Information processing device and method

Abstract

When a payment request from a user matches the conditions for prohibiting the payment process, the payment process is permitted or prohibited after verifying the identity of the user. [Solution] When a payment request is made from a user's terminal via a communication network, for which payment processing is prohibited, the system includes a confirmation unit 36 ​​that confirms the user's identity using a first method that uses line authentication using a line subscribed to by the user and authentication information registered for the user, and an approval unit 33 that allows payment processing for the user when the user's identity is confirmed by the confirmation unit 36.

Description

[Technical field]

[0001] The present invention relates to a technique for verifying the identity of a user who uses a payment service. [Background technology]

[0002] As user terminals such as smartphones become more widespread, payment services that use the user terminals to make electronic payments are becoming more widely used. This type of service requires user identity verification, and for example, Patent Document 1 describes that when a payment device on the store side accepts a payment request, it outputs multiple measures, such as suspending the transaction for a certain period of time until identity verification is possible, based on the user's attribute information. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Patent No. 7000503 Summary of the Invention [Problem to be solved by the invention]

[0004] The present invention has an object to permit or prohibit the payment process after verifying the identity of the user when a payment request from a user matches conditions for prohibiting the payment process. [Means for solving the problem]

[0005] In order to solve the above problems, the present invention provides a determination unit that, when a payment request is made by a user via a communication network, determines whether or not the payment request matches a payment prohibition condition that prohibits a predetermined payment process; The above It is determined that the payment request meets the payment prohibition condition. a first method using line authentication using a line subscribed to by the user and authentication information registered for the user in the case where the user is not authorized to use the service; and using a second method of verifying the identity of the user via a communication network using data read from an IC chip held by the user, The identity of the said user Check The present invention provides an information processing device comprising: a confirmation unit; and an authorization unit that authorizes a payment process for the user when the identity of the user is confirmed by the confirmation unit. The present invention also provides an information processing device comprising: a determination unit which, when a user makes a payment request via a communication network, determines whether the payment request meets a payment prohibition condition that prohibits predetermined payment processing; a confirmation unit which, when it is determined that the payment request meets the payment prohibition condition, confirms the identity of the user using a first method that uses line authentication using a line subscribed to by the user and authentication information registered for the user, and a third method that confirms the identity of the user using a public personal authentication service; and an allowance unit which allows payment processing for the user when the identity of the user is confirmed by the confirmation unit. The present invention also provides an information processing device comprising: a determination unit which, when a user makes a payment request via a communication network, determines whether the payment request meets a payment prohibition condition that prohibits predetermined payment processing; an acquisition unit which acquires information regarding a risk assessment for the user; a confirmation unit which, when it is determined that the payment request meets the payment prohibition condition and the payment request meets a condition corresponding to the risk assessment specified by the acquired information, confirms the identity of the user using a first method that uses line authentication using a line contracted by the user and authentication information registered for the user; and an allowance unit which allows payment processing for the user when the identity of the user is confirmed by the confirmation unit. The present invention also provides an information processing device comprising: a determination unit which, when a user makes a payment request via a communication network, determines whether the payment request meets a payment prohibition condition that prohibits predetermined payment processing; an acquisition unit which acquires information regarding a risk assessment for the user; and, when it is determined that the payment request meets the payment prohibition condition and the payment request meets a condition corresponding to the risk assessment specified by the acquired information, a confirmation unit which verifies the identity of the user by a method corresponding to the risk assessment specified by the acquired information using line authentication using a line contracted by the user and a first method using authentication information registered for the user; and, when the identity of the user is confirmed by the confirmation unit, an allowance unit which allows payment processing for the user. The present invention also provides an information processing device comprising: a determination unit which, when a payment request is made by a user via a communication network, determines whether the payment request matches a predetermined payment prohibition condition that prohibits payment processing; an acquisition unit which acquires information regarding a risk assessment for the user; a confirmation unit which, when it is determined that the payment request matches the payment prohibition condition and the payment request matches a condition corresponding to the risk assessment specified by the acquired information, confirms the identity of the user using a first method that uses line authentication using a line contracted by the user and authentication information registered for the user; and an allowance unit which allows payment processing for the user when the identity of the user is confirmed by the confirmation unit, wherein the confirmation unit does not perform the confirmation when the determination unit determines that the payment request of the user again matches the condition for prohibiting payment processing when the determination unit has previously confirmed the identity of the user by having the payment request of the user match the payment prohibition condition. The present invention also provides an information processing method comprising: a determination step in which, when a user makes a payment request via a communications network, a computer determines whether the payment request meets a payment prohibition condition that prohibits predetermined payment processing; a confirmation step in which, when the computer determines that the payment request meets the payment prohibition condition, the computer confirms the identity of the user using a first method that uses line authentication using a line subscribed to by the user and authentication information registered for the user, and a second method that confirms the identity via the communications network using data read from an IC chip held by the user; and an allowance step in which, when the identity of the user is confirmed in the confirmation step, the computer allows payment processing for the user. The present invention also provides an information processing method comprising: a determination step in which, when a user makes a payment request via a communication network, a computer determines whether the payment request meets a payment prohibition condition that prohibits predetermined payment processing; a confirmation step in which, when the computer determines that the payment request meets the payment prohibition condition, the computer confirms the identity of the user using a first method that uses line authentication using a line subscribed to by the user and authentication information registered for the user, and a third method that confirms the identity of the user using a public personal authentication service; and an allowance step in which, when the identity of the user is confirmed in the confirmation step, the computer allows payment processing for the user. The present invention also provides an information processing method comprising: a determination step in which, when a user's payment request is made via a communication network, a computer determines whether the payment request meets a payment prohibition condition that prohibits predetermined payment processing; an acquisition step in which the computer acquires information regarding a risk assessment for the user; a confirmation step in which, when the computer determines that the payment request meets the payment prohibition condition and the payment request meets a condition corresponding to the risk assessment specified by the acquired information, the computer confirms the identity of the user using a first method that uses line authentication using a line contracted by the user and authentication information registered for the user; and an allowance step in which, when the identity of the user is confirmed in the confirmation step, the computer allows payment processing for the user. The present invention also provides an information processing method comprising: a determination step in which, when a user's payment request is made via a communication network, a computer determines whether the payment request meets a payment prohibition condition that prohibits predetermined payment processing; an acquisition step in which the computer acquires information regarding a risk assessment for the user; a confirmation step in which, when the computer determines that the payment request meets the payment prohibition condition and the payment request meets a condition corresponding to the risk assessment specified by the acquired information, the computer confirms the identity of the user by a method corresponding to the risk assessment specified by the acquired information using line authentication using a line contracted by the user and a first method using authentication information registered for the user; and an allowance step in which, when the identity of the user is confirmed in the confirmation step, the computer allows payment processing for the user. The present invention also provides an information processing method comprising: a determination step in which, when a payment request is made by a user via a communication network, a computer determines whether the payment request matches a payment prohibition condition that prohibits a predetermined payment process; an acquisition step in which the computer acquires information related to a risk assessment of the user; and a confirmation step in which, when it is determined that the payment request matches the payment prohibition condition and the payment request matches a condition corresponding to the risk assessment specified by the acquired information, the computer confirms the identity of the user by using a first method that uses line authentication using a line contracted by the user and authentication information registered for the user, wherein, when the payment request of the user previously matched the payment prohibition condition and the identity of the user was confirmed in the determination step, the confirmation step is not performed when it is determined in the determination step that the payment request of the user again matches the condition that prohibits payment processing; and an allowance step in which the computer allows the payment process for the user if the identity of the user is confirmed in the confirmation step. Effect of the Invention

