store information storage unit 240, a customer information storage unit 242, a usage history information storage unit 244, and an incentive information storage unit 246, which are subsystems for managing data and programs in the form of files / databases. The data and programs stored in these components are loaded into the main storage unit 212 based on a call instruction from the control unit 210, and are used for processing various calculations.

[0039] Furthermore, auxiliary memory unit 320 contains an identity verification control unit 330, a revocation information management unit 332, an electronic certificate judgment unit 334, an identity verification record management unit 336, an attribute information management unit 338, and a membership card information management unit 340, each of which will have application programs that handle the processing of various data related to identity verification or qualification verification. The programs held in these components are loaded into main memory unit 312 based on a call instruction from control unit 310, and execute various calculation processes.

[0040] The auxiliary storage unit 320 also includes a revocation information storage unit 350, an identity verification record storage unit 352, an attribute information storage unit 354, and a membership card information storage unit 356, which are subsystems for managing data and programs in the form of files and databases. The data and programs stored in these components are loaded into the main storage unit 312 based on a call instruction from the control unit 310, and are used for processing various calculations.

[0041] The control units 210 and 310 function as a central processing unit (CPU) and execute operation control and data calculations for individual system components, and in particular load data and programs stored in the auxiliary storage units 220 and 320 into the main storage units 212 and 312 to execute various calculations. The main storage units 212 and 312 function as a main memory and store various data and programs input from the input units 214 and 314, the communication IF (Interface) units 218 and 318, and the auxiliary storage units 220 and 320, as well as computer-executable instructions, based on instructions from the control units 210 and 310, and save data after calculations have been performed on these.

[0042] The input units 214 and 314 provide an interface for accepting various commands and data (e.g., various master and table data, etc.) input by a system operator. The output units 216 and 316 generate output data for displaying various processed data to an operator, output data for printing the data, etc.

[0043] The communication IF unit 218 provides an interface which functions when transmitting and receiving various data between the affiliated store management company's identity verification system server 150, the affiliated store's payment terminal 160, the payment agency system 170, the PF operator system 180, and the certification authority (JPKI) system 190, as well as other internal systems and devices, etc. The communication IF unit 318 also provides an interface which functions when transmitting and receiving various data between the affiliated store management company's Web system server 140, as well as other internal systems and devices, etc.

[0044] Here, each embodiment of the server configuration of the affiliated store management company side Web system server 140 and the identity verification system server 150 may function as one system configuration entity. Therefore, as an example of the embodiment, they may be arranged inside a single server computer, each system component may be configured as a plurality of units in parallel and distributed form, or multiple server computers may be combined to share data and programs.

[0045] More specifically, in the affiliated store management company's Web system server 140, the affiliated store information management unit 230 manages information registered with a cashless payment brand by each affiliated store that has a contract with the cashless payment brand, and stores this registration information in the affiliated store information storage unit 240. Such registration information includes, for example, the affiliated store ID (Identification), name, address, representative, type of business, business hours, transportation access, and HP (Home Page) site information.

[0046] The customer information management unit 232 manages information registered with a cashless payment brand by each customer who enters into a membership contract with the cashless payment brand, and stores this registration information in the customer information storage unit 242. Such registration information includes, for example, customer ID, name, address, telephone number, email address, sex, date of birth, debit account, occupation, job title, annual income, and family structure.

[0047] The payment information management unit 234 manages sales handling data of the affiliated store 120 corresponding to the payment result issued by the payment agency system 170 that accepted the payment request from the affiliated store payment terminal 160, and stores this payment information in the usage history information storage unit 244. Such registered information includes, for example, a payment ID, an affiliated store ID, a customer ID, a payment brand ID, the date and time of payment, a payment method, a payment amount, and a breakdown of the transaction items.

[0048] The incentive information management unit 236 manages incentive information (electronic money, electronic coupons, points, etc.) registered to present digital incentives to the customer 110 at the time of purchase payment at the affiliated store payment terminal 160, and stores this registered information in the incentive information storage unit 246. Such registered information includes, for example, an incentive ID, affiliated store ID, customer ID, validity period, eligible affiliated store conditions, eligible customer conditions, incentive usage timing setting (at the time of this payment, at the time of the next payment, etc.), and available terminal setting (all affiliated stores, limited affiliated stores, etc.).

[0049] When the identity verification control unit 238 receives an authentication request for identity verification or qualification verification of the customer 110 when reading the electronic certificate from the IC chip contained in the IC chip-equipped device 115 in the affiliated store payment terminal 160, it transfers the authentication request to the affiliated store management company's identity verification system server 150 and transfers the determination result of the authentication request received from the identity verification system server 150 to the payment terminal 160.

[0050] On the other hand, in the affiliated store management company's identity confirmation system server 150, in the case of the CRL provision method, the identity confirmation control unit 330 requests the electronic certificate judgment unit 334 to confirm the validity of the electronic certificate included in the authentication request based on the authentication request received from the affiliated store management company's Web system server 140, and transfers the judgment result to the Web system server 140. Also, in the case of the OCSP responder method, the identity confirmation control unit 330 takes the authentication request received from the Web system server 140 as an authentication request, requests the PF operator system 180 via the Web system server 140 to confirm the validity of the electronic certificate included in the authentication request, and transfers the judgment result of the authentication request received from the PF operator system 180 via the Web system server 140 to the affiliated store's payment terminal 160 via the Web system server 140.

[0051] In the case of the CRL provision method, the revocation information management unit 332 manages a list of revocation information for electronic certificates periodically issued by the certification authority (JPKI) system 190 by receiving it via the PF operator system 180 and the affiliated store management company's Web system server 140, and stores this revocation information in the revocation information storage unit 350. Such revocation information includes, for example, the issue number of the electronic certificate, the date and time of revocation, the reason for revocation, and the issuer (the signature of the certification authority).

