JP2005258517A

JP2005258517A - Settlement system

Info

Publication number: JP2005258517A
Application number: JP2004065182A
Authority: JP
Inventors: Satoru Muraoka; 悟村岡
Original assignee: Matsushita Electric Industrial Co Ltd
Current assignee: Panasonic Holdings Corp
Priority date: 2004-03-09
Filing date: 2004-03-09
Publication date: 2005-09-22

Abstract

<P>PROBLEM TO BE SOLVED: To provide a system capable of rewriting easily a password of an IC card locked or having a low residual password input allowance frequency, without going to a card company service center. <P>SOLUTION: This system is constituted of an information input terminal 1 for inputting a new password when a card owner 5 forgets the password, a settlement information control host computer 2 for receiving the password from the information input terminal 1 to register it, and a settlement terminal 3. The settlement terminal 3 inquires the presence of new password registration to the settlement information control host computer 2, when detecting that the card under used is locked, or that the residual password input allowance frequency is low, during settlement processing, acquires password encipherment information from the settlement information control host computer 2 when the registration exists, and rewrites the password in an inside of the IC card. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

本発明は、決済システムに関するものである。 The present invention relates to a payment system.

近年、クレジットカードによるカード決済においては、セキュリティ強化などのため、磁気カードからＩＣカードへの切替えが積極的にすすめられている。ＩＣカードは偽造が困難であるという利点のほかに、ＩＣカード内メモリに記憶された暗証番号と入力された暗証番号とを照合することにより、カード所有者が本当にカード所有者本人であるかの確認（以下、カード所有者確認と称す）が正確かつ容易にできるという利点もある。そのため、ＩＣカードでのクレジット決済処理では一般的に暗証番号照合によるカード所有者確認が必須となっている。 In recent years, in card settlement using a credit card, switching from a magnetic card to an IC card has been actively promoted for security enhancement and the like. In addition to the advantage that an IC card is difficult to counterfeit, by verifying the password stored in the IC card memory against the entered password, whether the cardholder is really the cardholder There is also an advantage that confirmation (hereinafter referred to as card owner confirmation) can be performed accurately and easily. For this reason, in card payment processing using an IC card, it is generally necessary to confirm the card owner by collating a personal identification number.

しかし、暗証番号を忘れてしまうカード所有者が多い。カード会社は暗証番号を忘れてしまったカード所有者対策として、暗証番号入力を省略させて磁気カードと同様にオンラインで処理し、カード所有者の確認は署名で実施するシステムを導入しているが、ＩＣカードでのクレジット決済の利点であるオフライン決済や暗証番号照合による正確なカード所有者確認が実現できなくなっている。また、クレジット処理センタとカード所有者の携帯電話とが定期的に暗証番号を交換することにより、携帯電話に暗証番号を記憶させておく対策例もあるが、クレジット処理センタで暗証番号を照合するオンラインシステムにしか適用できず、ＩＣカード内部で暗証番号を照合するクレジット決済システムでは適用できない。（例えば特許文献１参照。）
特開２００３−５８７０４号公報 However, many cardholders forget their passwords. The card company has introduced a system where the password is forgotten as a countermeasure against the cardholder who has forgotten the password and is processed online in the same way as a magnetic card without entering the password. Therefore, it is not possible to realize an accurate card owner confirmation by off-line payment or password verification, which is an advantage of credit card payment with an IC card. In addition, there is a countermeasure example in which a personal identification number is stored in the cellular phone by periodically exchanging the personal identification number between the credit processing center and the cardholder's cellular phone. It can only be applied to an online system, and cannot be applied to a credit settlement system that verifies a password inside an IC card. (For example, refer to Patent Document 1.)
JP 2003-58704 A

