TWI578245B - Portable terminals, delivery servers, control methods, and programs - Google Patents

Description

Portable terminal, delivery server, control method, and program

The present invention relates to a portable terminal that is presented by an operator to a payer of an electronic value, a delivery server that distributes a program executed on the portable terminal, a control method of the portable terminal, and the program.

Systems that utilize electronic money have been proposed in many ways by paying considerations to accept offers for goods or services. In the electronic money system, instead of putting cash in the wallet, it is replaced by a portable device (equivalent to a wallet), and the electronic value (equivalent to cash in the wallet) expressed by electronic information. To make a payment.

At the time of payment of the electronic value, the payer is a portable device that is close to the reader/writer operated by the provider of the goods or services, thereby requiring only a short period of time to be carried on and off the portable device. NFC (Near Field Communication) is established between the machines, and by this communication, the electronic value corresponding to the portable device can be established, and the amount of payment can be reduced. In NFC, although it is not necessary to bring the portable device into contact with the reader/writer, it is typically necessary to bring the distance close to a few mm or so.

As a portable device, an electronic circuit for NFC embedded in a cash card or a credit card is widely used. The electronic circuit generally operates by electric power generated by electromagnetic induction by radio waves for NFC emitted from the reader/writer.

On the other hand, in a portable terminal such as a mobile phone or a smart phone, the electronic circuit for embedding NFC in the same manner as the above is widely used. In addition, there are proposals for use in telephone communication. The communication function of NFC is set in the SIM (Subscriber Identity Card) card. In these cases, in addition to using the radio waves emitted by the reader/writer as a power source, it is also possible to receive the supply of electric power from the battery provided in the body of the portable terminal.

Here, the electronic circuit for NFC that can receive power supply from the portable terminal body usually has: (a) simulated portability for taking out the electronic value in the account number assigned to the electronic circuit. The card simulation mode in which the device operates, (b) the information involved in the electronic value assigned to other portable devices, the reader/writer mode required to function as a reader/writer, and (c) in order to make electronic The P2P (Peer To Peer) mode required for the circuits to receive various messages such as mail addresses.

In other words, a portable terminal such as a mobile phone or a smart phone can function as a wallet in addition to being able to become a wallet of electronic money, and can also function as a reader/writer. By using this function, the portable terminal can function as a reader/writer of the electronic money system, and communication can be established by making the electronic money card close to the portable terminal, and the electronic money is promoted from the electronic money card. A technique for payment of a value has been proposed (refer to paragraphs 0072 and 0073 of Patent Document 1).

According to this function, in a store operated by a person, the owner can use the portable terminal used for the telephone call to function as a reader/writer of the electronic money system, thereby suppressing the cost of the equipment investment and at the same time Guests receive payment by electronic value. At this time, the store owner downloads the program for the portable terminal from the delivery server of the electronic money source, and executes the program on the portable terminal.

In addition, in various entertainment facilities such as theaters and baseball stadiums, there are also salespersons who walk around the auditorium and sell food and beverages or brochures. As a result, the seller can purchase a large amount of cheap smart phones of the old model, install the program to operate it, and let the salesperson operate, and the viewer can pay in electronic money.

[Previous Technical Literature] [Patent Literature]

[Patent Document 1] Japanese Patent Laid-Open Publication No. 2013-140453

However, if various portable terminals can be utilized as readers for electronic money, they may be easily used improperly. For example, a portable terminal that acts as a reader/writer, in the crowd of the street Or in a public transportation agency such as a bus or a MRT, the bag near the other person can steal the electronic value from the portable device in the bag. Thus, the techniques required to suppress such improper use are strongly demanded.

The present invention has been made in order to solve the above problems, and an object of the present invention is to provide a portable terminal suitable for suppressing improper use in a portable terminal that is presented to a payer of an electronic value by an operator, and to be distributed on the portable terminal. The delivery server of the executed program, the control method of the portable terminal, and the program.

In the present invention, the portable terminal that is presented to the payer of the electronic value by the operator acquires the first biometric information of the payer by executing a program acquired from the delivery server or the like; The second biometric information is a portable device that does not comply with the first biometric information, and the payer uses the electronic value to start the near field communication.

101‧‧‧Portable terminal

102‧‧‧Acquisition Department

103‧‧‧Control Department

104‧‧‧ Tips Department

105‧‧‧ Keeping Department

106‧‧‧Demeritary Department

107‧‧‧Notice Department

108‧‧‧Setting Department

109‧‧‧Detection Department

251‧‧‧ Terminal hardware

252‧‧‧ touch screen

253‧‧‧ mark

254‧‧‧ portable device

261‧‧‧ camera

262‧‧‧ microphone

263‧‧‧ Speaker

264‧‧‧ camera

301‧‧‧ input form

302‧‧‧Store code bar

303‧‧‧ Password Bar

304‧‧‧ Forward button

401‧‧‧Finger login form

402‧‧‧Touch area

403‧‧‧ Login button

404‧‧‧ Forward button

405‧‧‧Message Bar

451‧‧‧Operator field

471‧‧‧Payee field

472‧‧‧ Elements

473‧‧‧ Biological Information Bar

474‧‧‧Timestamp

501‧‧‧Summary Form

502‧‧‧Summary column

503‧‧‧ Forward button

504‧‧‧Back to start button

601‧‧‧ Amount Form

602‧‧‧ value column

603‧‧‧Soft keyboard

604‧‧‧ Forward button

701‧‧‧ Payment Confirmation Form

702‧‧‧Message Bar

703‧‧‧Touch area

705‧‧‧ return button

801‧‧‧Communication Form

802‧‧‧Message Bar

803‧‧‧ return button

901‧‧‧Message Form

902‧‧‧Message Bar

903‧‧‧ Forward button

Fig. 1 is an explanatory diagram showing an outline of a portable terminal according to an embodiment of the present invention.