[0052] In the case of the CRL provision method, the electronic certificate judgment unit 334 searches for the presence or absence of the electronic certificate issue number of the customer 110 in the revocation information stored in the revocation information memory unit 350 based on an authentication request received from the affiliated store management company's Web system server 140, and judges the certificate to be invalid if the issue number matches, or to be valid if there is no match, and notifies the identity verification control unit 330 of the judgment result.

[0053] The identity verification record management unit 336 manages the judgment result from the electronic certificate judgment unit 334 in the case of the CRL provision method, or the judgment result from the certification authority (JPKI) system 190 in the case of the OCSP responder method, and stores all the implementation records of identity verification, i.e., the implementation records of identity verification that have been accepted at all affiliated stores 120, in the identity verification record storage unit 352. This identity verification record is stored for a predetermined period (e.g., seven years (see Article 6, Paragraph 2 of the Criminal Proceeds Act)) stipulated by the Criminal Proceeds Transfer Prevention Act. Such identity verification record includes the user identifier corresponding to the My Number card, the user identifier, the issue number of the electronic certificate, the name, the date of birth, the address, the age, the implementation method of identity verification, the implementation date and time, and the implementation result.

[0054] The attribute information management unit 338 manages the personal attribute information of the customer 110 who has been the subject of identity verification, and stores this personal attribute information in the attribute information storage unit 354. Such attribute information includes a user identifier corresponding to the My Number card, an issue number of an electronic certificate, a name, a date of birth, a sex, an address (including a telephone number), and other identifiers other than the My Number card.

[0055] When a customer 110 who has been the subject of identity verification or qualification verification becomes a member who uses the services provided by the affiliated store management company, the membership card information management unit 340 manages all of the membership card information, i.e., all of the membership card information for which applications have been accepted at all affiliated stores 120, and stores these membership card numbers in the membership card information storage unit 356. Such membership card information includes the affiliated store management company's service identification number, affiliated store main membership card number, affiliated store temporary membership card number, My Number card compatible user identifier, electronic certificate issue number, and credit card number.

[0056] [External configuration of merchant's payment terminal] Figure 4 is a top view (a) and a side view (b) showing the appearance of the affiliated store payment terminal 160 shown in Figure 1. As shown in Figure 4, the payment terminal 160 installed in the affiliated store 120 has various input / output devices to support various cashless payments. In particular, a relatively large touch screen 400 and a relatively small touch screen 410 are installed facing each other on both the store side and the customer side as screen display input means.

[0057] Here, in this embodiment, the affiliated store payment terminal 160 has a hardware configuration partially similar to that disclosed in the above-mentioned Patent Document 1, but the hardware configuration is not limited to these. It is desirable for the payment terminal according to the present invention to have touch screens on both the store side and the customer side, but it is sufficient that at least the customer side has a screen display input means that allows display of payment result information and identity verification result information and input related thereto, and that various operations related to cashless payment and identity verification or qualification verification can be performed by using this.

[0058] As shown in (a) and (b) of FIG. 4, on the customer side, the customer side touch screen 410, assuming operation by the customer 110, has a built-in function of displaying various payment information and information related to identity verification and qualification verification, an input function of an electronic signature and a PIN number, and a contactless IC card reader function using near field communication (NFC) as an IC chip reading means, thereby enabling card payment, electronic money payment, and identity verification and qualification verification. The customer side touch screen 410 has a screen size of, for example, about 4 inches, and includes a lens area of ​​a small camera in part of the screen area as an imaging means for capturing a facial image of the customer 110, and further enables PIN pad operation by display input as a software keyboard. Note that the NFC communication standard supported by the affiliated store side payment terminal 160 complies with at least one of, for example, Type A, Type B, and Type F (including FeliCa (registered trademark)).

[0059] The contact IC card reader slot 420 is equipped with a reading function for IC cards that do not support contactless reading based on direct reading from a contact terminal exposed on the surface of the IC card, thereby enabling card payment, as well as identity and qualification confirmation. The bidirectional reading magnetic card reader slot 430 is equipped with a dual head that can simultaneously read both sides of a magnetic card, enabling card payment, as well as identity and qualification confirmation. In addition, the code reading camera 440 enables code payment by capturing an image of a one-dimensional or two-dimensional code displayed on the IC chip mounted device 115.

[0060] Meanwhile, on the store side, the store touch screen 400 is provided with functions including display, decision, and output corresponding to various payments, and identity verification and qualification verification, on the premise that it will be operated by staff of the affiliated store 120, and supports the accounting process of retail sales mainly based on software-like functional operations. This store touch screen 400 has, for example, a screen size similar to that of the customer touch screen 410, or a larger screen size. A printer with an autocutter built into the main body of the payment terminal 160 ejects receipt paper printed as a payment result from the printer ejection port 450, and automatically cuts and outputs the paper for each transaction.

[0061] [Internal configuration of merchant's payment terminal] Fig. 5 is a block diagram showing the internal configuration of the affiliated store payment terminal 160 shown in Fig. 1. As shown in Fig. 5, in order to support functions specialized for accounting processing of retail sales and use of public personal authentication services, the inside of the payment terminal 160 is configured similarly to a computer for specialized client use. More specifically, in the payment terminal 160, a control unit 510, a main memory unit 512, an input unit 514, a display unit 516, a printing unit 518, an output unit 520, a communication IF 522, and an auxiliary memory unit 530 are connected to each other via a system bus 500 so as to be able to communicate with each other.

