Authentication device, authentication system, and program

Abstract

To achieve a suitable balance between preventing fraudulent use and maintaining convenience. [Solution] An authentication device applied to a service provider that provides services to a user in cooperation with an application program running on a user terminal device, the authentication device comprising an authentication unit that, when a predetermined screen of the application program is displayed and notification information indicating that a predetermined operation enabling copying of the predetermined screen has been performed is obtained from the application program, grants permission to provide the service based on the results of a plurality of verification items, including whether or not the notification information has been obtained.

Description

Technical Field

[0001] The present invention relates to an authentication device, an authentication system, an authentication method, and a program.

Background Art

[0002] Conventionally, there has been disclosed an invention of a service providing device that collaborates with an application operating on a user's terminal device to provide a service to the user, the service providing device including: a service providing unit that provides the service to a user who has been presented with a code image by the application; a management unit that manages the validity of the code image; and a detection unit that detects unauthorized use of the service based on code information read from the code image presented by the user. When the management unit receives, from the application, a duplication notification indicating that an operation to duplicate the code image has been performed on the terminal device, the management unit invalidates the code image targeted for duplication by the operation. When the detection unit receives code information that has been invalidated during use of the service, the detection unit determines that the use of the service is unauthorized use (Patent Document 1).

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] If an operation such as duplicating a designated screen, such as a code image, is performed, the user's identity cannot be sufficiently verified, raising concerns about the possibility of fraudulent service use. On the other hand, immediately invalidating the code image when such an operation occurs accidentally or unintentionally would impair convenience. Patent Document 1 describes mitigation measures such as "confirming with the user that they have the target terminal in their possession, and if confirmation is obtained, not invalidating the code information, but if confirmation is not obtained, invalidating the code information" and "notifying the user via the payment app 20 that the code image may have been duplicated by screen capture, without invalidating it," but such measures require user verification to determine whether to authorize service use, which may be cumbersome for the user. Thus, conventional technologies have sometimes been unable to suitably balance the prevention of fraudulent use with the maintenance of convenience.

[0005] This invention has been made in consideration of these circumstances, and one of its objectives is to provide an authentication device, authentication system, authentication method, and program that can suitably achieve both the prevention of misuse and the maintenance of convenience. [Means for solving the problem]

[0006] One aspect of the present invention is an authentication device applied to a service provider that provides services to a user in cooperation with an application program running on a user terminal device, the authentication device comprising an authentication unit that, when a predetermined screen of the application program is displayed and notification information indicating that a predetermined operation enabling copying of the predetermined screen has been performed is obtained from the application program, grants permission to provide the service based on the results of a confirmation of a plurality of confirmation items, including whether or not the notification information has been obtained. [Effects of the Invention]

[0007] According to one aspect of the present invention, it is possible to suitably achieve both the prevention of misuse and the maintenance of convenience. [Brief explanation of the drawing]

[0008] [Figure 1] This diagram shows the basic forms of in-store electronic payment. [Figure 2] This diagram shows an example of a configuration for performing electronic payments (terminal payments) using a payment app. [Figure 3] This figure shows an example of the contents of user information 172. [Figure 4] This diagram shows an example of the contents of merchant / store information 174. [Figure 5] This diagram shows an overview of the processing flow when a user scan is performed. [Figure 6] This diagram shows an overview of the processing flow when a store scan is performed. [Figure 7] This diagram shows an example of a configuration for performing electronic payments (card payments) using payment cards. [Figure 8] This figure shows examples of display screens shown on both the old user terminal device 10-1 and the new user terminal device 10-2 when an account transfer is performed. [Figure 9] This figure shows an example of a display screen on the user terminal device 10 that displays a code image for payment. [Figure 10] This figure shows an example of a display screen on the user terminal device 10 that displays a code image for verifying the recipient when a money transfer is made between users. [Figure 11] This figure shows an example of a screen where the code image is hidden. [Figure 12] This is a sequence diagram showing an example of the processing flow centered around the authentication device. [Modes for carrying out the invention]

[0009] [overview] The following describes embodiments of the authentication device, authentication system, authentication method, and program according to the present invention, with reference to the drawings. The authentication measure is applied to a service provider that provides services to users in cooperation with an application program running on a user terminal device. The service is a variety of service provided via a network, such as electronic payment services, e-commerce services, and user-to-user money transfer services. In the following description, the service is assumed to be an electronic payment service, the service provider is referred to as a payment server, and the application program as a payment app.

