Information processing program, information processing device, information processing system, and information processing method

Abstract

To provide an authentication model for a user suitable to a settlement and remittance service using a certificate.SOLUTION: An authentication device (10) includes: an accepting unit which accepts a service request for requesting a service regarding a settlement and / or remittance using a certificate of a user; a verification unit which verifies authenticity of the user by using the certificate in response to the service request; a confirmation requesting unit which requests, from a second information processing device different from a first information processing device, a confirmation process for confirming the authenticity of the user; and a service processing unit which executes a process regarding the service with a first provider device for providing the service on the basis of a result of the verification using the certificate by the verification unit and a result of the confirmation process by the second information processing device in response to the request from the confirmation requesting unit.SELECTED DRAWING: Figure 5

Description

[Technical field]

[0001] The present invention relates to an information processing program, an information processing device, an information processing system, and an information processing method. [Background technology]

[0002] Conventionally, payments are made using an identifier (hereinafter referred to as a "user identifier") for identifying a user, such as a credit card number, a bank account number, a payment account, etc. For example, Patent Document 1 describes a method of making a payment using a code generated based on a part of a credit card number as a user identifier. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2016-6637 A Summary of the Invention [Problem to be solved by the invention]

[0004] However, there is a concern that conventional payment methods using user identifiers may not be able to ensure sufficient security. As the use of certificates (e.g., digital certificates and VCs (Verifiable Credentials)) as user identifiers expands in the future, a user authentication model suitable for payment and / or remittance services using such certificates (hereinafter referred to as "payment / remittance services") is desired.

[0005] The present disclosure has been made in consideration of the above-mentioned circumstances, and one of its objectives is to provide an information processing program, an information processing device, an information processing system, and an information processing method that can provide a user authentication model suitable for payment / remittance services using certificates. [Means for solving the problem]

[0006] An information processing program according to one embodiment of the present disclosure causes a computer as a first information processing device to function as: a reception unit that receives a service request requesting a service related to payment and / or remittance using a user's certificate; a verification unit that verifies the legitimacy of the user using the certificate in response to the service request; a confirmation request unit that requests a second information processing device to perform a confirmation process to confirm the legitimacy of the user; and a service processing unit that executes processing related to the service between the first business device providing the service and the first information processing device based on the result of the verification using the certificate by the verification unit and the result of the confirmation process by the second information processing device in response to a request from the confirmation request unit.

[0007] An information processing device according to another aspect of the present disclosure includes a reception unit that receives a service request requesting a service related to payment and / or remittance using a user's certificate, a verification unit that verifies the legitimacy of the user using the certificate in response to the service request, a confirmation request unit that requests another information processing device to perform a confirmation process to confirm the legitimacy of the user, and a service processing unit that executes processing related to the provision of the service between the first carrier device providing the service and the first carrier device providing the service based on the result of the verification using the certificate by the verification unit and the result of the confirmation process by the other information processing device in response to the request from the confirmation request unit.

[0008] An information processing system according to another aspect of the present disclosure is an information processing system including a first information processing device and a second information processing device, the first information processing device including: a reception unit that receives a service request for a service related to payment and / or remittance using a user's certificate; the second information processing device comprises: a verification unit that verifies the legitimacy of the user using the certificate in response to the service request; a confirmation request unit that requests the second information processing device to perform a confirmation process to verify the legitimacy of the user; and a service processing unit that executes processing related to the service between the first business device providing the service and the first information processing device based on a result of the verification using the certificate by the verification unit and a result of the confirmation process by the second information processing device in response to a request from the confirmation request unit, wherein the second information processing device comprises: an acquisition unit that acquires first user information about the user from the user's terminal and acquires second user information about the user from a second business device that manages the user; and a confirmation processing unit that executes the confirmation process based on the first user information and the second user information in response to a request from the confirmation request unit.

