Information processing device and method

Abstract

This information processing device 31 comprises: an accumulation unit 312 for accumulating, in association with acquisition dates and times at which acquisitions occur, pieces of user terminal-related information pertaining to a user terminal 10 repeatedly acquired in a service different from a payment service; a comparison unit 314 for comparing user terminal-related information included in a payment request with the pieces of user terminal-related information accumulated in association with the acquisition dates and times before the payment request is acquired among the pieces of the user terminal-related information accumulated for the user terminal 10 when acquiring, from the user terminal 10, the payment request including the user terminal-related information in the payment service; and an evaluation unit 315 for evaluating the authenticity of the user on the basis of the result of the comparison.

Description

Information processing device and method

[0001] The present invention relates to a technique for assessing the authenticity of a user during electronic payments.

[0002] As electronic payments become more widespread, it is becoming increasingly important to verify the authenticity of users when making payments. For example, Patent Literature 1 discloses a mechanism that determines that location information of a user terminal and location information of a store are not reliable if they are not within a predetermined range.

[0003] Japanese Patent Application Laid-Open No. 2022-107013

[0004] The mechanism of Patent Document 1 is based on the premise that sales are conducted face-to-face with the user in a physical store, but there is a demand for technology that can evaluate the authenticity of users in sales formats where the user does not meet face-to-face, i.e., in non-face-to-face electronic payments.

[0005] Therefore, an object of the present invention is to provide a technology that can evaluate the authenticity of a user even in non-face-to-face electronic payments.

[0006] In order to solve the above problem, the present invention provides an information processing device comprising: a storage unit that stores user terminal-related information about a user terminal that has been repeatedly acquired in a service other than a payment service, in association with the acquisition date and time when the information was acquired; a comparison unit that, when a payment request including user terminal-related information is acquired from a user terminal in the payment service, compares the user terminal-related information included in the payment request with user terminal-related information accumulated for the user terminal that has been accumulated in association with the acquisition date and time before the payment request was acquired; and an evaluation unit that evaluates the authenticity of the user based on the results of the comparison.

[0007] According to the present invention, it is possible to provide a technology that can evaluate the authenticity of a user even in non-face-to-face electronic payments.

[0008] FIG. 1 is a diagram showing an example of the configuration of an information processing system 1 according to an embodiment of the present invention. FIG. 2 is a diagram showing an example of the hardware configuration of an information processing device 31 according to the embodiment. FIG. 3 is a diagram showing an example of the functional configuration of the information processing device 31 according to the embodiment. FIG. 4 is a diagram showing an example of a user terminal ID and a credit card number stored in the information processing device 31 according to the embodiment. FIG. 5 is a diagram showing an example of user terminal-related information stored in the information processing device 31 according to the embodiment. FIG. 6 is a diagram showing an example of the data structure of a payment request according to the embodiment. FIG. 7 is a sequence diagram showing an example of the operation of the information processing system 1 according to the embodiment. FIG. 8 is a diagram illustrating how user terminal-related information stored in association with the acquisition date and time before the payment request is acquired in the embodiment is identified.

[0009] [Configuration] Figure 1 is a diagram showing an example of an information processing system 1 according to an embodiment of the present invention. The information processing system 1 is a system for making electronic payments related to commercial transactions in which a user purchases goods or services on a website. As shown in Figure 1, the information processing system 1 includes a user terminal 10 used by each of multiple users, multiple affiliated store sites 20 that are websites selling goods and services, an information processing device 31 corresponding to the information processing device of the present invention, a payment system 30 that makes electronic payments based on credit card contracts signed by users, multiple websites 40, credit card brand systems 50 owned by multiple credit card brands, and a network 2 that includes a wireless network or a wired network that communicatively connects these systems.