[0010] Electronic payment services are provided, for example, through the collaboration of an application program, a payment server, and a credit card server. Electronic payment services support payments related to the purchase of goods and services at stores. A store refers to, for example, a physical store existing in the real world, but may also include virtual stores for e-commerce. Virtual stores may include those provided by entities different from the operator of the electronic payment service. In this case, the system is controlled to redirect to the electronic payment service interface screen when settling a purchase at the virtual store. In electronic payment services, stores are treated as belonging to, for example, affiliated merchants (brands), and processing such as payment when a purchase is made at a store primarily takes place between the user and the affiliated merchant. Alternatively, processing such as payment may take place between the user and the store.

[0011] [Types of in-store electronic payment methods] FIG. 1 is a diagram showing a basic mode of in-store electronic payment. Basically, electronic payment is executed by three parties: a medium M held by a user U, store equipment E, and a payment system S. The medium M is a portable computer device such as a smartphone or a credit card. The store equipment E exists in a physical store in the real space (hereinafter simply referred to as a store), and includes a POS device, a wireless communication device, a credit card reader, a printed matter of a code image such as a QR code (registered trademark), or a display device for displaying a code image. In in-store electronic payment, first, information such as information recognizable as the user's identification information and payment amount information is shared unidirectionally or bidirectionally between the medium M and the store equipment E. At this time, one of the medium M or the store equipment E optically reads various information from the code image displayed by the other, provides information by NFC (Near Field Communication), or reads the PAN (Primary Account Number) by a credit card reader. Then, one of the medium M or the store equipment E (the side that has acquired information from the other) transmits payment information necessary for payment to the payment system S via the network NW. Note that both the medium M and the store equipment E may transmit information to the payment system S. The payment system S manages various information of the user U and performs electronic payment between the store and the user U in various modes. Electronic payment is performed by one or both of the prepaid method and the postpaid method, or by other methods. In addition, electronic payment may include a so-called online shopping mode executed by both the user's terminal device and the payment system. The network NW includes, for example, the Internet, a LAN (Local Area Network), a wireless base station, a provider device, and the like. Various devices that communicate via the network NW that appear hereinafter are assumed to have communication devices such as network cards and wireless communication modules.

[0012] [Configuration (Terminal Payment)] FIG. 2 is a diagram showing an example of a configuration for performing electronic payment (terminal payment) using a payment application. This electronic payment is executed centering around a payment application 20 operating on a user terminal device 10 which is one of the media M, one or more store payment terminals 30 and one or more store code images 40 which are one of the store facilities E, a payment server 100 which constitutes a part of the payment system S, and the like. The payment server 100 communicates with the user terminal device 10, the store payment terminals 30, and one or more information terminals 50 via a network NW.

[0013] The user terminal device 10 is, for example, a portable terminal device such as a smartphone or a tablet terminal. The user terminal device 10 is a computer device having at least an optical reading function, a communication function, a display function, an input reception function, and a program execution function. In the following description, the configurations for realizing these functions are respectively referred to as a camera, a communication device, a touch panel, a CPU (Central Processing Unit), etc. In the user terminal device 10, the payment application 20 is executed by a processor such as a CPU, and thus operates to provide an electronic payment service to the user in cooperation with the payment server 100. The payment application 20 is installed in the user terminal device 10 from, for example, an application distribution server (not shown), and controls the camera, the communication device, the touch panel, etc. of the user terminal device 10. In the following description, there may be a mixture of cases described as "transmitting information to the user terminal device 10 (or receiving / obtaining information from the user terminal device 10)" and cases described as "transmitting information to the payment application 20 (or receiving / obtaining information from the payment application 20)", but these are only differences in expression and are not intended to distinguish anything.

[0014] The store payment terminal 30 is installed in a store, for example. The store payment terminal 30 is a computer device (or an aggregate thereof) having at least a commodity price acquisition function, an optical reading function, a program execution function, and a communication function. The store payment terminal 30 includes a so-called POS (Point of Sale) device, and the POS device may have a commodity price acquisition function or an optical reading function.

[0015] The store code image 40 is placed in the store and is a code image such as a QR code (registered trademark) printed on paper or plastic media. The store code image 40 may also be displayed on a display placed in the store (this may also be the display of a terminal device such as a smartphone or tablet).