2 is a flow chart showing the flow of processing executed in the portable terminal according to the embodiment of the present invention.

[Fig. 3] A display example of an input form required by a provider to log in to a server for streamlining a client.

[Fig. 4] A display example of a fingerprint registration form required for an operator to log in biometric information.

[Fig. 5A] An explanatory diagram for explaining a state of a holding portion for holding biological information.

[Fig. 5B] An explanatory diagram for explaining another aspect of the holding portion for holding biological information.

[Fig. 6] A display example of a summary form required to indicate the outline of login and login.

[Fig. 7] A display example of an amount form for requesting input of the amount of electronic value involved in payment.

[Fig. 8] A display example of a payment confirmation form for requesting a payer to take an action of agreeing to pay.

[Fig. 9] A display example showing a communication form intended to start NFC with the portable device.

[Fig. 10] An explanatory view of the state of the back side of the terminal hardware.

[Fig. 11] An explanatory view of a state in which the terminal hardware brings the portable device closer.

[Fig. 12] A display example of a message form indicating that the payment of the electronic value has been completed.

[Fig. 13] A display example of a communication form indicating that the balance of the electronic value is insufficient.

[Fig. 14] Payment confirmation form for requesting a higher level confirmation from the payer Single display example.

[Fig. 15] A display example of a message form indicating that the payment of the electronic value cannot be performed.

Hereinafter, embodiments of the present invention will be described. Further, the present embodiment is for illustrative purposes, and does not limit the scope of the invention. Therefore, as long as the practitioner can naturally adopt the embodiments in which the various elements or all elements are equally substituted, these embodiments are still included in the scope of the present invention.

[Example 1]

The electronic value in the electronic money system has a value similar to cash. The electronic value can be exchanged with each other or from one party to the other, and can be managed by the same currency unit, or can be converted at the time of exchange by using the unit alone. In addition, the various points that are given in response to the user's actions (purchasing of the product, answering the questionnaire, visiting the store, etc.) can also be used as the electronic value.

This embodiment is applicable to an electronic money system called a stored-value type. In the stored value system, the electronic value (also called "balance") that the user can pay as the consideration in the transaction, and the card or mobile phone embedded in the electronic circuit, the smart phone, etc. Carry the device, manage it by establishing correspondence.

In a stored value system, it is generally the electronic circuit that the portable device has, remembering the value of the available electronic value. In this way, It is equivalent to the state of loading cash in the wallet. Hereinafter, the amount of money that the portable device is associated with is determined to be "cash left in the wallet" and is referred to as "remaining value".

The provider of the goods or services accepts the payment of the consideration from the user by using a reader/writer that can communicate with the portable device. Once the user brings the portable device closer to the reader/writer, communication between the portable device and the reader/writer is possible, and various commands are sent from the reader/writer to the portable device, and the execution result of the command is sent from the portable device. To the reader.

For example, by using the query command, as a result of the execution, the value of the residual value corresponding to the current portable device can be obtained.

When the instruction is reduced, the portable device is caused to establish a corresponding residual value, and the electronic value specified by the instruction is reduced. This corresponds to taking cash out of the wallet. That is to say, the reduction of orders is used in the transaction of receiving goods or services, at the time of payment of the consideration, that is, the "currency". Hereinafter, the electronic value specified by the instruction is reduced, which is called "price value".

The addition of the instruction causes the portable device to establish a corresponding residual value, and increases the electronic value specified by the instruction. This corresponds to putting cash into the wallet. Increasing the order is, for example, at the storefront, where the user pays cash to the store clerk, which is equivalent to the electronic value of the cash, and is used when the portable device is added.

In addition, if the portable device is capable of communicating via a computer communication network such as the Internet, the application operating in the portable device The program may also respond to instructions sent via the computer communication network to obtain or increase or decrease the residual value of the portable device. In this case, the value of the payment or the residual value can be added without using the reader/writer.

By reducing the number of instructions or adding instructions, the value of the electronic value is increased or decreased, which means that the amount of value moves between the payer and the provider. The provider transmits the information of the movement of the value to the management server of the electronic money. The management server for electronic money is operated by the operators of all electronic money services. If the checkout information accumulated in the management server of the electronic money is calculated, the provider can obtain the total amount of the electronic value obtained or lost during the period.

