JP2002373306A - Settlement system and settlement service - Google Patents

Abstract

PROBLEM TO BE SOLVED: To prevent information specifying the person himself from being illegally used in a settlement terminal. SOLUTION: A user mutually communicates with the settlement terminal 200 and a settlement server 300 with a portable telephone 100, meanwhile, the settlement terminal 200 mutually communicates with the settlement server 300, and the settlement server 300 thereby decides the approval/rejection of the settlement. The settlement server 300 associates pieces of information received from the portable telephone 100 and the settlement terminal 200 with an event ID (IID) as a clue. Namely, the settlement server 300 integrates the information specifying the person himself (PID), a password code (PWD) and transaction information (PUR) received from the portable telephone 100 and the settlement terminal 200 to decide the approval/rejection of the settlement with the information of the same event ID as information about the same transaction. The settlement approval at this stage is not final, and settlement information (SNI) is transmitted to the portable telephone 100 for the purpose of confirmation. When the portable telephone 100 transmits a settlement approval signal (SNA) to the settlement server 300 in response to the settlement information (SNI), the settlement server 300 decides the final settlement approval.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

The present invention relates to a settlement system such as a credit card and a settlement service.

[0002]

2. Description of the Related Art A conventional payment system such as a credit card and a debit card reads user-specific information recorded on a credit card or the like by a payment terminal and transmits the information to a payment institution to determine whether payment is possible. Was. The processing procedure is as follows. Information that can identify the user, such as the user's ID number, is recorded on the back of the credit card by magnetic recording. Credit card credit verification terminal "CAT terminal" (credit authorizati
on terminal. (Hereinafter simply referred to as “payment terminal”).
This payment terminal is connected to CAFIS (creditand finance info
rmation switching system) Connect to a settlement server of a financial institution such as a credit company through a communication system. When the user desires a transaction such as purchase of a product at a store, the ID number or the like of the credit card is read by the magnetic reader of the payment terminal and transmitted to the payment server together with information on the product and the like. The settlement server performs personal authentication based on the ID number and the like, and determines whether settlement is possible. When the payment is approved by the payment server, the approval ID is transmitted to the payment terminal. With a credit card, a payment slip or the like is generated at a payment terminal, and a transaction is made possible when the user signs this. With a debit card, a user can enter a secret code such as a unique secret code to enable a transaction.

However, crimes in which magnetic data of a credit card or the like deposited by a user in recent years are read by a magnetic reading device to forge a credit card or the like have increased,
It is a social problem.

[0004]

SUMMARY OF THE INVENTION The present invention has been made to solve such a conventional problem, and has as its object to provide a settlement system capable of preventing unauthorized acquisition of ID information such as a credit card. And

[0005]

According to the present invention, there is provided a settlement system which can determine whether settlement is possible, and which can communicate with the settlement judging means, and provides transaction specifying information for specifying each transaction. A payment terminal that can be transmitted to the payment possibility determination means, and can communicate with the payment possibility determination means and the payment terminal, and can transmit user-specific personal identification information and the transaction specification information to the payment possibility determination means; Personal identification information holding / transmitting means capable of transmitting a unique personal identification code to the payment terminal, wherein the payment terminal can transmit the personal identification code to the payment availability determination means, and the payment availability determination means is common. It is determined whether settlement is possible based on the personal identification information, the password, and the transaction identification information related to the transaction identification information. Thus, it is not necessary to provide all of the information for identifying the individual to the payment terminal, so that unauthorized use of the personal identification information in the payment terminal can be prevented.

[0006] In the present invention, the transaction specifying information is generated by personal identification information holding / transmitting means or generated by a settlement terminal.

In the present invention, the personal identification information holding / transmitting means acquires a communication ID from the settlement terminal, and performs communication with the settlement possibility determination means of the personal identification information holding / transmission means at the expense of the settlement terminal. obtain. This can reduce the user's communication cost burden and promote the use of the settlement system.

In the present invention, a mobile communication terminal such as a mobile phone can be employed as the personal identification information holding / transmitting means.

[0009] The settlement service according to the present invention receives personal identification information unique to a user and transaction identification information unique to each transaction from the personal identification information holding / transmitting means possessed by the user. , And transaction information indicating transaction details are received from the settlement terminal, and it is determined whether or not the user identification information and the transaction information related to the common transaction identification information can be settled. Therefore, since it is not necessary to receive all of the personal identification information from the payment terminal, it is possible to prevent unauthorized use of the personal identification information in the payment terminal.

