Service providing device, service providing method, and program

Abstract

To achieve both convenience and safety.SOLUTION: A service providing device provides content including multiple questions to a second terminal device when a user applies for a change in a telephone number through the second terminal device with which a second telephone number different from a first telephone number that is registered in registration information and is associated with a first terminal device is correlated, acquires the user's answer from the second terminal device, compares a score based on multiple pieces of confirmation information and a first threshold with a score and a second threshold smaller than the first threshold, respectively, updates the registration information with a new telephone number pertaining to the application when the score is equal to or more than the first threshold and when the score is equal to or more than the second threshold, and deletes or conceals one portion of information included in the registration information when the score is less than the first threshold and is equal to or more than the second threshold.SELECTED DRAWING: Figure 4

Description

[Technical field]

[0001] The present invention relates to a service providing device, a service providing method, and a program. [Background technology]

[0002] Traditionally, in services that are provided at least in part via a network, users are usually able to receive the service by logging in to their account. When logging in, users are required to enter their phone number, login ID, password, etc. (This also includes cases where the browser or app stores the information and automatically enters it). Authentication processing is particularly important for services that handle money, such as electronic payment services, and relatively secure authentication methods such as SMS authentication are used.

[0003] However, when a user replaces a terminal device such as a smartphone or tablet device, it becomes necessary to change the telephone number registered in the service. In conventional technology, when changing a telephone number online, it may be necessary to apply for the change of telephone number while logged in to an account using the terminal device before changing the telephone number. In contrast, in the invention described in Patent Document 1, when a request for a change of telephone number is made from a terminal device different from the existing one, multiple questions are sent to the user, and the change of telephone number is approved depending on the answers. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Patent No. 7195473 Summary of the Invention [Problem to be solved by the invention]

[0005] In conventional technology, while a certain degree of certainty can be obtained regarding the identification of a user, there is no mention of how to respond in cases where the possibility that the user is different cannot be fully eliminated, and as a result, it may not be possible to achieve both convenience and security.

[0006] The present invention has been made in consideration of the above circumstances, and one of its objects is to provide a service providing device, a service providing method, and a program that can achieve both convenience and safety. [Means for solving the problem]

[0007] One aspect of the present invention is a service providing device for providing an electronic payment service, the service providing device comprising: an information management unit that sets up a user's account with at least a phone number as a required registration item, and manages registration information including the user's phone number; and when the user applies for a change of phone number through a second terminal device to which a second phone number that is different from a first phone number registered in the registration information and associated with a first phone number associated with a first terminal device is associated, the service providing device provides content including a plurality of questions to the second terminal device, and obtains from the second terminal device a plurality of confirmation information including a plurality of answers that the user entered into the second terminal device to the plurality of questions presented to the user by the second terminal device, and compares a score based on the plurality of confirmation information with a first threshold, and a second threshold that is smaller than the first threshold, respectively. The information management unit updates the registration information with a new phone number related to the application when the score is equal to or greater than the first threshold and when the score is equal to or greater than the second threshold, and deletes or conceals a portion of the information included in the registration information when the score is less than the first threshold and equal to or greater than the second threshold. Effect of the Invention

[0008] According to one aspect of the present invention, it is possible to achieve both convenience and safety. [Brief description of the drawings]

[0009] [Figure 1] FIG. 1 is a diagram showing an example of a configuration for realizing an electronic payment service. [Diagram 2] This is a sequence diagram (part 1) illustrating the general flow of electronic payment. [Diagram 3] This is a sequence diagram (part 2) illustrating the general flow of electronic payment. [Figure 4] 1 is a configuration diagram of a payment server 100 according to a first embodiment. [Diagram 5] FIG. 13 is a diagram showing an example of the contents of user information 172. [Figure 6] FIG. 13 is a diagram showing an example of the contents of affiliated store / store information 176. [Figure 7] FIG. 11 is a diagram showing a flow of changing a telephone number in a case where a user does not have a first terminal device at hand, and has only a second terminal device at hand. [Figure 8] 13 is a flowchart showing an example of the contents of processes executed by payment application 20, number change authentication unit 128, and information management unit 130 of the second terminal device. [Figure 9] 13 is a flowchart showing an example of the contents of processes executed by payment application 20, number change authentication unit 128, and information management unit 130 of the second terminal device. [Figure 10] FIG. 13 is a diagram showing how questions are extracted from a question list 178. [Figure 11] FIG. 13 is a diagram showing an example of a question display screen IM1 that payment application 20 causes the second terminal device to display. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0010] Hereinafter, with reference to the drawings, an embodiment of a service providing device, a service providing method, and a program of the present invention will be described. Various devices for providing services to users and performing internal analysis, such as a "server," "management device," and "information providing device" that will appear below, may be realized by a group of distributed devices, and each device may be operated by a different business operator. Furthermore, the owner of the hardware of the device (the provider of the cloud server) and the business operator that actually operates the device may also be different. The service providing device provides an electronic payment service. The electronic payment service is provided by cooperation between an application program and a payment server (an example of a service providing device). In the following description, the application program is referred to as a payment application. The electronic payment service is a service that supports payment related to the purchase of goods and services at a store. The store is, for example, a physical store (real store) that exists in the real world, but may also include a virtual store for electronic commerce. The virtual store may include one provided by an entity different from the operator of the electronic payment service. In that case, when making a payment for shopping at the virtual store, the screen is controlled to transition to an interface screen of the electronic payment service. In electronic payment services, a store is treated as belonging to, for example, an affiliated store (brand), and processing such as payment when a purchase is made at a store is mainly carried out between the user and the affiliated store. Alternatively, processing such as payment may be carried out between the user and the store.

