JP4375945B2 - Network connection service method, network connection service device, and online transaction system - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a network connection service method and a network connection service method. And online trading system About.
[0002]
[Prior art]
Traditionally, stock trading through the Internet has been active. In this conventional online transaction, a customer connects to an Internet connection provider from a customer terminal, starts a browser, specifies a URL that provides an online transaction, accesses a transaction provider's online transaction homepage, An actual stock trading transaction is executed online.
[0003]
A transaction brokerage company that provides online transactions connects a transaction server on the Internet, performs customer management with this transaction server, mediates stock trading, and accumulates transaction history for each customer. And in order to confirm the transaction results for each customer, the operator of the transaction brokerage company accesses the transaction server from the employee terminal, enters the ID and password for authenticating that it is a qualified person, and logs in I try to take it.
[0004]
[Problems to be solved by the invention]
However, in the conventional online transaction technology, the identity is confirmed by entering the customer's ID and password so that the transaction can be started. Therefore, a malicious other person steals the ID and password and impersonates the person. Accidents are also likely to occur.
[0008]
The present invention The If any trouble occurs due to online transactions, a map showing the position of the online customer terminal at the time of the transaction related to the trouble item and the user's face photo at that time can be presented as evidence Technique The purpose is to provide art.
[0014]
[Means for Solving the Problems]
The network connection service method of the invention of claim 1 For each transaction Corresponding to customer ID, transaction conditions and date / time, customer terminal location data at the time of application At the time of application First storage means storing image data of a customer's face photograph and second storage means storing map data Etaco A step of accepting a login with a predetermined employee ID from an employee terminal, a step of accepting a transaction confirmation request specifying a customer ID, a transaction condition and a date from the employee terminal, and the transaction confirmation request, A step of reading the position data of the customer terminal at the time of the corresponding transaction application stored in correspondence with the customer ID, transaction conditions and date from the first storage means, and corresponding to the position data from the second storage means Extracting the map data of the area on the map, creating transaction point map data by combining marks indicating points corresponding to the position data, and responding to the transaction confirmation request from the first storage means to the customer Stored in correspondence with ID, transaction conditions and date / time At the time of application Reading image data of a customer's face photo; At the time of application Transmitting the transaction point map data and the customer face image data to the employee terminal.
[0015]
Claim 2 The invention of claim 1 In the network connection service method of A third storage means for storing image data of a reference facial photograph of the employee in correspondence with the employee ID; Receiving image data of the employee's face photograph sent from the employee terminal; and image data of the employee's face photograph The third Memory Company to means A step of collating with the image data of the reference facial photograph of the corresponding employee held corresponding to the employee ID, and a step of notifying the employee terminal that the collation is not established when the collation of the image data of the facial photograph is not established. The Do It is characterized by this.
[0020]
The network connection service device of the invention of claim 3 includes a communication processing unit that communicates with an employee terminal through a communication network, a date and time, a customer ID, Applicable Customer terminal location data at the time of transaction and At the time of applicable transaction In response to a transaction confirmation request that specifies a user data storage device that stores image data of a customer's face photo, a map data storage device that stores map data of a predetermined area, and a customer ID and transaction date and time from the employee terminal A data search unit that searches the user data storage device and reads the location data of the customer terminal at the corresponding transaction date and time, and extracts map data of a region on the map corresponding to the location data from the map data storage device And a transaction point map creation unit that creates a transaction point map data in which a mark indicating a point corresponding to the position data is combined, and in response to the transaction confirmation request, from the user data storage device, A user image search unit for reading out image data of a facial photograph, and in response to the transaction confirmation request, the transaction point map data and transaction date and time It is characterized in transmitting the image data of the face photograph of the customer to the employee terminal.
[0021]
Claim 4 The invention of claim 3 In the network connection service device of the above, the employee image data storage device that stores the image data of the employee's face photo in correspondence with the employee ID, and the image data of the employee's face photo sent from the employee terminal When the image data storage device comprises an employee image verification unit that matches image data stored in correspondence with the employee ID, and when the verification of the image data of the employee's face photo by the employee image verification unit is not established, The employee terminal is notified of the failure of verification.