[0009] An information processing method of an information processing device according to another aspect of the present disclosure includes the steps of: accepting a service request requesting a service related to payment and / or remittance using a user's certificate; verifying the legitimacy of the user using the certificate in response to the service request; requesting another information processing device to perform a confirmation process to confirm the legitimacy of the user; and executing processing related to the service between the information processing device and a first carrier device providing the service based on the result of the verification using the certificate by the verification unit and the result of the confirmation process by the other information processing device in response to the request from the confirmation request unit. Effect of the Invention

[0010] According to one aspect of the present disclosure, it is possible to provide a user authentication model suitable for payment / remittance services using certificates. [Brief description of the drawings]

[0011] [Figure 1] 1 is a diagram showing a schematic configuration of a settlement / remittance system according to an embodiment of the present invention. [Diagram 2] FIG. 2 is a diagram showing an example of the hardware configuration of each device in the settlement / remittance system according to the present embodiment. [Diagram 3]FIG. 2 is a diagram illustrating an example of the functional configuration of the settlement / remittance system according to the present embodiment. [Figure 4] FIG. 11 is a diagram illustrating an example of a certificate issuing operation according to the embodiment. [Diagram 5] FIG. 11 is a diagram showing an example of the operation of providing a payment / remittance service according to the embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0012] Hereinafter, an information processing system according to an embodiment of the present invention will be described in detail with reference to the drawings. In the following description of the drawings, the same or similar parts are denoted by the same or similar reference numerals.

[0013] (overview) An overview of an information processing system (hereinafter, referred to as a "payment / remittance system") that provides a payment / remittance service according to this embodiment will be described with reference to Fig. 1. Fig. 1 is a diagram showing an overview of the payment / remittance system according to this embodiment.

[0014] As shown in Fig. 1, the payment / remittance system 1 includes an information processing device (hereinafter referred to as "authentication device") 10 that performs authentication processing of a user, an information processing device (hereinafter referred to as "user verification device") 20 that verifies the legitimacy of the user separately from the authentication processing, a terminal used by the user (hereinafter referred to as "user terminal") 30, a terminal for payment / remittance services (hereinafter referred to as "payment / remittance terminal") 40, an information processing device (hereinafter referred to as "first business device") 50 of a first business that provides payment / remittance services, and an information processing device (hereinafter referred to as "second business device") 60 of a second business that manages users. Note that Fig. 1 is merely an example, and each information processing device shown in Fig. 1 is not limited to one device, but may be composed of multiple devices (e.g., multiple servers).

[0015] The authentication device 10 (first information processing device) issues a certificate to a user and verifies the legitimacy of the user using the issued certificate. Here, the certificate may be, for example, an electronic certificate such as an x.509 certificate, or a verifiable certificate such as a VC (Verifiable Credential). The former electronic certificate includes information about the user of a public key issued by a certification authority, and is electronically signed by a private key issued by the certification authority. The private key is used to verify the legitimacy of the public key, thereby verifying the legitimacy of the user. The latter VC is also issued by a certification authority and is used to verify the legitimacy of the user, but differs from the former electronic certificate in that it includes personal information (for example, gender, educational background, etc.). The authentication device 10 may be connected to a user confirmation device 20, a user terminal 30, and a first business device 50 via a network not shown.

[0016] The user verification device 20 (second information processing device) verifies the legitimacy of the user based on information about the user acquired from the user terminal 30 (hereinafter referred to as "first user information") and information about the user acquired from the second business device 60 (hereinafter referred to as "second user information"). The user verification device 20 may be provided by, for example, a trust service provider (TSP). The user verification device 20 may be connected to the authentication device 10, the user terminal 30, the payment / remittance terminal 40, and the second business device 60 via a network (not shown).

[0017] The user terminal 30 is, for example, a smartphone, a tablet, a personal computer, a game machine, VR (Virtual Reality) goggles, a VR headset, or other terminal. An application for a payment / remittance service may be installed in the user terminal 30. The user terminal 30 may hold a certificate as a user identifier. Alternatively, the certificate as a user identifier may be managed (stored or held) in the authentication device 10.

[0018] The payment / remittance terminal 40 is, for example, a smartphone, tablet, personal computer, game machine, POS (Point of Sales) terminal, cash register terminal, or other terminal. The payment / remittance terminal 40 may communicate with the user terminal 30 using terminal-to-terminal communication. In FIG. 1, the payment / remittance terminal 40 is provided separately from the user terminal 30, but this is not limited to this. For example, the function of the payment / remittance terminal 40 may be provided by an app or the like installed on the user terminal 30, without providing the payment / remittance terminal 40.