[0006] According to the present invention, when a payment request from a user matches the conditions for prohibiting the payment process, the payment process can be permitted or prohibited after verifying the identity of the user. [Brief description of the drawings]

[0007] [Figure 1] 1 is a diagram showing an example of a configuration of an information processing system 1 according to a first embodiment of the present invention. [Diagram 2] 2 is a diagram illustrating an example of a hardware configuration of a server device 30 according to the first embodiment. [Diagram 3] 2 is a diagram illustrating an example of a hardware configuration of a user terminal 10 according to the first embodiment. [Figure 4] FIG. 2 is a diagram illustrating an example of a functional configuration of a server device 30 according to the first embodiment. [Diagram 5] 4 is a diagram illustrating an example of authentication information stored in the server device 30 according to the first embodiment. FIG. [Figure 6] 3 is a diagram illustrating a payment history stored by the server device 30 according to the first embodiment. FIG. [Figure 7] FIG. 11 is a sequence diagram showing an example of an operation by the information processing system 1 in the first embodiment when a payment request from a user does not meet a condition for prohibiting the payment process. [Figure 8] FIG. 11 is a sequence diagram showing an example of an operation of the information processing system 1 when a payment request from a user matches a condition for prohibiting the payment process in the first embodiment. [Figure 9] FIG. 11 is a diagram showing an example of a configuration of an information processing system 1a according to a second embodiment of the present invention. [Figure 10] FIG. 11 is a sequence diagram showing an example of an operation of the information processing system 1a in the second embodiment when a payment request from a user matches a condition for prohibiting payment processing. [Figure 11] FIG. 13 is a diagram illustrating an example of a functional configuration of a server device 30a according to a modified example. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0008] [First embodiment] [composition] FIG. 1 is a diagram showing an example of the configuration of an information processing system 1 according to a first embodiment of the present invention. The information processing system 1 is a system for electronically performing payment in a commercial transaction in which a user purchases a product or service by paying a price at a store or the like. In this embodiment, it is assumed that a payment service called a barcode payment is used, in which the user terminal 10 in FIG. 1 displays a barcode and the store terminal 20 in FIG. 1 reads it to start the payment service. In addition, in this embodiment, it is assumed that a payment service called a communication fee combined payment is used, in which a communication carrier that provides a communication service to the user terminal 10 in FIG. 1 collects from the user the communication fee collected from the user as a price for the communication service, as well as the price of the product or service at the store or the like. However, the types of payment services used in the present invention are not limited to these examples.

[0009] As shown in FIG. 1, the information processing system 1 includes a user terminal 10 used by a user, a store terminal 20 installed in a store or the like, a server device 30 corresponding to the information processing device of the present invention, and a communication network 2 including a wireless communication network or a wired communication network that communicatively connects them. The user terminal 10, the store terminal 20, and the server device 30 are all computers capable of communication. More specifically, the user terminal 10 is a computer that can be carried by a user, such as a smartphone, a wearable terminal, or a tablet. The store terminal 20 is a terminal operated in a store, and may be, for example, a computer integrated with a POS (Point of Sales) register or a computer connected to a POS register, or may be a computer called a payment terminal. The server device 30 may be composed of a single computer or may be composed of multiple computers. Although FIG. 1 shows one user terminal, one store terminal, and one server device, each of these may be multiple.