[0016] The information terminal 50 is used by the operator of a merchant that oversees the stores. In the electronic payment service, customers as providers of goods or services are treated as merchants (brands), and have one or more stores under their umbrella. There may also be merchants that operate only one store. The information terminal 50 is a smartphone, tablet, personal computer, etc. The information terminal 50 operates the merchant interface 55. The merchant interface 55 may be a merchant application or a web page displayed by a general-purpose browser. The merchant interface 55 accepts coupon settings etc. from the merchant operator and transmits them to the payment server 100. By executing the merchant interface 55, the information terminal 50 may have the function of displaying a code image corresponding to the store code image 40 or reading a code image displayed by the user terminal device 10 (in the latter case, an optical reading function is required).

[0017] The payment server 100 communicates with the credit card server 200 via a network NW. The payment server 100 includes, for example, a content provision unit 110, an information management unit 120, a payment processing unit 130, a code image provision unit 140, an authentication unit 150, and a storage unit 170. The code image provision unit 140 may be included in other functional units such as the content provision unit 110 or the authentication unit 150.

[0018] The components of the payment server 100 other than the storage unit 170 are realized, for example, by a hardware processor such as a CPU executing a program (software). Some or all of these components are LSIs (Large Scale Integrations), ASICs (Application Specific Integrated Circuits), FPGAs (Field-Programmable Graphite Arrays). The program may be implemented by hardware (including circuitry) such as a Gate Array or a GPU (Graphics Processing Unit), or by the collaboration of software and hardware. The program may be stored in advance on a storage device such as an HDD (Hard Disk Drive) or flash memory (a storage device equipped with a non-transient storage medium), or it may be stored on a removable storage medium such as a DVD or CD-ROM (a non-transient storage medium) and installed on the storage device when the storage medium is inserted into a drive device.

[0019] The storage unit 170 can be an HDD, flash memory, RAM (Random Access Memory), etc. The storage unit 170 may also be a NAS (Network Attached Storage) device that can be accessed by the payment server 100 via the network. The storage unit 170 stores information such as user information 172 and merchant / store information 174.

[0020] An example of an "authentication device" is a combination of the code image provision unit 140, the authentication unit 150, and a portion of the user information 172. In this embodiment, the "authentication device" is included in the payment server 100, but the "authentication device" may be a separate device from the payment server 100. In this case, the "authentication device" and the payment server 100 are configured to share and process necessary information such as the user information 172 as appropriate. The functions of these functional units will be described later.

[0021] The content provider unit 110, for example, has the functionality of a web server and provides information (content) for displaying various screens of the electronic payment service to the user terminal device 10. The content provider unit 110 provides content to the user terminal device 10 in the form of a web page, or provides the user terminal device 10 with parameters necessary for the payment application 20 to render images.

[0022] The Information Management Department 120 edits, adds, and deletes user information 172 and merchant / store information 174, and manages these.

[0023] Figure 3 shows an example of the contents of User Information 172. User Information 172 is a collection of information such as User URL, Account ID, Phone Number, Password, Registration Date, Charge Balance, Electronic Money Type, Terminal Payment Method, Card Payment Method, Various History Information, Identity Verification Flag, Name, Address, Date of Birth, Email Address, Bank Account, Postpay Settings, Postpay Conditions Information, and Authentication Information, all of which are linked to each other. Hereafter, the instance of a user (electronic payment account) to which this information is linked may be referred to as an account. In the figure, items indicated by "-" indicate that they are not set.

[0024] The user URL is used for transferring funds between users. When registering for the electronic payment service, registration of a phone number and password is required. The account ID is issued to the user by the payment server 100. The registration date is the date the user registered for the electronic payment service (the date the account was created). The charge balance is information indicating the balance of electronic money set by the user beforehand by sending money to the account. Methods of transfer include depositing money into an ATM (Automatic Teller Machine) of a designated company (bank) and transferring money from a registered bank account. The type of electronic money is information indicating, for example, whether the electronic money can be withdrawn or can only be used for electronic payments. The terminal payment method is setting information indicating whether the user will make an electronic payment using the charge balance (balance payment) or a deferred payment in terminal payments. The card payment method is setting information indicating whether the user will make an electronic payment using the charge balance (balance payment) or a deferred payment in card payments. Various types of transaction history information include charge history, which shows the history of users sending money to electronic payment services in advance to increase their balance, and payment history, which shows the details of each transaction made by the user (date and time, store ID of the store where the purchase was made, payment amount, payment method, etc.).

[0025] The "Verified" flag indicates whether the user has completed identity verification using an identification document. Post-payment is only available after identity verification is complete. The user with account ID "002" in the diagram has not completed identity verification and therefore can only select balance payment as their terminal payment method. The bank account is the account number of a bank account into which funds can be deposited for the electronic payment service. The "Post-payment Settings" indicates whether the user has completed the necessary setup to enable post-payment. The "Post-payment Conditions" information shows various conditions for post-payment, such as the limit and the amount used in the current month. Authentication information will be discussed later.