[0019] The first business device 50 is an information processing device of a first business providing a payment / remittance service. The first business is, for example, a credit card company, a financial institution, a payment agent, a money transfer business, etc., but is not limited to these, and may be any business providing a payment / remittance service. The first business device 50 may be connected to the authentication device 10 via a network (not shown).

[0020] The second business device 60 is an information processing device of a second business that manages users. The second business is, for example, a system of a credit card company, a financial institution, a payment agency, a business that provides cashless payment, etc., but is not limited to these and may be any business that manages user information. The second business device 60 may be connected to the user confirmation device 20 via a network (not shown). In addition, the first business and the second business may be the same business, and the first business device 50 and the second business device 60 are not limited to separate information processing devices, but may be different functions of the same information processing device.

[0021] As shown in Fig. 1, the authentication device 10 and the user verification device 20 may constitute an information processing system (hereinafter referred to as "authentication system") 2 that performs user authentication processing. The authentication system 2 eliminates the need for the first business device 50 itself, which provides the payment / remittance service, to perform authentication processing, making it easier to introduce a payment / remittance service using a certificate. Furthermore, in the authentication system 2, in addition to the certificate verification processing by the authentication device 10, the user verification processing by the user verification device 20 is performed, so that the user authentication processing is performed in two stages, thereby improving the security of the payment / remittance service that uses a certificate as a user identifier.

[0022] In addition, in FIG. 1, the network (not shown) that interconnects at least two of the authentication device 10, the user verification device 20, the user terminal 30, the payment / remittance terminal 40, the first business device 50, and the second business device 60 is a wireless and / or wired network, and may include at least one of the Internet, an intranet, and a bus.

[0023] (composition) The configuration of the payment / remittance system 1 will be described with reference to Figures 2 and 3. Figure 2 is a diagram showing an example of the hardware configuration of each device in the payment / remittance system according to this embodiment. Each device in the payment / remittance system 1 (for example, the authentication device 10, the user verification device 20, the user terminal 30, the payment / remittance terminal 40, the first business device 50, or the second business device 60, etc.) has a processor 11 such as a CPU (Central Processing Unit) equivalent to a computing device, a memory unit 12, a transmission / reception unit 13, and an input / output unit 14. Each of these components is connected via a bus so as to be able to transmit and receive data to and from each other.

[0024] The processor 11 is, for example, a CPU, and controls each device in the payment / remittance system 1. The processor 11 may execute various processes described in this embodiment by reading and executing a program from the storage unit 12. Each device in the payment / remittance system 1 may include one or more processors 11. Furthermore, each of the devices may be referred to as a computer.

[0025] The storage unit 12 is configured with, for example, storage such as a memory, a hard disk drive (HDD) and / or a solid state drive (SSD), etc. The storage unit 12 may store various information necessary for the processor 11 to execute processing (for example, an information processing program executed by the processor 11, etc.).

[0026] The transceiver 13 is a device that communicates via a network, and may include, for example, a network card, a communication module, a chip, an antenna, etc. The transceiver 13 may include a transmitter that transmits various information via the network, and / or a receiver that receives various information via the network.

[0027] The input / output unit 14 includes an input unit such as a keyboard, a touch panel, a mouse, and / or a microphone, and an output unit such as a display and / or a speaker. The input unit receives input of various information from a user. The output unit may include a display unit that displays various information for the user.

[0028] The hardware configuration described above is merely an example. Each device in the settlement / remittance system 1 may omit some of the hardware shown in Fig. 2, or may include hardware not shown in Fig. 2. Furthermore, the hardware shown in Fig. 2 may be composed of one or more chips.

[0029] The hardware configuration described above is merely an example. Each information processing device may omit some of the hardware shown in FIG. 2, or may include hardware not shown in FIG. 2. The hardware shown in FIG. 2 may be configured with one or more chips. When an information processing device is configured with multiple devices, each device may include at least some of the hardware.

[0030] Fig. 3 is a diagram showing an example of the functional configuration of the payment / remittance system according to this embodiment. Note that Fig. 3 is merely an example, and it goes without saying that each device in the payment / remittance system may have a configuration not shown.

[0031] <Authentication device 10> 3, the authentication device 10 includes a reception unit 101, a confirmation request unit 102, an issuing unit 103, a verification unit 104, and a service processing unit 105. The reception unit 101, the confirmation request unit 102, the issuing unit 103, the verification unit 104, and the service processing unit 105 are realized by at least a part of an information processing program executed by the processor 11, the storage unit 12, the transmission / reception unit 13, and the input / output unit 14, which are included in the authentication device 10 and shown in FIG.

