JPH0446027B2 - - Google Patents

Description

[Detailed Description of the Invention] [Industrial Application Field] The present invention relates to an initial setting method in end-to-center communication, and more specifically, the present invention relates to an initial setting method in end-to-center communication, and more specifically, the present invention relates to an initial setting method in end-to-center communication, and more specifically, the present invention relates to an initial setting method in end-to-center communication. It is applied to communication between the terminal side that inputs information such as data, etc., and the center side that processes product orders, orders, finalization, and statistical data creation, etc., and is an initial technology that realizes ease of input and high security functions on the terminal side. Regarding the setting method.

[Background Art] In recent years, with the widespread use of credit cards and cash cards, a cashless society has rapidly developed and is bringing about major changes in social life.

Generally, in a card system, when a card company (credit company, bank, etc.) issues a card to a member, at least a membership number to prove the membership and a pin number to confirm the identity are specified.

Therefore, by using the member/identity verification functions of this card system, it is possible to use not only a cashless system but also an ordering system and POS system between the terminal given to the member and the center.
It becomes possible to construct a customer information management system. In other words, in the distribution industry, in response to the diversification and individualization of today's consumer needs, customer information such as who purchased what, where, when and how much was purchased, as well as product and product information.
Collecting and managing sales information has extremely important meaning and value, but it is possible to build a new system by adding software for ordering, POS, and customer information management to the traditional credit card system software. becomes possible.

In addition, in conventional credit card systems, terminal devices such as card readers were installed only at each member store, but as the price of semiconductor devices and other hardware has declined, the cost of the terminal devices themselves has been reduced. Conditions are also being established to allow terminal equipment to be lent or transferred to a large number of individual members.

Therefore, as shown in Figure 6, each card member owns a terminal device and orders products while referring to mail order catalogs, leaflets, magazine listings, etc. sent from the center. If the center side creates member files, order/payment files, product master files, etc. and performs order/payment operations and statistical data creation operations, extremely accurate, detailed, and efficient data collection and processing can be achieved. It is possible to configure an ordering system, POS, and customer information management system.

[Problems to be Solved by the Invention] By the way, when a terminal device is lent or transferred to an individual member to communicate with the center side, the following confirmation always needs to be performed.

Confirmation that the terminal device is a legitimate terminal loaned from the center side (terminal confirmation). This is possible by checking the terminal number data uniquely given to the device.

Confirmation that the member is confirmed by the center and has access rights to the center (access rights confirmation). This is possible by checking membership number data such as card number.

Confirmation that the input was made by the member himself/herself (identity verification). This is possible by confirming personal identification data such as a personal identification number that only the person himself or herself knows.

In other words, on the premise that these checks are carried out, the center side communicates with each terminal device, accepts various data such as order and questionnaire data as legitimate, and processes and records the data. become.

However, if the member has to input all of the above confirmation data into the terminal device at the start of communication, it takes time and effort to enter the confirmation data before inputting the required data such as order/questionnaire data. This results in poor operability. By the way, membership numbers are generally given as 16-digit numbers, and entering this together with a terminal number can be a very tedious task.

Additionally, since cards generally have a membership number written on them, there is a possibility that this data could be stolen.
If someone other than the legal owner of the card and terminal device steals the terminal device and attempts to conduct unauthorized communication with the center, the means to prevent this will depend solely on personal identification data such as a PIN number. Problems arise in terms of security.

Therefore, an object of the present invention is to provide an initial setting method that solves the above problems by executing a predetermined communication protocol and storing initial data at the initial setting stage between the terminal device and the center. Created.

[Means for Solving the Problem] The basic principle of the present invention is shown in FIG. After the settings, the terminal device side will input or automatically transfer the terminal confirmation data given to the terminal device in advance to the center side, and the access rights confirmation data and personal identification data given to the owner of the terminal device will be transferred. The center side that receives the input data creates function data using a predetermined encryption algorithm from the terminal confirmation data and access right confirmation data, or from them and the person identification data, and then converts the function data and the person identification data. At the same time, the function data is automatically transferred to the terminal device side, and the terminal device side that receives the function data stores the function data.When communication starts thereafter, the terminal device side transfers the function data to the center side. The present invention relates to an initial setting method for end-to-center communication, which is characterized by automatic data transfer.