[0024]
The invention of claim 5 For each transaction Corresponding to customer ID and transaction number Applicable Customer terminal location data when applying for transactions and At the time of application A first storage device that stores image data of a customer's face photo, a second storage device that stores map data, and image data of a reference facial photo of the employee corresponding to the employee ID An authentication service server provided with a third storage device, a transaction providing server provided with a transaction information storage device corresponding to a customer ID and a transaction number, and an employee terminal on a network An online transaction system configured in a connected manner,
The employee terminal includes: a digital camera; a means for receiving a transaction confirmation request transmission instruction input; a means for receiving an employee ID and confirmation target transaction input; a means for receiving a transaction confirmation request transmission instruction; and the transaction providing server. Means for accessing via the network; means for capturing image data photographed by the digital camera when receiving an instruction to send the transaction confirmation request; and the transaction providing server for the employee ID and image data obtained by the digital camera. Means for transmitting to
The transaction providing server includes means for accepting a login with a predetermined employee ID from the employee terminal, a transaction confirmation request specifying a customer ID and a transaction number from the employee terminal, and image data of the employee's face photograph. A means for accepting, a means for transferring the transaction confirmation request and the image data of the employee's face photo to the authentication service server, and a notification that the verification of the verification of the image data of the employee's face photo has not been established from the authentication service server When the means for notifying the employee terminal of the verification failure and the notification of the verification of the verification of the image data of the employee's face photograph are received based on the customer ID and transaction number from the transaction information storage device. Means for extracting the corresponding transaction content and transmitting it to the employee terminal,
The authentication service server compares the image data of the employee's face photograph transferred from the transaction providing server with the image data of the reference face photograph stored in the third storage device in association with the employee ID. A means for notifying the transaction providing server of the establishment / non-establishment of the verification, and a transaction confirmation request designating the customer ID and transaction number from the employee terminal transferred from the transaction providing server when the verification is established Means for searching the first storage device and reading the location data of the customer terminal at the transaction date and time corresponding to the relevant transaction number, and from the second storage device when the verification is established, from the second storage device Means for extracting map data of a region on a map corresponding to the data and creating transaction point map data by combining marks indicating points corresponding to the position data , Upon establishment of the verification, in response to the transaction confirmation request, means for reading out image data of a customer's face photograph of the transaction date and time corresponding to the transaction number from the first storage device, and upon establishment of the verification, In response to a transaction confirmation request, the transaction point map data and customer face photo image data of the corresponding transaction date and time are transmitted to the employee terminal.
[0025]
Claim 6 Departure Tomorrow , 6. The online transaction system according to claim 5, wherein the employee terminal includes a GPS sensor, When an instruction to send the transaction confirmation request is received And said Obtain location data from GPS sensor And The employee ID, Above Image data from a digital camera Along with the GPS Send location data to the authentication service server Ruko It is characterized by.
[0026]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. 1 and 2 show the configuration of an online transaction system according to one embodiment of the present invention. The online system includes, for example, a trading server 1 operated by a company that handles financial products, such as trading transactions of stock securities and trading transactions of public and corporate bond securities, and an employee terminal 2 used by employees of the company, for example, , An authentication service server 3 operated by a connection service company that provides an Internet connection service such as an Internet connection service provider (ISP), a customer terminal 4 used by a customer as a customer, and communication between these terminals and servers Therefore, the communication network 6 such as the Internet, a wireless communication network 7 and a LAN 8 are connected to each other at any time or at any time.
[0027]
The communication network 6, the wireless communication network 7, the LAN 8, and the like are not limited to this, and an intranet, a WAN, a communication connection network that intervenes in data communication between arbitrary terminals, between servers, and between terminals and servers. A telephone communication network is also widely available. Further, the employee terminal 2 is not particularly limited to those connected to the corporate LAN 7 by wire or wireless, and the employee personally owns the transaction from the home through a wireless or wired communication line and communication network. It includes a computer and a wireless mobile phone that are used to access the server 1 for dealing with customers.
[0028]
Further, the customer terminal 4 will be described in which the customer can access the transaction server 1 through a wireless telephone line everywhere at the destination, but the customer terminal 4 can access the transaction server 1 through a wired telephone line or a BB communication line at home or office. Including wireless mobile phones.
[0029]
The transaction server 1 is a server operated by a company that handles financial products, and has equipment and functions necessary for trading financial products. As shown in FIG. 2, the main devices and functions of the transaction server 1 include communication processing unit 101 that performs communication processing with the employee terminal 2, the authentication service server 3, and the customer terminal 4, and correspondence to access from the employee terminal 2. , Transaction processing unit 102 for processing communication with authentication service server 3, correspondence to access from customer terminal 4, transaction history such as ID, password, customer information, transaction occurrence date, transaction content for each customer for customer management A customer database 103 for storing and managing, a market database 104 for storing and managing various data related to handled financial products, and a transaction information database 105 for storing and managing transaction contents. In the present embodiment, the database is shown as including a data writing, reading, updating process and data search function together with a storage device that simply stores data.
[0030]
The employee terminal 2 is a computer used by employees who deal with customers in a financial product handling company. A computer used by connecting to an internal network established by the company is also connected to the communication network 5 and authentication service by the employee from outside the company. A computer that accesses the transaction server 1 via the server 3 is also included. As shown in FIG. 2, the main devices and functions of the employee terminal 2 include a communication processing unit 201 that processes data communication through the communication network 5, the wireless communication network 6, or the in-house LAN 7, a data storage device 202, A control device 203 for performing arithmetic control processing of functions; a display, keyboard, and pointing device HMI (Human Machine Interface) 204 such as a user interface; a digital camera 205 for taking a photograph of the user's face; A GPS sensor 206 is provided for receiving a GPS (Grobal Positioning System) satellite signal and detecting the current position.