[0032] The reception unit 101 receives a service request for a payment / remittance service using a user's certificate. For example, the reception unit 101 may receive a service request from the payment / remittance terminal 40, but is not limited to this, and may receive a service request from the user terminal 30.

[0033] Here, the service request may include at least one of information regarding the user's certificate (hereinafter referred to as "certificate information") and information regarding a transaction using the payment / remittance service (hereinafter referred to as "transaction information"). The certificate information may be the certificate itself or a certificate identifier. The certificate information may include, for example, the user's public key, electronic signature, etc. The transaction information may include, for example, information regarding at least one of the transaction amount, the date and time of the transaction, the store where the transaction is conducted or the terminal concerned, the nature of the transaction, the product or service that is the subject of the transaction, the transaction identification number, etc.

[0034] The receiving unit 101 may also receive an issuance request for requesting the issuance of a certificate. For example, the receiving unit 101 may receive an issuance request from the user terminal 30.

[0035] The confirmation request unit 102 requests a confirmation process for confirming the legitimacy of the user from a user confirmation device 20 (second information processing device) different from the authentication device 10 (first information processing device). Specifically, the confirmation request unit 102 may transmit a confirmation request for requesting the confirmation process to the user confirmation device 20 via the transmission / reception unit 13.

[0036] For example, the confirmation request unit 102 may request the user verification device 20 to perform a confirmation process for confirming the legitimacy of a user in response to an issuance request accepted by the acceptance unit 101. Also, the confirmation request unit 102 may request the user verification device 20 to perform a confirmation process for confirming the legitimacy of a user in response to a service request accepted by the acceptance unit 101.

[0037] Furthermore, the confirmation request unit 102 may request the user confirmation device 20 to perform the confirmation process based on the risk associated with the transaction using the settlement / remittance service. Specifically, the confirmation request unit 102 may determine the risk based on transaction information included in the service request. For example, multiple risk levels are each associated in advance with transaction information (for example, at least one of the transaction amount, the nature of the transaction, the product or service subject to the transaction, the store where the transaction is performed, and the terminal where the transaction is performed), and the confirmation request unit 102 may determine the risk by determining a risk level corresponding to the transaction information included in the service request from among the multiple risk levels. Note that the method of determining the risk of a transaction is not limited to this, and the risk may be determined based on information about the user, for example.

[0038] When the risk associated with the transaction using the settlement / remittance service is determined to be high, the confirmation request unit 102 may request the user confirmation device 20 to perform the above-mentioned confirmation process. On the other hand, when the risk is determined to be low, the confirmation request unit 102 may cancel the request for the above-mentioned confirmation process to the user confirmation device 20. The confirmation request unit 102 may determine how to request the user confirmation device 20 to perform the confirmation process based on the settlement / remittance service, not limited to whether the risk is high or low. For example, the confirmation request unit 102 may determine whether to request the user confirmation device 20 to perform the confirmation process based on the type of risk (e.g., credit risk, exchange risk, etc.). The confirmation request unit 102 may also determine whether to request the user confirmation device 20 to perform the confirmation process based on the business providing the settlement / remittance service. For example, the business providing the settlement / remittance service may set in advance whether or not the confirmation process is required for the user confirmation device 20, and the confirmation request unit 102 may determine whether to request the user confirmation device 20 to perform the confirmation process based on the business providing the settlement / remittance service in accordance with the preset setting of the business.

[0039] The issuing unit 103 issues a certificate to the user based on the result of the confirmation process by the user confirmation device 20 in response to a request from the confirmation request unit 102. The issuing unit 103 may transmit certificate information related to the issued certificate to the user terminal 30 via the transmitting / receiving unit 13. For example, if the authenticity of the user is confirmed by the confirmation process, the issuing unit 103 may issue the certificate to the user, and if the authenticity is denied, the issuing unit 103 may not issue the certificate to the user.

[0040] In response to a service request received by the receiving unit 101, the verifying unit 104 may verify the legitimacy of the user by using the user's certificate.