[0062] The auxiliary storage unit 530 includes a payment processing control unit 540, an incentive information control unit 542, an identity verification control unit 544, an identity verification record management unit 546, an attribute information management unit 548, a membership card information management unit 550, and a service application control unit 552, each of which is configured with an application program that handles various types of data processing. The programs held in these components are loaded into the main storage unit 512 based on a call instruction from the control unit 510, and execute various types of calculation processing.

[0063] Furthermore, auxiliary storage unit 530 includes an incentive information storage unit 560, an identity verification record storage unit 562, an attribute information storage unit 564, and a membership card information storage unit 566, which are subsystems for managing data and programs in the form of files / databases. The data and programs stored in these components are loaded into main storage unit 512 based on a call instruction from control unit 510, and are used for processing various calculations.

[0064] Control unit 510 functions as a central processing unit (CPU) and controls the operation of individual system components and performs data calculations, and in particular loads data and programs stored in auxiliary storage unit 530 into main storage unit 512 to perform various calculations. Main storage unit 512 functions as a main memory and stores various data and programs input from input unit 514, communication IF unit 522, and auxiliary storage unit 530 based on instructions from control unit 510, as well as computer-executable instructions, and the like, and saves data after calculations have been performed on these.

[0065] The input unit 514 provides an interface for accepting various commands or data input from the store touch screen 400, the customer touch screen 410, the contact type IC card reader slot 420, the bidirectional reading type magnetic card reader slot 430, and the code reading camera 440. The communication IF unit 522 provides an interface that functions when transmitting and receiving various data between the affiliated store PC server 125, the payment agency system 170, the affiliated store management company Web system server 140, the identity verification system server 150, and other internal systems and devices.

[0066] The display unit 516 displays data on the store touch screen 400 or the customer touch screen 410 that indicates information that is required for various confirmations by the customer 110 or affiliated store 120 when making various payments and using public personal authentication services. When the printing unit 418 outputs the payment result data to the built-in printer as the data to be printed, a receipt showing billing details or a receipt showing the payment result is discharged from the printer outlet 450 as paper separated for each transaction. The output unit 520 provides an interface that generates output data to be presented to the customer 110 or affiliated store 120 as data that has been processed in various ways other than for display or printing.

[0067] The payment processing control unit 540 accepts a payment request input by the customer 110 from each input interface of the affiliated store payment terminal 160, transmits the payment request to the payment agency system 170, and then outputs the payment result received from the payment agency system 170 from each output interface of the payment terminal 160. In this way, the payment processing control unit 540 handles one end of the payment processing established between the customer 110 and the cashless payment brand.

[0068] The incentive information control unit 542 manages the incentive information received from the affiliated store management company's Web system server 140, and stores this registration information in the incentive information storage unit 560. With regard to the incentive information already stored in the incentive information storage unit 560, when the customer 110 makes a payment at the affiliated store's payment terminal 160, the incentive information control unit 542 presents incentive information corresponding to the payment status on the customer's touch screen 410, and reflects this in a change to the payment amount according to the customer's 110 selection of deducting a discount or not using the points. It is also possible to apply point processing (granting or using) as an incentive at the time of payment.

[0069] The identity verification control unit 544 is configured to include an identity verification application and a qualification verification application as a My Number card authentication application built based on a JLIS-certified platform software development kit (SDK). When the member store payment terminal 160 reads the signature electronic certificate or user authentication electronic certificate from the My Number card compatible IC chip mounted device 115, the identity verification control unit 544 generates an authentication request for identity verification or qualification verification of the customer 110 based on the validity of the electronic certificate to be read, and transmits the authentication request to the identity verification system server 150 via the member store management company's Web system server 140, and receives a judgment result on the authentication request from the identity verification system server 150 via the Web system server 140. The identity verification application and the qualification verification application each incorporate the same platform SDK as a core module, but different dedicated platform SDKs may be incorporated separately.

[0070] The identity verification record management unit 546 manages the judgment results received from the affiliated store management company's identity verification system server 150 via the affiliated store management company's Web system server 140, and stores only those identity verification or qualification verification implementation records for which confirmation acceptance has been carried out at individual affiliated stores 120 in the identity verification record storage unit 562. Such identity verification records include the My Number card-compatible user identifier, the electronic certificate issue number, the name, the implementation method of identity verification, the implementation date and time, and the implementation results.

[0071] The attribute information management unit 548 manages the customer's attribute information received from the IC chip mounted device 115 held by the customer and the additional attribute information directly input from the affiliated store payment terminal 160, and stores this attribute information in the attribute information storage unit 564. Such customer attribute information and additional attribute information include a user identifier corresponding to the My Number card, an electronic certificate issue number, name, date of birth, sex, address, affiliated store main membership card number, holding qualification number, registration method, registration date, and the like.

[0072] When a customer 110 who has been the subject of identity verification or qualification verification becomes a member who uses the services provided by an affiliated store 120, the membership card information management unit 550 manages only the membership card information for which the application was accepted at the individual affiliated store 120, and stores this membership card information in the membership card information storage unit 566. Such membership card information includes the affiliated store's service identification number, the affiliated store's main membership card number, the affiliated store's temporary membership card number, a user identifier compatible with My Number cards, credit card number, registration method, and registration date.

[0073] The service application control unit 552 is capable of calling up individual service applications of the affiliated store 120, such as an application for applying for optional services that require identity verification or qualification verification, or an incentive usage application that updates incentive information based on authentication of the affiliated store's main membership card number.

[0074] [Internal configuration of the affiliated store's PC server] Fig. 6 is a block diagram showing the internal configuration of the affiliated store PC server 125 shown in Fig. 1. As shown in Fig. 6, the PC server 125 is configured similarly to a small-scale computer that is based on a PC and has only some of its functions expanded for server use, and supports processing functions related to affiliated store management operations and customer confirmation operations. More specifically, in the affiliated store PC server 125, a control unit 610, a main memory unit 612, an input unit 614, an output unit 616, a communication IF 618, and an auxiliary memory unit 620 are connected to each other via a system bus 600 so as to be able to communicate with each other.