[0026] Figure 4 shows an example of the contents of the merchant / store information 174. The merchant / store information 174 includes, for example, a first table 174A in which merchant IDs and store IDs are associated with store URLs, a second table 174B in which merchant names and sales figures (as described above) are associated with merchant IDs, and a third table 174C in which store IDs are associated with store IDs. In addition to this information, the merchant / store information 174 may also include information such as the merchant or store category, store location, and payment patterns.

[0027] The payment processing unit 130 performs various processes for electronic payment. There are two methods for terminal payment, which are described below: the first method (user scan) and the second method (store scan).

[0028] Figure 5 shows an overview of the processing flow when a user scan is performed. First, the user terminal device 10, with the payment application 20 running, reads and decodes the store code image 40 using its optical reading function (S1). The store code image 40 contains information about the store URL. The payment application 20 sends first payment information, including the store URL and the user's account ID, to the payment server 100 (S2). The payment server 100 searches for merchant / store information 174 using the merchant ID and store ID corresponding to the store URL, obtains the merchant name and store name information (S3), and sends it to the payment application 20 (S4). The user enters the payment amount into the payment application 20 on the screen where the merchant name and store name are displayed (S5). Then, the payment application 20 generates second payment information, including at least the payment amount, and sends it to the payment server 100 (S6).

[0029] The payment processing unit 130 of the payment server 100 performs electronic payment based on the received second payment information if the "terminal payment method" in the user information 172 of the user is set to "balance payment" (S7-1). At this time, the payment processing unit 130 performs electronic payment by, for example, decreasing the charge balance managed in association with the user ID and increasing the item value of the merchant's sales proceeds. The item value of the merchant's sales proceeds is not used as electronic money itself, for example, but the amount corresponding to the item value of the sales proceeds is transferred to the bank account in a cycle according to the agreement between the merchant and the electronic payment service. On the other hand, if the "terminal payment method" is set to "post-payment", the payment processing unit 130 sends the first payment information and the second payment information to the credit card server 200 to request electronic payment (S7-2). The credit card server 200 performs electronic payment by adding the payment amount to the user's monthly usage amount based on the received information and deducting the monthly usage amount from the user's bank account after the closing date (S7-3).

[0030] Then, the payment processing unit 130 sends a payment completion notification (information for displaying the payment completion screen) to the payment application 20 via the content provision unit 110 (S8), and the payment application 20 displays the payment completion screen (S9). If the store code image 40 is displayed on a display placed in the store, the store code image 40 may include payment amount information as well as the store URL. In this case, the procedure for the user to enter the payment amount is omitted, and the payment amount information is included in the first payment information and sent to the payment server 100. Merchant name and store name information may be included and displayed on the payment completion screen.

[0031] Figure 6 shows an overview of the processing flow when a store scan is performed. First, when the payment app 20 is launched, when a payment operation is performed in the payment app 20, when it is time for an automatic update (for example, every minute), and at other times, the payment app 20 sends a request to the payment server 100 to issue a one-time code (S11). The code image provision unit 140 of the payment server 100 generates a one-time code (S12) and sends it to the payment app 20 (S13). The payment app 20 displays a code image such as a QR code or barcode that was generated based on the one-time code (S14). The user holds the display surface of the user terminal device 10 over the store payment terminal 30, and the store payment terminal 30 reads and decodes the code image using its optical reading function and obtains the one-time code, etc. (S15). Then, the store payment terminal 30 generates payment information including the one-time code, payment amount, merchant ID, store ID, etc., and sends it to the payment server 100 (S16). Payment amount information is obtained in advance through methods such as barcode scanning or manual entry.

[0032] The payment processing unit 130 of the payment server 100 identifies the user corresponding to the one-time code based on the received information, and if the "terminal payment method" in the user information 172 of that user is set to "balance payment", it performs electronic payment based on the received second payment information (S17-1). The content of the processing at this time is the same as the processing in S7-1 in Figure 5. On the other hand, if the "terminal payment method" is set to "post-payment", the payment server 100 sends the first payment information and the second payment information to the credit card server 200 to request electronic payment (S17-2). The credit card server 200 adds the payment amount to the user's monthly usage amount based on the received information, and performs electronic payment by deducting the monthly usage amount from the user's bank account after the closing date (S17-3).

[0033] Then, the payment processing unit 130 sends a payment completion notification to the payment application 20 via the content provision unit 110 (S18), and the payment application 20 displays a payment completion screen (S19).