クレジット決済で使用されるＩＣカードはセキュリティ上、暗証番号誤入力が所定回数を超過すると自動的にロックが掛かり使用できなくなる、という機能を有している。暗証番号を忘れてしまうカード所有者が増加する状況の中、使用不可能となるＩＣカードも日々増加し、カード会社はカード再発行に多額な費用を掛けている。再発行によるコストロスを避けるため、カード会社のサービスセンタに暗証番号書き換え専用の端末を設け、書類上で本人確認したうえでカードのロックを解除し、ＩＣカード内部に記憶された暗証番号を書き換えている例もあるが、この場合、カード所有者本人がサービスセンタへ出向く必要があり、手間を嫌うカード所有者は脱会してしまい、カード会社は会員を失うこととなる。 For security reasons, an IC card used for credit card payment has a function that it is automatically locked and cannot be used if a wrong number of passwords is entered a predetermined number of times. With the increasing number of cardholders who forget their passwords, the number of IC cards that cannot be used is increasing day by day. In order to avoid cost loss due to reissuance, a terminal dedicated to rewriting the PIN is provided at the card company's service center, the card is unlocked after confirming the identity on the document, and the PIN stored in the IC card is rewritten. In this case, however, the cardholder himself / herself needs to go to the service center, and the cardholder who dislikes the effort is unsubscribed, and the card company loses the member.

本発明はロックが掛かったあるいは暗証番号入力許容回数が残り少なくなったＩＣカードの暗証番号書き換えをカード会社サービスセンタへ出向くことなく容易に実施できるシステムを提供することを目的とする。 SUMMARY OF THE INVENTION An object of the present invention is to provide a system that can easily perform rewriting of a personal identification number of an IC card that has been locked or whose number of permitted number of input of the personal identification number has remained, without going to a card company service center.

本発明のシステムは、情報入力端末と決済情報管理ホストと決済端末とからなる決済処理システムであって、前記情報入力端末は暗証番号を入力する入力部と、前記入力部により入力した暗証番号を前記決済情報管理ホストに送信する通信部とを備え、前記決済情報管理ホストは前記情報入力端末と通信を行う第１の通信部と、前記情報入力端末から受信した暗証番号を暗号化する暗号化部と、前記暗号化した暗証番号を記憶する記憶部と、前記暗号部で暗号化した暗証番号を前記決済端末に送信する第２の通信部とを備え、前記決
済端末は前記決済情報管理ホストと通信を行う通信部と、前記決済情報管理ホストから受信した暗証番号暗号化情報の復号および書込を情報記録担体に指令する暗証番号書込指令部とを備え、

前記決済端末は前記決済情報管理ホストから受信した暗証番号暗号化情報の復号および書込を前記情報記録担体に指令する。 The system of the present invention is a payment processing system comprising an information input terminal, a payment information management host, and a payment terminal, wherein the information input terminal receives an input part for inputting a personal identification number, and a personal identification number inputted by the input part. A communication unit for transmitting to the payment information management host, wherein the payment information management host is a first communication unit for communicating with the information input terminal, and encryption for encrypting a password received from the information input terminal , A storage unit for storing the encrypted personal identification number, and a second communication unit for transmitting the personal identification number encrypted by the encryption unit to the settlement terminal, wherein the settlement terminal is the settlement information management host A communication unit that communicates with, and a password number writing command unit that commands the information record carrier to decrypt and write the password encryption information received from the settlement information management host,

The payment terminal instructs the information record carrier to decrypt and write the password encryption information received from the payment information management host.

このシステム構成によれば、カード所有者が情報入力端末で暗証番号を登録さえしておけば、カード会社サービスセンタへ出向くことなく、次回のカード使用時にその場で決済端末にて暗証番号を書き換えることが可能となる。 According to this system configuration, as long as the cardholder has registered the password at the information input terminal, the password is rewritten at the payment terminal on the spot at the next use of the card without going to the card company service center. It becomes possible.

また、本発明の決済システムは、上記目的を達成するために、カード所有者が暗証番号を忘却した際に新しい暗証番号を入力する携帯情報端末と、携帯情報端末より受信した暗証番号をもとに暗証番号暗号化情報を生成し、携帯情報端末へ返信する決済情報管理ホストと、決済処理中にロック中または暗証番号入力許容回数の残りが僅かであることを検知したときに、携帯情報端末から暗証番号暗号化情報を取得し、ＩＣカードに対して暗証番号暗号化情報をセットした書込指令を出すことにより、ＩＣカード内部の暗証番号を書き換える決済端末とで構成される。 In order to achieve the above object, the payment system of the present invention is based on a portable information terminal that inputs a new password when the cardholder forgets the password, and a password received from the portable information terminal. The mobile phone terminal generates a PIN code encryption information and sends it back to the mobile information terminal, and the mobile information terminal when it is detected that there is only a small remaining number of times the lock or password is allowed to enter during the payment process. And a payment terminal for rewriting the personal identification number in the IC card by obtaining the personal identification number encryption information from the terminal and issuing a write command in which the personal identification number encryption information is set to the IC card.