[0010] FIG. 2 is a diagram showing a hardware configuration of the server device 30. The server device 30 is physically configured as a computer including a processor 3001, a memory 3002, a storage 3003, a communication device 3004, an input device 3005, an output device 3006, and a bus connecting these devices. Each of these devices operates with power supplied from a battery (not shown). In the following description, the word "device" can be read as a circuit, a device, a unit, and the like. The hardware configuration of the server device 30 may be configured to include one or more of the devices shown in FIG. 2, or may be configured without including some of the devices. In addition, the server device 30 may be configured by communicating and connecting multiple devices each having a different housing.

[0011] Each function in the server device 30 is realized by loading a specific software (program) onto hardware such as a processor 3001 and a memory 3002, so that the processor 3001 performs calculations, controls communications via a communication device 3004, and controls at least one of reading and writing of data in the memory 3002 and the storage 3003.

[0012] The processor 3001, for example, operates an operating system to control the entire computer. The processor 3001 may be configured with a central processing unit (CPU) including an interface with peripheral devices, a control device, an arithmetic unit, a register, etc. Also, for example, a baseband signal processing unit, a call processing unit, etc. may be realized by the processor 3001.

[0013] The processor 3001 reads out programs (program codes), software modules, data, etc. from at least one of the storage 3003 and the communication device 3004 into the memory 3002, and executes various processes according to the programs. The programs used are those that cause a computer to execute at least a part of the operations described below. The functional blocks of the server device 30 may be realized by a control program stored in the memory 3002 and running on the processor 3001. The various processes may be executed by one processor 3001, or may be executed simultaneously or sequentially by two or more processors 3001. The processor 3001 may be implemented by one or more chips. The programs may be transmitted to the server device 30 via a telecommunications line.

[0014] The memory 3002 is a computer-readable recording medium, and may be composed of at least one of, for example, a Read Only Memory (ROM), an Erasable Programmable ROM (EPROM), an Electrically Erasable Programmable ROM (EEPROM), a Random Access Memory (RAM), etc. The memory 3002 may also be called a register, a cache, a main memory (primary storage device), etc. The memory 3002 can store a program (program code), a software module, etc. that can be executed to implement the method according to this embodiment.

[0015] Storage 3003 is a computer-readable recording medium, and may be constituted by at least one of, for example, an optical disk such as a CD-ROM (Compact Disc ROM), a hard disk drive, a flexible disk, a magneto-optical disk (e.g., a compact disk, a digital versatile disk, a Blu-ray (registered trademark) disk), a smart card, a flash memory (e.g., a card, a stick, a key drive), a floppy (registered trademark) disk, a magnetic strip, etc. Storage 3003 may be referred to as an auxiliary storage device.

[0016] The communication device 3004 is hardware (transmission / reception device) for performing communication between computers via at least one of a wired network and a wireless network, and is also called, for example, a network device, a network controller, a network card, or a communication module. Each device, such as the processor 3001 and the memory 3002, is connected by a bus for communicating information. The bus may be configured using a single bus, or may be configured using different buses between each device.

[0017] The server device 30 may be configured to include hardware such as a microprocessor, a digital signal processor (DSP), an application specific integrated circuit (ASIC), a programmable logic device (PLD), a field programmable gate array (FPGA), etc., and some or all of the functional blocks may be realized by the hardware. For example, the processor 3001 may be implemented using at least one of these pieces of hardware.

[0018] 3 is a diagram showing an example of the hardware configuration of the user terminal 10. The user terminal 10 is a computer such as a smartphone, a mobile phone, a tablet, or a wearable terminal. The user terminal 10 is physically configured as a computer device including a processor 1001, a memory 1002, a storage 1003, a communication device 1004, an input device 1005, an output device 1006, and a bus connecting these devices. The processor 1001, the memory 1002, and the storage 1003 are the same hardware as the processor 3001, the memory 3002, and the storage 3003 of the server device 30.

[0019] The communication device 1004 may be configured to include a high-frequency switch, a duplexer, a filter, a frequency synthesizer, and the like to realize, for example, at least one of Frequency Division Duplex (FDD) and Time Division Duplex (TDD). For example, a transmitting / receiving antenna, an amplifier unit, a transmitting / receiving unit, a transmission line interface, and the like may be realized by the communication device 1004. The transmitting / receiving unit may be implemented as a transmitting unit and a receiving unit that are physically or logically separated from each other.

[0020] The input device 1005 is an input device (e.g., a key, a microphone, a switch, a button, a sensor, etc.) that accepts input from the outside. The output device 1006 is an output device (e.g., a display, a speaker, an LED lamp, etc.) that performs output to the outside. Note that the input device 1005 and the output device 1006 may be integrated into one device (e.g., a touch screen).

[0021] 4 is a block diagram showing the functional configuration of server device 30. In server device 30, processor 3001 reads out a program or the like from storage 3003 to memory 3002 and executes it to realize functions of payment request acquisition unit 31, payment permission determination unit 32, payment processing unit 33, payment suspension notification unit 34, confirmation unit 35, and permission unit 36.

