Management system, control method therefor, and non-transitory computer-readable medium
A management system manages, for each of a plurality of users who use a social network service, account information, identification information associated with biological information, and a public key; sends, in accordance with an instruction related to money transfer to another user, a demand of authentication processing to the terminal of the user; receives, as a response to the demand, the identification information associated with the biological information and signature data created using a private key held in a storage unit having a tamper resistance in the terminal when the authentication processing using the biological information of the user succeeds; verifies, using the public key corresponding to the received identification information, the received signature data; and generates, based on a result of the verification, a message about the instruction.
1. A management system that manages information pertaining to money transfer according to a money transfer instruction in cooperation with a social network service, and manages, in association with each other, account information for the social network service and a public key corresponding to a private key held in a storage unit of a terminal of a user identified by the account information, the management system comprising:
at least one processor configured to execute computer-executable instructions stored in memory, wherein the computer-executable instructions cause the management system to:
send, for the money transfer instruction by the user to another user, data for authentication processing to the terminal of the user;
receive signature data created using the private key in association with biological information of the user and the data for the authentication processing, when the authentication processing using the biological information of the user succeeds on the side of the terminal of the user;
verify, using the public key for the account information of the user, signature data;
issue a token to the terminal of the user according to a result of the verification of the signature data;
receive the money transfer instruction including the issued token;
generate, in accordance with a reception of the money transfer instruction, a message related to the money transfer; and
provide the generated message.
2. The system according to claim 1 ,
wherein the management system further manages information pertaining to money transfer according to a money transfer request instruction in cooperation with the social network service, and
wherein the computer-executable instructions further cause the management system to:
send other data for the authentication processing to the terminal of the user for the money transfer request instruction to another user;
receive signature data created using the private key in association with biological information of the user and the other data, when the authentication processing using the biological information of the user succeeds on the side of the terminal of the user;
verify, using the public key for the account information of the user, the received signature data; and
issue a token to the terminal of the user according to a result of the verification of the signature data,
wherein, in accordance with the reception of the money transfer request instruction including the issued token, the message is generated.
3. The system according to claim 1 , wherein the message includes information representing that identity verification has been performed.
4. The system according to claim 1 , wherein the computer-executable instructions further causer the management system to obtain a face image of the user when accepting an instruction related to money transfer of the user,
wherein the message further includes the face image.
5. The system according to claim 1 , wherein the storage unit has a tamper resistance in the terminal of the user.
6. A method for a management system that manages information pertaining to money transfer according to a money transfer instruction in cooperation with a social network service and manages, in association with each other, account information for the social network service and a public key corresponding to a private key held in a storage unit of a terminal of a user identified by the account information, the method comprising:
sending, for the money transfer instruction by the user to another user, data for authentication processing to the terminal of the user;
receiving signature data created using the private key in association with biological information of the user and the data for the authentication processing, when the authentication processing using the biological information of the user succeeds on the side of the terminal of the user;
verifying, using the public key for the account information of the user, the received signature data;
issuing a token to the terminal of the user according to a result of the verification of the signature data;
receiving the money transfer instruction including the issued token;
generating, in accordance with a reception of the money transfer instruction, a message related to the money transfer; and
providing the generated message.