[0011] [Electronic payment service] Fig. 1 is a diagram showing an example of a configuration for realizing an electronic payment service. The electronic payment service is realized mainly by a payment server 100. The payment server 100 communicates with, for example, one or more user terminal devices 10, one or more first store terminal devices 50, and one or more second store terminal devices 70 via a network NW. The network NW includes, for example, the Internet, a LAN (Local Area Network), a wireless base station, a provider device, and the like.

[0012] The user terminal device 10 is, for example, a portable terminal device such as a smartphone or a tablet terminal. The user terminal device 10 is a computer device having at least an optical reading function, a communication function, a display function, an input reception function, and a program execution function. In the following description, components for realizing these functions are referred to as a camera, a communication device, a touch panel, a CPU (Central Processing Unit), etc. In the user terminal device 10, a processor such as a CPU executes a payment application 20, thereby operating to provide an electronic payment service to a user in cooperation with a payment server 100. The payment application 20 is installed in the user terminal device 10 from, for example, an application store, and controls the camera, communication device, touch panel, etc.

[0013] The first store terminal device 50 is installed, for example, in a store. The first store terminal device 50 is a computer device having at least a product price acquisition function, an optical reading function, a program execution function, and a communication function. The first store terminal device 50 includes a so-called POS (Point of Sale) device, and the product price acquisition function and the optical reading function may be realized by the POS device. The store code image 60 is placed in the store, and is a code image such as a QR code (registered trademark) printed on a paper or plastic medium. The store code image 60 may be displayed on a display placed in the store (which may be the display of a terminal device such as a smartphone).

[0014] The second store terminal device 70 is used by the operator of the affiliated store. The second store terminal device 70 is a smartphone, a tablet terminal, a personal computer, or the like. An interface 72 for affiliated stores runs on the second store terminal device 70. The interface 72 for affiliated stores may be an app for affiliated stores or a browser. The interface 72 for affiliated stores accepts coupon settings and the like made by the operator of the affiliated store and transmits them to the payment server 100. The second store terminal device 70, which is a smartphone, has the function of displaying a code image corresponding to a store code image and reading a code image displayed by the user terminal device 10 by executing the app for affiliated stores.

[0015] The payment server 100 realizes electronic payment based on payment information received from the user terminal device 10 or the first store terminal device 50. The first store terminal device 50 may include a POS device and an affiliated store server, in which case the payment information is sent from the POS device via the affiliated store server to the payment server 100. In the following explanation, no distinction is made between these two and it is assumed that the payment information is sent from the first store terminal device 50.

[0016] 2 and 3 are sequence diagrams illustrating the general flow of electronic payment. There may be two patterns of electronic payment: pattern 1 and pattern 2.

[0017] In the case of pattern 1 (hereinafter referred to as user scan) shown in FIG. 2, the user terminal device 10 with the payment application 20 activated decodes the store code image 60 by the optical reading function (S1). The store code image 60 includes store URL (Uniform Resource Locator) information. This store URL is an electronic payment service domain to which information capable of identifying a store is added, and is associated with an affiliated store ID, a store ID, etc. in the payment server 100 (described later). The payment application 20 transmits the first payment information including the store URL and the account ID to the payment server 100 (S2). The payment server 100 searches for store information (described later) from the affiliated store ID and the store ID corresponding to the store URL, acquires the affiliated store name and the store name information (S3), and transmits it to the payment application 20 (S4). The user inputs the payment amount into the user terminal device 10 on the screen on which the affiliated store name and the store name are displayed (S5). Then, the user terminal device 10 generates second payment information including at least the payment amount, and transmits it to the payment server 100 (S6). The payment server 100 performs electronic payment based on the received second payment information (S7). The payment server 100 then transmits a payment completion notice (information for displaying a payment completion screen) to the payment application 20 (S8), and the payment application 20 displays the payment completion screen (S9). Note that when the store code image 60 is displayed on a display installed in the store, the store code image 60 may include not only the store URL but also information on the payment amount. In this case, the step of the user inputting the payment amount is omitted, and the information on the payment amount is included in the first payment information and transmitted to the payment server 100. Information on the affiliated store name and the store name may be included in the payment completion screen and displayed.

[0018] In the case of pattern 2 (hereinafter referred to as store scan) shown in FIG. 3, when the payment application 20 is started, when a payment operation is performed in the payment application 20, when an automatic update timing (e.g., every minute) occurs, and at other timings, the payment application 20 transmits a request for issuing a one-time code to the payment server 100 (S11). The payment server 100 generates a one-time code (S12) and transmits it to the payment application 20 (S13). The payment application 20 displays a code image such as a QR code or a barcode generated based on the one-time code (S14). The user holds (presents) the display surface of the user terminal device 10 over the first store terminal device 50, and the first store terminal device 50 decodes the code image by an optical reading function and obtains the one-time code, etc. (S15). The first store terminal device 50 then generates payment information including the one-time code, payment amount, affiliated store ID, store ID, etc., and transmits it to the payment server 100 (S16). The payment amount information is acquired in advance by reading a barcode or manually entering it. The payment server 100 identifies the user corresponding to the one-time code based on the received information and performs electronic payment (S17). The payment server 100 then transmits a payment completion notice to the payment application 20 (S18), and the payment application 20 displays a payment completion screen (S19).

