Information processing device, information processing method, program, and system

Abstract

To prevent repeated fraudulent use by performing highly accurate fraud detection while maintaining the customer experience when using a credit card. [Solution] An information processing device comprising: an acquisition unit that acquires credit payment information transmitted in response to a user making a credit payment using a credit card at a credit card affiliated store, the credit payment information being approved by a predetermined fraud determination function; and a determination unit that determines whether there is a possibility of fraud in the credit payment after a predetermined period of time has passed since the acquisition of the credit payment information.

Description

[Technical field]

[0001] The present invention relates to an information processing device, an information processing method, a program, and a system. [Background technology]

[0002] Conventionally, there is known a technology for determining whether a credit card payment is fraudulent by using authorization data (authorization data; data transmitted from a store, etc., such as the credit card owner and the amount requested for payment) when a credit card is used. For example, Patent Document 1 discloses a technology for determining whether a credit card payment is fraudulent by using history information added to the authorization data (see Patent Document 1). [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2004-348536 A Summary of the Invention [Problem to be solved by the invention]

[0004] On the other hand, in real credit card payments, performing highly accurate fraud determination at the time of payment may involve a large processing load and processing time, which may damage the customer experience. Therefore, in the conventional technology, it was sometimes impossible to perform highly accurate fraud determination while maintaining the customer experience. As a result, there were cases where credit card fraud damage occurred repeatedly.

[0005] The present invention has been made in consideration of these circumstances, and one of its objectives is to provide an information processing device, information processing method, program, and system that can prevent repeated fraudulent use by making highly accurate fraud determinations while maintaining the customer experience when using a credit card. [Means for solving the problem]

[0006] One aspect of the present invention is an information processing device that includes an acquisition unit that acquires credit payment information that is transmitted in response to a user making a credit payment using a credit card at a credit card affiliated store, the credit payment information being approved by a predetermined fraud determination function, and a determination unit that determines whether there is a possibility of fraud in the credit payment after a predetermined period of time has passed since the acquisition of the credit payment information. Effect of the Invention

[0007] According to one aspect of the present invention, it is possible to prevent repeated fraudulent use by performing highly accurate fraud detection while maintaining the customer experience when using a credit card. [Brief description of the drawings]

[0008] [Figure 1] FIG. 1 is a diagram showing an example of a configuration for realizing an electronic payment service. [Diagram 2] This is a sequence diagram (part 1) illustrating the general flow of electronic payment. [Diagram 3] This is a sequence diagram (part 2) illustrating the general flow of electronic payment. [Figure 4] FIG. 2 is a configuration diagram of a payment server 100 according to the embodiment. [Diagram 5] FIG. 13 is a diagram showing an example of the contents of user information 172. [Figure 6] FIG. 13 is a diagram showing an example of the contents of affiliated store / store information 176. [Figure 7] FIG. 13 is a diagram showing an example of credit card payment information 178. [Figure 8] FIG. 2 is a diagram illustrating an example of a functional configuration of the authorization server 300. [Figure 9] FIG. 2 is a diagram illustrating an example of SMS authentication performed by the authorization server 300. [Figure 10] FIG. 13 is a diagram showing an example of credit card payment information 180 for determination. [Figure 11] FIG. 13 is a diagram showing an example of credit card transaction history information 182. [Figure 12] 13 is a diagram showing an example of credit card payment user information 184. FIG. [Figure 13] 13 is a diagram for explaining a determination method performed by a determination unit 154. FIG. [Figure 14] 1 is a sequence diagram showing an example of the flow of an online credit payment service executed by cooperation between a user terminal device 10, a payment server 100, an affiliated store shopping server 200, and an authorization server 300. FIG. [Figure 15] 13 is a flowchart showing an example of the flow of processing executed by an information processing unit 150. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0009] Hereinafter, with reference to the drawings, an embodiment of an information processing device, an information processing method, and a program of the present invention will be described. Various devices for providing services to users and performing internal analysis, such as the "server" that will be described below, may be realized by a group of distributed devices, and each device may be operated by a different business operator. Furthermore, the owner of the hardware of the device (the provider of the cloud server) and the business that actually operates the device may also be different. The application program and the payment server work together to provide an electronic payment service. In the following description, the application program is referred to as a payment application. The electronic payment service is a service that supports payments related to the purchase of goods and services at a store. The store is, for example, a physical store (real store) that exists in the real world, but may also include a virtual store for electronic commerce. The virtual store may include a store provided by an entity different from the operator of the electronic payment service. In that case, when making a payment for shopping at the virtual store, the screen may be controlled to transition to an interface screen of the electronic payment service. In the electronic payment service, the store is treated as belonging to, for example, an affiliated store (brand), and processing such as payment when a purchase is made at the store is mainly performed between the user and the affiliated store. Alternatively, processing such as payment may be performed between the user and the store.

[0010] [Electronic payment service] FIG. 1 is a diagram showing an example of the configuration of an electronic payment system in which an electronic payment service is realized. The electronic payment service is realized mainly by a payment server 100. The electronic payment system that realizes the electronic payment service includes, for example, one or more user terminal devices 10, one or more first store terminal devices 50, one or more second store terminal devices 70, a payment server 100, an affiliated store shopping server 200, and an authorization server 300. These devices communicate with each other, for example, via a network NW. The network NW includes, for example, the Internet, a LAN (Local Area Network), a wireless base station, a provider device, a network of a payment system such as a credit card, and the like. Some or all of the functional configurations included in the electronic payment system may be distributed in any form among multiple devices, or may be integrated into any device.

[0011] The electronic payment system or the payment server 100 is an example of an "information processing device". A part of the functional configuration of the payment server 100 may be included in the authorization server 300 described later. In this case, the functional configuration of the payment server 100 and the authorization server 300 combined is an example of an "information processing device". The entire functional configuration of the payment server 100 may be included in the authorization server 300. In this case, the authorization server 300 is an example of an "information processing device". Furthermore, of the payment server 100, the information processing unit 150 described later may be separated from the payment server 100 and implemented in an independent server device. In this case, the information processing unit 150 is an example of an "information processing device".