[0022] The payment request acquisition unit 31 acquires a payment request from the store terminal 20 or the user terminal 10 via the communication network 2. This payment request includes the payment amount as well as information for identifying the store terminal 20 and the user terminal 10, respectively.

[0023] The payment possibility determination unit 32 determines whether or not a payment request acquired by the payment request acquisition unit 31 satisfies a payment prohibition condition that prohibits a predetermined payment process. The payment prohibition condition is arbitrarily determined by a payment service provider (here, a telecommunications carrier), and may be, for example, that the payment amount is y yen or more within x days from the opening of the account used for the payment, or that the number of payments is z or more. The payment prohibition condition is stored by the payment possibility determination unit 32. In order to determine whether or not a payment request satisfies a payment prohibition condition, the payment possibility determination unit 32 also stores a payment history in association with a user ID that identifies a user, as shown in FIG. 6.

[0024] The payment processing unit 33 performs a process of collecting the payment amount from the user in accordance with a predetermined rule, that is, a payment process. If the payment permission determination unit 32 determines that the payment request does not match the payment prohibition condition, that is, that the payment is permitted, the payment processing unit 33 immediately performs a payment process according to the payment request acquired by the payment request acquisition unit 31.

[0025] When the payment feasibility determination unit 32 determines that the payment request meets the payment prohibition conditions, i.e., that the payment is not permitted, the payment stop notification unit 34 notifies the store terminal 20 or the user terminal 10 via the communication network 2 that the payment is not permitted.

[0026] When the payment request is judged by the payment possibility judgment unit 32 to match the payment prohibition condition, that is, to be unacceptable, the confirmation unit 35 performs confirmation of the identity of the user using an identity confirmation method (hereinafter referred to as a first method) using line authentication using a line contracted by the user and user authentication using a password registered for the user before performing a payment process related to the payment request. The line authentication here is an authentication process in which a line number assigned to the user terminal 10 is confirmed in the communication network 2 to confirm that the user terminal 10 is a terminal of a user who has contracted with a communication carrier for a communication service. The user authentication using a password is an authentication process in which the identity of the user is confirmed by checking whether or not a password registered for the user matches a password entered by the user into the user terminal 10. Note that the information referred to as a password here may be any information equivalent to authentication information that can only be known by the user who has registered the user. For this reason, the confirmation unit 35 stores the line number assigned to the user terminal 10 in the contract for the communication service and the password registered for the user who uses the user terminal 10 in association with each other, as exemplified in FIG. 5. This verifies that the user terminal 10 is the terminal of a user who has a contract for communications services with the communications carrier, and that the user knows the password registered for that user.

[0027] The permission unit 36 ​​allows the payment process for the user when the identity of the user is confirmed by the confirmation unit 35. When the payment process is allowed by the permission unit 36, the payment processing unit 33 performs the payment process according to the payment request acquired by the payment request acquisition unit 31.

[0028] As described above, in this embodiment, when a payment request from a user matches the conditions for prohibiting payment processing, the payment processing is permitted using the success of user identity verification as a trigger.

[0029] [Operation] Next, the operation of the information processing system 1 according to the first embodiment will be described with reference to Figs. 7 and 8. In the following description, for example, when the server device 30 is described as the subject of processing, this specifically means that the processor 3001 performs calculations by loading predetermined software (programs) onto hardware such as the processor 3001 and memory 3002, and controls communication by the communication device 3004 and reading and / or writing of data from the memory 3002 and storage 3003, thereby executing processing. The same applies to the user terminal 10.

[0030] [Action when payment request does not meet payment prohibition conditions] 7, the store terminal 20 or the user terminal 10 (here, the store terminal 20) transmits a payment request to the server device 30 via the communication network 2 (step S11). This payment request is acquired by the payment request acquisition unit 31 of the server device 30.

[0031] The payment permission determination unit 32 determines whether or not payment is permitted depending on whether or not the payment request acquired by the payment request acquisition unit 31 matches the payment prohibition condition (step S12).

[0032] If the payment permission determination unit 32 determines that the payment request does not match the payment prohibition condition, that is, that the payment is permitted, the payment processing unit 33 immediately performs payment processing according to the payment request acquired by the payment request acquisition unit 31 (step S13). Then, the payment processing unit 33 transmits a payment completion notification to the store terminal 20 and the user terminal 10 (steps S14, S15).

[0033] [Action when payment request meets payment prohibition conditions] 8, the store terminal 20 or the user terminal 10 (here, the store terminal 20) transmits a payment request to the server device 30 via the communication network 2 (step S11). This payment request is acquired by the payment request acquisition unit 31 of the server device 30.

[0034] The payment permission determination unit 32 determines whether or not payment is permitted depending on whether or not the payment request acquired by the payment request acquisition unit 31 matches the payment prohibition condition (step S12).

[0035] Here, if the payment feasibility determination unit 32 determines that the payment request meets the payment prohibition conditions, that is, that payment is not permitted, the payment stop notification unit 34 notifies the store terminal 20 or the user terminal 10 (here, the store terminal 20 and the user terminal 10) that payment is not permitted via the communication network 2 (steps S111, S112).