このシステム構成によれば、カード所有者が携帯情報端末で暗証番号を登録さえしておけば、カード会社サービスセンタへ出向くことなく、次回のカード使用時にその場で決済端末にて暗証番号を書き換えることが可能となる。 According to this system configuration, as long as the cardholder has registered a password with a portable information terminal, the password is rewritten at the payment terminal on the spot when the card is used next time without going to the card company service center. It becomes possible.

以上のように、本発明は新暗証番号の登録さえしておけば、カード会社サービスセンタへ出向くことなく、登録直後のカード使用時に新暗証番号への書き換えが可能となるシステムを提供でき、カード会社はカード再発行によるコストロスおよびサービスセンタへ出向く手間を嫌うカード所有者の脱会を防止することができる。 As described above, the present invention can provide a system that allows rewriting to a new password when using the card immediately after registration without going to the card company service center as long as the new password is registered. The company can prevent the cardholders who dislike the cost loss due to the card reissuance and the trouble of visiting the service center.

（実施の形態１）
図１において、１は暗証番号を入力する情報入力端末、２は情報入力端末１より暗証番号を受信し、暗証番号を暗号化して生成した暗証番号暗号化情報を決済端末３へ送信する決済情報管理ホスト、３は決済情報管理ホスト２から暗証番号暗号化情報を受信し、ＩＣカード４へ暗証番号書込指令を出し、ＩＣカード内に記憶された暗証番号を書き換える決済端末を示す。情報入力端末１と決済情報管理ホスト２との通信はネットワーク６、決済情報管理ホスト２と決済端末３との通信はネットワーク７を介して行われる。 (Embodiment 1)
In FIG. 1, 1 is an information input terminal for inputting a personal identification number, 2 is a payment information for receiving the personal identification number from the information input terminal 1, and transmitting the personal identification number encrypted information generated by encrypting the personal identification number to the settlement terminal 3. The management host 3 indicates a payment terminal that receives the password encryption information from the payment information management host 2, issues a password write command to the IC card 4, and rewrites the password stored in the IC card. Communication between the information input terminal 1 and the payment information management host 2 is performed via the network 6, and communication between the payment information management host 2 and the payment terminal 3 is performed via the network 7.

情報入力端末１は、暗証番号や、電話番号、生年月日等の本人確認用データを入力するための表示部８および入力部９、入力された暗証番号や本人確認用データを決済情報管理ホスト２へ送信する通信部１０、暗証番号等の入力や表示、データ送信処理命令を出しこれらの動作を予め格納されたコンピュータプログラムによって制御するメイン処理部１１で構成される。 The information input terminal 1 includes a display unit 8 and an input unit 9 for inputting personal identification data such as a personal identification number, telephone number, date of birth, etc., and the entered personal identification number and personal identification data as a settlement information management host. 2 includes a main processing unit 11 that inputs and displays a personal identification number and the like, issues a data transmission processing command, and controls these operations by a computer program stored in advance.

決済情報管理ホスト２は情報入力端末１からの入力データを受信する第１通信部１２、情報入力端末１から受信した暗証番号や本人確認用データ検証に使用する個人情報を記憶する記憶部１３、情報入力端末１から受信した本人確認用データと記憶部１３に記憶されている個人情報とを照合し、本人確認を行う本人確認処理部１４、決済端末３と通信をする第２通信部１５、決済端末３へ送信する暗証番号暗号化情報を予め格納されているプログラムによって生成する暗号化部１６、情報入力端末１等との通信、暗証番号の記憶処理
、本人確認処理等を予め格納されたコンピュータプログラムによって制御するメイン処理部１７で構成される。 The settlement information management host 2 includes a first communication unit 12 that receives input data from the information input terminal 1, a storage unit 13 that stores personal information used for verification of a personal identification number received from the information input terminal 1 and data for identification. The identity verification data received from the information input terminal 1 and the personal information stored in the storage unit 13 are collated, the identity verification processing unit 14 for performing identity verification, the second communication unit 15 for communicating with the payment terminal 3; The encryption unit 16 that generates the encryption code encryption information to be transmitted to the settlement terminal 3 by a program stored in advance, the communication with the information input terminal 1, etc., the password storage process, the identity verification process, etc. are stored in advance. The main processing unit 17 is controlled by a computer program.