[0019] Note that electronic payment may be performed using only one of the above patterns. Furthermore, the "account ID" described in FIG. 2 may be other information (e.g., a phone number) that can be used as user identification information. Furthermore, issuance of a one-time code may be omitted in the store scan, and the payment application 20 may display a code image generated based on the user's account ID. In this case, the payment server 100 identifies the user corresponding to the account ID instead of identifying the user corresponding to the one-time code.

[0020] [Payment server] 4 is a configuration diagram of the payment server 100. The payment server 100 includes, for example, a communication unit 110, a login status management unit 120, a payment content providing unit 122, a payment processing unit 124, an SMS authentication unit 126, a number change authentication unit 128, an information management unit 130, and a storage unit 170. The components other than the communication unit 110 and the storage unit 170 are realized by, for example, a hardware processor such as a CPU executing a program (software). Some or all of these components may be realized by hardware (including circuitry) such as an LSI (Large Scale Integration), an ASIC (Application Specific Integrated Circuit), an FPGA (Field-Programmable Gate Array), or a GPU (Graphics Processing Unit), or may be realized by cooperation between software and hardware. The program may be stored in advance in a storage device (a storage device with a non-transient storage medium) such as an HDD (Hard Disk Drive) or flash memory, or may be stored in a removable storage medium (non-transient storage medium) such as a DVD or CD-ROM, and installed in the storage device by inserting the storage medium into a drive device.

[0021] The storage unit 170 is a HDD, a flash memory, a RAM (Random Access Memory), etc. The storage unit 170 may be a NAS (Network Attached Storage) device that the payment server 100 can access via a network. The storage unit 170 stores information such as user information 172, payment content information 174, and store information 176.

[0022] The communication unit 110 is a communication interface for connecting to the network NW. The communication unit 110 is, for example, a network card.

[0023] The login status management unit 120 manages the login status of each user. When the user newly installs the payment application 20 and registers various information (at the time of new registration), the login status management unit 120 considers the user to have logged in. Thereafter, the login status management unit 120 maintains the login status of the user as long as the same user terminal device 10 is accessed and a logout operation is not performed. In new registration, the user inputs at least a phone number and a password. When the user performs a logout operation using the user terminal device 10 and then performs a login operation again, the login status management unit 120 requests the user to input a phone number and a password. At this time, the login status management unit 120 determines whether the user terminal device 10 is the same as the previous one based on a hash value of the OS identification information or the like, and when it is determined that the user terminal device 10 is not the same, the login status management unit 120 causes the SMS authentication unit 126 to perform SMS authentication. The SMS authentication will be described later.

[0024] The payment content providing unit 122 has, for example, a function of a Web server, and provides information (content) for displaying various screens of the electronic payment service, including the above-mentioned payment completion screen, to the user terminal device 10. The payment content providing unit 122 appropriately reads out necessary content from the payment content information 174 and provides it to the user terminal device 10. The user terminal device 10 accepts various inputs by the user while the content is being played by the payment application 20, and transmits the above-mentioned payment information and the like to the payment server 100. Note that the content based on the payment content information 174 includes content provided in a logged-in state and content provided in a non-logged-in state. In the content in the non-logged-in state, the payment server 100 provides various guidance information and accepts applications for new registration and change of phone number.

[0025] The payment processing unit 124 performs payment processing based on the payment information transmitted by the user terminal device 10 or the first store terminal device 50. The payment processing unit 124 performs payment processing while referring to the user information 172.

[0026] FIG. 5 is a diagram showing an example of the contents of the user information 172. The user information 172 is an example of the registration information of a user. For example, the user information 172 is information in which, in addition to the minimum phone number and password required at the time of new registration, an account ID (which may be omitted) is associated with information such as an email address, a user ID, a name, an address, a date of birth, a registration date, a charge balance, a bank account, a credit card number, information on linking with other services, radio wave authentication settings, carrier payment settings, a chat friend list, charge history information, payment history information, chat history information, identity verification information, ISP (Internet Service Provider) information, location information history, and terminal language settings. Hereinafter, a user instance (electronic payment account) associated with such information is referred to as an account. The registration date is the date on which the user registered with the electronic payment service (the date on which the account was created).

[0027] The charge balance is information indicating the balance of electronic money that is set by a user by transferring money to the account in advance. Means of transfer include transfer from an ATM (Automatic Teller Machine) of a designated business (bank) and transfer from a registered bank account. The bank account and credit card number are information (account number, card number) of a bank account or credit card number that can be deposited into the electronic payment service. The other service link information is the login ID of another service that links with the electronic payment service (for example, operated by an operator belonging to the same business group). The radio wave authentication setting is setting information when authentication is performed by communication with a specific communication carrier. The carrier payment setting is setting information for transferring at least a part of the payment made using the electronic payment service to a payment to the communication carrier. The chat friend list is a list of other users who are the chat partners in the chat function provided by the electronic payment service. The charge history information is a history of the user transferring money to the electronic payment service in advance to increase the charge balance. The payment history information is information that indicates the details of the payment made by the user for each payment (date and time, store ID of the store where the purchase was made, payment amount, etc.). The chat history information is a history of the content of the chats that the user has had.