[0010] Further, a personal identification code unique to the user may be directly input to the payment terminal using input means provided in the payment terminal. Thus, when the personal identification information holding / transmitting means is a mobile communication terminal, the settlement system according to the present invention can be implemented without adding a special element to the mobile communication terminal.

The user-specific personal identification code may be encrypted by the personal identification information holding / transmitting means, and the encrypted user-specific personal identification code may be transmitted or input to the settlement terminal. Further, the encryption key in this case is generated each time by the personal identification information holding / transmitting means,
You may make it transmit to a settlement server with personal identification information and transaction specific information. As a result, unauthorized acquisition of a personal identification code can be prevented, and security can be dramatically improved.

[0012]

DESCRIPTION OF THE PREFERRED EMBODIMENTS [First Embodiment] FIGS. 1 to 4 show a first embodiment, FIG. 1 is a block diagram showing a first embodiment of a settlement system, and FIG. 2 is a mobile phone shown in FIG. , FIG. 3 is a flowchart showing a process in the settlement terminal of FIG. 1, and FIG. 4 is a flowchart showing a process in the settlement server of FIG.

In FIG. 1, a settlement system is a mobile phone 1.
00 and other mobile terminals, a payment terminal 200, and a payment server 300.
0 is provided, and the settlement terminal 200
0 is provided.

[0016] The mobile phone 100 and the settlement terminal 200 can communicate with each other by infrared transmission / reception devices 110 and 220. However, as a communication means between the mobile phone 100 and the settlement terminal 200, specific low-power wireless communication, Bluetooth or any other communication means can be adopted.

The mobile phone 100 and the settlement server 300 can communicate with each other through a mobile phone line.

The settlement terminal 200 and the settlement server 300 can communicate with each other via a communication line having relatively high security performance such as a dedicated fixed line.

[0025] A user (not shown) who wants to purchase a product 400 is operated by a mobile phone 100 via a settlement terminal 200.
And the settlement server 300 and the settlement terminal 2
00 communicates with the settlement server 300,
Payment server 300 determines whether payment is possible or not.

The mobile phone 100 sends an event ID (IID) generated for a transaction such as a purchase of a product at that time to the settlement terminal 200 and a personal identification code (PW).
D), and sends an event ID (IID) and user-specific personal identification information (P
ID).

The settlement terminal 200 sends an event ID (IID) and a personal identification code (PWD) to the settlement server 300.
And transaction information (PUR) such as the product name, price, store name, and settlement account of the product 400.

The information such as the product name and the price of the product 400 is obtained by displaying the barcode 410 displayed on the product 400 with the payment terminal 20.
The data is acquired by a method such as reading with a barcode reader 210 provided in the “0”.

Payment server 300 stores the information received from mobile phone 100 and payment terminal 200 as an event ID (I
ID) as a clue. That is, the information of the same event ID is used as the information relating to the same transaction, and the personal identification information (PID), the personal identification code (PWD), and the transaction information (PU) received from the mobile phone 100 and the settlement terminal 200 are used.
R) to determine whether settlement is possible or not. The determination of whether payment is possible at this stage is not final, and the payment information (SNI) is transmitted to the mobile phone 100 in a sense of confirmation. On the other hand, the settlement approval signal (SNA) from the mobile phone 100
Is transmitted to the payment server 300, the payment server 300 makes a final determination that payment is possible.

It is also possible to omit input and authentication of a personal identification code (PWD), and determine whether settlement is possible only by collating an event ID (IID) and evaluating personal identification information (PID) and transaction information (PUR). It is possible.

When the final settlement is determined,
The payment server 300 sends the approval ID (AID) to the payment terminal 20
Send to 0. When payment is not possible, payment failure information (SN
R) to the settlement terminal 200.

As described above, only the personal identification code is given to the settlement terminal 200, and the personal identification information (PID) is not given. Therefore, unauthorized use of personal information in a store can be prevented.

In FIG. 2, a user who intends to make a transaction such as a purchase of a product operates the mobile phone 100 and
Establish communication with 00 (step S201). When the payment terminal 200 is ready for transactions, the mobile phone 10
A request signal (RQS, FIG. 1) requesting transmission of a personal identification code (PWD) from 0 is transmitted to the mobile phone 100.