[0041] The service processing unit 105 executes processing related to the payment / remittance service with the first business device 50, based on the result of the verification by the verification unit 104 using the certificate and the result of the verification processing by the user verification device 20 in response to a request from the verification request unit 102. The processing related to the payment / remittance service may include, for example, at least one of an inquiry to the first business device 50 as to whether or not the payment / remittance service can be provided to the user, a response from the first business device 50 to the inquiry, and a result of the execution of the payment / remittance service.

[0042] Specifically, the service processing unit 105 may execute processing related to the payment / remittance service with the first business device 50 based on the result of the verification by the verification unit 104 using the certificate and the result of the verification process by the user verification device 20 in response to the request. On the other hand, the service processing unit 105 may execute processing related to the payment / remittance service with the first business device 50 based on the result of the verification by the verification unit 104 using the certificate, without using the result of the verification process by the user verification device 20.

[0043] <User confirmation device 20> 3, user confirmation device 20 includes an acquisition unit 201, a confirmation processing unit 202, and a recording unit 203. Note that acquisition unit 201, confirmation processing unit 202, and recording unit 203 are realized by at least a part of an information processing program executed by processor 11, storage unit 12, transmission / reception unit 13, and input / output unit 14, which are included in user confirmation device 20 and shown in FIG.

[0044] The acquisition unit 201 acquires first user information from the user terminal 30 and acquires second user information from the second business device 60. The first user information acquired from the user terminal 30 may include at least one of information on the user's account at the second business (hereinafter referred to as "account information") and information on the user's attributes (hereinafter referred to as "attribute information"). The account information may be, for example, at least one of a credit card number, an account number, and a token for payment at the second business. The attribute information may include, for example, at least one of the user's name, address, and contact information. The second user information acquired from the second business device 60 may include at least one of the account information and the attribute information.

[0045] In response to a request from the confirmation request unit 102, the acquisition unit 201 may acquire the first user information from the user terminal 30 and may acquire the second user information from the second business device 60. Alternatively, the acquisition unit 201 may acquire the second user information from the second business device 60 in advance and store it in the storage unit 12 of the user confirmation device 20.

[0046] The confirmation processing unit 202 performs a confirmation process to confirm the legitimacy of the user based on the first user information and the second user information in response to a request from the confirmation request unit 102. Specifically, the confirmation processing unit 202 may confirm the legitimacy of the user by matching the first user information with the second user information in the confirmation process. For example, the confirmation processing unit 202 may confirm the legitimacy of the user by matching account information included in the first user information with account information included in the second user information in the confirmation process.

[0047] The confirmation processing unit 202 may execute the above confirmation process based on the first user information acquired from the user terminal 30 in response to a request from the confirmation request unit 102 and the second user information acquired from the second business device 60 in response to a request from the confirmation request unit 102. Alternatively, the confirmation processing unit 202 may execute the above confirmation process based on the first user information acquired from the user terminal 30 in response to a request from the confirmation request unit 102 and the second user information held in the storage unit 12 of the user confirmation device 20.

[0048] The recording unit 203 records the confirmation history by the confirmation processing unit 202. For example, the recording unit 203 may store in the storage unit 12 the first user information acquired by the acquisition unit 201 and the result of the confirmation process by the confirmation processing unit 202 in association with each other.

[0049] (operation) The operation of the settlement / remittance system 1 according to this embodiment will be described with reference to FIGS.

[0050] <Certificate issuance process> Fig. 4 is a diagram showing an example of a certificate issuing operation according to this embodiment. Note that Fig. 4 is merely an example, and the order of some steps (e.g., steps S102, S103, and S105) may be changed, some steps may be performed at the same timing, or some steps (e.g., step S107) may be omitted.

[0051] As shown in Fig. 4, in step S101, the user terminal 30 transmits a certificate issuance request to the authentication device 10. In step S102, the authentication device 10 accepts the issuance request from the user terminal 30 and transmits the issuance request to the first business device 50 that provides a settlement / remittance service. In step S103, in response to the issuance request from the user terminal 30, the authentication device 10 may transmit a confirmation request to the user confirmation device 20 to request a confirmation process for confirming the legitimacy of the user.

[0052] In step S104, the user verification device 20 performs a process of acquiring the first user information between the user terminal 30 and the user terminal 30. For example, in response to the verification request from the authentication device 10, the user verification device 20 may transmit a request for providing the first user information to the user terminal 30, and acquire the first user information transmitted from the user terminal 30 in response to the request for providing.