[0028] The personal identification information is electronic information obtained from a user's identification card having an IC chip built-in, using the short-range wireless communication function of the user terminal device 10 (an example of second electronic information). An identification card having an IC chip built-in is, for example, a My Number card or a driver's license. The personal identification information may include, for example, a date of birth, a postal code, a name, etc., and may be assigned a flag indicating that it has been obtained electronically from the identification card. Note that, although personal identification information in the broad sense may include information obtained by other methods, in the present invention, personal identification information is limited to electronic information obtained from a user's identification card having an IC chip built-in.

[0029] The ISP information is the name or code information of the Internet provider (hereinafter referred to as ISP) used by the user. The ISP information is derived by the information management unit 130 using an IP address recognized in communication with the first terminal device 10 and a table that specifies the correspondence between the IP address and the ISP. In some cases, such as when using public Wi-Fi, multiple ISPs may be associated with one user, and the most frequently used ISP may be extracted and stored as the ISP information. Also, multiple ISPs with a certain frequency or higher may be stored as the ISP information.

[0030] The terminal language setting is information about the language set by the user in the user terminal device 10. Settings such as Japanese, English, Spanish, etc. are registered as the terminal language setting.

[0031] Store information is managed as affiliated store / store information 176. FIG. 6 is a diagram showing an example of the contents of affiliated store / store information 176. The affiliated store / store information 176 includes, for example, a first table 176A in which an affiliated store ID and a store ID are associated with a store URL, a second table 176B in which an affiliated store name and sales amount (described above) are associated with an affiliated store ID, and a third table 176C in which a store ID is associated with a store ID. In addition to this information, the affiliated store / store information 176 may also include information such as the category of the affiliated store or store, the location of the store, and payment patterns.

[0032] The SMS authentication unit 126 performs SMS authentication. SMS authentication is an authentication method in which a one-time password is included in a short message using a telephone number and sent to the user terminal device 10, the user is prompted to input the one-time password into the user terminal device 10, and the one-time password sent to the payment server 100 via the payment application 20 is confirmed to be correct, thereby confirming that the telephone number belongs to the user. As described above, the SMS authentication unit 126 performs SMS authentication when a login request using the same telephone number is made from a user terminal device 10 different from an already recognized user terminal device 10. Note that the SMS authentication may be completed by operating a URL pasted in the short message. The same applies to the following.

[0033] The number change authentication unit 128 performs authentication processing when a user applies for a change of telephone number through a user terminal device 10 associated with a telephone number different from the telephone number registered in the user information 172. When a user applies for a change of telephone number through a user terminal device 10 associated with a telephone number registered in the user information 172 (i.e., the old user terminal device 10 before the number change), the change of telephone number is accepted with only SMS authentication.

[0034] Based on the information acquired from the user terminal device 10, the information management unit 130 creates a new record of the user information 172 and updates each data item in an already created record.

[0035] [Change phone number] The following describes the operation of the payment server 100 when a user attempts to change the telephone number in the user information 172. Hereinafter, the user terminal device 10 associated with the telephone number before the change (first telephone number) is abbreviated as the "first terminal device," and the user terminal device 10 associated with the telephone number after the change (second telephone number) is abbreviated as the "second terminal device."

[0036] When a change of telephone number is applied for through a second terminal device associated with a second telephone number different from the first telephone number registered in the user information 172, in the conventional method, the user is requested to input a form and the change of telephone number is approved through offline processing by an operator, etc. Such a method takes time and may be cumbersome for the user.

[0037] Therefore, in order to improve the convenience of electronic payment services, the number change authentication unit 128 of the present invention performs a process that enables an online phone number change in a non-logged in state, as described below. Note that the reason it is called a "non-logged in state" is because it is impossible to log in with the second terminal device before changing the phone number, and therefore the non-logged in state is inevitable.

[0038] FIG. 7 is a diagram showing the flow of changing a telephone number when a user does not have a first terminal device at hand and has only a second terminal device at hand. First, a user applies for a change of telephone number by inputting a first telephone number and a second telephone number to a non-logged-in second terminal device (S21). The payment application 20 of the second terminal device transmits the input information to the payment server 100 (S22). The number change authentication unit 128 confirms that the first telephone number is registered in the user information 172 (S23). If the first telephone number is not registered in the user information 172, the subsequent processing is stopped. In that case, an error message is displayed on the payment application 20, and measures are taken such as requesting the user to start the application again from the beginning.

[0039] When it is confirmed that the first telephone number is registered in the user information 172, the SMS authentication unit 126 performs SMS authentication. The order of the SMS authentication and the confirmation sequence described below may be reversed. First, the SMS authentication unit 126 generates an SMS authentication code and transmits it in a short message using the second telephone number related to the application (S24). The user inputs the SMS authentication code written in the short message to the payment application 20 (S25). The payment application 20 transmits the input SMS authentication code to the payment server 100 (S26). The SMS authentication unit 126 confirms that the returned SMS authentication code is correct (S27). If the returned SMS authentication code is incorrect, the subsequent processing is stopped. In that case, the process returns to S23, or an error message is displayed on the payment application 20, requesting the user to resubmit the application from the beginning, or other measures are taken.