The mobile phone 100 determines whether or not a request signal (RQS) from the settlement terminal 200 has been received within a predetermined time (step S202), and if so, the password is displayed on the display unit 120 or the like of the mobile phone 100. The user is prompted to input a code (PWD) (step S203). On the other hand, if no data has been received, the process ends.

It is determined whether a personal identification code (PWD) has been input within a predetermined time (step S204).
D (IID) is generated (step S205), and the event ID (IID) and the personal identification code (PWD) are settled in the payment terminal 2
00 (step S206). PIN code (PW
If there is no input of D), the process is terminated as it is.

After that, the settlement server 3 through the mobile phone line
00 is established (step S207), and the event ID (IID) and the personal identification information (PID) are transmitted to the settlement server 300 (step S208).

The settlement server 300 uses the personal identification information (PI
D), personal identification code (PWD), and transaction information (PUR)
, The settlement information (SNI) is transmitted to the mobile phone 100 when the settlement is judged to be possible.

The mobile phone 100 determines whether payment information (SNI) has been received within a predetermined time (step S20).
9) When received, the user sends a settlement approval signal (SN)
Send A).

In FIG. 3, payment terminal 200 determines whether or not a signal such as an infrared signal of mobile phone 100 has been received (step S301).
0 is established (step S302). If not received, the process ends. Here, a request signal RQS is transmitted to the mobile phone 100 (step S303).

On the other hand, the mobile phone 100
Code (PWD) and event ID (II
It is determined whether D) has been received (step S304). When received, the personal identification code (PWD) and event ID
(IID) to the settlement server 300 (step S
305).

Thereafter, when the settlement server 300 determines that the final settlement is possible and receives the approval ID (step S306), it executes a transaction such as product sales (step S307). Receiving the settlement impossible information (step S3
08) or when the approval ID has not been received within the predetermined time (step S309), the processing is terminated as it is.

In FIG. 4, payment server 300 determines whether or not a common event ID (IID) has been received by mobile phone 100 and payment terminal 200 (step S40).
1) When received, personal identification is performed based on personal identification information (PID) and personal identification code (PWD) (step S402). If it is not received, the process ends.

After the completion of the personal authentication, it is determined whether or not settlement is possible based on the transaction information (PUR) and the credit status of the user (step S403). Here, the result of the determination as to whether or not payment is possible is made (step S404), and if payment is possible, payment information (SNI) is generated (step S405). When the payment is not possible, the payment impossible information (SNR) is transmitted to the payment terminal 200.
To end the process.

[0036] The generated payment information (SNI) is transmitted to mobile phone 100 (step S406). On the other hand, it is determined whether or not a payment approval signal (SNA) from the mobile phone 100 has been received, and if received, a payment process is performed (step S408). Settlement acknowledgment signal (SN
If A) has not been received, the process ends.

When the payment processing is performed, the payment terminal 200
(Step S409).

In this embodiment, the mobile phone 10
0 and the settlement terminal 200 communicate with each other using the infrared transmission / reception device (11
0, 220), the payment terminal 200 is provided with an input unit 230, and information transmitted from the mobile phone 100 to the payment terminal 200 is directly input from the input unit 230. The information transmitted from the payment terminal 200 to the mobile phone 100 may be directly input by the user from the input unit 130 of the mobile phone 100. Thus, there is no need to add any special components to the mobile phone 100, and the payment system according to the present invention can be implemented by a normal mobile phone currently in circulation. [Second Embodiment] FIGS. 5 to 7 show a second embodiment, FIG. 5 is a block diagram showing a second embodiment of a settlement system, and FIG. 6 is a flowchart showing processing in the mobile phone of FIG. FIG. 7 is a flowchart showing processing in the settlement terminal of FIG.

In the second embodiment, the event ID (II
D) is generated not by the mobile phone 100 but by the payment terminal 200
Done by In the payment terminal 200, information unique to the store can be included in the event ID (IID), and duplicate generation of the event ID (IID) can be prevented. Thereby, in addition to the effect of the first embodiment, the event ID (II
An error due to duplication of D) can be prevented.

In FIG. 5, the same or corresponding parts as those in the first embodiment are denoted by the same reference numerals, and detailed description is omitted.

In FIG. 5, the settlement system is a mobile phone 1
00 and other mobile terminals, a payment terminal 200, and a payment server 300.
0 is provided, and the settlement terminal 200
0 is provided.