[0034] Furthermore, electronic payment may be performed using only one of the above patterns. Also, the "account ID" explained in Figure 2 may be other information that can be used as user identification information (for example, a phone number). In addition, the issuance of a one-time code may be omitted during store scanning, and the payment app 20 may display a code image generated based on the user's account ID. In that case, the payment server 100 will identify the user corresponding to the account ID instead of identifying the user corresponding to the one-time code.

[0035] Furthermore, instead of managing the "post-payment" settlement through the credit card server 200, it may be handled internally by the payment server 100. In this case, the configuration of the payment card 60, credit card server 200, etc., may be omitted.

[0036] [Payment Method (Card Payment)] Figure 7 shows an example of a configuration for electronic payment (card payment) using a payment card. This electronic payment is executed around a payment card 60, which is one of the media Ms; a credit processing terminal 70, which is one of the store equipment Es; and a payment server 100 and a credit card server 200, which constitute part of the payment system S. The credit card server 200 communicates with the credit processing terminal 70 via a network NW.

[0037] The credit processing terminal 70 is installed in the store, similar to the store payment terminal 30. The credit processing terminal 70 includes, for example, a credit payment terminal (credit card reader) and a POS device. The credit payment terminal reads the PIN (Personal Identification Number) from the inserted or scanned credit card and verifies it against the PIN entered by the user, or transmits the PAN (Primary Account Number) read from the credit card to the credit card server 200 via the POS device. The POS device works with the credit payment terminal to transmit information such as the payment amount to the credit card server 200. An acquisitioner server may be interposed between the credit processing terminal 70 and the credit card server 200, but for the sake of simplicity, the description of the acquisitioner server will be omitted below. The payment card 60 is, for example, similar in form to a commonly used credit card, with a communication chip embedded in the card base material. The communication chip contains a storage medium that stores the PIN and communicates with an external device via a contactor (or wireless antenna). Alternatively, the payment card 60 may be a magnetic stripe card. Note that the information (messages) transmitted and received when using a credit card includes an authorization message for authentication and a sales message to indicate the payment amount; however, a detailed explanation distinguishing between these will be omitted below.

[0038] The credit card server 200 communicates with the settlement server 100 via a network NW. The credit card server 200 includes, for example, an information management unit 210, a credit interface 220, a settlement distribution unit 230, a credit settlement processing unit 240, and a storage unit 270. Components other than the storage unit 270 are implemented, for example, by a hardware processor such as a CPU executing a program (software). Some or all of these components may be implemented by hardware (including circuitry) such as an LSI, ASIC, FPGA, or GPU, or by the cooperation of software and hardware. The program may be stored in advance in a storage device such as an HDD or flash memory (a storage device with a non-transient storage medium), or it may be stored in a removable storage medium such as a DVD or CD-ROM (a non-transient storage medium) and installed in the storage device when the storage medium is mounted in a drive device. The storage unit 270 stores information such as card user information 272.

[0039] The information management unit 210 edits, adds, and deletes card user information 272 and manages it. Card user information 272 is information that associates, for example, information unique to the user (e.g., PAN), the card payment method, and the user's account ID (used by the payment server 100) with each other. The card payment method is setting information that indicates whether the user will make an electronic payment using their charged balance (balance payment) or a deferred payment in card payments.

[0040] The credit interface 220 determines whether the BIN (Bank Identification Number) in the PAN included in the message received from the credit processing terminal 70 is a code for the company. If it is a code for the company, it passes the message received from the credit processing terminal 70 to the settlement distribution unit 230. If it is not a code for the company, it discards the received message.

[0041] The settlement distribution unit 230 refers to the user's card user information 272 corresponding to the message obtained from the credit interface 220 and determines whether the "card payment method" is set to "post-payment". If the "card payment method" is set to "post-payment", the settlement distribution unit 230 notifies the credit interface 220 of this and passes the message obtained from the credit interface 220 to the credit payment processing unit 240. On the other hand, if the "card payment method" is set to "balance payment", the settlement distribution unit 230 adds the user's account ID to the message obtained from the credit interface 220 and sends it to the settlement server 100 to request electronic payment. The settlement server 100, upon receiving the request for electronic payment, performs the same processing as in S7-1 in Figure 5 and S17-1 in Figure 6.

[0042] The credit interface 220 checks the PAN and expiration date, and verifies whether the cumulative payment amount exceeds the monthly limit. The credit payment processing unit 240 adds the payment amount to the user's monthly usage amount based on the information contained in the message obtained from the payment distribution unit 230, and performs electronic payment by deducting the monthly usage amount from the user's bank account after the closing date.