決済端末３は決済処理において暗証番号を入力する入力部１８、ＩＣカード４に対してカード内部の記憶部２４に記憶されているデータの読出や書込を指令する対ＩＣカード読出書込指令部１９、決済情報管理ホスト２と通信する通信部２０、暗証番号を書き換える旨をカード所有者４に通知する表示部２１、対ICカード読取書込司令部１９、入力部１８、通信部２０、表示部２１の動作を予め格納されているコンピュータプログラムによって制御するメイン処理部２２で構成される。 The settlement terminal 3 has an input unit 18 for inputting a personal identification number in the settlement process, and a counter IC card read / write command unit for commanding the IC card 4 to read and write data stored in the storage unit 24 inside the card. 19, a communication unit 20 that communicates with the settlement information management host 2, a display unit 21 that notifies the cardholder 4 that the password has been rewritten, an IC card read / write command unit 19, an input unit 18, a communication unit 20, and a display The main processing unit 22 is configured to control the operation of the unit 21 by a computer program stored in advance.

ＩＣカード４は決済端末３の対ＩＣカード読出書込指令部１９より書込が指令された場合に暗号化情報を復号化する復号化部２３と暗証番号および暗証番号入力許容回数の残数を記憶する記憶部２４で構成される。 When the IC card 4 is instructed to write by the IC card read / write command unit 19 of the payment terminal 3, the decryption unit 23 for decrypting the encrypted information and the remaining number of the code number and the allowable number of input of the code number are displayed. It comprises a storage unit 24 for storing.

以上のように構成された決済システムについて、その動作を説明する。まず、暗証番号を忘れてしまったカード所有者５が情報入力端末１において新暗証番号および本人確認用データを入力し、決済情報管理ホスト２へ新暗証番号および本人確認用データを送信する。
新暗証番号および電話番号、生年月日等の本人確認用データを受信した決済情報管理ホスト２は本人確認処理部１４により操作者がカード所有者本人であることが確認できれば新暗証番号を暗号化部１６にて暗号化して新たに暗証番号暗号化情報を生成し、記憶部１３に記憶する。暗証番号を忘れてしまったカード所有者５は決済端末３にて通常に取引を行う。

決済端末３は決済処理中に対ＩＣカード読出書込指令部１９を介して暗証番号入力許容回数の残数を取得し、使用しているＩＣカード４がロック中もしくは暗証番号入力許容回数の残りが僅かであることを検知すると決済情報管理ホスト２へ暗証番号暗号化情報の登録有無を問い合わせる。決済情報管理ホスト２は記憶部１３に当該カード所有者５の新暗証番号登録を検出すると、登録された新暗証番号登録に対応する暗証番号暗号化情報を決済端末３へ送信する。暗証番号暗号化情報を受信した決済端末３は対ＩＣカード読出書込部１９を介してＩＣカード４に対し前記の暗証番号暗号化情報をセットした暗証番号書込指令を発行し、ＩＣカード４は暗証番号暗号化情報を復号部２３で復号した後、記憶部２４に記憶されている暗証番号を書き換える。 The operation of the payment system configured as described above will be described. First, the cardholder 5 who has forgotten the password enters the new password and the identification data at the information input terminal 1, and transmits the new password and the identification data to the settlement information management host 2.
The payment information management host 2 that has received the personal identification data such as the new personal identification number, telephone number, date of birth, etc. encrypts the new personal identification number if the identification confirmation processing unit 14 can confirm that the operator is the cardholder. The code is encrypted by the unit 16 to newly generate the password encryption information and stores it in the storage unit 13. The cardholder 5 who has forgotten the personal identification number normally performs transactions at the settlement terminal 3.