The mobile phone 100 transmits a personal identification code (PWD) unique to the user to the payment terminal 200, and sends an event ID (IID) to the payment server 300,
The personal identification information (PID) unique to the user is transmitted.

The settlement terminal 200 generates an event ID (IID) including store information and the like for a transaction desired by the user, and outputs a request signal (RQS) and event information (IID).
Is transmitted to the mobile phone 100. On the other hand, the settlement server 300
, The event ID (IID), the password (PW
D) and transaction information (PUR).

The settlement server 300 uses the personal identification information (PI) received from the mobile phone 100 and the settlement terminal 200 as information on the same event ID as information on the same transaction.
D), the personal identification code (PWD), and the transaction information (PUR) are integrated to determine whether settlement is possible. Thereafter, the payment information (SNI) is transmitted to the mobile phone 100 for confirmation, and when the payment approval signal (SNA) is received from the mobile phone 100, the payment server 300 makes a final determination that payment is possible. I do.

When the final settlement determination is made,
The payment server 300 sends the approval ID (AID) to the payment terminal 20
Send to 0. When payment is not possible, payment failure information (SN
R) to the settlement terminal 200.

In FIG. 6, a user who intends to conduct a transaction such as a purchase of a product operates the mobile phone 100 and
00 is established (step S601). The mobile phone 100 determines whether a request signal (RQS) and an event ID (IID) from the settlement terminal 200 have been received within a predetermined time (step S602).

If it has been received, it prompts for a personal identification code (PWD) (step S603), and if it has not been received, the process is terminated.

It is determined whether a personal identification code (PWD) is input within a predetermined time (step S604). If the personal identification code (PWD) is input within a predetermined time, the personal identification code (PWD) is input.
WD) to the settlement terminal 200 (step S60)
5). If there is no input of the personal identification code (PWD), the process ends.

Thereafter, communication with the settlement server 300 is established (step S606), and the event ID (IID) and the personal identification information (PID) are transmitted to the settlement server 300 (step S607).

Payment information (SNI) is transmitted within a predetermined time from payment server 300, and it is determined whether or not the payment information (SNI) has been received (step S608). When the payment information (SNI) is received, the user transmits a payment approval signal (SNA). (Step S609).

In FIG. 7, settlement terminal 200 determines whether or not a signal from mobile phone 100 has been received (step S7).
01), when received, establishes communication with the mobile phone 100 (step S702). If you did not receive it,
The process ends as it is. Here, the event ID (II
D), the request signal RQS and the event ID (I
ID) to the mobile phone 100 (step S).
704).

On the other hand, the mobile phone 100
It is determined whether the personal identification code (PWD) has been received (step S705). When received, the password (PW
D) and event ID (IID)
(Step S706).

After that, when the approval ID is received from the settlement server 300 (step S707), a transaction such as product sales is executed (step S708). Receipt of settlement impossible information is received (step S709), or approval
If D has not been received (step S710), the process ends. Third Embodiment FIGS. 8 to 10 show a third embodiment.
FIG. 8 is a block diagram showing a fourth embodiment of the payment system,
FIG. 9 is a flowchart showing a process in the mobile phone in FIG. 8, and FIG. 10 is a flowchart showing a process in the settlement terminal in FIG.

In the third embodiment, the communication between the mobile phone 100 and the settlement server 300 in the first embodiment is performed by charging the settlement terminal 200 to reduce the burden on the user. Thereby, the convenience of the payment system is enhanced by the user, and the use of the payment system can be promoted in addition to the effects of the first embodiment.

In FIG. 8, the same or corresponding parts as in the first embodiment are denoted by the same reference numerals, and detailed description is omitted.

In FIG. 8, the settlement system is a mobile phone 1
00 and other mobile terminals, a payment terminal 200, and a payment server 300.
0 is provided, and the settlement terminal 200
0 is provided.

The mobile phone 100 transmits a personal identification code (PWD) unique to the user to the payment terminal 200, and sends an event ID (IID) to the payment server 300.
The personal identification information (PID) unique to the user is transmitted. The communication with the settlement server 300 is executed based on the charge of the settlement terminal 200 under the control transfer from the settlement terminal 200.