[0010] The user terminal 10 is a computer capable of wireless communication, such as a smartphone, wearable device, or tablet. In this embodiment, a telecommunications carrier that provides various services to the user terminal 10 using communication networks operates a payment system 30 including an information processing device 31 and a website 40. The various communication services referred to here include, for example, a positioning service that measures the position of the user terminal 10 communicating wirelessly with a wireless base station (not shown) based on the location of the wireless base station, a communication connection service that connects wireless communication by the user terminal 10, and a web browsing service that allows the user terminal 10 to browse web pages provided by the website 40. In these positioning services, communication connection services, and web browsing services, the user of the user terminal 10 is authenticated using a method determined for each service. In the positioning service and communication connection service, user authentication is performed using, for example, a method called line authentication, while in the web browsing service, user authentication is performed using, for example, a user ID and password. In other words, the telecommunications carrier provides the user with a payment service using the payment system 30 and a service different from the payment service that authenticates the user using a predetermined method.

[0011] The feature of this embodiment is that it accumulates user terminal-related information about the user terminal 10 that has been repeatedly acquired in services other than the payment service, compares the user terminal-related information contained in a payment request issued from the user terminal 10 in the payment service with the user terminal-related information accumulated for that user terminal at the time before the payment request was acquired, and evaluates the authenticity of the user based on the results of the comparison.

[0012] FIG. 2 is a diagram showing the hardware configuration of the information processing device 31. The information processing device 31 is physically configured as a computer including a processor 3101, a memory 3102, a storage 3103, a communication device 3104, an input device 3105, an output device 3106, and a bus connecting these devices. Each of these devices operates using power supplied from a battery (not shown). In the following description, the term "device" can be interpreted as a circuit, a device, a unit, etc. The hardware configuration of the information processing device 31 may be configured to include one or more of the devices shown in FIG. 2, or may be configured without including some of the devices. Furthermore, the information processing device 31 may be configured by communicating and connecting multiple devices each having a different housing.

[0013] Each function in the information processing device 31 is realized by loading specified software (programs) onto hardware such as the processor 3101 and memory 3102, causing the processor 3101 to perform calculations, control communication via the communication device 3104, and control at least one of reading and writing data in the memory 3102 and storage 3103.

[0014] The processor 3101 controls the entire computer by running, for example, an operating system. The processor 3101 may be configured as a central processing unit (CPU) including an interface with peripheral devices, a control device, an arithmetic unit, a register, etc.

[0015] The processor 3101 reads programs (program codes), software modules, data, etc. from at least one of the storage 3103 and the communication device 3104 into the memory 3102 and executes various processes in accordance with these. The programs used are those that cause a computer to execute at least some of the operations described below. The functional blocks of the information processing device 31 may be implemented by a control program stored in the memory 3102 and running on the processor 3101. The various processes may be executed by one processor 3101, or may be executed simultaneously or sequentially by two or more processors 3101. The processor 3101 may be implemented by one or more chips. The programs may be transmitted to the information processing device 31 via a telecommunications line.

[0016] The memory 3102 is a computer-readable recording medium and may be configured by at least one of, for example, a read-only memory (ROM), an erasable programmable ROM (EPROM), an electrically erasable programmable ROM (EEPROM), a random access memory (RAM), etc. The memory 3102 may also be called a register, a cache, a main memory (primary storage device), etc. The memory 3102 can store executable programs (program codes), software modules, etc. for implementing the method according to this embodiment.

[0017] Storage 3103 is a computer-readable recording medium, and may be composed of at least one of, for example, an optical disk such as a CD-ROM (Compact Disc ROM), a hard disk drive, a flexible disk, a magneto-optical disk (e.g., a compact disk, a digital versatile disk, a Blu-ray (registered trademark) disk), a smart card, a flash memory (e.g., a card, a stick, a key drive), a floppy (registered trademark) disk, a magnetic strip, etc. Storage 3103 may also be called an auxiliary storage device.

[0018] The communication device 3104 is hardware (transmission / reception device) for communicating between computers via the network 2, and is also called, for example, a network device, a network controller, a network card, or a communication module.