[0012] [User terminal device] The user terminal device 10 is, for example, a portable terminal device such as a smartphone or a tablet terminal. The user terminal device 10 is a computer device having at least an optical reading function, a communication function, a display function, an input acceptance function, and a program execution function. In the following description, components for realizing these functions are referred to as a camera, a communication device, a touch panel, a CPU (Central Processing Unit), and the like. In the user terminal device 10, a processor such as a CPU executes a payment application 20, thereby operating to provide an electronic payment service to a user in cooperation with a payment server 100. The payment application 20 is installed in the user terminal device 10 from, for example, an application store, and controls the camera, the communication device, the touch panel, and the like. Furthermore, in the user terminal device 10, a processor such as a CPU executes a browser application 22, thereby operating to access an affiliated store shopping server 200 and provide, for example, an online shopping service to a user.

[0013] [First store terminal device] The first store terminal device 50 is installed, for example, in a store. The first store terminal device 50 is a computer device having at least a product price acquisition function, an optical reading function, a program execution function, and a communication function. The first store terminal device 50 includes a so-called POS (Point of Sale) device, and the product price acquisition function and the optical reading function may be realized by the POS device. The store code image 60 is placed in the store, and is a code image such as a QR code (registered trademark) printed on a paper or plastic medium. The store code image 60 may be displayed on a display placed in the store (which may be the display of a terminal device such as a smartphone).

[0014] [Second store terminal device] The second store terminal device 70 is used by the operator of the affiliated store. The second store terminal device 70 is a smartphone, a tablet terminal, a personal computer, or the like. The second store terminal device 70 operates an interface 72 for the affiliated store. The interface 72 for the affiliated store may be an application for the affiliated store or a browser. The interface 72 for the affiliated store accepts the setting of a coupon by the operator of the affiliated store and transmits it to the payment server 100. The second store terminal device 70, which is a smartphone, has a function of displaying a code image corresponding to a store code image and reading a code image displayed by the user terminal device 10 by executing the application for the affiliated store. Although not illustrated in FIG. 1, the affiliated store may further be provided with a store terminal device for a card that processes the payment of a physical credit card presented by a user. In that case, when a credit payment is executed, the store terminal device for a card transmits credit payment information related to the payment to the authorization server 300.

[0015] [Member store shopping server] The affiliated store shopping server 200 is, for example, an online shopping service provided on a website by an affiliated store of a credit card. In response to receiving access from the browser application 22 installed in the user terminal device 10, the affiliated store shopping server 200 provides the browser application 22 with a service screen for the user to perform online shopping. The affiliated store shopping server 200 provides a credit payment service (online credit payment service) for paying for products or services on an online shopping site. When a credit payment is executed on the online shopping site, the affiliated store shopping server 200 transmits credit payment information related to the payment to the authorization server 300.

[0016] [Authorization Server] The authorization server 300 is, for example, a server device managed by a contracted company of the affiliated store. The authorization server 300 performs authentication (authorization) to determine whether or not to permit the credit payment corresponding to the credit payment information based on the credit payment information provided by the affiliated store shopping server 200. If the authorization server 300 authenticates that the credit payment is permitted, it provides the credit payment information to the payment server 100. The authorization server 300 is an example of a "predetermined fraud determination function" and an "authentication server" in the claims.

[0017] [Payment server] The payment server 100 is, for example, a server device of a credit card issuing company (issuer). The payment server 100 confirms and executes the credit payment based on the credit payment information authenticated as valid by the authorization server 300. More specifically, the payment server 100 subtracts the payment amount indicated by the credit payment information from the bank account linked to the user's credit card when a specified due date arrives, and deposits the amount remaining after deducting the payment fee from the payment amount into the bank account of the affiliated store.

[0018] The payment server 100 further realizes electronic payment based on payment information received from the user terminal device 10 or the first store terminal device 50. The first store terminal device 50 may include a POS device and an affiliated store server, in which case the payment information is sent from the POS device via the affiliated store server to the payment server 100. In the following explanation, no distinction is made between these two and it is assumed that the payment information is sent from the first store terminal device 50.

[0019] 2 and 3 are sequence diagrams illustrating the general flow of electronic payment. There may be two patterns of electronic payment: pattern 1 and pattern 2.

[0020] In the case of pattern 1 (hereinafter referred to as user scan) shown in FIG. 2, the user terminal device 10 with the payment application 20 activated decodes the store code image 60 by the optical reading function (S1). The store code image 60 includes store URL (Uniform Resource Locator) information. This store URL is an electronic payment service domain to which store-identifying information is added, and is associated with an affiliated store ID, a store ID, etc. in the payment server 100 (described later). The payment application 20 transmits the first payment information including the store URL and the account ID to the payment server 100 (S2). The payment server 100 searches for store information (described later) from the affiliated store ID and the store ID corresponding to the store URL, acquires the affiliated store name and the store name information (S3), and transmits it to the payment application 20 (S4). The user inputs the payment amount into the user terminal device 10 on the screen on which the affiliated store name and the store name are displayed (S5). Then, the user terminal device 10 generates second payment information including at least the payment amount, and transmits it to the payment server 100 (S6). The payment server 100 performs electronic payment based on the received second payment information (S7). The payment server 100 then transmits a payment completion notice (information for displaying a payment completion screen) to the payment application 20 (S8), and the payment application 20 displays the payment completion screen (S9). Note that when the store code image 60 is displayed on a display installed in the store, the store code image 60 may include not only the store URL but also information on the payment amount. In this case, the step of the user inputting the payment amount is omitted, and the information on the payment amount is included in the first payment information and transmitted to the payment server 100. Information on the affiliated store name and the store name may be included in the payment completion screen and displayed.