[0031]
The authentication service server 3 connects to the transaction server 1 after authenticating with a facial photograph, which will be described later, when accessing the transaction server 1 from an external employee terminal 2 or accessing the transaction server 1 from a customer terminal 4. Execute a connection service that allows As shown in FIG. 2, the authentication service server 3 includes, as main devices and functions, a communication processing unit 301 that performs network connection processing, a user management unit 302 that manages registration management of users such as customers, employees, and companies, User authentication processing unit 303 for performing user authentication based on customer face photo image data, image database 304 holding image data of individual user face photos, text database 305 holding user information, corresponding area A map database 306 that holds map data of (Japan as a whole, holding areas, etc.) is provided.
[0032]
The customer terminal 4 is a computer used by a customer who has concluded a sales contract such as buying and selling of stocks and buying and selling of public and corporate bond securities with a financial product trading company. As shown in FIG. Functions include a communication processing unit 401 that performs data communication with the transaction server 1, the authentication service server 3, and the like through the communication network 5, a data storage device 402, a control device 403 that performs arithmetic control processing of various functions, an HMI 404, and a user's face. A digital camera 405 and a GPS sensor 406 for taking a photograph are provided.
[0033]
Next, stock trading using an online trading system including the trading server 1, the employee terminal 2, the authentication service server 3, the customer terminal 4, and the communication network 5 connecting these functions. The operation processing will be described with reference to the sequence diagrams of FIGS.
[0034]
<1> Customer registration process
As shown in the sequence diagrams of FIG. 3 and FIG. 4, a customer who wants to apply for a stock trading transaction using the transaction server 1 passes from the customer terminal 4 to the authentication service server 3 through the wireless communication network 6 and the communication network 5. A browser is activated to connect and access the transaction server 1 (steps S1, S2). The connection to the authentication service server 3 is executed at the OS level simultaneously with the startup of the terminal 4 in a constant connection environment. In the case of dial-up connection, the customer himself / herself connects to an appropriate access point when necessary. Do by.
[0035]
Next, when the customer inputs the address URL of the homepage of the transaction server 1 and transmits a connection request, the customer terminal 4 is connected to the transaction server 1 via the authentication service server 3. Transaction server 1 accepts this access and transmits a homepage including a membership application button (steps S3 to S5).
[0036]
When the customer clicks the membership application button on the customer terminal 4 and transmits the membership registration application, the transaction server 1 transmits a page for new membership registration acceptance processing to the customer terminal 4 (steps S6 to S8).
[0037]
The customer enters the customer ID and password on the registration page displayed on the HMI of the customer terminal 4, and after entering the requested customer information such as name, address, and telephone number, the customer applies for registration. A transmission instruction is given (steps S9 and S10). The customer ID may be assigned in advance on the server 1 side, but here, the customer can set an arbitrary ID.
[0038]
When the customer gives the customer terminal 4 an instruction to send a registration application including the customer ID, password, customer information, etc., the control device 403 of the customer terminal 4 gives an instruction to the digital camera 405 to take a picture of the customer's face. The image data is acquired (step S11).
[0039]
In order to automate the photographing of a face photograph, a command for operating an API installed in the customer terminal 4 in advance may be incorporated in the membership application screen, and the API may be operated when a transmission instruction is received. When the transmission instruction is accepted, the instruction is once transmitted to the authentication service server 3, and a command for operating the API is sent from the authentication service server 3 to the customer terminal 4 so that the instruction is automatically executed. Good.
[0040]
Following this, the customer terminal 4 checks whether or not the photograph taken by the digital camera 405 is definitely a photograph of a human face by a simple pattern matching process (step S12). This simple confirmation process of whether or not it is a face photograph avoids a situation in which the photograph taken by the digital camera 405 is a face photograph and the orientation of the digital camera 405 is shifted and the face photograph is not photographed correctly. This is what we do. Therefore, the pattern matching of the image data is extremely rough, and there is a circular or elliptical outline corresponding to the outline of the face, and the inside of the outline is a color close to the skin color. In other words, there are black circles corresponding to the eyeballs and white small areas corresponding to the white eyes on the left and right.
[0041]
When it is confirmed that the photograph is a face photograph, the image data of the face photograph is transmitted from the customer terminal 4 to the transaction server 1 via the authentication service server 3 together with text data such as a customer ID, password, and customer information ( Step S13). However, if it is not possible to confirm that the image data of the facial photograph is due to the intentional fraud of the customer or the operation of the digital camera 405, the transmission of the image data is stopped and the registration procedure is interrupted. (Step S14).