[0040] Next, a confirmation sequence is performed by the number change authentication unit 128 and the information management unit 130. If the confirmation process is successful as a result of the confirmation sequence, the information management unit 130 changes the telephone number of the account in the user information 172 to the second telephone number related to the application (S60), and the information management unit 130 (or the payment content providing unit 122) sends a change completion notice to the payment application 20 indicating that the change of the telephone number has been completed (S61). This makes it possible to log in to the account using the second telephone number.

[0041] [Confirmation sequence] The following describes in detail the confirmation sequence by number change authentication unit 128 and information management unit 130. Figures 8 and 9 are flowcharts showing an example of the contents of the processes executed by payment application 20, number change authentication unit 128, and information management unit 130 of the second terminal device.

[0042] First, the payment application 20 receives a notification of the start of the confirmation sequence from the payment server 100 and determines whether the location information is turned on in the second terminal device and whether the payment application 20 is permitted to use the location information (S30). If the location information is turned off or the payment application 20 is not permitted to use the location information, the payment application 20 displays a notification to the user urging the user to turn on the location information and permit the payment application 20 to use the location information (S31).

[0043] If the location information is on and the payment application 20 is permitted to use the location information, the payment application 20 transmits the location information and the terminal language setting information to the payment server 100 (S32). At this time, the data transmitted includes the IP address, so the payment server 100 obtains the location information, the terminal language setting, and the information of the ISP that can be recognized from the IP address.

[0044] On the other hand, if the location information is turned off or the payment application 20 is not permitted to use the location information and times out, the payment application 20 transmits information on the terminal language setting to the payment server 100 (S33). At this time, the data transmitted also includes the IP address, so the payment server 100 obtains information on the terminal language setting and the ISP that can be recognized from the IP address.

[0045] In the payment server 100, the number change authentication unit 128 first calculates the score SC based on the ISP, location information, and terminal language setting acquired without relying on the user's answer (S34). For example, the number change authentication unit 128 sets the initial value of the score SC to zero, and adds or subtracts the score as follows. The score SC is calculated, for example, with 100 points being a sufficient passing score. Note that some of the ISP, location information, and terminal language setting may be omitted as information for calculating the score SC in S34.

[0046] (1): The number change authentication unit 128 adds α1 to the score SC when the ISP name derived from the IP address obtained by communication with the first terminal device matches the ISP name derived from the IP address obtained by communication with the second terminal device, and the matched ISP name is not the name of one of the top several companies (specific ISPs) in terms of market share. α1 is a value of about 5 to 30. When the ISP names do not match, or when the matched ISP name is the name of one of the top several companies in terms of market share, the number change authentication unit 128 does not add to the score SC based on the ISP. This is because an ISP used by many users is considered to be insufficient information to identify a user.

[0047] (2): When the location information acquired from the second terminal device matches the location information acquired before the application for the change of the telephone number (which may be the location information acquired from the first terminal device or the location information acquired from an earlier terminal device), the number change authentication unit 128 adds α2 to the score SC. α2 is a value of about 5 to 30. The location information acquired before the application for the change of the telephone number may be the location information uploaded from the payment application 20, or may be the location information derived from the location of the store where the electronic payment was made. "The location information matches" may mean that a representative value such as a mode or an average value is within a predetermined range, that a representative value limited to when the user goes to bed (at night) is within a predetermined range, that a comparison is made with any of the location information acquired in the past is within a predetermined range, or that it may be determined by other criteria. When the location information does not match or when the location information is not acquired from the second terminal device, the number change authentication unit 128 does not add to the score SC based on the location information. Note that instead of adding a fixed value α2 to the score SC, the number change authentication unit 128 may add a larger value to the score SC as the distance between the location information acquired from the second terminal device and the location information acquired before the application for the change of phone number is shorter, or may add a negative value to the score SC (or subtract a positive value) when the majority of the distances between the location information acquired from the second terminal device and the location information acquired before the application for the change of phone number are very far.

[0048] (3): If the terminal language setting acquired from the second terminal device does not match the terminal language setting acquired from the first device (registered in the user information 172), the number change authentication unit 128 subtracts α3 from the score SC. α3 is a value of about 30 to 70. If the terminal language settings match, the number change authentication unit 128 may not subtract from the score SC based on the terminal language setting, or may add an arbitrary value to the score SC.

[0049] In this way, the number change authentication unit 128 makes a decision on whether to change the phone number based on information that is effective enough to identify the user, such as ISP information and terminal language settings, and that can be acquired automatically without bothering the user. This allows the phone number change to be approved more appropriately and simply.

[0050] Next, the number change authentication unit 128 judges whether the identity verification information of the user related to the application is registered in the user information 172 (S35). If registered, the number change authentication unit 128 transmits information to the payment application 20 of the second terminal device to prompt the user to send the identity verification information (S36). The payment application 20 of the second terminal device displays an image prompting the user to read the same identity verification information previously read by the user terminal device 10 (S37). When the identity verification information is read, the payment application 20 transmits the read identity verification information (an example of the first electronic information) to the payment server 100 (S38, S39). The number change authentication unit 128 judges whether the identity verification information is acquired and matches that registered in the user information 172 (S40), and if it matches, notifies the information management unit 130 that the change of the telephone number is approved (S41). In response to this, the information management unit 130 changes the telephone number to the second telephone number (S60 in FIG. 7) and sends a notification of completion of the change (S61). Since the identity verification information obtained from the identification card is considered to be sufficiently reliable to prove the identity of the user, by carrying out this process, the user can be saved from the trouble of answering questions and can appropriately approve the change of telephone number with a simpler procedure.