The settlement terminal 200 generates an event ID (IID) including store information and the like for a transaction desired by the user, and outputs a request signal (RQS) and event information (IID).
Is transmitted to the mobile phone 100. Further, the settlement terminal 200 transmits its own communication ID (CID) to the mobile phone 100 and performs control delegation. The payment terminal 200 transmits the event ID (IID), the personal identification code (PWD), and the transaction information (PUR) to the payment server 300.

The settlement server 300 uses the personal identification information (PI) received from the mobile phone 100 and the settlement terminal 200 as information on the same event ID as information on the same transaction.
D), the personal identification code (PWD), and the transaction information (PUR) are integrated to determine whether settlement is possible. Thereafter, the payment information (SNI) is transmitted to the mobile phone 100 for confirmation, and when the payment approval signal (SNA) is received from the mobile phone 100, the payment server 300 makes a final determination that payment is possible. I do.

When a final decision is made that payment is possible,
The payment server 300 sends the approval ID (AID) to the payment terminal 20
Send to 0. When payment is not possible, payment failure information (SN
R) to the settlement terminal 200.

In FIG. 9, a user who intends to conduct a transaction such as a purchase of a product operates the mobile phone 100 and
00 is established (step S901). The mobile phone 100 determines whether a request signal (RQS) from the settlement terminal 200 has been received within a predetermined time (step S9).
02).

If it has been received, it prompts for the input of a personal identification code (PWD) (step S903), and if it has not received it, the process is terminated.

It is determined whether a personal identification code (PWD) has been input within a predetermined time (step S904). If the personal identification code (PWD) has been input within a predetermined time, the event ID
(IID) (step S905), and sends the event ID (IID) and the personal identification code (PWD) to the payment terminal 2
00 (step S906).

If there is no input of the personal identification code (PWD), the process is terminated.

Thereafter, it is determined whether or not a communication ID (CID) has been received from the payment terminal 200 within a predetermined time (step S907). If the communication ID (CID) has been received, control of the payment terminal 200 is transferred to the payment server. The communication with the server 300 is established (step S908). And event ID (IID)
And the personal identification information (PID) is transmitted to the settlement server 300 (step S909).

Payment information (SNI) is transmitted from payment server 300 within a predetermined time, and it is determined whether or not the payment information (SNI) has been received (step S910). When the payment information (SNI) has been received, the user transmits a payment approval signal (SNA). (Step S911).

In FIG. 10, payment terminal 200 determines whether or not a signal from mobile phone 100 has been received (step S).
1001), when received, establishes communication with the mobile phone 100 (step S1002). If not received, the process ends. Here, the request signal RQS
Is transmitted to the mobile phone 100 (step S100).
3).

On the other hand, the mobile phone 100
It is determined whether the personal identification code (PWD) has been received (step S1004). When received, the communication ID (C
ID) to the mobile phone 100 to transfer control (step S1005).

The control delegation referred to here is the settlement terminal 200
Delegate to the control mobile phone 100 that establishes communication using a telephone line for mobile communication such as a mobile phone of
Communication ID (CI) for the telephone line of settlement terminal 200
Using D), the mobile phone 100 establishes communication as charging a communication fee to the settlement terminal 200.

Further, a personal identification code (PWD) and an event ID
(IID) and purchase information (PUR) in the settlement server 30
0 (step S1006).

Thereafter, when the approval ID is received from the settlement server 300 (step S1007), a transaction such as sale of a product is executed (step S1008). When the payment disable information is received (step S1009), or when the approval ID is not received within a predetermined time (step S101)
0), and the process ends as it is. Fourth Embodiment FIGS. 11 to 13 show a fourth embodiment, FIG. 11 is a block diagram showing a fourth embodiment of a settlement system, and FIG. 12 is a flowchart showing processing in the mobile phone shown in FIG. FIG. 12 is a flowchart showing processing in the settlement terminal of FIG.

In the fourth embodiment, the communication between the mobile phone 100 and the settlement server 300 in the second embodiment is performed by charging the settlement terminal 200 to reduce the burden on the user. Thereby, the convenience of the payment system is enhanced by the user, and the use of the payment system can be promoted in addition to the effects of the second embodiment.

In FIG. 11, the same or corresponding parts as in the first embodiment are denoted by the same reference numerals, and detailed description is omitted.

In FIG. 11, the payment system has a mobile phone 100 and other mobile terminals, a payment terminal 200 and a payment server 300.
The payment terminal 200 is provided with the infrared transmitting / receiving unit 2.
20 are provided.