[0019] Each device, such as the processor 3101 and the memory 3102, is connected by a bus for communicating information. The bus may be configured using a single bus, or may be configured using different buses between each device.

[0020] The information processing device 31 may be configured to include hardware such as a microprocessor, a digital signal processor (DSP), an application specific integrated circuit (ASIC), a programmable logic device (PLD), or a field programmable gate array (FPGA), and some or all of the functional blocks may be realized by the hardware. For example, the processor 3101 may be implemented using at least one of these pieces of hardware.

[0021] The user terminal 10 is physically configured as a computer device including a processor, memory, storage, a communication device, an input device, an output device, and a bus connecting these devices. The processor, memory, and storage of the user terminal 10 are hardware similar to the processor 3101, memory 3102, and storage 3103 of the information processing device 31. The communication device of the user terminal 10 may be configured to include a high-frequency switch, a duplexer, a filter, a frequency synthesizer, etc. to realize at least one of frequency division duplex (FDD) and time division duplex (TDD). For example, the transmitting and receiving antenna, amplifier unit, transmitting and receiving unit, and transmission path interface may be realized by a communication device. The transmitting and receiving unit may be implemented as a transmitting unit and a receiving unit that are physically or logically separated. The input device of the user terminal 10 is an input device that accepts input from outside (e.g., a key, a microphone, a switch, a button, a GPS unit including a GPS antenna, etc.). The output device of the user terminal 10 is an output device (e.g., a display, a speaker, an LED lamp, etc.) that outputs to the outside. Note that the input device and the output device may be integrated into one device (e.g., a touch screen).

[0022] The affiliated store site 20, the website 40, and the credit card brand system 50 are also configured as a computer device or a group of computer devices including a processor, memory, storage, a communication device, and a bus connecting these.

[0023] 3 is a block diagram showing the functional configuration of the information processing device 31. In the information processing device 31, a processor 3101 reads a program or the like from a storage 3103 into a memory 3102 and executes the program, thereby realizing the functions of a user terminal related information acquisition unit 311, a storage unit 312, a payment request acquisition unit 313, a comparison unit 314, an evaluation unit 315, and an output unit 316.

[0024] The user terminal-related information acquisition unit 311 repeatedly acquires user terminal-related information related to the user terminal 10 for services other than the payment service. As described above, the services other than the payment service are a positioning service that measures the position of the user terminal 10, a communication connection service that connects wireless communications by the user terminal 10, and a web browsing service that allows the user terminal 10 to browse web pages provided by website 40. In these services, user terminal-related information is repeatedly acquired regardless of the timing at which the payment service is provided. Furthermore, in these positioning services, communication connection services, and web browsing services, the user of the user terminal 10 is authenticated using a method determined for each service, so the user terminal-related information acquired in each service can be considered to be correct information.

[0025] If the service different from the payment service is a positioning service, the user terminal-related information is location-related information relating to a location. This location-related information indicates the location of the user terminal 10 measured by the positioning service. The user terminal-related information acquisition unit 311 acquires the location-related information, for example, periodically or at any timing, via the network 2 or the like from a positioning system (not shown) that provides the positioning service, together with a user terminal ID for identifying the user terminal 10.

[0026] Furthermore, if the service different from the payment service is a communication connection service, the user terminal-related information is an IP (Internet Protocol) address. This IP address is an IP address assigned to the user terminal 10 based on DHCP (Dynamic Host Configuration Protocol) when the communication connection service is provided to the user terminal 10. The user terminal-related information acquisition unit 311 acquires the IP address assigned to the user terminal 10 by a DHCP server (not shown) when the communication connection service is provided to the user terminal 10, together with a user terminal ID for identifying the user terminal 10, from the DHCP server via the network 2 or the like.