[Operation] In the present invention, after the initial setting mode is set, terminal confirmation data, access right confirmation data, and main recognition data are transferred from the terminal device side to the center side.

Here, the terminal confirmation data corresponds to the number data, etc. that is given to the terminal device in advance when the terminal device is lent or transferred from the center side. A means for reading out and automatically transferring data stored in the storage means of the device is adopted.

Access right confirmation data corresponds to data such as a membership number that identifies a person to whom the center side has granted the right to communicate with the center side, and is data that is used to identify a person who has been granted the right to communicate with the center side, such as a member number. Input is transferred by reading input.

Personal identification data corresponds to data known only to the person, such as a personal identification number or fingerprint data, or only to the person and the center, and input transfer is performed by key input, reading input with a reader, scanner input, etc. be done.

Note that the order of these inputs can be arbitrarily set based on the communication protocol in the initial setting mode and the processing procedure on the center side.

In this way, each piece of data transferred to the center side is used as basic data for encryption.
That is, the center side has a predetermined encryption algorithm, creates function data from the terminal confirmation data and access right confirmation data, or from the three data mentioned above, and stores the function data in a file. . Further, the center side separately stores only the personal identification data in a file in association with the above-mentioned function data.

After the center side completes the storage, the function data is automatically transferred to the terminal device side. Then, the terminal device that has received this function data stores the function data in its storage means, thereby canceling the initial setting mode.

As a result of the above, function data is stored on the terminal device side, and the same function data and personal identification data are stored on the center side.

Communication between the terminal device and the center thereafter is executed as follows.

First, a call is made from the terminal device to the center,
When the communication line is connected, the terminal device reads the function data from its storage means and automatically transfers it to the center side, and the receiving center side compares it with the function data stored in the file to check whether it is the same. Then, when personal identification data is input and transferred from the terminal device, it is checked to see if it is the same by comparing it with the personal identification data stored in the file in correspondence with the function data checked above. be done.

Therefore, on the terminal device side, it is sufficient to input only the personal identification data, and furthermore, on the center side, based on the double data of function data and personal identification data, it is possible to confirm that the access is from the rightful owner of the terminal device. Once confirmed, permission to input various data can be granted. In other words, the input procedure of the terminal device is simplified, and it is possible to prevent the terminal device from being stolen when inputting order data, etc., and a more advanced security function can be provided.

[Example] Hereinafter, an example of the present invention will be described using FIGS. 2 to 5.

FIG. 2 is a diagram showing a system circuit diagram of the terminal device and a communication system with the center.

In the figure, reference numeral 1 denotes a terminal device lent or transferred from a credit card company to a credit card owner (member), and is connected together with a telephone 4 to the member's subscriber telephone line 2 via a rosette or the like 3. Note that L1 to Ln are similar systems connected to subscriber telephone lines of each member.

This terminal device 1 consists of a microcomputer control system, which stores in advance the operation program of the terminal system, terminal number data, and various message data for display, and further includes a ROM 5 having a memory area for storing cryptographic function data, and an updater. RAM6, which stores various input/output data,
A liquid crystal display unit (LCD) 7 for displaying messages, etc., a printer unit 8, a keyboard unit 9, a communication control unit (CCU) 10, a modem unit (MODEM) 11, a network control unit (NCU) 12,
It has a configuration in which the barcode reader unit 13 is connected to the bus of the CPU 14, and the CPU 14 is connected to the ROM 5.
The system is controlled by reading and executing the program. The external appearance of this terminal device 1 is shown in FIG. 3, and includes a power switch 15, a keyboard section 9a consisting of a numeric keypad and various function keys,
LCD display section 7a, printer recording paper outlet 8a,
A cover section 8b for replacing recording paper is provided, and
A barcode reader pen 13a is connected.

On the other hand, the center 20 includes a communication device that performs communication with each terminal device 1 described above through a telephone line, a communication device that performs communication with mail order companies/department stores 21 and credit card companies 22, a processing device for various data, and a member data processing device. It is equipped with various files and masters that record data such as orders, questionnaires, etc.