[0036] When the user confirms this notification of payment denial on the user terminal 10, the user performs an operation to request identity verification using line authentication using the line subscribed by the user and user authentication using the password registered for the user. Specifically, in response to the above notification, the user terminal 10 displays soft buttons to be selected when requesting identity verification and a text box for inputting a password, and the user performs an operation to enter a password according to the display and select a soft button. In response to this operation, the user terminal 10 transmits an identity verification request including the input password to the server device 30 via the communication network 2 (step S113).

[0037] The confirmation unit 35 confirms the identity of the user by using the first method using the above-mentioned line authentication and user authentication by password (step S114). That is, when a payment request is made by a user who is prohibited from making a payment via the communication network 2, the confirmation unit 35 confirms the identity of the user by using the first method using line authentication using the line subscribed by the user and the password (authentication information) registered for the user.

[0038] When the identity of the user is confirmed by the confirmation unit 35, the permission unit 36 ​​allows the payment process for that user (step S115). When the payment process is allowed by the permission unit 36, the payment processing unit 33 performs payment processing according to the payment request acquired by the payment request acquisition unit 31 (step S116). Thereafter, similar to FIG. 7, the payment processing unit 33 transmits a payment completion notification to the store terminal 20 and the user terminal 10 (not shown).

[0039] If the verification unit 35 cannot verify the identity of the user using the first method, the permission unit 36 ​​will not permit the payment process, and the payment process by the payment processing unit 33 will not be performed.

[0040] According to the first embodiment described above, when a payment request from a user matches the conditions for prohibiting the payment process, the payment process can be permitted or prohibited after verifying the identity of the user.

[0041] [Second embodiment] In the first embodiment, the identity of the user is confirmed by using the first method using line authentication and user authentication by password. In the second embodiment described below, in addition to the first method, the identity of the user is confirmed by using a method that mainly confirms the existence of the user, specifically, a second method that confirms the identity via a network using data read from an IC chip held by the user, or a third method that confirms the identity by using a public personal authentication service. Confirmation of the existence of the user means confirmation of whether the user actually exists, whether the information and attributes applied by the user are correct, or whether the information and attributes are related to the user.

[0042] More specifically, the second method includes eKYC (electronic Know Your Customer). eKYC includes a method (e) in which a user takes a picture of his / her face and a face image included in a personal identification document and uploads them, and a method (f) in which a user takes a picture of his / her face and reads an IC chip included in a driver's license or the like with a user terminal to verify the user's identity. The second embodiment uses the method (f).

[0043] The third method includes JPKI (Japanese Public Key Infrastructure), which is a method of identity verification used to prevent impersonation or data tampering by others in online procedures by using a "signature electronic certificate" or a "user authentication electronic certificate" recorded on the IC chip of the My Number card.

[0044] [composition] As shown in FIG. 9, the information processing system 1a according to the second embodiment includes a user terminal 10 used by a user, a store terminal 20 installed in a store or the like, and a server device 30 corresponding to the information processing device of the present invention, as well as an IC chip 40 embedded in a driver's license or My Number card held by the user, an online authentication system 50 that uses data read from the IC chip to verify the identity of the user via a communication network 2, and a public personal authentication system 60 that uses a public personal authentication service to verify the identity of the user.

[0045] [Operation] Next, an operation of the information processing system 1a according to the second embodiment will be described. The operation when the payment request does not match the payment prohibition condition is the same as in the first embodiment, and therefore the description will be omitted.

[0046] [Action when payment request meets payment prohibition conditions] 10, the store terminal 20 or the user terminal 10 (here, the store terminal 20) transmits a payment request to the server device 30 via the communication network 2 (step S11). This payment request is acquired by the payment request acquisition unit 31 of the server device 30.

[0047] The payment permission determination unit 32 determines whether or not payment is permitted depending on whether or not the payment request acquired by the payment request acquisition unit 31 matches the payment prohibition condition (step S12).

[0048] Here, if the payment feasibility determination unit 32 determines that the payment request meets the payment prohibition conditions, that is, that payment is not permitted, the payment stop notification unit 34 notifies the store terminal 20 or the user terminal 10 (here, the store terminal 20 and the user terminal 10) that payment is not permitted via the communication network 2 (steps S111, S112).

[0049] When the user confirms this notification of payment denial on the user terminal 10, the user performs an operation to request identity verification using line authentication using the line subscribed by the user and user authentication using the password registered for the user. Specifically, in response to the above notification, the user terminal 10 displays soft buttons to be selected when requesting identity verification and a text box for inputting a password, and the user performs an operation to enter a password according to the display and select a soft button. In response to this operation, the user terminal 10 transmits an identity verification request including the input password to the server device 30 via the communication network 2 (step S113).

[0050] The verification unit 35 verifies the identity of the user by using the first method using the line authentication and the user authentication by password described above (step S114).

[0051] Furthermore, the confirmation unit 35 uses the above-mentioned second method or third method in cooperation with the online authentication system 50 or the public personal authentication system 60 (step S118) to confirm the identity of the user (step S119). When using the second method in cooperation with the online authentication system 50, the user takes a picture of his / her face with the user terminal 10, and further reads the IC chip 40 in the driver's license or the like with the user terminal 10 and uploads it to the online authentication system 50, etc., to perform authentication. When using the third method in cooperation with the public personal authentication system 60, the user reads the electronic certificate recorded in the IC chip 40 of the My Number card with the user terminal 10 and uploads it to the public personal authentication system 60, etc., to perform authentication.