[0043] [Authentication device operation] The operation of the "authentication device" will be described below. As explained in relation to Figure 6, the code image provision unit 140 generates a one-time code, which is an example of information for displaying a code image, and sends it to the payment application 20. The code image is used for user authentication in various situations when receiving electronic payment services.

[0044] When the authentication unit 150 receives notification information from the payment application 20 indicating that a predetermined operation (described later) enabling copying of a predetermined screen has been performed while the predetermined screen of the payment application 20 is displayed, it grants permission to provide the electronic payment service based on the results of verification of several verification items, including whether or not the notification information was obtained. The predetermined screen includes a screen displaying a code image.

[0045] For example, when the authentication unit 150 obtains decoded information from the new user terminal device 10-2, which has read the login authentication code image for transferring an account from the old user terminal device 10-1 to the new user terminal device 10-2, based on the information decoded from the code image, it grants permission to provide services to the new user terminal device 10-2 (account transfer) based on the decoded information and the results of verification of multiple verification items. The contents of the decoded information will be described later. Figure 8 is a diagram showing an example of the display screens shown on the old user terminal device 10-1 and the new user terminal device 10-2 when an account transfer is performed. As shown in the diagram, when the account transfer operation is performed on the old user terminal device 10-1, a one-time code request is made from the payment application 20 to the code image provision unit 140, and a login authentication code image is displayed based on the one-time code provided by the code image provision unit 140. By reading this with the new user terminal device 10-2, login by the new user terminal device 10-2 becomes possible.

[0046] Furthermore, when the authentication unit 150 obtains decoded information based on the decoded information of the code image from a device that has read a code image for payment using an electronic payment service, it may authorize the provision of the service (in this case, to make a payment) based on the decoded information and the results of verification of multiple verification items. Figure 9 shows an example of a display screen on the user terminal device 10 that displays a code image for payment. On this display screen, the code image is displayed in area A1, and the payment is made according to the flow described in Figure 6. The available balance at this time is also displayed. Note that the code image is displayed not only when a payment operation is made, but also on the home screen of the payment application 20. The home screen is also treated as subject to permission / denial of service provision, similar to the code image for payment.

[0047] Furthermore, the electronic payment service includes a user-to-user money transfer service. When the authentication unit 150 reads a code image for verifying the recipient of a money transfer between users (there are both a sender and a receiver), and obtains decoded information based on the decoded code image from another user terminal device 10, it may authorize the provision of the service (in this case, registration of the user of the user terminal device 10 that displayed the code image as the recipient of the transfer, or the transfer itself) based on the decoded information and the results of verification of multiple verification items. Figure 10 shows an example of a display screen in which the user terminal device 10 displays a code image for verifying the recipient of a money transfer between users. In this display screen, the code image is displayed in area A1, and links to transition to a screen for entering the user's username (if registered) and the requested amount are also displayed.

[0048] The designated screens of the payment app 20 may include various screens that are not desirable to be shared with third parties, such as the charge screen, wallet screen, and payment confirmation screen. Furthermore, the designated screens may include images that do not display code images. The charge screen accepts input or selection of the charge amount and the selection of the fund source (the source of the charge), and displays the charge balance. The wallet screen displays various values ​​held by the user, such as the charge balance, points amount, and investment amount. The payment confirmation screen is displayed as a final confirmation immediately before payment, and displays the details of the transaction being paid (merchant name, payment amount, etc.) and the source of payment (charge balance, points, deferred payment limit, etc.).

[0049] The multiple verification items include, at a minimum, whether or not notification information has been received, and also include authentication information such as decoding information, the device ID of the user terminal device 10, device name, client type, language, time zone, IP address, IP address location (latitude), IP address location (longitude), effective radius of the IP address location, name of the IP address location, name of the ISP (Internet Service Provider), OS, OS version, and emulator (Figure 3).

[0050] Here, the decoded information may include only a one-time code (the aforementioned payment information is separate from the decoded information), or it may include some or all of the above authentication information. Alternatively, the authentication information may be shared separately from the decoded information, for example, when the payment application 20 is started or at regular intervals, through communication between the payment application 20 and the authentication unit 150. In either case, some or all of the authentication information is shared between, for example, the OS of the user terminal device 10 and the payment application 20, and then transmitted from the payment application 20 to the authentication unit 150.