[0075] The auxiliary storage unit 620 contains an identity verification record management unit 630, a membership card information management unit 632, and a membership card processing control unit 634, each of which will have application programs built in it that handle the processing of various data related to identity verification or qualification verification. The programs held in these components are loaded into the main storage unit 612 based on a call instruction from the control unit 610, and execute various types of calculation processing.

[0076] Additionally, auxiliary storage unit 620 includes an identity verification record storage unit 650, a membership card information storage unit 652, and a membership card processing result storage unit 654, which will constitute subsystems for managing data and programs in the form of files / databases. The data and programs stored in these components are loaded into main storage unit 612 based on a call instruction from control unit 610, and are used to process various calculations.

[0077] The control unit 610 functions as a central processing unit (CPU) and controls the operations of individual system components and performs data calculations, and in particular loads data and programs stored in the auxiliary storage unit 620 into the main storage unit 612 to perform various calculations. The main storage unit 612 functions as a main memory and stores various data and programs input from the input unit 614, the communication IF unit 618, and the auxiliary storage unit 620 based on instructions from the control unit 610, as well as computer-executable instructions, and the like, and saves data after calculations have been performed on these.

[0078] The input unit 614 provides an interface for accepting various commands and data (e.g., various master and table data, etc.) input by a system operator. The output unit 616 generates output data for displaying various processed data to an operator and output data for printing the data. The communication IF unit 618 provides an interface that functions when transmitting and receiving various data between the affiliated store management company's Web system server 140, the identity verification system server 150, the affiliated store's payment terminal 160, and other internal systems and devices.

[0079] More specifically, the identity verification record management unit 630 manages the identity verification or qualification verification judgment result records acquired from the affiliated store management company's identity verification system server 150 or the affiliated store's payment terminal 160 by controlling a Web management screen constructed to manage the performance inquiry and download execution of the identity verification record, and stores these identity verification records in the identity verification record storage unit 650. Such identity verification records include a user identifier corresponding to the My Number card, an electronic certificate issue number, a name, an identity verification implementation method, an implementation date and time, and an implementation result. Note that an affiliated store user can view identity verification records limited to transactions at the affiliated store to which he or she belongs, but an affiliated store management company user can view identity verification records for all affiliated stores by payment terminal or authentication date.

[0080] When a customer 110 who has been the subject of membership card registration or membership card processing (processing of member-oriented services by the affiliated store) becomes a member who uses the services provided by the affiliated store management company, the membership card information management unit 632 manages the membership card information acquired from the affiliated store management company's identity verification system server 150 and stores this membership card information in the membership card information storage unit 652. Such membership card information includes the affiliated store's service identification number, the affiliated store's main membership card number, the affiliated store's temporary membership card number, a user identifier compatible with My Number cards, and a credit card number. Note that the member-oriented services of the affiliated store 120 include, for example, buying second-hand goods, selling alcohol and tobacco, and authenticating health insurance cards at medical institutions.

[0081] If customer 110 has already registered as a member using the services provided by the affiliated store management company, membership card processing control unit 634 controls membership card processing to reflect the change in the payment amount based on the linkage of incentive information, and stores the result of this membership card processing in membership card processing result storage unit 654. Such membership card processing result information includes the affiliated store ID, payment terminal ID, affiliated store service identification number, affiliated store main membership card number, My Number card compatible user identifier, implementation date and time, transaction identification number, and changes to the payment amount.

[0082] [Public Personal Authentication Process] Fig. 7A is a flowchart showing the public personal authentication (identification / record inquiry) process in the public personal authentication service utilization system 130 shown in Fig. 1. Fig. 8A is a linkage diagram showing the flows of various data and operations / displays across various systems included in the public personal authentication (identification / record inquiry) process shown in Fig. 7A.

[0083] (When verifying identity) 7A and 8A, in step 700, the staff of the affiliated store 120 gives a brief explanation of identity verification on the affiliated store payment terminal 160, and when the customer 110 who has received this offers to have his / her identity verified, the staff of the affiliated store 120 who has accepted the offer presses a start button for the identity verification application displayed on the store touch screen 400 of the payment terminal 160 as an authentication start operation 800. At this time, the payment terminal 160 transmits an issue request 802 for an access token as payment authentication information for using the service to the affiliated store management company's identity verification system server 150 via the affiliated store management company's Web system server 140.

[0084] Next, in step 702, the affiliated store management company's identity verification system server 150 transmits an access token issuance request 804 to the certification authority (JPKI) system 190 via the PF business system 180. Next, in step 704, the identity verification system server 150 transfers the access token data 806 received from the certification authority (JPKI) system 190 via the PF business system 180 as access token data 808 to the affiliated store payment terminal 160 via the affiliated store management company's Web system server 140.

[0085] Next, in step 706, when the affiliated store payment terminal 160 displays an identity verification consent screen on the customer touch screen 410, the customer 110 presses the consent button included in the screen as an authentication consent input operation 810. At this time, the staff of the affiliated store 120 performs age verification on the customer 110 (customer 110 is 15 years of age or older) and PIN verification (customer 110 has not forgotten the PIN related to his / her My Number).

[0086] Next, in step 708, when the payment terminal 160 displays a PIN input screen on the customer-side touch screen 410, the customer 110 operates the PIN pad displayed on the screen as a PIN input operation 812 to input a PIN (a 6- to 16-digit PIN corresponding to the signature electronic certificate) into the input field on the screen. Note that this PIN is either a 6- to 16-digit PIN for the signature electronic certificate set when the Individual Number is issued, or a 6- to 16-digit PIN for the signature electronic certificate reset based on a 4-digit PIN for the user-identification electronic certificate set when the Individual Number is issued.