The settlement terminal 3 obtains the remaining number of password input allowable times via the IC card read / write command unit 19 during the payment process, and the IC card 4 being used is locked or the remaining number of password input allowable times remains. When it is detected that the password is small, the settlement information management host 2 is inquired of whether or not the password encryption information is registered. When the payment information management host 2 detects the new PIN number registration of the cardholder 5 in the storage unit 13, it transmits the PIN code encryption information corresponding to the registered new PIN number registration to the payment terminal 3. The settlement terminal 3 that has received the password encryption information issues a password write command in which the password encryption information is set to the IC card 4 via the IC card read / write unit 19, and the IC card 4 After decrypting the code number encryption information by the decryption unit 23, the code number stored in the storage unit 24 is rewritten.

なお、情報入力端末２はパソコンまたは携帯電話であってもよい。また情報入力端末１と決済情報管理ホスト２間のセキュリティ強化のために情報入力端末１に入力データを暗号化する暗号化部、決済情報管理ホスト２に受信データを復号化する復号化部を有してもよい。 The information input terminal 2 may be a personal computer or a mobile phone. In addition, in order to enhance security between the information input terminal 1 and the settlement information management host 2, the information input terminal 1 has an encryption unit that encrypts input data, and the settlement information management host 2 has a decryption unit that decrypts received data. May be.

以上のように、本実施の形態によれば、新暗証番号の登録さえしておけば、カード会社サービスセンタへ出向くことなく、登録直後のカード使用時に新暗証番号への書き換えが可能となるシステムを提供でき、カード会社はカード再発行によるコストロスおよびサービスセンタへ出向く手間を嫌うカード所有者の脱会を防止することができる。 As described above, according to the present embodiment, as long as the new password is registered, the system can be rewritten to the new password when using the card immediately after registration without going to the card company service center. The card company can prevent the cardholders who dislike the cost loss due to reissuance of the card and the trouble of visiting the service center.

（実施の形態２）
本実施の形態において実施の形態１と同様の構成については同一の番号を付して詳細な説明を省略する。図２において、３０は暗証番号や本人確認用データを入力するための表示部８および入力部９、決済情報管理ホスト２と通信する第１通信部３１、決済端末３と通信する第２通信部３２、それぞれの処理を制御するメイン処理部１１で構成される携帯情報端末を示し、決済情報管理ホスト２は携帯情報端末３０と通信する第１通信部３３、
決済端末３は携帯情報端末３０と通信する通信部３４を備える。 (Embodiment 2)
In the present embodiment, the same components as those in the first embodiment are denoted by the same reference numerals, and detailed description thereof is omitted. In FIG. 2, reference numeral 30 denotes a display unit 8 and an input unit 9 for inputting a password and identification data, a first communication unit 31 that communicates with the payment information management host 2, and a second communication unit that communicates with the payment terminal 3. 32 shows a portable information terminal composed of a main processing unit 11 that controls each processing, and the settlement information management host 2 is a first communication unit 33 that communicates with the portable information terminal 30;
The payment terminal 3 includes a communication unit 34 that communicates with the portable information terminal 30.