[0051] The authentication unit 150 then calculates a score, which increases as the degree of matching between multiple recently acquired verification items and multiple comparison verification items acquired at any previous time increases (a more favorable value). If the score is unfavorable (for example, lower than a threshold), it restricts the provision of the service. For example, the authentication unit 150 restricts the provision of the service by prohibiting login for a certain period or the execution of specific services (such as payment, remittance, or receipt). Fnotice is a function that returns a positive fixed value when notification information is received and zero when it is not received. Fc is a function that returns zero when the one-time code matches and a positive fixed value (a sufficiently large value) when it does not match. Parameter k is the identifier of each item of the authentication information, and n is the number of items in the authentication information. α k is an item k This is the weight assigned to F(I k This function returns a positive fixed value if the current value of the item matches the value being compared, and zero or a negative value if they do not match. The process of calculating a score and restricting service provision if the score is unfavorable may be executed even when notification information has not been obtained (for example, when a code image is used without performing the prescribed operation). In this case, if the value aggregated by the Σ term is lower than the threshold, the service will be restricted.

[0052] The score SC can be expressed, for example, by the following formula (1). SC = -Fnotice - Fc + Σ k=1 n α k ·F(I k ) …(1)

[0053] "Specified operation" includes, for example, the operation of sharing a specified screen during a video call. A video call is a function of a service provided under various names such as Zoom®, Teams®, and SKYPE®. Furthermore, the specified operation may also include the operation of taking a screenshot of the specified screen, or any other operation.

[0054] Furthermore, the payment application 20, in cooperation with the OS of the user terminal device 10, has a function that hides the code image when the above-mentioned predetermined operation is performed on a specific screen where the code image is displayed. Figure 11 shows an example of a screen where the code image has been hidden. This screen is accessed when a screenshot is taken from the image where the code image was displayed. Area A3 displays a warning prompting the user not to save the code image, and the code image is blacked out or otherwise obscured.

[0055] However, in recent years, fraudulent activities in network services have become more sophisticated, and the functions of user terminal devices 10 are constantly evolving, so even if such measures are taken, it cannot be said with certainty that the sharing of code images can be completely prevented. Malicious third parties may use various methods, such as phishing, to encourage users to share code images. If a code image is shared with a malicious third party, the third party may use the victim's (the user who shared the code image) account to make their own purchases, or the amount that should have been sent to the victim may be sent to the third party instead.

[0056] Therefore, when notification information indicating that a predetermined operation enabling copying of a predetermined screen has been performed is obtained from the payment application 20, it is preferable to restrict the use of the service. However, if the service is immediately stopped by invalidating the code image or the like when notification information is obtained, the convenience for users who have accidentally performed the predetermined operation will be significantly reduced. For example, if there is a sufficiently high probability that it is the same user, such as when most of the authentication information matches, it is considered that the provision of the service may be permitted at least partially. In this regard, the authentication device of the embodiment calculates a score SC as described above, and permits the provision of the electronic payment service based on the verification results of multiple verification items, thereby suitably achieving both the prevention of fraudulent use and the maintenance of convenience.

[0057] Figure 12 is a flowchart illustrating an example of the processing flow centered around the authentication device. First, at an arbitrary timing, the payment application 20 transmits authentication information to the authentication device (integrated with the payment server 100 in this embodiment) (S20), and the authentication device registers the authentication information in the user information 172 (S21).

[0058] Subsequently, the payment app 20 sends a one-time code request to the authentication device (S22), and the authentication device sends a one-time code to the payment app 20 (S23). Using this, the payment app 20 displays a code image (S24). When a predetermined operation is detected in this state (S25), the payment app 20 sends notification information to the authentication device (S26). In addition, the payment app 20 also sends authentication information to the authentication device (S27).

[0059] The authentication device compares the authentication information registered in S21 with the authentication information transmitted in S27 and calculates a score as described above (S28). The authentication device determines whether the score is above or below the threshold (S29). If the score is above or below the threshold, it permits the provision of service (S30). If the score is below the threshold, it restricts the provision of service (S31). Information regarding the restriction of service provision is transmitted to the settlement processing unit 130, etc., and reflected in the subsequent processing of the settlement server 100.

[0060] Although embodiments for carrying out the present invention have been described above using examples, the present invention is not limited in any way to these embodiments, and various modifications and substitutions can be made without departing from the spirit of the present invention. [Explanation of Symbols]

[0061] E. Store facilities M medium S Payment System 10. User terminal device 20 Payment Apps 30 Store Payment Terminals 40 Store Code Images 100 Payment Servers 140 Code Image Provider 150 Certification Department 172 User information

Claims

1. An authentication device applied to a service provider that provides services to users in cooperation with an application program running on a user terminal device, The system includes an authentication unit that, when a predetermined screen of the application program is displayed and notification information indicating that a predetermined operation enabling copying of the predetermined screen has been performed is obtained from the application program, grants permission to provide the service based on the results of a check of multiple items, including whether or not the notification information was obtained. Authentication device.