[0021] In the case of pattern 2 (hereinafter referred to as store scan) shown in FIG. 3, when the payment application 20 is started, when a payment operation is performed in the payment application 20, when an automatic update timing (e.g., every minute) occurs, and at other timings, the payment application 20 transmits a request for issuing a one-time code to the payment server 100 (S11). The payment server 100 generates a one-time code (S12) and transmits it to the payment application 20 (S13). The payment application 20 displays a code image such as a QR code or a barcode generated based on the one-time code (S14). The user holds (presents) the display surface of the user terminal device 10 over the first store terminal device 50, and the first store terminal device 50 decodes the code image by an optical reading function and obtains the one-time code, etc. (S15). The first store terminal device 50 then generates payment information including the one-time code, payment amount, affiliated store ID, store ID, etc., and transmits it to the payment server 100 (S16). The payment amount information is acquired in advance by reading a barcode or manually entering it. The payment server 100 identifies the user corresponding to the one-time code based on the received information and performs electronic payment (S17). The payment server 100 then transmits a payment completion notice to the payment application 20 (S18), and the payment application 20 displays a payment completion screen (S19).

[0022] Note that electronic payment may be performed using only one of the above patterns. Furthermore, the "account ID" described in FIG. 2 may be other information (e.g., a phone number) that can be used as user identification information. Furthermore, issuance of a one-time code may be omitted in the store scan, and the payment application 20 may display a code image generated based on the user's account ID. In this case, the payment server 100 identifies the user corresponding to the account ID instead of identifying the user corresponding to the one-time code.

[0023] [Payment server functional configuration] 4 is a configuration diagram of the payment server 100. The payment server 100 includes, for example, a communication unit 110, a content providing unit 120, a payment processing unit 130, an information management unit 140, an information processing unit 150, and a storage unit 170. The components other than the communication unit 110 and the storage unit 170 are realized by, for example, a hardware processor such as a CPU executing a program (software). Some or all of these components may be realized by hardware (including circuitry) such as an LSI (Large Scale Integration), an ASIC (Application Specific Integrated Circuit), an FPGA (Field-Programmable Gate Array), a GPU (Graphics Processing Unit), or a SOC (System On Chip), or may be realized by cooperation between software and hardware. The program may be stored in advance in a storage device (a storage device with a non-transient storage medium) such as an HDD (Hard Disk Drive) or flash memory, or may be stored in a removable storage medium (non-transient storage medium) such as a DVD or CD-ROM, and installed in the storage device by inserting the storage medium into a drive device.

[0024] The storage unit 170 is a HDD, a flash memory, a RAM (Random Access Memory), etc. The storage unit 170 may be a NAS (Network Attached Storage) device that the payment server 100 can access via a network. The storage unit 170 stores information such as user information 172, content information 174, affiliated store / shop information 176, credit card payment information 178, credit card payment information for judgment 180, credit card payment history information 182, and credit card payment user information 184. Details of each piece of information will be described later.

[0025] The communication unit 110 is a communication interface for connecting to the network NW. The communication unit 110 is, for example, a network interface card.

[0026] The content providing unit 120 has, for example, a function of a web server, and provides information (content) for displaying various screens of the electronic payment service to the user terminal device 10. The content providing unit 120 reads out necessary content from the content information 174 as appropriate and provides it to the user terminal device 10. The user terminal device 10 accepts various inputs by the user while the content is being played by the payment application 20, and transmits the above-mentioned payment information and the like to the payment server 100. The above content may be generated by the payment application 20. In this case, the content providing unit 120 provides the payment application 20 with information required for generating the content.

[0027] The payment processing unit 130 performs payment processing based on the payment information transmitted by the user terminal device 10 or the first store terminal device 50. The payment processing unit 130 performs payment processing while referring to the user information 172.

[0028] FIG. 5 is a diagram showing an example of the contents of the user information 172. The user information 172 is an example of the registration information of a user. The user information 172 is, for example, a user URL, an account ID, a telephone number, a password, as well as information associated with an email address, a user ID, a name, an address, a date of birth, a registration date, a charge balance, a credit payment setting, a credit payment limit, a credit payment amount used, a credit payment available amount, a payment method setting, a bank account, a credit card number, charge history information, and payment history information. The user URL is used for a remittance process between users. When registering for the electronic payment service, it is necessary to register a telephone number and a password. The account ID is issued to the user by the payment server 100, and the user ID is an ID that can be set by the user at will (does not have to be set). Similarly, the email address, and the name, address, and date of birth are information that can be set by the user at will (does not have to be set). The registration date is the date on which the user registered for the electronic payment service (the date on which the account was created). Hereinafter, the user's instance (electronic payment account) to which this information is associated will be referred to as an account.

[0029] The charge balance is information indicating the balance of electronic money set by a user by transferring money to an account in advance. Means of transfer include transfer from an ATM (Automatic Teller Machine) of a designated company (bank) and transfer from a registered bank account. The credit payment setting is information indicating whether or not the setting for enabling electronic payment by credit payment using the payment application 20 (credit payment using code information) has been completed, and is set to either "completed" or "not completed". The credit payment limit is the credit payment limit that can be used each month, the credit payment usage amount is the amount of credit payment already used in the current month, and the credit payment available amount is the amount of credit payment that can be used in the current month, which is calculated by subtracting the credit payment usage amount from the credit payment limit. Although only one credit payment limit is shown in the figure, in reality, there is also a daily upper limit, and the lower of these may be set as the credit payment limit. Further details of the credit payment will be described later. The payment method setting is setting information indicating whether the user will perform electronic payment using the charge balance or credit payment at that time. The bank account and credit card number are information on a bank account or credit card number (account number, card number) that can be used to deposit funds into an electronic payment service. Charge history information is a history of the user's previous transfers to the electronic payment service to increase the charge balance. Payment history information is information that indicates the details of payments made by the user for each payment (date and time, store ID of the store where the purchase was made, payment amount, payment method, etc.).