以上のように構成された決済システムについて、その動作を説明する。まず、暗証番号を忘れてしまったカード所有者５が携帯情報端末３０において新暗証番号および本人確認用データを入力し、決済情報管理ホスト２へ暗証番号および本人確認用データを送信する。暗証番号および本人確認用データを受信した決済情報管理ホスト２は本人確認処理部１４により操作者がカード所有者本人であることが確認できれば、受信した暗証番号を暗号化部１６により暗号化して暗証番号暗号化情報を生成し、携帯情報端末３０へ送信する。暗証番号を忘れてしまったカード所有者５は決済端末３にて通常に取引を行う。決済端末３は決済処理中に対ＩＣカード読出書込指令部１９を介して暗証番号入力許容回数の残数を取得し、使用しているＩＣカード４がロック中もしくは暗証番号入力許容回数の残りが僅かであることを検知すると携帯情報端末３０へ暗証番号暗号化情報の有無を問い合わせる。有れば携帯情報端末３０は決済端末３へ暗証番号暗号化情報を送信する。暗証番号暗号化情報を受信した決済端末３は対ＩＣカード読出書込部１９を介してＩＣカード４へ暗証番号暗号化情報をセットした暗証番号書込指令を発行し、ＩＣカード４は暗証番号暗号化情報を復号部２３で復号した後、記憶部２４に記憶されている暗証番号を書き換える。 The operation of the payment system configured as described above will be described. First, the cardholder 5 who has forgotten the password enters the new password and identification data at the portable information terminal 30 and transmits the password and identification data to the settlement information management host 2. When the payment information management host 2 that has received the password and the personal identification data can confirm that the operator is the cardholder by the personal identification processing unit 14, the received password is encrypted by the encryption unit 16 and the password is encrypted. Number encryption information is generated and transmitted to the portable information terminal 30. The cardholder 5 who has forgotten the personal identification number normally performs transactions at the settlement terminal 3. The settlement terminal 3 obtains the remaining number of password input allowable times via the IC card read / write command unit 19 during the payment process, and the IC card 4 being used is locked or the remaining number of password input allowable times remains. Is detected, the portable information terminal 30 is inquired about the presence / absence of the encryption code encryption information. If there is, the portable information terminal 30 transmits the password encryption information to the payment terminal 3. The settlement terminal 3 that has received the password encryption information issues a password write command in which the password encryption information is set to the IC card 4 via the IC card read / write unit 19, and the IC card 4 receives the password. After the encrypted information is decrypted by the decryption unit 23, the password stored in the storage unit 24 is rewritten.

なお、携帯情報端末３０は携帯電話であってもよい。また携帯情報端末３０と決済情報管理ホスト２間のセキュリティ強化のために携帯情報端末３０と決済情報管理ホスト２に送信データを暗号化し、受信データを復号化する暗号復号化部を有してもよい。 The mobile information terminal 30 may be a mobile phone. Further, in order to enhance security between the portable information terminal 30 and the payment information management host 2, the portable information terminal 30 and the payment information management host 2 may have an encryption / decryption unit that encrypts transmission data and decrypts reception data. Good.

以上のように、本実施の形態によれば、新暗証番号の登録さえしておけば、カード会社サービスセンタへ出向くことなく、登録直後のカード使用時に新暗証番号への書き換えが可能となるシステムを提供でき、カード会社はカード再発行によるコストロスおよびサービスセンタへ出向く手間を嫌うカード所有者の脱会を防止することができる。またこの形態により、決済情報管理ホストは携帯情報端末による暗証番号入力時に携帯情報端末へ暗証番号暗号化情報を送信してしまうため、記憶部への暗証番号登録が不要となり、メモリ管理面およびセキュリティ面において負担を軽減できる。 As described above, according to the present embodiment, as long as the new password is registered, the system can be rewritten to the new password when using the card immediately after registration without going to the card company service center. The card company can prevent the cardholders who dislike the cost loss due to reissuance of the card and the trouble of visiting the service center. In addition, with this form, the settlement information management host transmits the password encryption information to the mobile information terminal when the password is input by the mobile information terminal, so that it is not necessary to register the password in the storage unit. The burden on the surface can be reduced.

本発明の決済システムは、暗証番号誤入力によりロックされたカードに対する暗証番号の書き換えが容易にでき、暗証番号によるカード所有者確認が必要なＩＣカードクレジット決済システムなどに有用である。 The payment system of the present invention can be easily rewritten to a card locked due to incorrect input of a password, and is useful for an IC card credit payment system that requires confirmation of the card owner by the password.