[0053] In step S105, the user verification device 20 performs a process of acquiring second user information between the user verification device 20 and the second business device 60. For example, in response to a verification request from the authentication device 10, the user verification device 20 may transmit a request for providing the second user information to the second business device 60, and acquire the second user information transmitted from the second business device 60 in response to the request for providing. Note that step S105 may be omitted, and the user verification device 20 may store in the storage unit 12 the second user information acquired in advance from the second business device 60.

[0054] In step S106, the user verification device 20 executes a verification process to verify the authenticity of the user based on the first user information from the user terminal 30 and the second user information from the second business device 60. Specifically, the user verification device 20 collates the first user information with the second user information to verify the authenticity of the user.

[0055] In step S107, the user confirmation device 20 records the result of the confirmation process in step S106 in the storage unit 12. For example, the user confirmation device may associate the first user information acquired in step S104 with the result of the user confirmation process and record them in the storage unit 12. Although not shown, when the first user information acquired from the user terminal 30 matches the first user information recorded in the storage unit 12, the user confirmation device 20 may confirm the legitimacy of the user of the user terminal 30 based on the result of the past user confirmation process without matching the first user information with the second user information in step S106.

[0056] In step S108, the user confirmation device 20 transmits the result of the user confirmation process in step S106 (hereinafter referred to as the "confirmation result") to the authentication device 10. In step S109, the authentication device 10 transmits the confirmation result received in step S108 to the first business device 50 that provides a settlement / remittance service.

[0057] In step S110, the first business device 50 providing a settlement / remittance service determines whether or not to issue a certificate to the user based on the confirmation result received in step S109 from the authentication device 10. The first business device 50 transmits an instruction to issue the certificate to the authentication device 10 based on the determination result.

[0058] In step S111, authentication device 10 issues a certificate in response to an issuance instruction from first business device 50, and transmits certificate information related to the issued certificate to user terminal 30. For example, authentication device 10 may transmit the certificate itself as the certificate information to user terminal 30. Alternatively, authentication device 10 may transmit an identifier of the certificate to user terminal 30, and store the certificate in storage unit 12 of authentication device 10 in association with the user.

[0059] According to the above certificate issuing operation, the first business device 50 judges whether or not to issue a certificate to the user based on the result of the user verification by the user verification device 20, and then the authentication device 10 issues a certificate to the user. Therefore, the certificate can be issued to an appropriate user, improving security.

[0060] <Payment / Remittance Service Provision Operation> Fig. 5 is a diagram showing an example of the operation of providing a settlement / remittance service according to this embodiment. Note that Fig. 5 is merely an example, and the order of some steps may be changed, they may be performed at the same timing, or they may be omitted. For example, steps S201, S205, S210, and S216 may be omitted.

[0061] 5, in step S201, the user terminal 30 transmits a service request for a payment / remittance service using the user's certificate to the payment / remittance terminal 40. In step S202, the payment / remittance terminal 40 transmits the service request to the authentication device 10.

[0062] In step S203, the authentication device 10 accepts the service request and verifies the validity of the user using the user's certificate. For example, the authentication device 10 recognizes the certificate based on certificate information included in the service request. For example, the certificate information may be the certificate itself, or the user's certificate held in the authentication device 10 may be identified based on the certificate information.

[0063] In step S204, the user verification device 20 transmits the service request accepted in step S202 to the first business device 50. In step S205, the authentication device 10 judges the risk of the transaction related to the settlement / remittance service. If the risk is judged to be high (step S205; YES), in step S206, the authentication device 10 transmits a verification request for requesting user verification processing to the user verification device 20. On the other hand, if the risk is judged to be low (step S205; NO), the process proceeds to step S213.

[0064] In step S207, the user verification device 20 performs a process of acquiring the first user information between the user terminal 30 and the user terminal 30. For example, in response to a service request from the authentication device 10, the user verification device 20 may transmit a request for providing the first user information to the user terminal 30, and acquire the first user information transmitted from the user terminal 30 in response to the request for providing.