[0087] Next, in step 710, when the affiliated store payment terminal 160 displays an IC chip reading screen on the customer's touch screen 410, the customer 110 holds the IC chip mounted device 115 (My Number card, My Number card compatible smartphone, etc.) held by the customer close to the customer's touch screen 410 of the affiliated store payment terminal 160. The payment terminal 160 transmits a wireless signal including a PIN for the electronic certificate for signature as an IC chip reading request 814 to the IC chip mounted device 115 as the start of IC chip scanning. An application installed in the IC chip included in the IC chip mounted device 115 performs authentication of the PIN for the electronic certificate for signature. If the authentication result is positive, the IC chip mounted device 115 transmits electronic certificate data 816 including the electronic certificate for signature to the payment terminal 160. Next, in step 712, the payment terminal 160 checks for any defects in the IC chip scan result and confirms that the reading process of the electronic certificate for signature has been completed normally.

[0088] If the verification result of the PIN for the signature electronic certificate is a mismatch, the affiliated store settlement terminal 160 redisplays the PIN entry screen on the customer touch screen 410 and re-performs authentication for the PIN re-entered by the customer 110. If such a PIN mismatch occurs a predetermined number of times (e.g., five times (see Article 10 of the Public Personal Authentication Service User Agreement based on the Act on the Certification Business of the Local Government Information Systems Agency for Electronic Signatures, etc.)), the application installed in the IC chip included in the IC chip-mounted device 115 sets the signature electronic certificate to a suspended state as a target for password lock.

[0089] Next, in step 720, the affiliated store payment terminal 160 transmits an electronic certificate authentication request 820 including the signature electronic certificate to the affiliated store management company's identity verification system server 150 via the affiliated store management company's Web system server 140.

[0090] Next, in step 722, the affiliated store management company's identity confirmation system server 150 transmits an electronic certificate authentication request 822 to the certification authority (JPKI) system 190 via the PF operator system 180. Next, in step 724, the identity confirmation system server 150 stores the identity confirmation record and attribute information in the identity confirmation record storage unit 352 and the attribute information storage unit 354, respectively, based on the authentication result data 824 received from the certification authority (JPKI) system 190 via the PF operator system 180. Next, in step 726, the identity confirmation system server 150 transfers the identity confirmation determination result as authentication result data 826 to the affiliated store's payment terminal 160 via the identity confirmation system server 150.

[0091] Next, in step 728, the affiliated store payment terminal 160 presents the identity verification determination result and attribute information received from the affiliated store management company identity verification system server 150 via the affiliated store management company Web system server 140 to the customer 110 and the staff of the affiliated store 120 by displaying them on the customer touch screen 410 and the store touch screen 400, respectively. Next, in step 730, the payment terminal 160 stores the identity verification record and attribute information in the identity verification record storage unit 562 and the attribute information storage unit 564, respectively. The display of the identity verification determination result may include, for example, the following items: (1) “Valid”: Indicates that the electronic certificate is valid. (2) "Revocation request accepted": This indicates that the electronic certificate has been accepted for revocation, but will not be revoked until the next day or later. (3) “Revoked”: Indicates that the electronic certificate has been revoked. (4) “Expired”: Indicates that the electronic certificate has exceeded its expiration date. (5) “Temporarily on hold”: Indicates that the electronic certificate is on hold.

[0092] (When checking records) Next, in step 740, the affiliated store PC server 125 queries the affiliated store payment terminal 160 for the identity verification record as an identity verification record query request 830, or queries the affiliated store management company's identity verification system server 150 for the identity verification record as an identity verification record query request 834.

[0093] Next, in step 742, the affiliated store payment terminal 160 transmits the personal identification record data 832 to the PC server 125. Alternatively, in step 744, the affiliated store management company's personal identification system server 150 transmits the personal identification record data 836 to the PC server 125.

[0094] Next, in step 746, the PC server 125 stores the identity confirmation record received from the payment terminal 160 or the identity confirmation system server 150 in the identity confirmation record storage unit 605. Note that the identity confirmation records sent from the payment terminal 160 are limited to those that apply to the customers 110 handled at each affiliated store 120, whereas the identity confirmation records sent from the identity confirmation system server 150 cover all the customers 110 handled at all affiliated stores 120.

[0095] [Membership card replacement process] Fig. 7B is a flowchart showing the membership card replacement (membership card registration / membership card processing) process in the public personal authentication service utilization system 130 shown in Fig. 1. Fig. 8B is an association diagram showing the flows of various data and operations / displays between various systems included in the membership card replacement (membership card registration / membership card processing) process shown in Fig. 7B.

[0096] (When registering your membership card) 7B and 8B, in step 750, if the result of the identity verification authentication for customer 110 is "valid," a staff member of affiliated store 120 provides a brief explanation of membership card registration on affiliated store payment terminal 160, and when customer 110 receives this and requests membership card registration, the staff member of affiliated store 120 who has accepted the request presses the start button of the membership card registration application displayed on store touch screen 400 of payment terminal 160 as registration start operation 850. At this time, payment terminal 160 passes the user identifier inherited from the identity verification application (a unique personal ID assigned by the identity verification application to customer 110 who is the subject of identity verification) to the membership card registration application.

[0097] Next, in step 752, when the affiliated store payment terminal 160 displays an attribute information input screen for additional attributes on the customer touch screen 410, the customer 110 operates the keyboard displayed on the screen as an attribute input operation 852. Such additional attribute information corresponds to, for example, examples of products from the affiliated store 120 in which the customer 110 is interested, product categories other than those of the affiliated store 120 in which the customer 110 has a preference, etc.