[0042]
The authentication service server 3 verifies whether or not it is a new registration with respect to the customer registration data group sent from the customer terminal 4 to the transaction server 1. On the other hand, a process of confirming that it is image data of a face photograph is performed (step S15). If it is found that it is a data group for new registration application and it is confirmed that it is image data of a facial photograph, this facial photograph image data is associated with a customer ID and stored in the image database (DB) 304 ( Step S16). The authentication service server 3 transfers the text data such as the customer ID, password, and customer information to the transaction server 1 along with the registration of the image data (step S17).
[0043]
If the authentication service server 3 cannot confirm the facial photo, registration of the facial photo image data is stopped (step S18), and the transaction server 1 is notified of this (step S19).
[0044]
In the transaction server 1, when data such as a customer ID, password, and customer information is transferred from the authentication service server 3, it is registered and stored in the customer information database (DB) 103, and membership approval is applied to the customer terminal 4 that has applied for the application. Transmit (steps S20 and S21). On the other hand, when the transaction server 1 cannot confirm the face photo from the authentication service server 3 and receives a registration failure notification, the transaction server 1 notifies the application terminal customer terminal 4 of the admission denial (step S22).
[0045]
As a result, a new customer can apply online to the transaction server 1 from the customer terminal 4, while the transaction server 1 can register the image data of the facial photo in the authentication service server 3 at the time of enrollment. it can.
[0046]
In addition, in the above-mentioned enrollment continuation process, in order to increase the security with respect to the registration of a new face photo of the customer, after sending the image data of the face photo from the customer to the transaction server 1 and accepting the regular registration, You may make it transmit the image data of a face photograph with a customer information as a reference from the transaction server 1 side to the authentication service server 3, and you may make it preserve | save. Further, the position data detected by the GPS sensor 406 provided in the customer terminal 4 at the time of the first enrollment registration is also transmitted together with the image data of the customer's face photograph, and the position data when the registration procedure occurs in the transaction server 1 You may make it preserve | save as.
[0047]
<2> Financial product transaction processing
Next, procedural processing in the case where a regular registered customer conducts stock trading using the customer terminal 4 will be described with reference to the sequence diagrams of FIGS. The customer starts a browser from the customer terminal 4 and connects to the authentication service server 3 (steps S31 and S32).
[0048]
When the browser is activated and the connection with the authentication service server 3 is completed, the customer inputs the URL of the transaction server 1 to the customer terminal 4 and requests access (steps S33 and S34). Transaction server 1 transmits a page of the transaction screen to customer terminal 4 (step S35).
[0049]
The customer enters the user ID and password from the transaction acceptance screen of the customer terminal 4 and performs a login procedure (steps S36 and S37). The transaction server 1 compares the customer ID and password with the contents of the customer information database 104, and if the verification is established, transmits the page of the full transaction screen to the customer terminal 4 (steps S38 and S39).
[0050]
The customer inputs desired transaction conditions from the transaction screen of the customer terminal 4 and gives a transaction application transmission instruction (steps S40 and S41).
[0051]
When the customer gives a transaction condition transmission instruction to the customer terminal 4, the control device 403 of the customer terminal 4 gives a photographing instruction to the digital camera 405 to take a photograph of the customer's face and acquire the image data (step) S42). In this case as well, in order to automate the photographing of a face photo, a command for operating an API installed in the customer terminal 4 in advance may be incorporated in the transaction screen, and the API may be operated when a transmission instruction is received. When the transmission instruction is accepted, the instruction is once transmitted to the authentication service server 3, and a command for operating the API is sent from the authentication service server 3 to the customer terminal 4 so that the instruction is automatically executed. Good.
[0052]
Following this, the customer terminal 4 checks whether or not the photograph taken by the digital camera 405 is definitely a photograph of a human face by a simple pattern matching process (step S43). Then, when a simple confirmation of the face photograph is obtained, the customer terminal 4 causes the GPS sensor 406 to detect the position data (step S44). Then, the image data and position data of the face photograph are transmitted from the customer terminal 4 to the transaction server 1 through the authentication service server 3 together with the customer ID and transaction condition text data (step S45).
[0053]
On the other hand, in the confirmation process of the face photo in step S43, if the image data of the face photo cannot be confirmed due to the intentional fraud of the customer or the operation of the digital camera 405, the image data Is stopped and the online trading of stocks is interrupted (step S46).
[0054]
The authentication service server 3 verifies whether or not it is a transaction application against a group of data such as transaction conditions sent from the customer terminal 4 to the transaction server 1. The reference image data of the customer is extracted from the image database 304 based on the customer ID, the pattern matching process is executed on the data, and it is verified whether or not it is a true customer face photo (step S47).