[0051] If the personal identification information was not acquired (the user did not read it), or if it does not match what is registered in the user information 172, the process proceeds to the process in FIG.

[0052] As shown in the processes of S35 to S41, the change of the telephone number is not immediately approved when the identity verification information matches, but a value is added to the score SC when the identity verification information matches, and if there is a negative score due to a mismatch in the terminal language settings, the change of the telephone number may not be approved unless there is a positive score in the subsequent questions. Also, the display prompting the user to read the identity verification information may be presented to the user as one of the questions described below.

[0053] Here, cases where the identity verification information partially matches are also assumed. For example, a case where an address change or a surname change due to marriage or the like has been made on an ID card, but the change has not been registered in the electronic payment service. In this case, it may occur that the date of birth and the name match but the address does not match, or the date of birth, address, and first name match but the surname does not match. When the identity verification information partially matches, the change of the telephone number is not immediately approved, but a certain value may be added to the score before proceeding to the acquisition of subsequent questions. Also, even if the change of the telephone number is not immediately approved when the identity verification information completely matches in the first place, when the identity verification information partially matches, a value lower than the value given when the identity verification information completely matches may be added to the score.

[0054] Then, when the identity verification information partially matches, the number change authentication unit 128 may cause the payment application 20 to display information prompting the updating of identity verification information in the user information 172 after the phone number change process is completed, or may make updating of identity verification information mandatory (if the information is not updated, the phone number change will not be approved or will be canceled). A case where identity verification information partially matches is an example of a case where identity verification information "does not match". Note that, when only the last name in the identity verification information is different, the identity verification information may be considered to "match" and the same process as a case where it matches completely may be performed.

[0055] Proceeding to FIG. 9, the number change authentication unit 128 refers to a question list 178 prepared in advance and stored in the memory unit 170, checks whether each of the answers to the questions to be presented to the user is registered in the user information 172, and extracts only the questions for which answers are registered (S42).

[0056] FIG. 10 is a diagram showing how questions are extracted from the question list 178. For example, the question list 178 includes a date of birth, a postal code, a name, a password, a login ID for other services, an email authentication code sent to an email address, a bank account, a current balance (charging balance), a payment history within the past year, and a charging history within the past year. The payment history within the past year and the charging history within the past year are examples of the usage history of an electronic payment service. The usage history of an electronic payment service may further include a history of remittance between users. Among these, those for which the correct answer (email address for an email authentication code) is not registered in the user information 172 are excluded from the questions. Note that the password and the current charging balance are always registered in the user information 172, and therefore are extracted as questions to be presented to all users. In the example of FIG. 10, the date of birth, the postal code, a name, an email address, a bank account, and a payment history within the past year are not registered in the user information 172, and therefore the remaining password, the login ID for other services, the current balance, and the charging history within the past year are extracted as questions. For each question k registered in the question list 178, a score βk (k=1 to m, m is the number of questions) to be added to the score SC is preset. Each βk is a value of about 5 to 50. The identity verification information acquired in S36 includes the date of birth, the postal code, and the name, but the positive evaluation when the date of birth, the postal code, and the name are obtained as answers to the questions is set lower than when the electronic information obtained from the user's identification card with a built-in C chip matches. This is because the reliability of information entered manually is lower than that of information from an identification card.

[0057] Here, for the "current balance", a question may be presented in the form of selecting a range (for example, "0 to 1000 yen, 1000 to 5000 yen, 5000 to 10000 yen") instead of an exact amount. For the "payment history", the affiliated store or shop may also be asked. Furthermore, the correct answers may be shown for some of the date, the affiliated store, and the amount, while the other parts may be answered. For the "charge history", in addition to inputting the date and the amount, the charge method (convenience store terminal, bank account, etc.) may also be asked. As with the "payment history", the correct answers may be shown for some of the items, while the other parts may be answered. Furthermore, in addition to the questions shown in FIG. 10, the history of remittances between users may be asked. In this case, the remittance destination and the receiving account (which may be selected by searching from a phone number) may be answered.

[0058] Furthermore, the content of the questions may be determined based on the frequency of occurrence in the user's past history of using electronic payment services, such as which affiliated stores the user frequently settles with, which remittance sources or remittance destinations the user frequently remits with, and which charging methods the user frequently uses.

[0059] The number change authentication unit 128 instructs the payment application 20 of the second terminal device to present (display) the question extracted in S42 (S43). At this time, the question may be presented in a form in which content including the question is provided from the payment server 100 to the payment application 20, or the question itself may be embedded in the payment application 20 in advance, and the payment server 100 may transmit information specifying the question to be presented to the payment application 20.

[0060] The payment application 20 of the second terminal device presents the question instructed by the payment server 100 to the user (S44). FIG. 11 is a diagram showing an example of a question presentation screen IM1 that the payment application 20 causes the second terminal device to display. The question presentation screen IM1 includes areas A1 to An for answering one or more questions. Each area is provided with a question expansion switch SW1, and details of the question are displayed by operating the expansion switch SW.

[0061] Upon acquiring the user's answer (S45), the payment application 20 transmits the answer to the payment server 100 (S46). The number change authentication unit 128 of the payment server 100 calculates a score based on the answer (S47). The number change authentication unit 128 calculates the final score SC by totaling the points βk set for the correctly answered questions and adding it to the score SC calculated in S34.