[0098] Next, in step 754 , the affiliated store payment terminal 160 transmits the additional attribute information together with the user identifier as attribute information data 854 to the affiliated store management company's identity verification system server 150 via the affiliated store management company's Web system server 140 .

[0099] Next, in step 756, the identity confirmation system server 150 links (binds) the user identifier and additional attribute information received from the payment terminal 160 to the identity attribute information extracted from the attribute information storage unit 354, and stores this information in the membership card information storage unit 356. Next, in step 758, the identity confirmation system server 150 issues an affiliated store temporary membership card number for the user identifier, identity attribute information, and additional attribute information, and transmits this information as temporary membership card number data 856 to the affiliated store PC server 125 via the affiliated store management company Web system server 140.

[0100] Next, in step 760, the affiliated store PC server 125 issues an affiliated store main membership card number for the user identifier, affiliated store temporary membership card number, personal attribute information, and additional attribute information received from the affiliated store management company personal identification system server 150, and stores this data in the membership card information storage unit 652. Next, in step 762, the PC server 125 transmits the affiliated store main membership card number and the affiliated store temporary membership card number to the personal identification system server 150 as main membership card number data 858.

[0101] Next, in step 764, the affiliated store management company's identity verification system server 150 links the affiliated store's main membership card number and affiliated store's temporary membership card number received from the affiliated store's PC server 125, updates the membership card information storage unit 356 with this information, and transmits the completion results as membership card information data 860 to the affiliated store's payment terminal 160 via the affiliated store management company's Web system server 140.

[0102] Next, in step 766, the affiliated store payment terminal 160 stores the membership card information data received from the affiliated store management company identity verification system server 150 via the affiliated store management company Web system server 140 in the membership card information memory unit 652, and terminates the membership card registration application.

[0103] (When checking membership card) Next, in step 770, if the result of the identity verification authentication for customer 110 is "valid", a staff member of affiliated store 120 provides an outline of membership card processing on affiliated store payment terminal 160, and when customer 110 receives this and requests membership card processing, the staff member of affiliated store 120 who has accepted the request presses the start button of the membership card processing application displayed on the store touch screen 400 of payment terminal 160 as a processing start operation 870. At this time, payment terminal 160 passes the user identifier inherited from the identity verification application to the membership card processing application.

[0104] Next, in step 772, the affiliated store settlement terminal 160 displays an incentive information update screen for membership card processing on the customer touch screen 410, and the customer 110 operates the option display included in the screen as an incentive selection operation 872. Here, the options for updating the incentive information include, for example, checking the point balance, adding points by increasing or decreasing the qualifications held, and subtracting points.

[0105] Next, in step 774, the affiliated store payment terminal 160 transmits the currently updated incentive information together with the user identifier as incentive information data 874 to the affiliated store management company's identity verification system server 150 via the affiliated store management company's Web system server 140.

[0106] Next, in step 776, the affiliated store management company's identity verification system server 150 performs a translation based on the link setting from the user identifier to the affiliated store main membership card number or the affiliated store temporary membership card number for the user identifier received from the affiliated store payment terminal 160 via the affiliated store management company's Web system server 140. Next, in step 778, the identity verification system server 150 transmits the membership card information data together with the incentive information received from the payment terminal 160 as incentive translation result data 876 to the affiliated store management company's Web system server 140 to the affiliated store PC server 125.

[0107] Next, in step 780, affiliated store PC server 125 executes a predetermined membership card process for the user identifier, affiliated store main membership card number or affiliated store temporary membership card number, and incentive information received from affiliated store management company identity verification system server 150 via affiliated store management company Web system server 140, and stores the incentive linkage result data in membership card processing result storage unit 654. Next, in step 782, PC server 125 transmits membership card processing result data 878 to identity verification system server 150 via Web system server 140.

[0108] Next, in step 784, the affiliated store management company's identity verification system server 150 sets the membership card processing to completion based on the membership card processing results received from the affiliated store PC server 125 via the affiliated store management company's Web system server 140, and transmits these completion results to the affiliated store payment terminal 160 as membership card processing result data 880.

[0109] Next, in step 786, the affiliated store payment terminal 160 terminates the membership card processing application based on the membership card processing result data received from the affiliated store management company's identity verification system server 150 via the affiliated store management company's Web system server 140.

[0110] [Qualification Verification Process] Fig. 9 is a flowchart showing the qualification confirmation process in the public personal authentication service utilization system 130 shown in Fig. 1. Fig. 10 is a linkage diagram showing the flows of various data and operations / displays between various systems included in the qualification confirmation process shown in Fig. 9.

[0111] (When verifying eligibility) 9 and 10, in step 900, the staff of the affiliated store 120 gives a brief explanation of the qualification verification on the affiliated store payment terminal 160, and when the customer 110 who has received this offers to authenticate the qualification verification, the staff of the affiliated store 120 who has accepted the offer presses a start button of the qualification verification application displayed on the store touch screen 400 of the payment terminal 160 as a verification start operation 1000. Next, when the payment terminal 160 displays a qualification verification agreement screen on the customer touch screen 410, the customer 110 presses an agreement button included in the screen as a verification agreement input operation 1002. At this time, the staff of the affiliated store 120 is performing PIN verification (verifying that the customer 110 has not forgotten the PIN related to the My Number).