In the above system, the initial setting method between the terminal device 1 and the center 20 according to the present invention will be explained with reference to the communication sequence flow shown in FIG.

First, when the terminal device 1 is connected to the subscriber exchange 3 and the installation is completed, dial data for the center 20 is input using the numeric keypad on the keyboard section 9a of the terminal device 1 to make a call to the center 20, and a line is established between the center 20 and the line. to connect. This operation is similar to a normal telephone line connection, and the CCU10,
This is executed under the control of MODEM 11 and NCU 12.

Next, when the initial setting mode is selected using the test key, the code data for the mode setting is transferred to the center 20, and the center 20 uses a program to process the initial setting data and execute the communication procedure at the time of initial setting. Set.

Here, the terminal device 1 reads terminal number data stored in the ROM 5 in advance and automatically transmits and transfers the data to the center 20.

On the center 20 side, the received terminal number data is checked against the terminal device number registered in advance in the file when lending or transferring the terminal device 1, and if the corresponding terminal device number is registered, the data is received. The terminal number data obtained is temporarily stored in another storage means.

Once the terminal number data has been confirmed and stored,
The center 20 transfers the display instruction code to the terminal device 1. This code is a code for instructing the terminal device 1 to input the membership number. Upon receiving this code data, the terminal device 1 reads the corresponding message data from the ROM 5, transfers it to the LCD unit 7, and displays it on the LCD. For example, the message ``Kaiinbangou wo do zo'' is displayed on the section 7a. Furthermore, if the terminal number data is not registered at the center 20,
Disconnect the line and reject the initial settings.

After confirming the above display, the member enters the membership number assigned to his or her credit card using the numeric keypad of the terminal device 1. Incidentally, if a barcode corresponding to the membership number is attached to the credit card, the barcode can also be read and input using the barcode reader pen 13a.

Membership number data entered in this way is
The RAM 6 is temporarily stored and transferred to the LCD unit 7, where the member number is displayed on the LCD display section 7a, and when the member confirms that the member number has been entered correctly from the display, the member presses the confirmation key. .

When the ON of the confirmation key is detected, the member number data stored in the RAM 6 is read out and transmitted and transferred to the center 20.

The center 20 that receives this member number data checks it against the member number that was registered in advance in the file when the credit card was given to the member, and if the same member number is registered, the same member number is temporarily stored in another storage means, and the display instruction code is transferred to the terminal device 1. This display code is a code for instructing the terminal device 1 to input the PIN number, and the terminal device 1 that receives this code data reads the corresponding message data from the ROM 5, transfers it to the LCD unit 7, and displays it on the LCD. For example, a message such as ``I'm sorry for the inconvenience'' is displayed on the display section 7a.

On the other hand, if the member number data is not registered at the center 20, the line is disconnected and the initial setting is rejected. Alternatively, a message urging retry may be displayed on the LCD display section 7a, and the line may be disconnected if correct membership number data is not transferred even after several attempts.

After confirming the above display, the member enters the password using the numeric keypad of the terminal device 1. This password data is temporarily stored in the RAM 6, and is transferred to the LCD unit 7, where the membership number is displayed on the LCD display section 7a. When the member confirms that the membership number has been entered correctly from the display, the member presses the confirmation button. You will have to press

When the ON of the confirmation key is detected, the password data stored in the RAM 6 is read out and transmitted and transferred to the center 20.

The center 20 that receives this PIN data checks it against the PIN that was registered in advance on the film when the credit card was given to the member, and if the same PIN is registered, the same PIN is used. is temporarily stored in another storage means.

Through the above communication sequence, the data of the terminal number, member number, and pin number are stored in the file of the center 20. At this point, the center 20 stores the cryptographic function data from the member number data and the terminal number data. Create. The procedure for creating this cryptographic function data is blackboxed, but generally a function value is calculated from three variables: a random number, a member number, and a terminal number, and this is used as cryptographic function data.