[0030] 6 is a diagram showing an example of the contents of affiliated store / store information 176. The affiliated store / store information 176 includes, for example, a first table 176A in which an affiliated store ID and a store ID are associated with a store URL, a second table 176B in which an affiliated store name and sales amount (described above) are associated with an affiliated store ID, and a third table 176C in which a store ID is associated with a store name. In addition to this information, the affiliated store / store information 176 may also include information such as the category of the affiliated store or store, the location of the store, and payment patterns.

[0031] The information management unit 140 acquires information provided by other server devices and terminal devices. The information management unit 140 manages user information 172 and affiliated store / store information 176 based on information acquired from the user terminal device 10 and the second store terminal device 70. The information management unit 140 adds, edits, and deletes new records for the user information 172 and affiliated store / store information 176. The information management unit 140 manages information acquired from the authorization server 300. The information acquired from the authorization server 300 is managed as, for example, credit card payment information 178.

[0032] [Electronic payment] When payment information is acquired from the user terminal device 10 or the first store terminal device 50, the payment processing unit 130 refers to the user information 172 to acquire the "payment method setting" of the user. For a user whose "payment method setting" is set to "charge balance", the payment processing unit 130 performs electronic payment as follows. For example, the payment processing unit 130 performs electronic payment by decreasing the charge balance managed in association with the user ID and increasing the item value of the affiliated store's sales. The item value of the affiliated store's sales is not used as electronic money itself, for example, and an amount corresponding to the item value of the sales is transferred to a bank account in a cycle according to an agreement between the affiliated store and the electronic payment service.

[0033] The payment processing unit 130 performs electronic payment for users whose "setting information" is set to "credit payment (credit payment using code information)" as follows. Credit payment is a payment method in cooperation with a credit card company, which is a separate entity from the operator of the electronic payment service, and the operator of the electronic payment service acts as a creditor and allows electronic payment that is not dependent on the charge balance within the credit payment limit. In order to receive the credit payment service, a credit card provided by the operator of the electronic payment service may be required. The amount used in the credit payment is settled on the payment date of the following month, for example, by debiting from a bank account, for one month. In this case, the payment processing unit 130 performs provisional payment by adding the payment amount to the credit payment amount and subtracting the same amount from the available credit payment amount, and when the closing date comes, it performs processing to debit the payment for the current month on the payment date of the following month as described above, or requests the operator of the credit card company to perform such processing. In addition, if the payment amount exceeds the available credit payment amount at the time of provisional payment, an error notification is returned to the payment application 20.

[0034] When a user performs a credit payment, the payment processing unit 130 transmits credit payment information regarding the payment to the authorization server 300, and the authorization server 300 may perform authentication to determine whether or not to permit the credit payment corresponding to the credit payment information. When the authorization server 300 authenticates that the credit payment is permitted, it notifies the payment server 100 of the same, and the payment processing unit 130 may perform the subsequent payment processing.

[0035] The information processing unit 150 executes various information processing. For example, the information processing unit 150 judges whether or not there is a possibility of fraud for each credit payment corresponding to the record stored in the credit payment information for judgment 180 based on the credit payment information for judgment 180, the credit payment history information 182, and the credit payment user information 184 stored in the storage unit 170. When the information processing unit 150 judges that there is a possibility of fraud in the credit payment, it performs personal authentication for the user of the credit payment judged to be possibly fraudulent. When the personal authentication fails, the information processing unit 150 transmits notification information indicating that the personal authentication has failed to the administrator terminal of the payment server 100 (i.e., the credit card issuing company). To realize these functions, the information processing unit 150 includes an acquisition unit 152, a judgment unit 154, and an authentication unit 156 as functional units, and the details of each function will be described later.

[0036] [overview] In this embodiment, when a user makes an electronic payment using a credit card at an affiliated store, there are three patterns: (1) using an online credit card payment service on a web screen provided by the affiliated store shopping server 200, (2) setting the payment method to "credit card payment" and making a payment using the payment application 20, and (3) presenting a physical credit card at the affiliated store's actual store and making a payment using a terminal device for credit card payments. In any of these patterns, the credit card payment information is sent to the authorization server 300, and if the transaction is permitted by the authorization server 300, the payment server 100 confirms and executes the credit card payment (i.e., when a specified due date arrives, the payment server 100 subtracts the payment amount indicated by the credit card payment information from the bank account linked to the user's credit card, and deposits the amount of the payment less the payment fee into the affiliated store's bank account).

[0037] However, when authorization is performed by the authorization server 300, the user waits for the completion of the credit card payment including the authorization on a web screen (case (1)) or at the affiliated store (cases (2) and (3)). Therefore, when the authorization server 300 performs a highly accurate fraud determination, it may involve a large processing load and processing time, which may damage the customer experience. Therefore, in the conventional technology, the determination by the authorization server 300 is relatively simple, and as a result, there are cases where the damage caused by the fraudulent use of credit cards continues.

[0038] In light of this situation, in this embodiment, the information processing unit 150 performs a more accurate fraud determination on the credit payment information related to the credit payment authorized by the authorization server 300, based on the credit payment history information 182 (more precisely, a credit payment history for a longer period than the credit payment history used for fraud determination by the authorization server 300) and the credit payment user information 184 indicating the user's attributes. If the information processing unit 150 then determines that there is a possibility of fraud in the credit payment, it performs personal authentication on the user of the credit payment determined to be possibly fraudulent, and if the personal authentication fails, it may send notification information indicating that the personal authentication has failed to the administrator terminal of the payment server 100 (i.e., the credit card issuing company). This makes it possible to prevent repeated damage from fraudulent use by performing a highly accurate fraud determination while maintaining the customer experience when using a credit card. The details of this embodiment are described below.

[0039] [Credit card payment information] FIG. 7 is a diagram showing an example of the credit card payment information 178. The credit card payment information 178 is detailed information of each transaction received by the authorization server 300 for all credit card payments. Here, all credit card payments refer to credit cards issued by credit card issuers (i.e., in this embodiment, the operator of the payment server 100), and include credit card payments by all of the above-mentioned methods (1) to (3). The credit card payment information 178 associates, for example, a transaction ID with information such as a transaction date, affiliated store code, affiliated store name, affiliated store category, credit card number, and credit card payment amount.