The mobile phone 100 transmits a personal identification code (PWD) unique to the user to the payment terminal 200, and sends an event ID (IID) to the payment server 300,
The personal identification information (PID) unique to the user is transmitted. The communication with the settlement server 300 is executed based on the charge of the settlement terminal 200 under the control transfer from the settlement terminal 200.

The settlement terminal 200 generates an event ID (IID) including shop information and the like for a transaction desired by the user, and outputs a request signal (RQS) and event information (IID).
Is transmitted to the mobile phone 100. Further, the settlement terminal 200 transmits its own communication ID (CID) to the mobile phone 100 and performs control delegation. Further, it transmits the event ID (IID), the personal identification code (PWD), and the transaction information (PUR) to the settlement server 300.

The settlement server 300 uses the personal identification information (PI) received from the mobile phone 100 and the settlement terminal 200 as information on the same event ID as information on the same transaction.
D), the personal identification code (PWD), and the transaction information (PUR) are integrated to determine whether settlement is possible. Thereafter, the payment information (SNI) is transmitted to the mobile phone 100 for confirmation, and when the payment approval signal (SNA) is received from the mobile phone 100, the payment server 300 makes a final determination that payment is possible. I do.

When a final determination that payment is possible is made,
The payment server 300 sends the approval ID (AID) to the payment terminal 20
Send to 0. When payment is not possible, payment failure information (SN
R) to the settlement terminal 200.

In FIG. 12, a user who intends to conduct a transaction such as a purchase of a product operates the mobile phone 100 to establish communication with the settlement terminal 200 (step S1201). The mobile phone 100 determines whether a request signal (RQS) and an event ID (IID) from the settlement terminal 200 have been received within a predetermined time (step S1202).

If it has been received, it prompts the input of a personal identification code (PWD) (step S1203), and if it has not been received, the process is terminated.

It is determined whether a personal identification code (PWD) has been input within a predetermined time (step S1204). (Step S1
205).

If there is no input of the personal identification code (PWD), the process is terminated.

Thereafter, it is determined whether or not a communication ID (CID) has been received from the payment terminal 200 within a predetermined time (step S1206). If the communication ID (CID) has been received, control of the payment terminal 200 is transferred to the payment server. The communication with the server 300 is established (step S1207). And event ID (II
D) and personal identification information (PID)
(Step S1208).

Payment information (SNI) is transmitted within a predetermined time from payment server 300, and it is determined whether or not it has been received (step S1209). When the payment information (SNI) is received, the user transmits a payment approval signal (SNA). (Step S121
0).

In FIG. 13, payment terminal 200 determines whether or not a signal from mobile phone 100 has been received (step S).
1301), when received, establishes communication with the mobile phone 100 (step S1302). If not received, the process ends. Here event ID
(IID), and sends an event ID (IID) and a request signal RQS to the mobile phone 100 (step S1304).

On the other hand, the mobile phone 100
It is determined whether the personal identification code (PWD) has been received (step S1305). When received, the communication ID (C
ID) to the mobile phone 100 to perform control transfer (step S1306).

Further, a personal identification code (PWD) and an event ID
(IID) and purchase information (PUR) in the settlement server 30
0 (step S1307).

After that, when the approval ID is received from the settlement server 300 (step S1308), a transaction such as product sales is executed (step S1309). When the settlement impossible information is received (step S1310), or when the approval ID is not received within a predetermined time (step S131)
1), the process ends as it is.

In the second to fourth embodiments, the communication between the mobile phone and the settlement terminal is performed by transmitting and receiving data using the infrared transmitting / receiving device. The information transmitted from the mobile phone to the payment terminal is provided by the input unit of the payment terminal, and the information transmitted from the payment terminal to the mobile phone is directly input by the user from the input unit of the mobile phone. Is also good. Thereby, it is not necessary to add a special element to the mobile phone, and the settlement system according to the present invention can be implemented by a normal mobile phone currently in circulation.

In the above embodiment, the personal identification code may be encrypted by the mobile telephone, and the encrypted personal identification code may be transmitted from the mobile telephone to the payment terminal or input from the input part of the payment terminal. In this case, the encryption key for encrypting the personal identification code is generated by the mobile phone each time, and the encryption key is assigned to the event ID (II
The payment key may be transmitted to the payment server together with D), and the encryption key transmitted from the payment terminal may be plaintexted to determine whether payment is possible or not. As a result, the security code is not supplied to the settlement terminal as plain text, and security is dramatically improved.