The cryptographic function data created in this way is
The password is stored in a file in correspondence with the password data stored above, and this file is used as a master for member data management.

After completing the above data processing, the center 20 reads the cryptographic function data and transmits it to the terminal device 1.

The terminal device 1 that has received the cryptographic function data stores the data in the ROM 5, and by this storage, transfers the initialization end code to the center 20 and clears the display screen. Further, the center 20 that has received the initialization end code transfers the initialization end confirmation code to the terminal device 1 and ends the initialization mode.

As a result of the above, the cryptographic function data is stored in the ROM 5 of the terminal device 1, and the cryptographic function and PIN data are stored in correspondence with the terminal number and membership number data in the member data management master of the center 20. .

Next, the communication sequence between the terminal device 1 and the center 20 when ordering products after initial settings is explained in the fifth section.
This will be explained with reference to the figures.

In this ordering process, the premise is that Center 2
0 or mail order retailer/department store 21 must send to each member a pamphlet with information on various products and a barcode attached to each product.
Each member looks at this pamphlet and orders the product to be purchased from the center 20 using the terminal device 1.

When making an application, first, in the same way as when starting the initial settings, dial data for the center 20 is input using the touch key on the keyboard section 9a of the terminal device 1 to call the center 20.
and connect the line.

When checking the line connection on terminal device 1,
Cryptographic function data is read from the ROM 5 and automatically transmitted and transferred to the center 20.

The center 20 that receives this cryptographic function data checks whether or not the cryptographic function data is registered in the member data management master, and if the same cryptographic function data is registered, the terminal device 1
Transfer the display instruction code to. This code instructs the user to enter the same PIN number as at the time of initial setup, and the terminal device 1 that receives the code reads the message data corresponding to the code from the ROM 5, transfers it to the LCD unit 7, and displays it on the LCD display. 7a
display a message prompting you to enter your PIN. On the other hand, if the cryptographic function data is not registered, the center 20 disconnects the line and rejects the subsequent procedure.

Following the above instructions, the member enters his/her personal identification number using the numeric keypad, and this input data is temporarily stored in the RAM 6, transferred to the LCD unit 7, and displayed on the LCD display section 7a.
Here, when the member confirms that the input data is accurate and presses the confirmation key, the password data in the RAM 6 is read out and transmitted and transferred to the center 20 when the confirmation key is turned on.

At the center 20 that received the PIN data,
In addition to checking the password against the password stored in the member data management master, the password is also checked to see if it is the password stored in correspondence with the cryptographic function data, to confirm that they are the same. Input permission is determined based on the following conditions.

Based on this determination, the center 20 transmits and transfers the display instruction code to the terminal device 1. This code is for displaying a message prompting the mode selection input, and the terminal device 1 that receives this code displays, for example, "mode selection".
Shitekudasai. The message data such as "1. Questionnaire 2. Questionnaire" is read from the ROM 5, transferred to the LCD unit 7, and displayed on the LCD display section 7a.
to be displayed.

Here, the order mode is selected and "1" is inputted from the numeric keypad.

When this input is received, the terminal device 1 transmits and transfers the order mode code to the center 20, and the center 20 that receives this sets an order reception data processing procedure.

Here, the center 20 transmits and transfers the display instruction code to the terminal device 1. This code is related to displaying message data prompting the member to accept the order and input the ordered product on the terminal device 1, and the ROM 5 of the terminal device 1 contains, for example, "Chiyumon wo uketsukemasu. Gochiyumon no shyouhin wo dozo". Message data such as this is stored, and the same data is transferred to the LCD unit 7 and displayed on the LCD display section 7a.

In accordance with this instruction, the member uses the barcode reader pen 13a to read the barcode attached to the desired product on the pamphlet, and further inputs the number of items to be ordered. This input data is temporarily stored in the RAM 6, and the product code number corresponding to the input data is displayed on the LCD display section 7a.
Message data relating to the payment method is read from the ROM 5 and prompts the user to select the payment method.
In addition, this message data is, for example, "Oshiharaikubunha 1.Itsukatsu 2.Bunkatsu 3.Bonus"
The member selects a payment method by inputting information using keys "1" to "3", and the data is also stored in the RAM 6.