[0112] Next, in step 902, when the payment terminal 160 displays a PIN input screen on the customer-side touch screen 410, the customer 110 operates a PIN pad included in the screen as a PIN input operation 1004 to input a PIN (a four-digit PIN for the user authentication electronic certificate corresponding to the My Number) into an input field on the screen. Note that this step can be omitted in cases where PIN setting is not required (when requested by the person or his / her agent) or in cases where other authentication methods (for example, facial recognition when confirming health insurance card eligibility at a medical institution) are used instead of PIN input.

[0113] Next, in step 904, when the member store payment terminal 160 displays an IC chip reading screen on the customer touch screen 410, the customer 110 holds the IC chip mounted device 115 held by the customer close to the customer touch screen 410. The payment terminal 160 transmits a radio signal including a PIN for the user authentication electronic certificate as an IC chip reading request 1006 to the IC chip mounted device 115 as the start of IC chip scanning. An application installed in the IC chip included in the IC chip mounted device 115 performs authentication of the PIN for the user authentication electronic certificate. If the authentication result is positive, the IC chip mounted device 115 transmits electronic certificate data 1008 including the user authentication electronic certificate to the payment terminal 160. Next, in step 906, the payment terminal 160 checks for any defects in the IC chip scan result and confirms that the reading process of the user authentication electronic certificate has been completed normally.

[0114] If the verification result of the PIN for the user-authentication electronic certificate indicates a mismatch, the affiliated store settlement terminal 160 redisplays the PIN input screen on the customer touch screen 410 and re-performs authentication for the PIN re-entered by the customer 110. If such a PIN mismatch occurs a predetermined number of times (e.g., three times (see Article 10 of the Public Personal Authentication Service User Terms)), the application installed in the IC chip included in the IC chip-mounted device 115 sets the user-authentication electronic certificate to a suspended state as a target for password lock.

[0115] Next, in step 920, the affiliated store payment terminal 160 transmits an electronic certificate verification request 1020 including the user-authenticating electronic certificate to the affiliated store management company's personal identification system server 150 via the affiliated store management company's Web system server 140.

[0116] Next, in step 922, the affiliated store management company's identity verification system server 150 transmits an electronic certificate verification request 1022 to the certification authority (JPKI) system 190 via the PF operator system 180. Next, in step 924, the identity verification system server 150 stores an entitlement verification record in the identity verification record storage unit 352 based on the verification result data 1024 received from the certification authority (JPKI) system 190 via the PF operator system 180.

[0117] Next, in step 926 , the affiliated store management company's identity verification system server 150 transfers the result of the qualification verification as verification result data 1026 to the affiliated store management company's Web system server 140 to the affiliated store payment terminal 160 .

[0118] Next, in step 928, the affiliated store payment terminal 160 presents the qualification verification determination result and attribute information received from the identity verification system server 150 via the affiliated store management company's Web system server 140 to the customer 110 and the staff of the affiliated store 120 by displaying them on the customer touch screen 410 and the store touch screen 400, respectively. Next, in step 930, the payment terminal 160 stores the qualification verification record in the identity verification record storage unit 562. Note that the display of the qualification verification determination result includes, for example, items similar to the identity verification determination result.

[0119] Here, in the present invention, the method of performing qualification authentication is not limited to the method using such a public personal authentication service, and other methods may be used, for example, in the affiliated store payment terminal 160, without using a public personal authentication service, the result of reading the personal information or attribute information contained in the IC chip is compared with the personal information or attribute information input, presented or obtained from the customer through internal processing of the payment terminal 160 or visual confirmation by an operator of the affiliated store 120, and the recorded contents of the qualification verification may be transferred to the affiliated store management company's Web system server 140. Note that the subject of comparison of the personal information or attribute information also includes information written on the card and screen information.

[0120] [Effects of the embodiment] Thus, according to the embodiment of the present invention, when a payment terminal that has both a cashless payment function and a public personal authentication function is used at a member store of a cashless payment brand, when a customer brings an IC chip-equipped device close to the member store's payment terminal, the IC chip can be used to read an electronic certificate to the payment terminal, thereby improving the convenience of customer operations. In addition, since it is possible to read this electronic certificate without the customer having to directly touch the payment terminal, it is also possible to prevent unauthorized access due to customer operations.

[0121] Although the principles of the present invention have been described above with reference to exemplary embodiments, it should be understood by those skilled in the art that various embodiments that are modified in configuration and detail can be realized without departing from the spirit and scope of the present invention. That is, the present invention can take various forms, for example, as a system, an apparatus, a method, a program, or a storage medium. [Explanation of symbols]

[0122] 100 communication lines 110 customers (payment brand members) 115 Devices with IC chips 120 affiliated stores (payment brand handling stores) 125 Member store PC server 130 Public Personal Authentication Service Utilization System 140 Member store management company Web system server 150 Member store management company identity verification system server 160 Merchant payment terminal 170 Payment processing company system 180 PF operator system 190 Certification Authority (JPKI) System 200 System Bus 210 Control section 212 Main memory 214 Input section 216 Output section 218 Communication IF Section 220 Auxiliary storage section 230 Affiliated store information management department 232 Customer Information Management Department 234 Payment Information Management Department 236 Incentive Information Management Department 238 Personal Identification Control Unit 240 Member store information storage section 242 Customer information storage unit 244 Usage history information storage unit 246 Incentive information storage unit 300 System Bus 310 Control section 312 Main memory 314 Input section 316 Output section 318 Communication IF Section 320 Auxiliary storage 330 Personal Identification Control Unit 332 Revocation Information Management Department 334 Electronic Certificate Judgment Department 336 Identification Record Management Department 338 Attribute information management department 340 Membership Card Information Management Department 350 Revocation information storage unit 352 Personal Identification Record Storage Unit 354 Attribute information storage unit 356 Membership card information storage unit 400 Storefront touch screen 410 Customer-facing touch screen 420 Contact IC card reader slot 430 Bidirectional magnetic card reader slot 440 Code reading camera 450 Printer outlet with autocutter 500 System Bus 510 Control section 512 Main memory 514 Input section 516 Display section 518 Printing Department 520 Output section 522 Communication IF section 530 Auxiliary storage unit 540 Payment processing control unit 542 Incentive information control unit 544 Personal Identification Control Unit 546 Identification Record Management Department 548 Attribute information management department 550 Membership Card Information Management Department 552 Service application control unit 560 Incentive information storage unit 562 Personal Identification Record Storage Unit 564 Attribute information storage unit 566 Membership card information storage unit 600 System Bus 610 Control section 612 Main memory 614 Input section 616 Output section 618 Communication IF Section 620 Auxiliary storage 630 Identification Record Management Department 632 Membership Card Information Management Department 634 Membership card processing control unit 650 Personal Identification Record Storage Unit 652 Membership card information storage unit 654 Membership card processing result storage unit