[0062] The number change authentication unit 128 judges whether the final score SC is equal to or greater than the threshold value Th1 (S48). As described above, the threshold value Th1 is a value of about 100. If the score SC is equal to or greater than the threshold value Th1, the information management unit 130 is notified that the change of the telephone number is approved (S49). In response, the information management unit 130 changes the telephone number to the second telephone number (S60 in FIG. 7) and notifies the completion of the change (S61).

[0063] If the final score SC is less than the threshold Th1, the number change authentication unit 128 judges whether the final score SC is equal to or greater than the threshold Th2 (S50). The threshold Th2 is a value smaller than the threshold Th1, for example, a value of about 70. If the final score SC is less than the threshold Th1 and equal to or greater than the threshold Th2, the number change authentication unit 128 approves the change of the telephone number, but notifies the information management unit 130 that some information in the user information 172 should be deleted (S51). In response to this, the information management unit 130 deletes (or conceals) some information in the user information 172 (S52), changes the telephone number to the second telephone number (S60 in FIG. 7), and notifies the completion of the change (S61). The information that the information management unit 130 deletes or conceals in S52 includes, for example, various information related to bank accounts, credit card numbers, and post-payment, as well as information on the other party to transfer money between users, information on the history of transfers between users, and other information that may cause significant damage to legitimate users if a fraudulent user attempts to change the telephone number using the second terminal device. The bank accounts, credit card numbers, and various information related to post-payment are examples of "information on financial services of a business operator other than the business operator that operates the electronic payment service." Concealment means prohibiting access while leaving the data itself. The fact that the final score SC is less than the threshold value Th1 and is equal to or greater than the threshold value Th2 indicates that the user is highly likely to be a legitimate user, but the suspicion that the user is a fraudulent user cannot be fully eliminated. In such a case, if all of the user information 172 is associated with the second terminal device, unexpected damage may occur, so convenience and safety can be achieved by deleting some of the information and approving the change of the telephone number. If the final score SC is equal to or greater than the threshold value Th1, the information management unit 130 does not delete (or conceal) some of the information in the user information 172. Alternatively, the information management unit 130 may delete or conceal some of the information as a precaution even when the final score SC is equal to or greater than the threshold value Th1, in which case the amount of information to be deleted or concealed may be less than when the score SC is less than the threshold value Th1 and equal to or greater than the threshold value Th2.In addition, if the final score SC is less than threshold value Th1 and greater than or equal to threshold value Th2, the number change authentication unit 128 may require updating of personal identification information in order to approve the change of telephone number (if the information is not updated, the change of telephone number will not be approved or will be canceled).

[0064] Furthermore, when the final score SC is less than the threshold value Th1 and is equal to or greater than the threshold value Th2, the information management unit 130 may not delete items for which the answer was correct. For example, when the answer to a question about a bank account is correct, the information about the bank account may not be deleted or concealed from the user information 172. In this way, the information management unit 130 may determine the information to be deleted or concealed when the final score SC is less than the threshold value Th1 and is equal to or greater than the threshold value Th2, depending on the user's correct answer status.

[0065] If the final score SC is less than the threshold value Th2, the number change authentication unit 128 notifies the information management unit 130 that the change of the phone number is not approved (S53). In this case, the payment application 20 causes the second terminal device to display information that the change of the phone number has failed.

[0066] According to the embodiment described above, it is possible to more appropriately and simply approve a change of telephone number. It is also possible to appropriately approve a change of telephone number through a simpler procedure. It is also possible to achieve both convenience and security.

[0067] The above describes the form for carrying out the present invention using an embodiment, but the present invention is not limited to such an embodiment, and various modifications and substitutions can be made within the scope that does not deviate from the gist of the present invention. [Explanation of symbols]

[0068] 10 User terminal device 20. Payment App 50 Store terminal equipment 60 Store Code Image 100 Payment Server 120 Login status management unit 122 Payment Contents Department 124 Payment processing unit 126 SMS Authentication Department 128 Number Change Authentication Section 130 Information Management Department 170 Storage section 172 User information 174 Payment Content Information 176 Affiliated Stores / Store Information 178 Questions List

Claims

1. A service providing device for providing an electronic payment service, an information management unit that sets up a user's account with at least a phone number as a required registration item and manages the registration information including the user's phone number; a number change authentication unit that, when the user applies for a change of telephone number through a second terminal device associated with a second telephone number that is a first telephone number registered in the registration information and different from the first telephone number associated with the first terminal device, provides the second terminal device with content including a plurality of questions, acquires from the second terminal device a plurality of pieces of confirmation information including a plurality of answers that the user inputs to the second terminal device in response to the plurality of questions presented to the user by the second terminal device, and calculates a score based on the plurality of pieces of confirmation information; Equipped with the information management unit updates the registered information with a new telephone number related to the application when the score is equal to or greater than a first threshold and when the score is equal to or greater than a second threshold that is smaller than the first threshold, and deletes or conceals a part of information included in the registered information when the score is less than the first threshold and equal to or greater than the second threshold. Service providing device.