Further, the personal identification code may be stored in a storage means provided in the mobile phone. In this case, the user does not need to input a password, and can use the settlement system according to the present invention simply by performing an operation of transmitting the password.

A different security code may be used for each financial service provider used. This allows one user to have a plurality of passwords.

The payment system according to the present invention can prevent unauthorized acquisition of a credit card ID or the like by a simple system and protocol, and can construct a payment system with high security.

[Brief description of the drawings]

FIG. 1 is a block diagram showing a first embodiment of a settlement system according to the present invention.

FIG. 2 is a flowchart showing a process in a mobile phone in the settlement system of FIG. 1;

FIG. 3 is a flowchart showing a process in a payment terminal in the payment system of FIG. 1;

FIG. 4 is a flowchart showing a process in a payment server in the payment system of FIG. 1;

FIG. 5 is a block diagram showing a second embodiment of the settlement system according to the present invention.

FIG. 6 is a flowchart showing processing in the mobile phone in the settlement system of FIG. 5;

FIG. 7 is a flowchart showing processing in a payment terminal in the payment system of FIG. 5;

FIG. 8 is a block diagram showing a third embodiment of the settlement system according to the present invention.

FIG. 9 is a flowchart showing processing in a mobile phone in the settlement system of FIG. 8;

FIG. 10 is a flowchart showing processing in a payment terminal in the payment system of FIG. 9;

FIG. 11 is a block diagram showing a fourth embodiment of the settlement system according to the present invention.

FIG. 12 is a flowchart showing processing in the mobile phone in the settlement system of FIG. 11;

13 is a flowchart showing a process in a payment terminal in the payment system of FIG.

[Explanation of symbols]

 100 Mobile Phone 110 Infrared Transmitter / Receiver 200 Payment Terminal 210 Barcode Reader 220 Infrared Transmitter / Receiver 300 Payment Server 400 Product 410 Barcode AID Approval ID CID Communication ID IID Event ID PID Identity Information PUR Transaction Information PWD PIN Code RQS Request Signal SNA Settlement approval signal SNI Settlement information SNR Settlement impossible information

──────────────────────────────────────────────────続 き Continued on the front page (51) Int.Cl. ⁷ Identification symbol FI Theme coat ゛ (Reference) G07G 1/12 321 G07G 1/14 1/14 G07F 7/08 B (72) Inventor Masaki Asahina Setagaya, Tokyo 3-5-1-18, Kitazawa, Ward F-term (reference) in the multi-level circuit study group, limited company 3E042 CC03 3E044 BA05 DA05

Claims (7)

[Claims] Claims: 1. A settlement possibility determining means capable of determining settlement possibility, a settlement terminal communicable with the settlement possibility determining means, and capable of transmitting transaction specifying information for specifying each transaction to the settlement possibility determining means; It is communicable with the settlement possibility determination means and the settlement terminal, and can transmit user-specific personal identification information and the transaction specification information to the settlement possibility determination means, and can transmit a user-specific password to the settlement terminal. The payment terminal can transmit the personal identification code to the payment determination unit, and the payment determination unit determines the identification information related to common transaction identification information. Based on the PIN code and transaction identification information,
A payment system for determining whether payment is possible. 2. The settlement system according to claim 1, wherein the transaction specifying information is generated by personal identification information holding / transmitting means. 3. The payment system according to claim 1, wherein the transaction identification information is generated by a payment terminal. 4. The personal identification information holding / transmitting means obtains a communication ID from the settlement terminal, and can perform communication with the settlement possibility determination means of the personal identification information holding / transmission means at the expense of the settlement terminal. The settlement system according to any one of claims 1 to 3, wherein: 5. The settlement system according to claim 1, wherein the personal identification information holding / transmitting means is a mobile phone. 6. Receiving user-specific personal identification information and transaction-specific information specific to each transaction from personal identification information holding / transmitting means possessed by the user, and indicating the transaction-specific information and transaction contents. A payment service that receives transaction information from a payment terminal and determines whether or not the user identification information and transaction information related to the common transaction identification information can be settled. 7. The settlement service according to claim 6, wherein a personal identification code unique to the user is received from the settlement terminal, and personal authentication based on the identification code is also executed.