Claims

1. A system for using a public personal authentication service that enables customers of a member store that has concluded a member store contract with a member store management company that has a handling contract with a payment brand to use a public personal authentication service, comprising: an identity verification system server that is installed in the affiliated store management company and communicably connected to a certification authority system of the public personal authentication service and mediates the public personal authentication service for the electronic certificate of the customer; a payment terminal that is installed individually at the affiliated store and receives a payment result related to a transaction contract between the affiliated store and the customer from a payment institution of the payment brand, the payment terminal being communicatively connected to the identity confirmation system server via a network, transmitting the electronic certificate to the identity confirmation system server, and receiving a validity confirmation result of the electronic certificate issued by the certification authority system or the identity confirmation system server; Equipped with The payment terminal includes: a screen display input means for receiving first identity information input or acquired from the customer and displaying the result of the validation check to the customer and an operator of the affiliated store; an IC chip reading means for reading second personal information from an IC chip mounted device held by the customer, and reading the electronic certificate based on a result of personal authentication by matching the first personal information with the second personal information; A system for using a public personal authentication service, comprising:

2. The public personal authentication service utilization system of claim 1, wherein the affiliated store management company is a platform operator that has established verification equipment to directly verify the validity of the electronic certificate with the certification authority system, or is a service provider operator that indirectly entrusts the platform operator with verifying the validity of the electronic certificate.

3. The public personal authentication service utilization system according to claim 1, characterized in that the public personal authentication service performs at least one of the following: when the electronic certificate includes a signature electronic certificate, performing identity verification of the customer as a validity check for the signature electronic certificate; and when the electronic certificate includes a user authentication electronic certificate, performing qualification verification of the customer as a validity check for the user authentication electronic certificate.

4. The public personal authentication service utilization system of claim 3, further comprising a PC server installed at the affiliated store, communicatively connected to the identity verification system server and the payment terminal via a network, and retrieving the recorded contents of the identity verification from the identity verification system server or the payment terminal by query.

5. The public personal authentication service utilization system described in claim 4, characterized in that if the result of the identity verification is valid, the PC server performs membership card registration of the customer at the affiliated store by issuing a membership card number that links the personal attribute information stored in the identity verification system server by the identity verification and the additional attribute information input by the customer from the payment terminal based on the user identifier obtained from the result of the identity verification.

6. The public personal authentication service utilization system described in claim 5, characterized in that if the result of the identity verification is valid and the customer has registered a membership card at the affiliated store, the PC server extracts the membership card number corresponding to the customer based on the user identifier, thereby executing a predetermined membership card processing based on the updated incentive information input by the customer from the payment terminal, and stores the results of the execution.

7. The public personal authentication service utilization system of claim 1, characterized in that the IC chip-equipped device is an IC card or smartphone that includes an IC chip that stores the electronic certificate as personal information related to a personal identification number, and outputs the electronic certificate to the payment terminal based on a contact or contactless reading format by the payment terminal.

8. The public personal authentication service utilization system of claim 7, characterized in that the identity authentication is performed using a matching process executed within the IC chip by comparing a first PIN number input by the customer into the screen display input means as the first identity information with a second PIN number contained within the IC chip as the second identity information.

9. The identity authentication is a verification process executed within the payment terminal by comparing a first face photo image acquired from the customer by an imaging means included in the screen display input means as the first personal information with a second face photo image included in the IC chip as the second personal information and read by the IC chip reading means; a verification process executed as visual confirmation by an operator of the affiliated store to compare the facial information of the customer obtained by visual inspection as the first personal information with a facial photo image contained in the IC chip as the second personal information, read by the IC chip reading means, and then displayed on the screen display input means; 8. The system for utilizing a public personal authentication service according to claim 7, wherein the system is implemented using at least one of the following:

10. A method for verifying the eligibility of a customer in a public personal authentication service utilization system for enabling a customer of a member store that has concluded a member store contract with a member store management company that has a handling contract with a payment brand to use a public personal authentication service, comprising: receiving, at a payment terminal installed separately at the affiliated store and receiving a payment result related to a transaction contract between the affiliated store and the customer from a payment institution of the payment brand, first personal information input or acquired by the customer through a screen display input means included in the payment terminal, or acquired by visual inspection by an operator of the affiliated store; a step of reading second personal information from an IC chip mounted device held by the customer by an IC chip reading means included in the payment terminal; a step of displaying a result of identity authentication by matching the first identity information and the second identity information on the screen display input means in the settlement terminal as a result of qualification confirmation of the customer to the customer and an operator of the affiliated store; a step of transmitting the recorded contents of the qualification confirmation to an identity verification system server that is installed in the member store management company and communicably connected to a certification authority system of the public personal authentication service via a network in the settlement terminal; A method for performing entitlement verification, comprising:

Images