2. The authentication unit calculates a score based on the verification results of the multiple verification items, and if the score is unfavorable, restricts the provision of the service. The authentication device according to claim 1.

3. The aforementioned predetermined operation includes the operation of sharing the predetermined screen in a video call. The authentication device according to claim 1.

4. The aforementioned predetermined operation includes taking a screenshot of the aforementioned predetermined screen. The authentication device according to claim 1.

5. The application program further includes a code image providing unit that provides information for displaying a code image for receiving the service, When the authentication unit obtains decoded information from the device that read the code image, based on the information decoded from the code image, it grants permission to provide the service based on the decoded information and the results of the verification of the multiple verification items. The authentication device according to claim 1.

6. The aforementioned predetermined screen includes a screen on which the code image is displayed. The authentication device according to claim 5.

7. When the authentication unit obtains the decoded information from the device that read the code image for user verification during the switching of the user terminal device, it grants permission to provide the service based on the decoded information and the verification results of the multiple verification items. The authentication device according to claim 6.

8. The authentication unit reads the code image for transferring an account from the user terminal device to a new user terminal device, and when it obtains the decoded information from the new user terminal device, it grants permission to provide services to the new user terminal device based on the decoded information and the results of the verification of the multiple verification items. The authentication device according to claim 6.

9. The aforementioned service is an electronic payment service, When the authentication unit obtains the decoded information from the device that read the code image for payment using the electronic payment service, it grants permission to provide the service based on the decoded information and the results of the verification of the multiple verification items. The authentication device according to claim 6.

10. The aforementioned service includes a money transfer service between users, When the authentication unit obtains the decoded information from another user terminal device that has read the code image used for verifying the counterparty when a transfer of funds is made between users, it grants permission to provide the service based on the decoded information and the results of the verification of the multiple verification items. The authentication device according to claim 6.

11. The aforementioned predetermined screen includes the home screen of the application program, The authentication device according to claim 6.

12. The aforementioned service is an electronic payment service, The aforementioned designated screen includes a screen that accepts input or selection of the charge amount and selection of the fund source. The authentication device according to claim 1.

13. The aforementioned service is an electronic payment service, The aforementioned predetermined screen includes a screen that displays various values ​​owned by the user, The authentication device according to claim 1.

14. The aforementioned service is an electronic payment service, The aforementioned predetermined screen is displayed as a final confirmation immediately before settlement and includes a screen that displays at least the settlement amount and payment source for the transaction to be settled. The authentication device according to claim 1.

15. The aforementioned multiple verification items include the device ID of the user terminal device, The authentication device according to claim 1.

16. The aforementioned multiple verification items include the language used in the user terminal device, The authentication device according to claim 1.

17. The aforementioned multiple verification items include the time zone set on the user terminal device, The authentication device according to claim 1.

18. An authentication system comprising an application program that runs on a user terminal device, and an authentication device applied to a service provider device that cooperates with the application program to provide services to the user, The application program is installed on the user terminal device. When a predetermined operation that enables copying of the predetermined screen is performed while the predetermined screen is displayed, the authentication device is instructed to send notification information indicating that the predetermined operation has been performed. The authentication device is, When the notification information is obtained from the application program, the system includes an authentication unit that grants permission to provide the service based on the results of a check of multiple items, including whether or not the notification information has been obtained. Authentication system.

19. An authentication device applied to a service provider that provides services to users in cooperation with an application program running on a user terminal device, When a predetermined screen of the application program is displayed, notification information indicating that a predetermined operation enabling copying of the predetermined screen has been performed is obtained from the application program. When the aforementioned notification information is obtained, permission to provide the service is granted based on the results of verification of multiple verification items, including whether or not the aforementioned notification information has been obtained. Authentication method.

20. The processor of the authentication device applied to a service provision device that provides services to users in cooperation with an application program running on the user terminal device, A process to obtain notification information from the application program indicating that a predetermined operation has been performed to enable copying of the predetermined screen while the predetermined screen of the application program is displayed, When the aforementioned notification information is obtained, the process of granting permission to provide the service is performed based on the results of verification of multiple verification items, including whether or not the aforementioned notification information has been obtained. A program to execute [the command / action].

Images