[0027] Furthermore, if the service different from the payment service is a web browsing service, the user terminal related information is the user agent of the user terminal 10. This user agent is included in an HTTP (Hyper Text Transfer Protocol) request that requests a web page browsing service from the user terminal 10 to the website 40. Every time the user terminal 10 requests a web page browsing service from the website 40, the user terminal related information acquisition unit 311 acquires the user agent notified to the website 40 by the user terminal 10, together with a user terminal ID for identifying the user terminal 10, from the website 40 via the network 2 or the like.

[0028] The storage unit 312 stores the user terminal-related information (i.e., location-related information, IP address, and user agent) acquired by the user terminal-related information acquisition unit 311, in association with the acquisition date and time and the user terminal ID. Furthermore, as shown in FIG. 4, the storage unit 312 stores the user terminal ID of each user's user terminal 10 in association with the credit card number in the credit card contract with the user. By referring to this, the storage unit 312 stores the user terminal ID and the acquisition date and time of the user terminal-related information acquired by the user terminal-related information acquisition unit 311, as well as the credit card number in the credit card contract with the user, in association with each other, as shown in FIG. 5.

[0029] When providing a payment service, the payment request acquisition unit 313 acquires a payment request from the user terminal 10 via the network 2, requesting electronic payment from the payment system 30. As illustrated in FIG. 6 , this payment request includes the credit card number in the user's credit card contract, location-related information, an IP address, a user agent, the payment amount, and other information. The location-related information included in the payment request indicates the location range (area) determined from the IP address assigned to the provider connecting the user terminal 10 to the network 2 when the payment request is made by the user terminal 10. The IP address included in the payment request is the IP address assigned to the user terminal 10 by a DHCP server (not shown) and is included in the payment request as the sender address. The user agent included in the payment request is identified by the user terminal 10 by referencing the version of its own software program.

[0030] When the payment request acquisition unit 313 acquires a payment request from the user terminal 10, the comparison unit 314 compares the user terminal-related information included in the payment request with the user terminal-related information stored for the user terminal 10, which is stored in association with the acquisition date and time before the payment request was acquired by the payment request acquisition unit 313. As described above, the storage unit 312 stores user terminal-related information acquired by the user terminal-related information acquisition unit 311 at different dates and times, each associated with the acquisition date and time. The comparison unit 314 compares the user terminal-related information included in the payment request with the user terminal-related information stored for the user terminal 10, which is stored in association with the acquisition date and time before and closest to the time the payment request was acquired. This comparison is performed for each location-related information, IP address, and user agent, using the credit card number as a key.

[0031] The evaluation unit 315 evaluates the authenticity of the user based on the comparison results by the comparison unit 314. For example, if the location-related information included in the payment request does not match the location-terminal-related information stored in the storage unit 312, it is possible that a third party other than the true user is impersonating the user and requesting payment. Furthermore, if the IP address included in the payment request does not match the IP address stored in the storage unit 312, it is possible that a third party other than the true user is impersonating the user and requesting payment. Similarly, if the user agent included in the payment request does not match the user agent stored in the storage unit 312, it is possible that a third party other than the true user is impersonating the user and requesting payment. For this reason, the evaluation unit 315 evaluates the comparison results by the comparison unit 314 in such a way that the more the location-related information matches, the more the IP addresses match, or the more the user agents match, the higher the authenticity.

[0032] The output unit 316 outputs the evaluation result by the evaluation unit 315 .

[0033] [Operation] Next, the operation of this embodiment will be described. Fig. 7 is a sequence diagram showing an example of the operation of the information processing system 1. Before the process shown in Fig. 7 is started, the user terminal related information acquisition unit 311 acquires user terminal related information of the user terminal 10 of each user, for example, periodically or at an arbitrary timing, and stores the information in the accumulation unit 312 in association with the user terminal ID of the user terminal.

[0034] The user accesses the affiliated store site 20 using the user terminal 10 and performs an operation to make an electronic payment for the purchase price of the desired product or service. In response to this operation, a payment request is sent from the user terminal 10 to the affiliated store site 20 (step S11). This payment request is transmitted via the credit card brand system 50 (step S12) and acquired by the payment request acquisition unit 313 of the information processing device 31 (step S13).