[0040] [Decision by authorization server] FIG. 8 is a diagram showing an example of the functional configuration of the authorization server 300. The authorization server 300 judges whether or not to permit each transaction of the accepted credit card payment information 178. More specifically, the authorization server 300 calculates a score S=f(p1, p2, . . . , p n ), and disallows the transaction if the calculated score S is equal to or greater than the first threshold. If the calculated score S is equal to or greater than the second threshold and less than the first threshold, the authorization server 300 performs SMS (Short Message Service) authentication, and allows the transaction when SMS authentication is completed. Here, the second threshold is a number greater than zero and less than the first threshold. If the calculated score S is less than the second threshold, the authorization server 300 allows the transaction without performing SMS authentication.

[0041] SMS authentication refers to authentication in which an SMS notification containing a one-time password is sent to the user terminal device 10 linked to the telephone number registered when the credit card was created, and the user's identity is confirmed by receiving input of the one-time password from the user terminal device 10. k (k=1,...n) represents the parameter set to be input to the fraud detection rule f, and the parameter set p kincludes any information, such as the credit payment amount, affiliated store identification information (affiliated store name, affiliated store category, etc.), and payment time information (transaction date, payment time zone, etc.). When the authorization server 300 uses the access source information to determine fraud, the affiliated store shopping server 200 will transmit the access source information to the authorization server 300 in addition to the credit payment information. In this way, in order to reduce the processing load, the authorization server 300 basically uses information over a short period of time (for example, at the time of credit payment) to determine whether to permit or not permit a transaction. SMS authentication is an example of a "personal authentication function" in the claims.

[0042] In this embodiment, for convenience of explanation, the authorization server 300 uses a single fraud determination rule f to determine whether to permit or deny a transaction, but the present invention is not limited to such a configuration, and different fraud determination rules f and different identity authentication may be executed using different data depending on the type of credit payment (i.e., the credit payment methods (1), (2), and (3) described above). For example, when a user uses an online credit payment service, access source information (IP address, location, etc.) can be obtained, and the authorization server 300 may further determine whether to permit or deny a transaction based on the access source information.

[0043] FIG. 9 is a diagram showing an example of SMS authentication executed by the authorization server 300. FIG. 9 shows, as an example, a scene in which a user starts the browser application 22 on the user terminal device 10, accesses the EC site (member store shopping server 200) of a jewelry store that is a member store of a credit card, and attempts to use an online credit payment service. As shown on the left side of FIG. 9, the user selects a product he or she wishes to purchase on the EC site, selects credit card as a payment method, and inputs necessary information such as a card number and a security code. After inputting the necessary information, when the user presses the payment button B1, the member store shopping server 200 transmits information such as the transaction date, member store code, member store name, member store category, credit card number (and security code), and credit payment amount to the authorization server 300 as credit payment information corresponding to this transaction.

[0044] When the authorization server 300 receives the credit payment information, it assigns a transaction ID and stores it as the credit payment information 178. Next, the authorization server 300 determines whether to permit the transaction, to perform SMS authentication, or to disallow the transaction. More specifically, as described above, when the score S calculated according to the fraud determination rule f is equal to or greater than the first threshold, the authorization server 300 disallows the transaction. When the calculated score S is equal to or greater than the second threshold and less than the first threshold, the authorization server 300 performs SMS authentication, and permits the transaction when SMS authentication is completed. When the calculated score S is less than the second threshold, the authorization server 300 permits the transaction without performing SMS authentication.

[0045] The right part of Fig. 9 shows an example in which the calculated score S is equal to or greater than the second threshold and less than the first threshold, and the authorization server 300 executes SMS authentication. As shown in the right part of Fig. 9, the authorization server 300 transmits an SMS notification containing a one-time password to the telephone number of the user terminal device 10. At the same time, the authorization server 300 causes the user terminal device 10 to display an authentication screen for inputting the one-time password. When the user inputs the one-time password notified by SMS into the authentication screen and presses the authentication button B2, the user terminal device 10 transmits the input one-time password to the authorization server 300, and the authorization server 300 determines that the SMS authentication is successful if the input one-time password matches the notified one-time password.

[0046] 9 is completed, and if the authorization server 300 authorizes the credit card payment transaction, information indicating the authorization is sent to the payment server 100, and the payment processing unit 130 confirms and executes the credit card payment. On the other hand, if the authorization server 300 does not authorize the credit card payment transaction, the authorization server 300 sends information indicating that the credit card payment is not authorized for the transaction to the affiliated store shopping server 200, and the affiliated store shopping server 200 causes the browser application 22 to display notification information indicating that the credit card payment has failed.

[0047] [Judgment section] As described above, the authorization server 300 basically uses information for a short period (for example, at the time of credit payment) to determine whether or not to permit a transaction in order to reduce the processing load. Therefore, among transactions for which the authorization server 300 does not perform SMS authentication and for which the credit payment is permitted, fraudulent credit payment transactions may be included. Therefore, in this embodiment, the acquisition unit 152 first narrows down credit payment information related to transactions for which the authorization server 300 does not perform SMS authentication and for which the credit payment is permitted from the credit payment information 178, and acquires it as the judgment credit payment information 180. The judgment unit 154 judges whether or not there is a possibility of fraud for each transaction in the acquired judgment credit payment information 180 based on the acquired judgment credit payment information 180, the credit payment history information 182, and the credit payment user information 184.

[0048] [Credit card payment information for judgment] 10 is a diagram showing an example of the credit card payment information for determination 180. The credit card payment information for determination 180 is payment information narrowed down from the credit card payment information 178 as a judgment target by the judgment unit 154, and includes, for example, whether SMS authentication was performed and whether the transaction was permitted or not. The credit card payment information for determination 180 is a compilation of records from the credit card payment information 178 in which the SMS authentication performed or not field is "no" and the transaction permitted or not field is "permitted."