[0052] When the identity of the user is confirmed by the confirmation unit 35 using the first method and the second or third method, the permission unit 36 ​​allows the payment process for that user (step S120). When the payment process is allowed by the permission unit 36, the payment processing unit 33 performs payment processing according to the payment request acquired by the payment request acquisition unit 31 (step S121). Thereafter, similar to FIG. 7, the payment processing unit 33 transmits a payment completion notification to the store terminal 20 and the user terminal 10 (not shown).

[0053] In addition, if the confirmation unit 35 is unable to confirm the user's identity using the first method, the second method or the third method, the approval unit 36 ​​will not approve the payment process, and the payment process will not be performed by the payment processing unit 33.

[0054] According to the second embodiment described above, when a payment request from a user matches the conditions for prohibiting payment processing, the user's identity is verified and then the payment processing can be permitted or prohibited. In the first embodiment, there is a risk of fraudulent activity if a third party uses, for example, proxy malware that spoofs line authentication or if the user terminal 10 is stolen, but according to the second embodiment, this risk can be reduced.

[0055] [Variations] The present invention is not limited to the above-described embodiment. The above-described embodiment may be modified as follows. In addition, two or more of the following modifications may be combined and implemented.

[0056] [Variation 1] A fourth method including identity verification using a call may be further used. Specifically, in Figs. 6, 7, and 10, the operator who has received a notice of failure of payment from the server device 30 at the operator terminal makes a call to the user terminal 10, and confirms the identity by asking a predetermined question or confirmation, and inputs the confirmation to the operator terminal. The confirmation unit 35 confirms the identity of the user in response to this input. When the identity of the user is confirmed by the confirmation unit 35, the permission unit 36 ​​permits the payment process for the user (step S120). In this way, the confirmation unit 35 may confirm the identity of the user using the fourth method of confirming the identity based on the result of making a call to the user terminal 10. By doing so, the accuracy of identity confirmation is further improved.

[0057] [Variation 2] The payment prohibition conditions may be changed according to the credit risk assessment of the user. For example, when the credit risk is high, the payment prohibition conditions may be tightened (making it easier to meet the payment prohibition conditions), and when the credit risk is low, the payment prohibition conditions may be relaxed (making it harder to meet the payment prohibition conditions). In this case, as illustrated in FIG. 11, the server device 30a includes a risk assessment acquisition unit 37 that acquires information on the risk assessment of the user. The confirmation unit 35 stores a plurality of payment prohibition conditions according to the level of the risk assessment of the user, and when a payment request of the user is acquired, the confirmation unit 35 confirms the identity of the user based on the information acquired by the risk assessment acquisition unit 37 if the conditions according to the risk assessment of the user are met. In this way, an appropriate payment prohibition condition according to the credit risk assessment of the user can be used.

[0058] [Variation 3] The identity of the user may be confirmed by an appropriate method according to the risk assessment of the user. For example, when the credit risk is low, the identity may be confirmed by the first method, and when the credit risk is high, the identity may be confirmed by the first method, the second method, or the third method. In this case, as illustrated in FIG. 11, the server device 30a includes a risk assessment acquisition unit 37 that acquires information on the risk assessment of the user. The confirmation unit 35 stores the identity confirmation method to be performed according to the level of the risk assessment of the user, and when a payment request of the user is acquired, the identity of the user is confirmed by a method according to the risk assessment of the user based on the information acquired by the risk assessment acquisition unit 37. In this way, the identity of the user can be confirmed by an appropriate method according to the credit risk assessment of the user.

[0059] [Variation 4] In the past, if a payment request from a user terminal 10 of a certain user met the payment prohibition conditions and the identity of the user was confirmed, the confirmation unit 35 may not confirm the identity of the user when a payment request from the user terminal 10 of the same user thereafter meets the payment prohibition conditions again. This makes it possible to avoid duplicate identity confirmation.

[0060] [Other variations] The block diagrams used to explain the above embodiments show functional blocks. These functional blocks (components) are realized by any combination of at least one of hardware and software. The method of realizing each functional block is not particularly limited. That is, each functional block may be realized by using one device that is physically or logically combined, or may be realized by using two or more devices that are physically or logically separated and directly or indirectly connected (for example, by wire, wirelessly, etc.). The functional blocks may be realized by combining the one device or the multiple devices with software.

[0061] Functions include, but are not limited to, judgment, determination, judgment, calculation, computation, processing, derivation, investigation, search, confirmation, reception, transmission, output, access, resolution, selection, selection, establishment, comparison, assumption, expectation, consideration, broadcasting, notifying, communicating, forwarding, configuring, reconfiguring, allocating, mapping, and assignment. For example, a functional block (component) that performs the function of transmission is called a transmitting unit or a transmitter. As described above, there is no particular limitation on the method of realization of either of these.

[0062] For example, the server device 30 in one embodiment of the present disclosure may function as a computer that performs the processing of the present disclosure.

[0063] Each aspect / embodiment described in the present disclosure may be applied to at least one of systems using LTE (Long Term Evolution), LTE-A (LTE-Advanced), SUPER 3G, IMT-Advanced, 4G (4th generation mobile communication system), 5G (5th generation mobile communication system), FRA (Future Radio Access), NR (new Radio), W-CDMA (registered trademark), GSM (registered trademark), CDMA2000, UMB (Ultra Mobile Broadband), IEEE 802.11 (Wi-Fi (registered trademark)), IEEE 802.16 (WiMAX (registered trademark)), IEEE 802.20, UWB (Ultra-WideBand), Bluetooth (registered trademark), and other suitable systems, and next-generation systems extended based on these. In addition, a combination of multiple systems (e.g., a combination of at least one of LTE and LTE-A and 5G, etc.) may be applied.