本発明の実施の形態１におけるカード決済システムの構成図Configuration diagram of a card payment system according to Embodiment 1 of the present invention 本発明の実施の形態２におけるカード決済システムの構成図Configuration diagram of a card payment system in Embodiment 2 of the present invention

Explanation of symbols

１情報入力端末
２決済情報管理センタ
３決済端末
４ＩＣカード
５カード所有者
６第１ネットワーク
７第２ネットワーク
８表示部
９入力部
１０通信部
１１メイン処理部
１２第１通信部
１３記憶部
１４本人確認処理部
１５第２通信部
１６暗号化部
１７メイン処理部
１８入力部
１９対ＩＣカード読出書込指令部
２０第１通信部
２１表示部
２２メイン処理部
２３復号化部
２４記憶部
３０携帯情報端末
３１第１通信部
３２第２通信部
３３通信部
３４第２通信部 DESCRIPTION OF SYMBOLS 1 Information input terminal 2 Payment information management center 3 Payment terminal 4 IC card 5 Card holder 6 1st network 7 2nd network 8 Display part 9 Input part 10 Communication part 11 Main process part 12 1st communication part 13 Memory | storage part 14 Person Confirmation processing unit 15 Second communication unit 16 Encryption unit 17 Main processing unit 18 Input unit 19 IC card read / write command unit 20 First communication unit 21 Display unit 22 Main processing unit 23 Decryption unit 24 Storage unit 30 Portable information Terminal 31 First communication unit 32 Second communication unit 33 Communication unit 34 Second communication unit

Claims

A payment processing system comprising an information input terminal, a payment information management host, and a payment terminal, wherein the information input terminal inputs a password to the payment information management host. The settlement information management host, a first communication unit that communicates with the information input terminal, an encryption unit that encrypts a personal identification number received from the information input terminal, and the encryption A storage unit for storing the encrypted personal identification number and a second communication unit for transmitting the personal identification number encrypted by the encryption unit to the settlement terminal, wherein the settlement terminal communicates with the settlement information management host And a PIN code writing command unit that commands the information record carrier to decrypt and write the PIN code encryption information received from the payment information management host, and the payment terminal manages the payment information management host. Commanding the decoding and writing PIN encrypted information received in the information recording carrier from the payment processing system.

A payment processing system comprising an information input terminal, a payment information management host, a payment terminal, and an information record carrier, wherein the information input terminal inputs a password, and the payment number input by the input section A first communication unit that communicates with the information input terminal, and an encryption unit that encrypts a password received from the information input terminal. A storage unit that stores the encrypted password and a second communication unit that transmits the password encrypted by the encryption unit to the payment terminal, the payment terminal communicating with the payment information management host A communication unit for performing the following: a code number writing command unit for commanding the information record carrier to decrypt and write the code number encrypted information received from the settlement information management host, A decryption unit for decrypting the code number encryption information and a storage unit for storing the decrypted code number, wherein the payment terminal decrypts and writes the code number encryption information received from the payment information management host. A settlement processing system for instructing a record carrier and writing the code number decrypted by the information record carrier into the storage unit.

The settlement terminal reads the remaining number of the allowable number input times stored in the storage unit of the information record carrier at the time of settlement. If the number is less than the predetermined number, the settlement terminal inquires of the settlement information management host whether or not a new password is registered. When there is a registration of the number, it receives the new password encryption information from the settlement information management host and stores it in the storage unit of the information record carrier by instructing writing to the information record carrier. 3. The settlement processing system according to claim 1, wherein the password is rewritten with a new password.

The information input terminal includes an input unit for inputting data for verifying the identity of an operator who inputs a personal identification number to the information input terminal, and the settlement information management host verifies the data for verifying the identity received from the information input terminal. The settlement according to claim 1 or 2, further comprising an identity verification processing unit for performing authentication, wherein the settlement information management host encrypts the password received from the information input terminal and stores it in the storage when the identity verification is correctly performed. Processing system.

The settlement processing system according to claim 2, wherein the information record carrier is an IC card, and the information input terminal is a mobile phone.

A receiving unit that receives from the payment information management host a password that is input to the information input terminal, transmitted to the payment information management host, encrypted by the payment information management host, and stored in the payment information management host; A code number writing command unit for commanding the information record carrier to decrypt and write the encrypted code number received from the information management host, and a code number allowable number of times stored in the storage unit of the information record carrier A read command unit for instructing the information record carrier to read the remaining number, and if the remaining number is equal to or less than a predetermined number, the settlement information management host is inquired whether a new password is registered, and a new password If there is a registration of the number, the encrypted password is received from the settlement information management host, the writing to the information record carrier is instructed, and the decrypted new password is Payment terminal for writing to the distribution record carrier.