[0055]
If the face photo collation is established in step S47, the authentication service server 3 registers the image data received this time together with the position data in the image database 304 in association with the customer ID. At this time, the transaction date and time stamp is also registered (step S48). At the same time, the authentication service server 3 transfers the customer ID and transaction application conditions to the transaction server 1 (step S49).
[0056]
If the verification of the face photo is established from the authentication service server 3 and the customer ID and the contents of the transaction conditions are transferred, the transaction server 1 accepts the transaction conditions and registers them in the transaction information database 105 in correspondence with the customer ID. Then, a settlement process is performed, and transaction completion is transmitted to the customer terminal 4 (steps S50 and S51). The customer confirms the transaction establishment and transaction condition display displayed on the customer terminal 4 (step S52).
[0057]
On the other hand, when the collation of the face photograph in Step S47 is not established, the transaction server 1 is notified of the failure in collation (Step S55). When the transaction server 1 receives the notification that the face photo collation is not established, the transaction server 1 notifies the customer terminal 4 that is the transaction request source of the transaction rejection due to the collation failure (step S56). The customer confirms the reason for the transaction rejection displayed on the customer terminal 4 (step S57). If the customer sees the rejection confirmation screen and wants to apply for a transaction again, he / she will have to redo the procedure from taking a face photo.
[0058]
<3> Operation from employee terminals
When an employee of a financial product transaction company accesses the transaction server 1 from the employee terminal 2 to check market conditions, transaction confirmation, etc., the access procedure to the transaction server 1 follows the processing procedure shown in the sequence diagrams of FIGS. . When an employee uses the employee terminal 2 to access the always-connected transaction server 1 via the LAN 7, a transaction screen is displayed (step S61), and the employee ID and password are entered to access the transaction server 1. (Step S62), a market information reference request is transmitted (Step S63). On the other hand, after verifying the ID and password, the transaction server 1 transmits stock market information from the market database 105 to the requesting employee terminal 2 (step S64). The employee can also access the transaction server 1 from outside the company via the wireless or wired communication network 5, but in this case, the wireless communication is performed by the same procedure as when the customer accesses from the customer terminal 4. The employee terminal 2 is connected to the authentication service server 3 through a communication network or a wired communication network, and the URL of the transaction server 1 is input from a browser and accessed.
[0059]
When the employee operates the stock transaction by looking at the market information of the employee terminal 2 (steps S65 and S66), a face photograph is taken by the digital camera 205 to confirm the identity (step S67). In addition, the automation of the photographing of the face photo may be a mechanism in which an instruction for operating the API incorporated in the employee terminal 2 is incorporated in the transaction screen in advance and the API is activated when a transmission instruction is received. When a transmission instruction is received, the instruction may be once transmitted to the authentication service server 3, and a command for operating the API may be sent from the authentication service server 3 to the employee terminal 2 to automatically execute the instruction.
[0060]
If the face photograph of the employee who performs the operation is taken and the image data is acquired, a simple face photograph confirmation process is performed at the employee terminal 2 (step S68). If the acquired image data can be confirmed to be a human face, the position is detected by the GPS sensor 206 and the position data is acquired (step S69).
[0061]
Next, the employee terminal 2 transmits the acquired face photograph image data and position data together with the employee ID and operation details to the transaction server 1 (step S70). Of the various data received from the employee terminal 2, the transaction server 1 transfers the image data and the position data together with the employee ID to the authentication service server 3 (step S71).
[0062]
Whether the authentication service server 3 is a face photograph of a qualified employee who performs pattern matching with the image data of the employee's reference face photograph registered in advance in the image database 304 for the image data transferred from the transaction server 1 Whether or not is checked (step S72).
[0063]
If this face photo collation is established, the image data of the current face photo and the position data of the operation location are associated with the employee ID, and a time stamp is also added and registered in the image database 304 (step S73). At the same time, the authentication service server 3 notifies the transaction server 1 that face photo collation has been established (step S74).
[0064]
When the transaction server 1 receives the verification confirmation notification from the authentication service server 3, the transaction server 1 accepts the transaction instruction received from the employee terminal 2, executes the stock transaction, and associates the transaction information database 104 with the employee ID that performed the operation. Register (step S75). At the same time, the transaction server 1 transmits a transaction execution confirmation to the employee terminal 2, and the employee confirms the transaction he / she performed on the screen display of the employee terminal 2 (steps S76 and S77).
[0065]
On the other hand, when the collation of the face photograph in step S71 is not established, the transaction server 1 is notified of the collation failure (step S78). The transaction server 1 that has received the notification that the verification is not successful transmits a message to that effect to the employee terminal 2 and makes the operator confirm that the access is made by an unqualified person (steps S79 and S80).
[0066]
As a result, it is possible to reliably prevent unauthorized employees and outsiders from accessing the transaction server 1 and operating financial product transactions.