[0064] The order of the steps, sequences, flow charts, etc. of each aspect / embodiment described in this disclosure may be changed unless inconsistent. For example, the methods described in this disclosure present elements of various steps using an example order, and are not limited to the particular order presented.

[0065] The input and output information may be stored in a specific location (e.g., memory) or may be managed using a management table. The input and output information may be overwritten, updated, or added to. The output information may be deleted. The input information may be transmitted to another device.

[0066] The determination may be based on a value represented by a single bit (0 or 1), a Boolean value (true or false), or a numerical comparison (e.g., comparison with a predetermined value).

[0067] Although the present disclosure has been described in detail above, it is clear to those skilled in the art that the present disclosure is not limited to the embodiments described in the present disclosure. The present disclosure can be implemented in modified and altered forms without departing from the spirit and scope of the present disclosure as defined by the claims. Therefore, the description of the present disclosure is intended to be illustrative and does not have any limiting meaning on the present disclosure.

[0068] Software, whether referred to as software, firmware, middleware, microcode, hardware description language, or otherwise, should be construed broadly to mean instructions, instruction sets, code, code segments, program code, programs, subprograms, software modules, applications, software applications, software packages, routines, subroutines, objects, executable files, threads of execution, procedures, functions, etc. Also, software, instructions, information, etc. may be transmitted or received over a transmission medium. For example, if the software is transmitted from a website, server, or other remote source using wired technologies (such as coaxial cable, fiber optic cable, twisted pair, Digital Subscriber Line (DSL)), and / or wireless technologies (such as infrared, microwave, etc.), then such wired and / or wireless technologies are included within the definition of a transmission medium.

[0069] The information, signals, etc. described in this disclosure may be represented using any of a variety of different technologies. For example, the data, instructions, commands, information, signals, bits, symbols, chips, etc. that may be referred to throughout the above description may be represented by voltages, currents, electromagnetic waves, magnetic fields or magnetic particles, optical fields or photons, or any combination thereof. In addition, terms explained in this disclosure and terms necessary for understanding this disclosure may be replaced with terms having the same or similar meanings.

[0070] Furthermore, the information, parameters, etc. described in this disclosure may be expressed using absolute values, may be expressed using relative values ​​from a predetermined value, or may be expressed using other corresponding information.

[0071] As used in this disclosure, the phrase "based on" does not mean "based only on," unless expressly stated otherwise. In other words, the phrase "based on" means both "based only on" and "based at least on."

[0072] Any reference to an element using a designation such as "first," "second," etc., used in this disclosure does not generally limit the quantity or order of those elements. These designations may be used in this disclosure as a convenient method of distinguishing between two or more elements. Thus, a reference to a first and a second element does not imply that only two elements may be employed or that the first element must precede the second element in some way.

[0073] The "part" in the configuration of each of the above devices may be replaced with "means," "circuit," "device," etc.

[0074] When the terms "include," "including," and variations thereof are used in this disclosure, these terms are intended to be inclusive, similar to the term "comprising." Further, when used in this disclosure, the term "or" is not intended to be an exclusive or.

[0075] In this disclosure, where articles have been added due to translation, such as a, an, and the in English, the disclosure may include that the nouns following these articles are in the plural form.

[0076] In the present disclosure, the term "A and B are different" may mean "A and B are different from each other." The term may also mean "A and B are each different from C." Terms such as "separate" and "coupled" may also be interpreted in the same way as "different." [Explanation of symbols]

[0077] 1: information processing system, 2: communication network, 10: user terminal, 1001: processor, 1002: memory, 1003: storage, 1004: communication device, 1005: input device, 1006: output device, 20: store terminal, 30: server device, 3001: processor, 3002: memory, 3003: storage, 3004: communication device, 40: IC chip, 50: online authentication system, 60: public personal authentication system.

Claims

1. a determination unit that, when a payment request is made by a user via a communication network, determines whether or not the payment request matches a payment prohibition condition that prohibits a predetermined payment process; a confirmation unit that, when it is determined that the payment request matches the payment prohibition condition, confirms the identity of the user by using a first method that uses line authentication using a line subscribed to by the user and authentication information registered for the user, and a second method that confirms the identity via a communication network by using data read from an IC chip held by the user; an authorization unit that authorizes a payment process for the user when the identity of the user is confirmed by the confirmation unit; An information processing device comprising:

2. A determination unit that, when a payment request is made by a user via a communication network, determines whether or not the payment request matches a payment prohibition condition that prohibits a predetermined payment process; a verification unit that, when it is determined that the payment request matches the payment prohibition condition, verifies the identity of the user by using a first method that uses line authentication using a line subscribed to by the user and authentication information registered for the user, and a third method that verifies the identity by using a public personal authentication service; an authorization unit that authorizes a payment process for the user when the identity of the user is confirmed by the confirmation unit; An information processing device comprising:

3. The verification unit further verifies the identity of the user by using a fourth method for verifying the identity based on the result of a call made to the user's terminal.