[0065] In step S208, the user verification device 20 performs a process of acquiring the second user information between the user verification device 20 and the second business device 60. For example, in response to a service request from the authentication device 10, the user verification device 20 may transmit a request for providing the second user information to the second business device 60, and acquire the second user information transmitted from the second business device 60 in response to the request for providing. Note that step S208 may be omitted, and the user verification device 20 may store the second user information acquired in advance from the second business device 60 in the storage unit 12.

[0066] In step S209, the user verification device 20 executes a verification process to verify the authenticity of the user based on the first user information from the user terminal 30 and the second user information from the second business device 60. Specifically, the user verification device 20 collates the first user information with the second user information to verify the authenticity of the user.

[0067] In step S210, the user confirmation device 20 records the result of the confirmation process in step S209 in the storage unit 12. For example, the user confirmation device may associate the first user information acquired in step S207 with the result of the user confirmation process and record them in the storage unit 12. Although not shown, when the first user information acquired from the user terminal 30 matches the first user information recorded in the storage unit 12 (for example, the first user information stored in step S107 of FIG. 4), the user confirmation device 20 may confirm the legitimacy of the user of the user terminal 30 based on the result of the past user confirmation process without matching the first user information with the second user information in step S209.

[0068] In step S211, the user verification device 20 transmits the verification result of the user legitimacy in step S212 to the authentication device 10. In step S212, the authentication device 10 transmits the verification result received in step S211 to the first business device 50 that provides a settlement / remittance service.

[0069] In step S213, the first business device 50 providing the settlement / remittance service executes processing related to the settlement / remittance service based on the confirmation result received in step S212 from the authentication device 10. In step S214, the first business device 50 transmits the result of the processing to the authentication device 10.

[0070] In step S215, the authentication device 10 transmits the result of the processing related to the settlement / remittance service to the settlement / remittance terminal 40. In step S216, the authentication device 10 transmits the result of the processing related to the settlement / remittance service to the user terminal 30.

[0071] According to the above-mentioned operation of providing the payment / remittance service, the user authentication process is performed in two stages by performing the user verification process by the user verification device 20 in addition to the certificate verification process by the authentication device 10, thereby improving the security of the payment / remittance service using the certificate as a user identifier. Also, depending on the risk of the payment / remittance service, the user verification process by the user verification device 20 is skipped, thereby improving security and making the process more efficient.

[0072] As described above, according to the payment / remittance system 1 of this embodiment, the first business device 50 that provides the payment / remittance service by the authentication system 2 does not need to perform authentication processing itself, making it easier to introduce a payment / remittance service using a certificate. Also, in the authentication system 2, in addition to the certificate verification processing by the authentication device 10, the user verification processing by the user verification device 20 is performed, so that the user authentication processing is performed in two stages, improving the security of the payment / remittance service that uses a certificate as a user identifier. Therefore, it is possible to provide a user authentication model suitable for a payment / remittance service that uses a certificate.

[0073] (Other embodiments) The terms "first" and "second" in the above embodiment are used for the convenience of explanation, and do not indicate an order, and may be interchanged as appropriate.

[0074] As described in the above embodiment, the certificate issued by the authentication device 10 may be held in the user terminal 30, or may be held and managed in a cloud (e.g., the authentication device 10 or another device on the network). For example, when a certificate issued to a user by the authentication device 10 is managed on a cloud, the certificate and the user may be stored in association with each other on the cloud. In this case, the certificate information in step S111 of FIG. 4 may include an identifier of the user to whom the certificate was issued. Also, the authentication device 10 may acquire and identify the certificate of the user managed on the cloud based on the user identifier included as certificate information in the service request accepted in step S203 of FIG. 5.

[0075] Alternatively, when a certificate issued to a user by authentication device 10 is managed on a cloud, the certificate and its identifier may be stored in association with each other on the cloud. In this case, the certificate information in step S111 of Fig. 4 may include the identifier of the certificate. Also, authentication device 10 may acquire and identify the certificate of the user managed on the cloud based on the identifier of the certificate included in the service request accepted in step S203 of Fig. 5.