[0049] Since the judgment by the judgment unit 154 is performed a predetermined period (for example, one day) after the credit payment is executed, the payment server 100 generates the judgment credit payment information 180 in advance from the credit payment information 178 between the day the credit payment is executed and the day after the credit payment is executed. Note that in FIG. 10, data items such as whether SMS authentication was executed or not and transaction permission / not permission are added for the sake of clarity, but without adding these data items, the credit payment information 178 may simply be narrowed down according to the above criteria and stored as the judgment credit payment information 180. Furthermore, the judgment credit payment information 180 may be at least for credit payments for which the transaction is permitted by the authorization server 300, and may include credit payments for which SMS authentication was executed by the authorization server 300.

[0050] [Credit card payment history information] FIG. 11 is a diagram showing an example of the credit transaction history information 182. The credit transaction history information 182 includes information such as, for example, a transaction date, an affiliated store code, an affiliated store name, an affiliated store category, and a credit transaction amount. The credit transaction history information 182 is recorded for each credit card user for a predetermined period (for example, one month, one year, or the period elapsed since the creation of the credit card). As described above, the authorization server 300 makes a determination based on short-term information, but the determination unit 154 also makes a determination using longer-term information such as the credit transaction history information 182.

[0051] [Credit card payment user information] FIG. 12 is a diagram showing an example of credit card payment user information 184. Credit card payment user information 184 associates, for example, a credit card number with information such as name, address, gender, date of birth, contract period, and statistical information 1 to N (N is any positive integer). Credit card payment user information 184 is information that represents the attributes of a credit card user. The name, address, gender, and date of birth are information registered by the user when the credit card is obtained. The contract period is information that indicates the period from the acquisition of the credit card to the present.

[0052] Statistical information 1 to statistical information N are information indicating the payment tendency (feature) of a user calculated based on credit transaction history information 182. In FIG. 12, as an example, statistical information 1 to statistical information N include the average payment amount of the user, the high frequency affiliated store category, and the high frequency payment location. These pieces of statistical information can be collected from credit transaction history information 182. For example, the average payment amount of the user can be obtained by calculating the average value of the payment amounts stored in credit transaction history information 182. Furthermore, for example, the high frequency affiliated store category can be obtained as the affiliated store category that appears most frequently among the affiliated store categories stored in credit transaction history information 182. Furthermore, for example, the high frequency payment location can be obtained as the location information that appears most frequently from the location information of the affiliated store identified by the affiliated store code.

[0053] [Machine learning model] The judgment unit 154 judges whether or not there is a possibility of fraud for each transaction of the acquired credit payment information for judgment 180 based on the credit payment information for judgment 180, the credit payment history information 182, and the credit payment user information 184. FIG. 13 is a diagram for explaining a judgment method by the judgment unit 154. The judgment unit 154 acquires a fraud score by inputting, for example, the credit payment information for judgment 180, the credit payment history information 182, and the credit payment user information 184 to a machine learning model (for example, a deep neural network) that is trained to output a fraud score (for example, a probability value of 0 to 1) indicating the degree of the possibility of fraud of the credit payment information for judgment 180 when these pieces of information are input. More precisely, the judgment unit 154 inputs one record of the credit payment information for judgment 180, the credit payment history information 182 of the user corresponding to the record, and the credit payment user information 184 of the user corresponding to the record to the machine learning model. When training the machine learning model, the operator of the payment server 100 (i.e., the credit card issuing company) collects in advance the credit payment history information 182 and the credit payment user information 184 for transactions that are found to be fraudulent credit payments, and trains the machine learning model. Note that the input information to the machine learning model is not limited to the above combination, and may be at least information covering a longer period than the information used for the determination by the authorization server 300.

[0054] [Authentication section] When the determination unit 154 determines that there is a possibility of fraud in the credit card payment, the authentication unit 156 performs identity authentication for the credit card payment. Here, the identity authentication may be the above-mentioned SMS authentication, or may be output of notification information for requesting identity verification by telephone to a terminal of a call center associated with a credit card issuer. As another embodiment, the authentication unit 156 may change the identity authentication method depending on the size of the fraud score acquired by the determination unit 154. For example, the authentication unit 156 may perform SMS authentication when the fraud score acquired by the determination unit 154 is equal to or greater than the third threshold and less than the fourth threshold, while it may output notification information for requesting identity verification by telephone to a terminal of a call center when the fraud score acquired by the determination unit 154 is equal to or greater than the fourth threshold.

[0055] If the user fails to authenticate the user, the authentication unit 156 may output information indicating that the authentication has failed to the credit card issuer or to a terminal of a call center associated with the credit card issuer, or may automatically suspend the use of the credit card if the user fails to authenticate the user. As another aspect, the authentication unit 156 may automatically suspend the use of the credit card if the determination unit 154 determines that there is a possibility of fraud in the credit card payment before the execution of the authentication.

[0056] Thus, according to this embodiment, even if a transaction is permitted by the authorization server 300, which uses information from a short period of time to determine whether or not to permit a transaction, after a predetermined period of time (e.g., one day), information from a longer period of time is used to determine whether or not there is a possibility of fraud in the transaction. If it is determined that there is a possibility of fraud, personal authentication may be performed, notification information may be sent to a credit card issuer or a call center, or the use of the credit card may be suspended. This makes it possible to prevent repeated damage from fraudulent use by performing highly accurate fraud determination while maintaining the customer experience when using a credit card.

[0057] [Sequence diagram] Fig. 14 is a sequence diagram showing an example of the flow of an online credit payment service executed by cooperation between the user terminal device 10, the payment server 100, the affiliated store shopping server 200, and the authorization server 300. Fig. 14 shows, as an example, the flow when a user uses the online credit payment service and the authorization server 300 permits the credit payment.

[0058] First, a user operates the browser application 22 on the user terminal device 10 to access the affiliated store shopping server 200 and use the online credit payment service (S100). Next, the affiliated store shopping server 200 transmits information regarding the transaction, such as the transaction date, affiliated store name, affiliated store code, affiliated store category, credit card number (and security code), and credit payment amount, as credit payment information to the authorization server 300 and requests authorization (S102).