[0035] When the payment request acquisition unit 313 acquires a payment request, the comparison unit 314 of the information processing device 31 uses the credit card number included in the payment request as a key to read out the user terminal-related information stored for the user terminal 10 that is the target of comparison, and compares the two (step S14). For example, in FIG. 8 , the acquisition date and time of the user terminal-related information stored by the storage unit 312 is assumed to be newer as the date and time progresses in the direction of arrow X. Furthermore, among the user terminal-related information stored in the storage unit 312, the user terminal-related information stored in association with the acquisition date and time that is earlier than and closest to the acquisition date and time of the payment request including user terminal-related information R1 is assumed to be user terminal-related information R2. In this case, the user terminal-related information R1 and the user terminal-related information R2 are compared. This comparison is performed for each location-related information, IP address, and user agent. Note that the user terminal-related information stored by the storage unit 312 that is compared with the user terminal-related information included in the payment request is not limited to the example shown in FIG. 8 . For example, among the user terminal-related information stored in the storage unit 312, the user terminal-related information most frequently acquired within a predetermined period prior to the acquisition of the payment request including the user terminal-related information R1 may be compared with the user terminal-related information included in the payment request. For example, in the case of a web browsing service, user authentication is performed using a user ID and password, so that a user can access the website 40 using different user devices, such as their own smartphones or tablets. In this case, the user terminal-related information of the user terminal 10 most frequently used to access the website 40 is compared with the user terminal-related information included in the payment request.

[0036] The evaluation unit 315 of the information processing device 31 evaluates the authenticity of the user based on the results of the comparison by the comparison unit 314, i.e., whether the location-related information included in the payment request matches the location-terminal-related information stored in the storage unit 312, whether the IP address included in the payment request matches the IP address stored in the storage unit 312, or whether the user agent included in the payment request matches the user agent stored in the storage unit 312 (step S15).

[0037] The output unit 316 of the information processing device 31 outputs the evaluation result obtained by the evaluation unit 315. This evaluation result is notified to the credit card brand system 50 (step S16), which then determines whether or not to approve the payment request in response to this notification. A notification according to this determination result is then sent via the affiliated store site 20 (step S17) to the user terminal 10 (step S18). At this time, if the payment request is approved, the payment is processed through a predetermined process. On the other hand, if the payment request is not approved, an error notification is sent to the affiliated store site 20 and the user terminal 10.

[0038] According to the embodiment described above, it is possible to evaluate the authenticity of a user even in the case of so-called non-face-to-face electronic payment.

[0039] [Modifications] The present invention is not limited to the above-described embodiment. The above-described embodiment may be modified as follows. Furthermore, two or more of the following modifications may be combined and implemented.

[0040] The block diagrams used to explain the above embodiments show functional blocks. These functional blocks (components) are realized by any combination of at least one of hardware and software. Furthermore, the method for realizing each functional block is not particularly limited. That is, each functional block may be realized using a single device that is physically or logically coupled, or may be realized using two or more physically or logically separated devices that are directly or indirectly connected (e.g., wired, wireless, etc.) and these multiple devices. The functional block may also be realized by combining software with the single device or multiple devices.

[0041] Functions include, but are not limited to, judgment, determination, judgment, calculation, computation, processing, derivation, investigation, search, confirmation, reception, transmission, output, access, resolution, selection, selection, establishment, comparison, assumption, expectation, consideration, broadcasting, notifying, communicating, forwarding, configuring, reconfiguring, allocating, mapping, and assignment. For example, a functional block (component) that performs transmission is called a transmitting unit or transmitter. As mentioned above, there are no particular limitations on how these functions are implemented.

[0042] For example, the information processing device 31 in an embodiment of the present disclosure may function as a computer that performs the processing of the present disclosure.