[0067]
<4> Processing when trouble occurs
When troubles occur due to online transactions and there is a need to confirm the relevant transaction between the customer and the employee, the financial product trading company side allows the employee to access the authentication service server 3 from the employee terminal 2, and The customer's face photo and location map when applying for a transaction can be obtained and presented to the customer. The processing procedure in this case will be described with reference to the sequence diagrams of FIGS.
[0068]
The employee connects the employee terminal 2 to a communication network or LAN, performs a login procedure, and requests a trouble processing screen (steps S91 to S93). In response to this, the transaction server 1 transmits a trouble processing screen to the requesting employee terminal 2 (step S94).
[0069]
The employee inputs the transaction number in which trouble occurred on the trouble processing screen of the employee terminal 2 and gives a transmission instruction (steps S95 and S96).
[0070]
In response to this, the employee terminal 2 executes automatic photographing of a face photograph by the digital camera 205 and confirms that the photograph is a face photograph with respect to the image data of the photographed face photograph (steps S97 and 98). If the employee terminal 2 can confirm that the photograph is a face photo, the GPS sensor 206 subsequently detects the position, and the image data and position data of the face photo are traded together with the trouble case transaction number data, the corresponding customer ID, and the employee ID. It transmits to the server 1 (steps S99, S100).
[0071]
When the transaction server 1 receives the trouble processing request from the employee terminal 2, the transaction server 1 transfers the image data and the position data of the current facial photograph to the authentication service server 3 to confirm the qualification of the employee and register the case (step S101). .
[0072]
The authentication service server 3 collates the image data of the face photograph of the corresponding employee received from the transaction server 1 with the reference image data of the corresponding employee registered in the image database 304 (step S102). If the collation of the employee's face photo is established, it is confirmed that the access is from a regular employee, and the image data and position data of the face photo at the time of the access are registered in the image database 304, and the transaction server 1 is notified of the establishment of verification (steps S103 and S104).
[0073]
In the transaction server 1, if the notification of the verification of the face employee is received from the authentication service server 3, the transaction information database 105 is stored based on the transaction number and customer ID of the trouble case previously received from the employee terminal 3. Search is performed, the corresponding transaction content is extracted, and the transaction content is transmitted to the requesting employee terminal 2 (steps S105 and S106).
[0074]
In the face photo collation in step S102, if the collation is not established, the authentication service server 3 notifies the transaction server 1 that the authentication is not established (step S107). In response to this, the transaction server 1 notifies the requesting employee terminal 2 of the operation by the ineligible person, and confirms it on the employee terminal 2 of the employee (steps S108 and S109). If the employee is a regular employee, the user sees this display, accesses again, or takes a face photo again.
[0075]
In the authentication service server 3, if the collation of the employee's face photo is established in step S102, the image database 304 is searched based on the customer ID related to the trouble item transaction and the transaction date and time, together with the above-described notification of the collation establishment. Then, the image data of the customer's face photograph and the position data of the transaction point at the corresponding transaction are read (step S110).
[0076]
Subsequently, the authentication service server 3 searches the map database 306 for the read position data, reads the map data of the surrounding area including the corresponding point, and combines the mark indicating the corresponding point with the transaction point map Is created (step S111).
[0077]
Subsequently, the authentication service server 3 transmits the extracted image data of the customer's face photograph at the time of the transaction and the map data of the transaction point to the requesting employee terminal 2 (step S112).
[0078]
The employee terminal 2 displays the transaction contents 11 of the trouble case received from the transaction server 1, the customer's face photograph 12 at the time of the transaction received from the authentication service server 3, and the map 12 of the transaction point, and presents them to the employee. In response to instructions, the contents are printed out.
[0079]
Thereby, in the online transaction system of the present embodiment, even if a customer with a valid qualification applies for a transaction, the face photo is collated, and the face photo and the position data at the time of transaction application are registered, In addition to improving the reliability of online transactions, even if a trouble occurs once, it will be possible to respond to customers by showing a face photo of the relevant date and time and a map of the vicinity of the relevant point based on position data.
[0080]
In addition, even when an employee accesses the transaction server 1 from the employee terminal 2, it is possible to perform fraud on the employee side by collating with a facial photograph and registering the image data and position data of the facial photograph at the time of access to the authentication service server 3 Trading operations can be suppressed, and reliable online transactions can be operated.
[0081]
In addition, since the image data and map data of facial photographs have a large data capacity, if the transaction server 1 side is to bear the responsibility for collation, the load on the transaction server 1 becomes enormous, which is a facility for small businesses. However, even if it is a small company, it is highly reliable by paying a service fee by making the authentication service server 3 bear the responsibility for collation of face photos and map creation. There is a merit to be able to offer online transactions to customers.
[0082]
In the above-mentioned online transaction system embodiment, the map of the transaction point is created along with the collation of the face photo so as to enhance the evidence materials at the time of trouble occurrence, but in the case of a simpler system The authentication service server 3 is a system that performs only a face photo collation service, or the authentication service server 3 is a system that performs only a face photo collation service and a customer face photo output service at a corresponding date and time when a trouble occurs. You can also Also, the authentication of the employee's face photo can be omitted if a simpler system is required.