[0059] When the authorization server 300 receives the credit payment information, it assigns a transaction ID to the received credit payment information and stores it as credit payment information 178 (S104). Next, the authorization server 300 determines whether or not to permit the transaction (S106). If the authorization server 300 permits the transaction (S108), the payment server 100 executes the credit payment (S110). Next, the payment server 100 waits for a predetermined period of time (S112).

[0060] After a predetermined period of time has elapsed, the payment server 100 judges whether or not there is a possibility of fraud in the credit card payment authorized by the authorization server 300. If the payment server 100 judges that there is a possibility of fraud, the payment server 100 sends an SMS notification containing a one-time password to the telephone number linked to the credit card number included in the credit card payment information 178 (S116). The user checks the one-time password contained in the SMS notification and enters it into the authentication screen displayed on the browser application 22 (S118). If the one-time password received from the user terminal device 10 matches the one-time password sent by the payment server 100, the payment server 100 ends the process (permits continued use of the credit card).

[0061] [Processing flow] Next, the flow of processing executed by the information processing unit 150 will be described with reference to Fig. 15. Fig. 15 is a flowchart showing an example of the flow of processing executed by the information processing unit 150.

[0062] First, the acquisition unit 152 acquires credit information for which a transaction has been permitted by the authorization server 300 (S200). Next, the determination unit 154 determines whether or not there is a possibility of fraud in the credit payment (S202). If it is determined that there is no possibility of fraud in the credit payment, the information processing unit 150 ends the process (i.e., permits continued use of the credit card).

[0063] On the other hand, if it is determined that there is a possibility of fraud in the credit card payment, the authentication unit 156 performs identity authentication for the user of the credit card payment (S204). If identity authentication is successful, the information processing unit 150 ends the process. On the other hand, if identity authentication is unsuccessful, the authentication unit 156 outputs information indicating that identity authentication has failed to, for example, a terminal device of the credit card issuing company. This ends the process of this flowchart.

[0064] According to the embodiment described above, the credit card payment information is transmitted in response to a credit card payment made by a user at a credit card affiliated store, and the credit card payment information is obtained for which a predetermined fraud determination function has permitted the credit card payment. After a predetermined period of time has elapsed since the credit card payment information was obtained, it is determined whether or not there is a possibility of fraud in the credit card payment. This makes it possible to prevent fraudulent use of credit cards while reducing the costs associated with the prevention.

[0065] The above describes the form for carrying out the present invention using an embodiment, but the present invention is not limited to such an embodiment, and various modifications and substitutions can be made within the scope that does not deviate from the gist of the present invention. [Explanation of symbols]

[0066] 10 User terminal device 20. Payment App 22 Browser App 100 Payment Server 120 Contents Provider 130 Payment processing unit 140 Information Management Department 150 Information Processing Section 200 Merchant Shopping Server 300 Authorization Server

Claims

1. an acquisition unit that acquires credit card payment information transmitted in response to a credit card payment made by a user at a credit card affiliated store using a credit card, the credit card payment information being approved by a predetermined fraud determination function; a determination unit that determines whether or not there is a possibility of fraud in the credit card payment after a predetermined period from the acquisition of the credit card payment information, The credit card payment information includes a payment amount, a payment time, and information regarding an affiliated store of the credit card payment, The predetermined fraud determination function determines whether or not to permit the credit card payment based on the credit card payment information, the determination unit determines whether or not there is a possibility of fraud in the credit card payment based on the credit card payment history and the user attribute information in addition to the credit card payment information; Information processing device.

2. an acquisition unit that acquires credit card payment information transmitted in response to a credit card payment made by a user at a credit card affiliated store using a credit card, the credit card payment information being approved by a predetermined fraud determination function; a determination unit that determines whether or not there is a possibility of fraud in the credit card payment after a predetermined period from the acquisition of the credit card payment information, The predetermined fraud determination function further includes a function for authenticating the user, The determination unit determines whether or not there is a possibility of fraud in a credit card payment for which the personal authentication function has not been executed. Information processing device.

3. The identity authentication function is SMS authentication in which, when the credit card payment is executed, an SMS (Short Message Service) notification containing a one-time password is sent to a user terminal device of the user who has been registered in advance, and the user terminal device is used to receive input of the one-time password. The information processing device according to claim 2 .

4. an acquisition unit that acquires credit card payment information transmitted in response to a credit card payment made by a user at a credit card affiliated store using a credit card, the credit card payment information being approved by a predetermined fraud determination function; a determination unit that determines whether or not there is a possibility of fraud in the credit card payment after a predetermined period from the acquisition of the credit card payment information, and an authentication unit that performs identity authentication for the credit card payment when the determination unit determines that there is a possibility of fraud in the credit card payment, the authentication unit changes the method of the personal authentication depending on the degree of the possibility of the fraud judged by the judgment unit. Information processing device.

5. an acquisition unit that acquires credit card payment information transmitted in response to a credit card payment made by a user at a credit card affiliated store using a credit card, the credit card payment information being information indicating that the credit card payment has been permitted based on current day information regarding the credit card payment using a predetermined fraud determination function; and a determination unit that determines whether or not there is a possibility of fraud in the credit payment based on information on the credit payment for a longer period including before the day of the credit payment, after a predetermined period from the acquisition of the credit payment information. Information processing device.

6. The computer acquiring credit card payment information transmitted in response to a credit card payment made by a user at a credit card affiliated store using the credit card, the credit card payment information being approved by a predetermined fraud determination function; determining whether or not there is a possibility of fraud in the credit card payment after a predetermined period from the acquisition of the credit card payment information; The credit card payment information includes a payment amount, a payment time, and information regarding an affiliated store of the credit card payment, The predetermined fraud determination function determines whether or not to permit the credit card payment based on the credit card payment information, determining whether or not there is a possibility of fraud in the credit card payment based on the credit card payment history and the user's attribute information in addition to the credit card payment information; Information processing methods.