2. A service providing device for providing an electronic payment service, an information management unit that sets up a user's account with at least a phone number as a required registration item and manages the registration information including the user's phone number; a number change authentication unit that, when the user applies for a change of telephone number through a second terminal device associated with a second telephone number which is a first telephone number registered in the registration information and different from the first telephone number associated with the first terminal device, acquires from the second terminal device a plurality of pieces of confirmation information including a plurality of answers which the user inputs to the second terminal device in response to a plurality of questions presented to the user by the second terminal device based on a plurality of questions previously stored in an application program installed in the second terminal device, and calculates a score based on the plurality of pieces of confirmation information; Equipped with the information management unit updates the registered information with a new telephone number related to the application when the score is equal to or greater than a first threshold and when the score is equal to or greater than a second threshold that is smaller than the first threshold, and deletes or conceals a part of information included in the registered information when the score is less than the first threshold and equal to or greater than the second threshold. Service providing device.

3. When the score is equal to or greater than the first threshold, the information management unit does not delete or conceal a part of the information included in the registered information.

3. The service providing device according to claim 1 or 2.

4. When the score is equal to or greater than the first threshold, the information management unit deletes or conceals a portion of the information included in the registration information, the portion being less than the information included in the registration information compared to a case in which the score is less than the first threshold and equal to or greater than the second threshold.

3. The service providing device according to claim 1 or 2.

5. When deleting or concealing a part of the information included in the registration information, the information management unit deletes or conceals information relating to financial services of a business operator other than the business operator that operates the electronic payment service.

3. The service providing device according to claim 1 or 2.

6. when deleting or concealing a part of the information included in the registered information, the information management unit determines the information to be deleted or concealed depending on the correct answers given by the user to the plurality of questions; 3. The service providing device according to claim 1 or 2.

7. each of the plurality of questions is a question regarding content of information registered in the registration information; the number change authentication unit provides the second terminal device with content including one or more questions excluding questions regarding information not registered in the registration information; The service providing device according to claim 1.

8. each of the plurality of questions is a question regarding content of information registered in the registration information; the number change authentication unit notifies the application program to present one or more questions to the user, excluding questions regarding information not registered in the registration information; The service providing device according to claim 2.

9. the number change authentication unit calculates the score using a preset score for each of the plurality of pieces of confirmation information; 3. The service providing device according to claim 1 or 2.

10. A service providing device for providing an electronic payment service, A process of setting up a user's account with at least a phone number as a required registration item and managing the registration information including the user's phone number; a process of providing content including a plurality of questions to the second terminal device when the user requests a change of telephone number through a second terminal device associated with a first telephone number registered in the registration information and different from the first telephone number associated with the first terminal device, acquiring from the second terminal device a plurality of pieces of confirmation information including a plurality of answers input by the user to the plurality of questions presented to the user by the second terminal device, and calculating a score based on the plurality of pieces of confirmation information; updating the registered information with a new telephone number related to the application when the score is equal to or greater than a first threshold and when the score is equal to or greater than a second threshold that is smaller than the first threshold, and deleting or concealing part of the information included in the registered information when the score is less than the first threshold and equal to or greater than the second threshold; A service delivery method that performs the above.

11. A service providing device for providing an electronic payment service, A process of setting up a user's account with at least a phone number as a required registration item and managing the registration information including the user's phone number; a process of acquiring, when the user applies to change his / her telephone number through a second terminal device associated with a second telephone number which is a first telephone number registered in the registration information and different from the first telephone number associated with the first terminal device, from the second terminal device a plurality of pieces of confirmation information including a plurality of answers input by the user to a plurality of questions presented to the user by the second terminal device based on a plurality of questions previously stored in an application program installed in the second terminal device, and calculating a score based on the plurality of pieces of confirmation information; updating the registered information with a new telephone number related to the application when the score is equal to or greater than a first threshold and when the score is equal to or greater than a second threshold that is smaller than the first threshold, and deleting or concealing part of the information included in the registered information when the score is less than the first threshold and equal to or greater than the second threshold; A service delivery method that performs the above.

12. A service providing device for providing an electronic payment service, A process of setting up a user's account with at least a phone number as a required registration item and managing the registration information including the user's phone number; a process of providing content including a plurality of questions to the second terminal device when the user requests a change of telephone number through a second terminal device associated with a first telephone number registered in the registration information and different from the first telephone number associated with the first terminal device, acquiring from the second terminal device a plurality of pieces of confirmation information including a plurality of answers input by the user to the plurality of questions presented to the user by the second terminal device, and calculating a score based on the plurality of pieces of confirmation information; updating the registered information with a new telephone number related to the application when the score is equal to or greater than a first threshold and when the score is equal to or greater than a second threshold that is smaller than the first threshold, and deleting or concealing part of the information included in the registered information when the score is less than the first threshold and equal to or greater than the second threshold; A program for executing the above.

13. A service providing device for providing an electronic payment service, A process of setting up a user's account with at least a phone number as a required registration item and managing the registration information including the user's phone number; a process of acquiring, when the user applies to change his / her telephone number through a second terminal device associated with a second telephone number which is a first telephone number registered in the registration information and different from the first telephone number associated with the first terminal device, from the second terminal device a plurality of pieces of confirmation information including a plurality of answers input by the user to a plurality of questions presented to the user by the second terminal device based on a plurality of questions previously stored in an application program installed in the second terminal device, and calculating a score based on the plurality of pieces of confirmation information; updating the registered information with a new telephone number related to the application when the score is equal to or greater than a first threshold and when the score is equal to or greater than a second threshold that is smaller than the first threshold, and deleting or concealing part of the information included in the registered information when the score is less than the first threshold and equal to or greater than the second threshold; A program for executing the above.

Images