[0085]
【The invention's effect】
According to the network connection service method and the network connection service device of the present invention, For each transaction When applying for a customer transaction at that time Customer terminal location data to authentication service server Of the customer at that time By registering it together with the image data of the face photograph and outputting the face photograph of the customer at the time of the trouble and the map of the transaction application point, the customer can be easily handled when the trouble occurs. In addition, a mobile terminal can be used by a customer as a customer terminal, enabling highly reliable ubiquitous online transactions.
[0086]
In addition, according to the network connection service method and the network connection service device of the present invention, unauthorized transactions by employees can be prevented by carrying out collation using facial photographs even when employees access the transaction server. Even if you are not in an online trading company, you can access the trading server even when you are away from home, making it possible to respond quickly and flexibly to online transactions, and to promote online transactions.
[0087]
Furthermore, according to the network connection service method and the network connection service device of the present invention, the employee performs collation with a facial photograph when the employee accesses the transaction server, and also transmits the position data of the employee terminal at the time of access. It is possible to enrich the evidence that can be used when fraudulent transactions are detected, and it is possible to more effectively suppress fraudulent operations by employees.
[0090]
Of the present invention Online trading system According Company When employees access the transaction server, they can take and send a photograph of the employee's face and use it for collation of the face photograph on the authentication service server side, contributing to the prevention of unauthorized transactions on the employee side. Even if you are not in an online trading company, you will be able to access the trading server even when you are away from home, and you will be able to respond quickly and flexibly to online transactions, and you will be able to activate online transactions.
[0091]
The present invention Online trading system According Company When an employee accesses the transaction server, the photograph of the employee's face can be taken and transmitted, which can be used for collation of the face photograph on the authentication service server side, contributing to the prevention of unauthorized transactions on the employee's side. By registering the location data of the point where you accessed the transaction server on the authentication service server side, you can enhance the evidence that can be used when an employee detects fraud, so that the unauthorized operation by the employee can be more effectively suppressed. Become.
[Brief description of the drawings]
FIG. 1 is a block diagram showing a hardware configuration of an online transaction system according to one embodiment of the present invention.
FIG. 2 is a block diagram showing a functional configuration of an online transaction system according to one embodiment of the present invention.
FIG. 3 is a first sequence diagram of customer registration processing by the online system according to the embodiment.
FIG. 4 is a second sequence diagram of customer registration processing by the online system according to the embodiment.
FIG. 5 is a first sequence diagram of stock transaction processing by the online system according to the embodiment.
FIG. 6 is a second sequence diagram of stock transaction processing by the online system according to the embodiment.
FIG. 7 is a sequence diagram 3 of stock transaction processing by the online system of the above embodiment.
FIG. 8 is a sequence diagram 1 showing a procedure of a transaction operation by an employee using the online system according to the embodiment.
FIG. 9 is a second sequence diagram illustrating a procedure of a transaction operation by an employee using the online system according to the embodiment.
FIG. 10 is a first sequence diagram illustrating a procedure of a trouble handling operation by an employee using the online system according to the embodiment.
FIG. 11 is a second sequence diagram illustrating a procedure of a trouble handling operation by an employee using the online system according to the embodiment.
FIG. 12 is a sequence diagram 3 showing a procedure of a trouble handling operation by an employee using the online system according to the embodiment.