7. On the computer, acquiring credit card payment information transmitted in response to a credit card payment made by a user at a credit card affiliated store using the credit card, the credit card payment information being approved by a predetermined fraud determination function; determining whether or not there is a possibility of fraud in the credit card payment after a predetermined period from the acquisition of the credit card payment information; The credit card payment information includes a payment amount, a payment time, and information regarding an affiliated store of the credit card payment, The predetermined fraud determination function determines whether or not to permit the credit card payment based on the credit card payment information, determining whether or not there is a possibility of fraud in the credit card payment based on the credit card payment history and the user attribute information in addition to the credit card payment information; program.

8. an authentication server that uses a predetermined fraud determination function to determine whether or not to permit credit card payment information transmitted in response to a credit card payment made by a user at a credit card affiliated store using the credit card; and an information processing device that acquires credit card payment information for which the credit card payment has been permitted, and determines whether or not there is a possibility of fraud in the credit card payment after a predetermined period of time has elapsed since the acquisition of the credit card payment information, The credit card payment information includes a payment amount, a payment time, and information regarding an affiliated store of the credit card payment, The predetermined fraud determination function determines whether or not to permit the credit card payment based on the credit card payment information, the information processing device determines whether or not there is a possibility of fraud in the credit card payment based on the credit card payment history and the user attribute information in addition to the credit card payment information; system.

9. The computer acquiring credit card payment information transmitted in response to a credit card payment made by a user at a credit card affiliated store using the credit card, the credit card payment information being approved by a predetermined fraud determination function; determining whether or not there is a possibility of fraud in the credit card payment after a predetermined period from the acquisition of the credit card payment information; The predetermined fraud determination function further includes a function for authenticating the user, For a credit card payment for which the identity authentication function was not performed, determining whether or not there is a possibility of fraud in the credit card payment. Information processing methods.

10. On the computer, acquiring credit card payment information transmitted in response to a credit card payment made by a user at a credit card affiliated store using the credit card, the credit card payment information being approved by a predetermined fraud determination function; determining whether or not there is a possibility of fraud in the credit card payment after a predetermined period from the acquisition of the credit card payment information; The predetermined fraud determination function further includes a function for authenticating the user, For a credit card payment for which the identity authentication function was not performed, a determination is made as to whether or not there is a possibility of fraud in the credit card payment. program.

11. an authentication server that uses a predetermined fraud determination function to determine whether or not to permit credit card payment information transmitted in response to a credit card payment made by a user at a credit card affiliated store using the credit card; and an information processing device that acquires credit card payment information for which the credit card payment has been permitted, and determines whether or not there is a possibility of fraud in the credit card payment after a predetermined period of time has elapsed since the acquisition of the credit card payment information, The predetermined fraud determination function further includes a function for authenticating the user, The information processing device determines whether or not there is a possibility of fraud in a credit card payment for which the personal authentication function has not been executed. system.

12. The computer acquiring credit card payment information transmitted in response to a credit card payment made by a user at a credit card affiliated store using the credit card, the credit card payment information being approved by a predetermined fraud determination function; determining whether or not there is a possibility of fraud in the credit card payment after a predetermined period from the acquisition of the credit card payment information; If it is determined that there is a possibility of fraud in the credit card transaction, an identity verification is performed regarding the credit card transaction; changing the method of identity authentication according to the determined likelihood of fraud; Information processing methods.

13. On the computer, acquiring credit card payment information transmitted in response to a credit card payment made by a user at a credit card affiliated store using the credit card, the credit card payment information being approved by a predetermined fraud determination function; determining whether or not there is a possibility of fraud in the credit card payment after a predetermined period from the acquisition of the credit card payment information; If it is determined that there is a possibility of fraud in the credit card transaction, an identity verification is performed regarding the credit card transaction; changing the method of identity authentication according to the determined likelihood of fraud; program.

14. an authentication server that uses a predetermined fraud determination function to determine whether or not to permit credit card payment information transmitted in response to a credit card payment made by a user at a credit card affiliated store using the credit card; and an information processing device that acquires credit card payment information for which the credit card payment has been permitted, and determines whether or not there is a possibility of fraud in the credit card payment after a predetermined period of time has elapsed since the acquisition of the credit card payment information, when it is determined that there is a possibility of fraud in the credit card payment, the information processing device performs personal authentication regarding the credit card payment, and changes the method of the personal authentication according to the degree of the determined possibility of fraud. system.

15. The computer The credit card payment information is transmitted in response to a credit card payment made by a user at a credit card affiliated store using a credit card, and the credit card payment information is obtained by a predetermined fraud determination function based on current day information regarding the credit card payment, and the credit card payment information indicates that the credit card payment has been permitted; After a predetermined period from the acquisition of the credit card payment information, a determination is made as to whether or not there is a possibility of fraud in the credit card payment based on information regarding the credit card payment for a longer period including the day before the credit card payment. Information processing methods.

16. On the computer, The credit card payment information is transmitted in response to a credit card payment being made by a user at a credit card affiliated store using a credit card, and the credit card payment information is obtained based on current day information regarding the credit card payment by a predetermined fraud determination function, and the credit card payment information is obtained based on current day information regarding the credit card payment. determining whether or not there is a possibility of fraud in the credit card payment based on information on the credit card payment for a longer period including the day before the credit card payment, after a predetermined period from the acquisition of the credit card payment information; program.

17. an authentication server that uses a predetermined fraud determination function to determine whether or not to permit a credit card payment based on current day information regarding the credit card payment, in response to credit card payment information transmitted in response to a credit card payment being made by a user at a credit card affiliated store using the credit card; and an information processing device that acquires credit card payment information for which the credit card payment has been permitted, and determines whether or not there is a possibility of fraud in the credit card payment based on information on the credit card payment for a longer period including before the day of the credit card payment, after a predetermined period from the acquisition of the credit card payment information. system.

Images