[0076] The above-described embodiments are intended to facilitate understanding of the present invention, and are not intended to limit the present invention. The elements of the embodiments, as well as their arrangements, materials, conditions, shapes, sizes, etc., are not limited to those shown as examples and can be changed as appropriate. In addition, configurations shown in different embodiments can be partially substituted or combined with each other. [Explanation of symbols]

[0077] Reference Signs List 1: payment / remittance system, 2: authentication system, 10: authentication device, 20: user verification device, 30: user terminal, 40: payment / remittance terminal, 50: first business device, 60: second business device, 11: processor, 12: memory unit, 13: transmitting / receiving unit, 14: input / output unit, 101: reception unit, 102: verification request unit, 103: issuing unit, 104: verification unit, 105: service processing unit, 201: acquisition unit, 202: verification processing unit, 203: recording unit

Claims

1. A computer as a first information processing device, a reception unit that receives a service request for a service related to a settlement and / or remittance using a user's certificate; a verification unit that verifies the authenticity of the user by using the certificate in response to the service request; a confirmation request unit that requests a second information processing device to perform a confirmation process for confirming the authenticity of the user; and functioning as a service processing unit that executes processing related to the service between the first carrier device that provides the service and the second carrier device based on a result of the verification by the verification unit using the certificate and a result of the verification processing by the second information processing device in response to a request from the verification request unit. Information processing program.

2. The confirmation request unit: requesting the second information processing device to perform the verification process for verifying the authenticity of the user according to whether or not verification of the authenticity of the user is necessary, the verification process being set by the first business device; The confirmation process by the second information processing device includes: Matching first user information about the user acquired from the user with second user information acquired from a second business device that manages information about the user. The information processing program according to claim 1 .

3. the confirmation request unit requests the second information processing device to perform the confirmation process based on a risk of a transaction related to the service.

3. The information processing program according to claim 1 or 2.

4. the confirmation request unit requests the second information processing device to perform the confirmation process when the risk is determined to be high; the service processing unit executes a process related to the service between the service processing unit and the first business device based on a result of the verification by the verification unit and a result of the confirmation process by the second information processing device.

4. The information processing program according to claim 3.

5. When the risk is determined to be low, the confirmation request unit cancels the request for the confirmation process to the second information processing device; the service processing unit executes a process related to the service between the first business device and the service processing unit based on a result of the verification by the verification unit, not based on a result of the confirmation process by the second information processing device.

4. The information processing program according to claim 3.

6. causing the computer to further function as an issuing unit that issues the certificate to the user; the reception unit receives an issuance request for requesting issuance of the certificate; the confirmation request unit requests the second information processing device to perform the confirmation process in response to the issuance request; the issuing unit issues the certificate to the user based on a result of the confirmation process performed by the second information processing device in response to a request from the confirmation request unit.

3. The information processing program according to claim 1 or 2.

7. a reception unit that receives a service request for a service related to a settlement and / or remittance using a user's certificate; a verification unit that verifies the authenticity of the user by using the certificate in response to the service request; a confirmation request unit for requesting another information processing device to perform a confirmation process for confirming the authenticity of the user; a service processing unit that executes processing related to the provision of the service between the first carrier device that provides the service and the first carrier device based on a result of the verification by the verification unit using the certificate and a result of the verification processing by the other information processing device in response to a request from the verification request unit; An information processing device comprising:

8. An information processing system including a first information processing device and a second information processing device, The first information processing device is a reception unit that receives a service request for a service related to a settlement and / or remittance using a user's certificate; a verification unit that verifies the authenticity of the user by using the certificate in response to the service request; a confirmation request unit that requests the second information processing device to perform a confirmation process for confirming the authenticity of the user; a service processing unit that executes a process related to the service between the first carrier device that provides the service and the second carrier device based on a result of the verification by the verification unit using the certificate and a result of the verification process by the second information processing device in response to a request from the verification request unit; The second information processing device is an acquisition unit that acquires first user information related to the user from a terminal of the user and acquires second user information related to the user from a second business device that manages the user; a confirmation processing unit that executes the confirmation process based on the first user information and the second user information in response to a request from the confirmation request unit, Information processing system.

9. A computer comprising: receiving a service request for a payment and / or remittance service using the user's certificate; verifying the authenticity of the user using the certificate in response to the service request; a step of requesting another information processing device to perform a verification process for verifying the authenticity of the user; executing a process related to the service between the first carrier device providing the service and the other information processing device based on a result of the verification using the certificate and a result of the confirmation process by the other information processing device in response to the request for the confirmation process; An information processing method comprising the steps of:

Images