[0043] Each aspect / embodiment described in the present disclosure may be applied to at least one of systems using LTE (Long Term Evolution), LTE-Advanced (LTE-A), SUPER 3G, IMT-Advanced, 4G (4th generation mobile communication system), 5G (5th generation mobile communication system), FRA (Future Radio Access), NR (New Radio), W-CDMA (registered trademark), GSM (registered trademark), CDMA2000, UMB (ULtra Mobile Broadband), IEEE 802.11 (Wi-Fi (registered trademark)), IEEE 802.16 (WiMAX (registered trademark)), IEEE 802.20, UWB (ULtra-WIDE Band), Bluetooth (registered trademark), or other suitable systems, and next-generation systems extended based on these. Furthermore, a combination of multiple systems (e.g., a combination of at least one of LTE and LTE-A with 5G, etc.) may also be applied.

[0044] The present invention may also be an information processing method comprising: a storage step for repeatedly acquiring user terminal-related information about a user terminal in a service other than a payment service and storing the information in association with the acquisition date and time of the acquisition; a comparison step for, when a payment request including the user terminal-related information is acquired from the user terminal in the payment service, comparing the user terminal-related information included in the payment request with user terminal-related information stored for the user terminal that is stored in association with the acquisition date and time before the payment request was acquired; and an evaluation step for evaluating the authenticity of the user based on the results of the comparison. The processing procedures, sequences, flowcharts, etc. of each aspect / embodiment described in this disclosure may be reordered as long as they are consistent. For example, the methods described in this disclosure present various step elements in an exemplary order and are not limited to the specific order presented.

[0045] Input and output information may be stored in a specific location (for example, memory) or may be managed using a management table. Input and output information may be overwritten, updated, or added to. Output information may be deleted. Input information may be sent to another device.

[0046] The determination may be made based on a value represented by one bit (0 or 1), a Boolean value (true or false), or a numerical comparison (e.g., comparison with a predetermined value).

[0047] Although the present disclosure has been described in detail above, it is clear to those skilled in the art that the present disclosure is not limited to the embodiments described herein. The present disclosure can be implemented in modified and altered forms without departing from the spirit and scope of the present disclosure as defined by the claims. Therefore, the description of the present disclosure is intended to be illustrative and does not have any limiting meaning on the present disclosure.

[0048] Software, whether referred to as software, firmware, middleware, microcode, hardware description language, or otherwise, should be construed broadly to mean instructions, instruction sets, code, code segments, program code, programs, subprograms, software modules, applications, software applications, software packages, routines, subroutines, objects, executable files, threads of execution, procedures, functions, etc. Additionally, software, instructions, information, etc. may be transmitted or received over a transmission medium. For example, if software is transmitted from a website, server, or other remote source using wired technologies (such as coaxial cable, fiber optic cable, twisted pair, Digital Subscriber Line (DSL)), and / or wireless technologies (such as infrared, microwave), then such wired and / or wireless technologies are included within the definition of a transmission medium.

[0049] The information, signals, etc. described in this disclosure may be represented using any of a variety of different technologies. For example, data, instructions, commands, information, signals, bits, symbols, chips, etc. that may be referred to throughout the above description may be represented by voltage, current, electromagnetic waves, magnetic fields or magnetic particles, optical fields or photons, or any combination thereof. Note that terms described in this disclosure and terms necessary for understanding this disclosure may be replaced with terms having the same or similar meanings.

[0050] Furthermore, the information, parameters, etc. described in this disclosure may be expressed using absolute values, may be expressed using relative values ​​from a predetermined value, or may be expressed using other corresponding information.

[0051] As used in this disclosure, the phrase "based on" does not mean "based only on," unless expressly stated otherwise. In other words, the phrase "based on" means both "based only on" and "based at least on."

[0052] As used in this disclosure, any reference to an element using a designation such as "first," "second," etc. does not generally limit the quantity or order of those elements. These designations may be used in this disclosure as a convenient method of distinguishing between two or more elements. Thus, a reference to a first and a second element does not imply that only two elements may be employed or that the first element must in some way precede the second element.