The member checks whether the above input is appropriate on the LCD display section 7a, and if it is appropriate, presses the confirmation key.
By detecting ON of the confirmation key, the ordered product of RAM6
Data such as the number of items and payment method are read and transmitted to the center 20.

If the order details need to be corrected, the correction can be made by pressing the correction key to erase the data in the RAM 6 and re-entering the data.

At the center 20 that received this order data,
The order data is stored in the address of the order file that is associated with the member data that placed the actual order in the member data management master.

The above-mentioned order data is entered and transmitted in the same manner for each ordered product, and the member presses the end key when all orders for the desired products have been placed.

By detecting the ON of this end key, the terminal device 1 transfers the order completion code to the center 20 to notify the end of the order, but the center 20 that receives this sends the display instruction code related to the order completion message to the terminal device. 1, and the terminal device 1 reads the message data to that effect from the ROM 5 and displays it on the LCD display section 7a for a certain period of time.
Clear the data in RAM6, disconnect the line, and terminate communication related to ordering.

Incidentally, before clearing the data in the RAM 6, the data can be transferred to the printer unit 8 to be printed out on recording paper, and the hard copy can be used as an order confirmation.

Also, although the above sequence was explained for the product order mode, the survey mode also differs only in the pamphlet content and mode settings.
On the center 20 side, questionnaire data can be recorded by using almost the same procedure as described above.

Regarding the exchange of data between the center 20, mail order companies/department stores 21, and credit card companies 22, please refer to the second
As shown in the figure and FIG. 6, the mail order company/department store 21 takes out the order from the center 20 and returns the credit card payment notice to the center 20, and the credit card company 22 takes out the credit card payment from the center 20, which is different from the conventional method. A credit system is established. Furthermore, since the center 20 can record each member's product order data and survey data in a file, it can supply statistical data to mail-order companies, department stores 21 and credit card companies 22, which together with the ordering system provide an extremely efficient POS system.・It becomes possible to build a customer information management system.

[Effects of the Invention] As described above, in the initial setting method for end-to-center communication of the present invention, function data is created from terminal confirmation data and access right confirmation data, or from them and personal identification data, On the terminal device side of the function data, the function data and personal identification data are stored on the center side.

Therefore, in subsequent communications, it is possible to automatically transfer function data from the terminal device to the center at the start of communication, and by simply inputting personal identification data from the terminal, the center can confirm the terminal. You can confirm access rights and identity, and use membership-based ordering communication systems, POS,
When applied to a customer information management system, the input procedure on the terminal side can be simplified. In addition, since it is possible to construct a double verification system in which the center side grants communication execution permission by verifying function data and personal identification data, it has the advantage of ensuring high security when applied to ordering communication systems, etc. have.

[Brief explanation of the drawing]

Fig. 1 is a diagram showing the communication sequence flow during initial setting showing the basic configuration of the present invention, Fig. 2 is a diagram showing a system circuit diagram of the terminal device and the communication system with the center, etc., and Fig. 3 is a diagram showing the terminal device. Figure 4 is a diagram showing the communication sequence flow during initial settings between the terminal and the center, and Figure 5 is a diagram showing the communication sequence flow between the terminal and the center when ordering products after initial settings. 6 are diagrams showing an outline of the ordering/placing/POS/customer information management system.

Claims (1)

[Claims] 1. In the initial setting between the terminal device and the center connected via the communication line, after the communication line is connected and the initial setting mode is set,
The terminal device side inputs or automatically transfers the terminal confirmation data given to the terminal device in advance from the terminal device side to the center side, and also inputs and transfers the access right confirmation data and personal identification data given to the owner of the terminal device. The center that receives this creates function data using a predetermined encryption algorithm from the terminal confirmation data and access right confirmation data, or from them and the person identification data, and makes the function data correspond to the person identification data. At the same time, the function data is automatically transferred to the terminal device side, and the terminal device side that receives the function data stores the function data.When communication starts thereafter, the terminal device side automatically transfers the function data to the center side. An initial setting method for end-to-center communication characterized by forwarding.