3. The information processing apparatus according to claim 1, wherein the information processing apparatus is a computer.

4. A determination unit that, when a payment request is made by a user via a communication network, determines whether or not the payment request matches a payment prohibition condition that prohibits a predetermined payment process; an acquisition unit that acquires information regarding a risk assessment for the user; a verification unit that, when it is determined that the payment request meets the payment prohibition condition and the payment request meets the condition according to the risk assessment specified by the acquired information, verifies the identity of the user by using a first method that uses line authentication using a line subscribed to by the user and authentication information registered for the user; an authorization unit that authorizes a payment process for the user when the identity of the user is confirmed by the confirmation unit; An information processing device comprising:

5. A determination unit that, when a payment request is made by a user via a communication network, determines whether or not the payment request matches a payment prohibition condition that prohibits a predetermined payment process; an acquisition unit that acquires information regarding a risk assessment for the user; a verification unit that, when it is determined that the payment request meets the payment prohibition condition and the payment request meets the condition corresponding to the risk evaluation specified by the acquired information, verifies the identity of the user by a first method using line authentication using a line subscribed to by the user and authentication information registered for the user, in a manner corresponding to the risk evaluation specified by the acquired information; an authorization unit that authorizes a payment process for the user when the identity of the user is confirmed by the confirmation unit; An information processing device comprising:

6. A determination unit that, when a payment request is made by a user via a communication network, determines whether or not the payment request matches a payment prohibition condition that prohibits a predetermined payment process; an acquisition unit that acquires information regarding a risk assessment for the user; a verification unit that, when it is determined that the payment request meets the payment prohibition condition and the payment request meets the condition according to the risk assessment specified by the acquired information, verifies the identity of the user by using a first method that uses line authentication using a line subscribed to by the user and authentication information registered for the user; an authorization unit that authorizes a payment process for the user when the identity of the user is confirmed by the confirmation unit; Equipped with When the determination unit has previously confirmed the identity of the user by having the payment request of the user match the payment prohibition condition and the determination unit has determined that the payment request of the user again matches the condition for prohibiting payment processing, the confirmation unit does not perform the confirmation.

23. An information processing apparatus comprising:

7. A determination step in which, when a payment request is made by a user via a communication network, a computer determines whether or not the payment request matches a payment prohibition condition that prohibits a predetermined payment process; a confirmation step of confirming the identity of the user by the computer when it is determined that the payment request matches the payment prohibition condition, using a first method that uses line authentication using a line subscribed to by the user and authentication information registered for the user, and a second method that confirms the identity via a communication network using data read from an IC chip held by the user; an authorization step in which the computer authorizes a payment process for the user when the identity of the user is confirmed in the confirmation step; An information processing method comprising:

8. A determination step in which, when a payment request is made by a user via a communication network, a computer determines whether or not the payment request matches a payment prohibition condition that prohibits a predetermined payment process; a confirmation step of confirming the identity of the user by using a first method using line authentication using a line subscribed to by the user and authentication information registered for the user, and a third method of confirming the identity by using a public personal authentication service, when the computer determines that the payment request matches the payment prohibition condition; an authorization step in which the computer authorizes a payment process for the user when the identity of the user is confirmed in the confirmation step; An information processing method comprising:

9. A determination step in which, when a payment request is made by a user via a communication network, a computer determines whether or not the payment request matches a payment prohibition condition that prohibits a predetermined payment process; An acquisition step in which a computer acquires information regarding a risk assessment for the user; a confirmation step of confirming the identity of the user by using a first method using line authentication using a line subscribed to by the user and authentication information registered for the user when the computer determines that the payment request meets the payment prohibition condition and the payment request meets the condition according to the risk assessment specified by the acquired information; an authorization step in which the computer authorizes a payment process for the user when the identity of the user is confirmed in the confirmation step; An information processing method comprising:

10. A method for determining whether or not a payment request made by a user via a communication network is satisfied by a computer, the method comprising: a determination step of determining whether or not the payment request matches a payment prohibition condition that prohibits a payment process that has been determined in advance; An acquisition step in which a computer acquires information regarding a risk assessment for the user; a confirmation step of confirming the identity of the user by a method corresponding to the risk evaluation specified by the acquired information, using a first method that uses line authentication using a line subscribed to by the user and authentication information registered for the user, when the computer determines that the payment request meets the payment prohibition condition and meets the condition corresponding to the risk evaluation specified by the acquired information; an authorization step in which the computer authorizes a payment process for the user when the identity of the user is confirmed in the confirmation step; An information processing method comprising:

11. A determination step in which, when a payment request is made by a user via a communication network, a computer determines whether or not the payment request matches a payment prohibition condition that prohibits a predetermined payment process; An acquisition step in which a computer acquires information regarding a risk assessment for the user; a confirmation step of confirming the identity of the user by using a first method using line authentication using a line contracted by the user and authentication information registered for the user when the computer determines that the payment request matches the payment prohibition condition and the payment request matches a condition corresponding to the risk assessment specified by the acquired information, in which if the payment request of the user previously matched the payment prohibition condition and the identity of the user was confirmed in the determination step, the confirmation step is not performed when it is determined in the determination step that the payment request of the user again matches a condition for prohibiting payment processing; an authorization step in which the computer authorizes a payment process for the user when the identity of the user is confirmed in the confirmation step; An information processing method comprising:

Images