[0053] The "unit" in the configuration of each of the above devices may be replaced with "means," "circuit," "device," etc.

[0054] When the terms "include," "including," and variations thereof are used in this disclosure, these terms are intended to be inclusive, similar to the term "comprising." Furthermore, when the term "or" is used in this disclosure, it is not intended to be an exclusive or.

[0055] In this disclosure, where articles are added by translation, such as a, an, and the in English, the disclosure may include that the nouns following these articles are in the plural form.

[0056] In the present disclosure, the term "A and B are different" may mean "A and B are different from each other." The term may also mean "A and B are each different from C." Terms such as "separate" and "coupled" may also be interpreted in the same way as "different."

[0057] 1: Information processing system, 2: Network, 10: User terminal, 20: Affiliated store site, 30: Payment system, 31: Information processing device, 311: User terminal related information acquisition unit, 312: Storage unit, 313: Payment request acquisition unit, 314: Comparison unit, 315: Evaluation unit, 316: Output unit, 3101: Processor, 3102: Memory, 3103: Storage, 3104: Communication device, 3105: Input device, 3106: Output device, 40: Website, 50: Credit card brand system.

Claims

1. An information processing device comprising: a storage unit that stores user terminal related information about a user terminal that has been repeatedly acquired in a service other than a payment service, in association with the acquisition date and time when the acquisition was made; a comparison unit that, when a payment request including the user terminal related information is acquired from the user terminal in the payment service, compares the user terminal related information included in the payment request with the user terminal related information stored for the user terminal that has been stored in association with the acquisition date and time before the payment request was acquired; and an evaluation unit that evaluates the authenticity of the user based on the results of the comparison.

2. The information processing device described in claim 1, characterized in that the comparison unit compares the user terminal related information included in the payment request with the user terminal related information stored for the user terminal that is stored in association with an acquisition date and time that is earlier than and closest to the time the payment request was acquired.

3. The information processing device according to claim 1, wherein the service different from the payment service is a positioning service that measures the position of the user terminal.

4. The information processing device described in claim 3, characterized in that the user terminal related information is location-related information regarding location, the location-related information stored in the storage unit indicates the location of the user terminal measured by the positioning service, and the location-related information included in the payment request indicates a location determined from an IP (Internet Protocol) address assigned to a provider that connects the user terminal to a network when the payment request is made.

5. The information processing device according to claim 1, wherein the service different from the payment service is a communication connection service that connects communication by the user terminal.

6. The information processing device according to claim 5, characterized in that the user terminal related information is an IP (Internet Protocol) address, the IP address stored in the storage unit is the IP address of the user terminal obtained from the user terminal when the communication connection service is provided, and the IP address included in the payment request is the IP address of the user terminal assigned to the payment request.

7. The information processing device according to claim 1, wherein the service different from the payment service is a web browsing service for browsing web pages on the user terminal.

8. An information processing device as described in claim 7, characterized in that the user terminal related information is a user agent of the user terminal, the user agent stored in the storage unit is a user agent obtained from the user terminal when the web browsing service is provided, and the user agent included in the payment request is a user agent of the user terminal assigned to the payment request.

9. An information processing device according to claim 8, wherein the user agent stored in the storage unit is included in an HTTP (Hyper Text Transfer Protocol) request requesting the web browsing service from the user terminal.

10. An information processing method comprising: a storage step in a service other than a payment service, repeatedly acquiring user terminal-related information about a user terminal and storing the information in association with the acquisition date and time when the information was acquired; a comparison step in which, when a payment request including the user terminal-related information is acquired from the user terminal in the payment service, the user terminal-related information included in the payment request is compared with the user terminal-related information stored for the user terminal that is stored in association with the acquisition date and time before the payment request was acquired; and an evaluation step in which the authenticity of the user is evaluated based on the results of the comparison.