A step of inputting a personal identification number into an information input terminal; a step of transmitting the personal identification number from the information input terminal to a payment information management host; and a step of receiving the personal identification number from the information input terminal by the payment information management host; The payment information management host encrypts the password and registers it as password encryption information, and the payment terminal reads the remaining number of password input allowable times stored in the storage unit of the information record carrier. Steps,
When the remaining number is equal to or less than a predetermined number, the payment terminal inquires of the payment information management host whether or not a new password is registered, and from the payment information management host when a new password is registered. Transmitting the password encryption information to the payment terminal, the payment terminal receiving the password encryption information from the payment information management host, and the payment terminal decrypting the password encryption information. A method for setting a personal identification number, comprising the steps of commanding the information record carrier to write and a personal identification number decrypted by the information record carrier into the storage unit.

A payment processing system comprising a mobile information terminal, a payment information management host, a payment terminal, and an information record carrier, wherein the mobile information terminal inputs a password, and the payment number input by the input section A first communication unit that transmits to the information management host, the payment information management host receiving from the payment information management host the password encryption information encrypted by the payment information management host; and the password encryption information to the payment terminal The payment information management host includes a communication unit that communicates with the portable information terminal, and an encryption unit that encrypts the personal identification number received from the portable information terminal. The payment terminal includes a communication unit that communicates with the portable information terminal, and a password that instructs the information record carrier to decrypt and write the password-encrypted information received from the portable information terminal. And a Goshokomi command unit, the information recording carrier is provided with a storage unit for storing a personal identification number of decoding a decoder for decoding the personal identification number encrypted information,
Payment processing for writing the code number decrypted by the information record carrier into the storage unit by instructing the information record carrier to decrypt and write the code number encrypted information received from the payment information management host by the payment terminal system.

8. The settlement terminal reads the remaining number of allowable number input times stored in the storage unit of the information record carrier at the time of settlement, and if it is equal to or less than the predetermined number, obtains the income of the code number encryption information from the portable information terminal. The payment processing system described.

The portable information terminal has an input unit for inputting data for verifying the identity of an operator who inputs a personal identification number to the portable information terminal, and the settlement information management host verifies the data for verifying the identity received from the portable information terminal. The payment processing system according to claim 7 or 8, further comprising an identity verification processing unit for performing authentication, wherein the payment information management host transmits the encryption code encryption information to the portable information terminal when the identity verification is correctly performed.

The settlement processing system according to any one of claims 7 to 9, wherein the information record carrier is an IC card, and the portable information terminal is a mobile phone.

A receiving unit that receives a personal identification number that is input to the mobile information terminal, transmitted to the payment information management host, encrypted by the payment information management host, and transmitted to the mobile information terminal; and the mobile information terminal A code number writing command unit for commanding the information record carrier to decrypt and write the encrypted code number received from the code number, and the remaining number of password input allowable times stored in the storage unit of the information record carrier A read command unit for commanding the information record carrier to read out, when the remaining number is equal to or less than a predetermined number, the code number encryption command information is obtained from the portable terminal, and the code number write command unit A settlement terminal for writing the decrypted personal identification number in the information record carrier in accordance with the write command issued by.

Inputting a personal identification number into a portable information terminal; transmitting the personal identification number from the portable information terminal to a payment information management host; receiving the personal identification number from the portable information terminal by the payment information management host; The payment information management host encrypting the password to obtain the password encryption information; transmitting the password encryption information from the payment information management host to the portable information terminal; and the portable information A terminal receiving the PIN code encryption information from the payment information management host; a step of reading a remaining number of password input allowable times stored in a storage unit of the information record carrier by the payment terminal; The payment terminal inquires of the portable information terminal about the presence or absence of personal identification number encryption information when the number is equal to or less than a predetermined number; Transmitting the password encryption information from the payment information management host to the payment terminal when the password encryption information is present, and the portable information terminal when the remaining number is equal to or less than a predetermined number. Transmitting the code encryption information to a payment terminal, the payment terminal receiving the code encryption information from the portable information terminal, and the payment terminal decrypting the code encryption information. A method for setting a personal identification number, comprising: instructing writing to the information record carrier; and writing a personal identification number decrypted by the information record carrier into a storage unit.