[Explanation of symbols]
1 Trading server
2 Employee terminal
3 Authentication service server
4 Customer terminals
5 Communication network
6 Wireless communication network
7 LAN
101 Communication processing unit
102 Transaction Processing Department
103 Customer information database
104 Market database
105 Transaction Information Database
201 Communication processing unit
202 Data storage device
203 Controller
204 HMI
205 digital camera
206 GPS sensor
301 Communication processing unit
302 User management unit
303 User authentication processing unit
304 Image database
305 text database
306 Map data
401 Communication processing unit
402 Data storage device
403 Controller
404 HMI
405 Digital camera
406 GPS sensor

Claims (6)

A first storage means for storing the location data of the customer terminal at the time of applying for the transaction and the image data of the customer's face photo at the time of applying for the transaction, corresponding to the customer ID, transaction conditions and date for each transaction ; the Bei Etako computer and a second storage means for storing data,
Receiving a login with a predetermined employee ID from the employee terminal;
Receiving a transaction confirmation request specifying a customer ID, transaction conditions and date from the employee terminal;
In response to the transaction confirmation request, reading the location data of the customer terminal at the time of the corresponding transaction application stored in correspondence with the customer ID, transaction conditions and date and time from the first storage means;
Extracting the map data of the area on the map corresponding to the position data from the second storage means, and creating transaction point map data by combining the marks indicating the points corresponding to the position data;
In response to the transaction confirmation request, reading out image data of a customer's face photograph at the time of the corresponding transaction application stored in correspondence with the customer ID, transaction conditions and date and time from the first storage means;
A network connection service method, comprising: transmitting the transaction point map data at the time of applying for the transaction and image data of a customer's face photograph to the employee terminal. A third storage means for storing image data of a reference face photograph of the employee in correspondence with the employee ID;
The computer
Receiving image data of an employee's face photograph sent from the employee terminal;
Collating image data of the employee's face photograph with image data of a reference face photograph of the corresponding employee held in the third storage means in association with the employee ID;
The network connection service method according to claim 1, wherein when collation of the image data of the face photograph is not established, a step of notifying the employee terminal that the collation is not established is performed. A communication processing unit that communicates with employee terminals via a communication network;
Its date for each transaction, the customer ID, the relevant position data and the corresponding transaction at the customer's face photograph image data of the transaction at the customer terminal for storing user data storage device,
A map data storage device for storing map data of a predetermined area;
In response to a transaction confirmation request specifying a customer ID and transaction date and time from the employee terminal, a data search unit that searches the user data storage device and reads the location data of the customer terminal at the corresponding transaction date and time,
A transaction point map creating unit that extracts map data of a region on a map corresponding to the position data from the map data storage device, and creates transaction point map data by combining marks indicating points corresponding to the position data; ,
In response to the transaction confirmation request, a user image search unit that reads image data of a customer's face photo at the transaction date and time from the user data storage device,
In response to the transaction confirmation request, the network connection service device transmits the transaction point map data and customer face photo image data of the transaction date and time to the employee terminal. An employee image data storage device for storing image data of an employee's face photo in association with the employee ID;
An employee image collation unit that collates image data of an employee's face photograph sent from the employee terminal with image data stored in the employee image data storage device in association with the employee ID;
4. The network connection service device according to claim 3, wherein when the collation of image data of the employee's face photograph by the employee image collating unit is not established, the employee terminal is notified of the collation failure. Customer ID for each transaction, the transaction number and the appropriate transaction application when the position data and the corresponding transaction application when the customer face photograph first storage device storing the image data of the customer terminal in association, stores map data The second storage device, the authentication service server provided with the third storage device that stores the image data of the reference face photograph of the employee corresponding to the employee ID, and the correspondence with the customer ID and the transaction number An online transaction system configured by connecting a transaction providing server having a transaction information storage device that stores transaction details and an employee terminal via a network,
The employee terminal
A digital camera,
Means for accepting a transaction confirmation request transmission instruction input;
Means for accepting input of employee ID and transaction to be confirmed;
Means for receiving an instruction to send a transaction confirmation request;
Means for accessing the transaction providing server via the network;
Means for capturing image data captured by the digital camera when receiving an instruction to send the transaction confirmation request;
Means for transmitting the employee ID and digital camera image data to the transaction providing server,
The transaction providing server includes:
Means for accepting login by a predetermined employee ID from the employee terminal;
Means for accepting a transaction confirmation request designating a customer ID and transaction number from the employee terminal, and image data of the employee's face photo;
Means for transferring the transaction confirmation request and the image data of the employee's face photo to the authentication service server;
Means for notifying the employee terminal of the failure of verification when receiving a notification of failure of verification of the image data of the employee's face photo from the authentication service server;
When receiving a notification that image data of the employee's face photo has been verified, the transaction information is extracted from the transaction information storage device based on the customer ID and transaction number, and transmitted to the employee terminal. Means and
The authentication service server
The image data of the face photograph of the employee transferred from the transaction providing server is collated with the image data of the reference face photograph stored in the third storage device in association with the employee ID, and the collation is established. / Means for notifying the transaction providing server of failure,
In response to the transaction confirmation request specifying the customer ID and transaction number from the employee terminal transferred from the transaction providing server when the verification is established, the first storage device is searched and the corresponding transaction number is set. Means for reading the location data of the customer terminal at the corresponding transaction date and time;
When the verification is established, map data of a region on the map corresponding to the position data is extracted from the second storage device, and transaction point map data is created by combining marks indicating points corresponding to the position data. Means to
Means for reading the image data of the customer's face photo of the transaction date and time corresponding to the transaction number from the first storage device in response to the transaction confirmation request when the verification is established;
Online transaction comprising: means for transmitting, to the employee terminal, the transaction point map data of the transaction date and image data of a customer's face photo in response to the transaction confirmation request when the verification is established system.   The employee terminal includes a GPS sensor, and when receiving a transaction confirmation request transmission instruction, acquires position data from the GPS sensor, and the position data from the GPS together with the employee ID and image data from the digital camera. The on-line transaction system according to claim 5, wherein: is transmitted to the authentication service server.

Images