If the provider has an electronic value, it can be obtained by exchanging cash from the operator. On the other hand, in the case of loss of the electronic value, the provider is responsible for paying the operator, paying the cash relative to the value of the electronic value.

In addition, there are occasional intermediaries between the provider and the operator of the electronic money service. The operator, who is referred to as an e-money service provider, prepares the infrastructure necessary for the provider to accept payment due to the electronic value, or provides advice or support for the operation of the electronic value. In the present embodiment, in order to accept the payment of the electronic value, the provider can use the portable terminal such as the prepared mobile phone or smart phone as the reader/writer, but the portable terminal becomes the reader/writer. The program required for the function is delivered to the portable terminal by a delivery server prepared by the operator or the business.

In the present embodiment, the communication system between the portable terminal functioning as a reader/writer and the portable device having its communication range is NFC, but infrared communication or Bluetooth (registered trademark) can also be used. ).

Furthermore, the present embodiment is also applicable to an electronic money system called a server value method. In the server value method, the identification information of the account of the wallet corresponding to the electronic value is obtained from the portable device, and the account number and the residual amount under the account are in the server of the operator or the business operator. , is managed. That is, in the server value method, the portable device functions as an identification tag required for identifying an account, but does not memorize the residual value itself.

Further, in the present embodiment, the so-called reduced client mode is conceived. In the streamlined client mode, the portable terminal is a function of the user interface of the reader/writer and the exchange of various information with humans, and the delivery of the instructions of the portable device is controlled by the server of the streamlined client. . The server for streamlined client can be prepared for the provider itself, or the provider can set the right to use the provider. The client server is streamlined and is responsible for serving as the cashier of the provider's electronic value. The streamlined client server and the operator are periodically, typically once a day, exchange management information to determine the total amount of electronic value owned by the provider.

However, this embodiment is also applicable to the so-called rich client mode. In the streamlined client mode, the portable terminal is a relay for communication between the portable device and the server, and is responsible for mutual interaction with the user. Mobile, but in the rich client mode, the portable terminal also acts as a server. That is to say, the portable terminal is responsible for checking the delivery of the instructions with the portable device, and is also responsible for regular communication with the operator.

The portable terminal of the present embodiment can also be implemented by a hardware such as a smart phone or a mobile phone, or can be constituted by a dedicated electronic circuit, or can be realized by causing a computer to execute a program. In addition, as an intermediate form between a computer and a dedicated electronic circuit, an FPGA (Field Programmable Gate Array) that dynamically constructs an electronic circuit based on the design instruction code can be used by compiling a program design instruction code into an electronic circuit. The technology constitutes the portable terminal of the present embodiment.

In the portable terminal of the present embodiment, in order to prevent the operator of the portable terminal (the provider or the person employed by the provider as well as the person who steals the portable terminal from the provider) as much as possible And use a variety of techniques. These techniques are first described below.

The first technique is the use of biological information by the payer of the electronic value. Generally, in the payment by the electronic value, the payer is required to touch the predetermined part of the portable terminal and the like, and confirm the consent to pay. However, it is extremely rare for the same payer to agree to pay at the scene of the sale of the item. On the other hand, the wrongdoer, in order to steal the electronic value of others by misconduct, will repeatedly carry out the action.

In the present technology, the biometric information of the payer is obtained, and the possibility of misconduct is judged for the person who is presumed to be the same person as the past payer, and the payment of the electronic money is completely prohibited, or only Payments for electronic money can only be made after inspections at other higher levels.

In the second technique, the tilt of the portable terminal is used. In general, when a card type portable device is used for electronic value payment, the portable device is brought close to the electronic circuit for NFC by making the front or back side of the card visible to the payer. On the other hand, a portable terminal such as a mobile phone or a smart phone usually has a plate shape, and an electronic circuit for NFC is disposed on the front or back of the board.

Therefore, here, the payment of the electronic value of the portable terminal can be accepted only if the front side and the back side of the portable terminal are slightly parallel to the horizontal plane. According to this technique, the misplaced person must bring the portable terminal closer to the bottom of the bag in order to bring the portable terminal closer to the bag of another person in order to steal the electronic value. At this point, the posture of the wrongdoer is very unnatural and eye-catching. Therefore, it is considered that misconduct can be suppressed.

In the third technique, when the payment due to the electronic value is performed, the intention is notified to a person located around the portable terminal such as the payer by audible sound, visible light, or vibration. The notification performed here is preferably performed at a maximum volume, a maximum amount of light, and a maximum vibration. By means of the notification, the owner of the portable device can be warned that the electronic account value of the account from the portable device is paid. The notice may be before the payment of the electronic value (for example, during the action of prompting the consent of the payer), during the payment (for example, during the period when the NFC chip is retrieving the nearby portable device), after payment (for example, the payment is successful, already Can be put away from the portable device In any period of the state).

The fourth technique is to limit the place to be paid by the portable terminal. That is to say, the portable terminal can only be paid within the specific area before the electronic value is paid. In a personally operated store, the available area is limited to the inside of the store, and the available area is limited to the inside of the facility in a theater or a stadium, thereby leaving the available area even if the portable terminal is stolen , it is impossible to conduct misconduct. In addition, in the case where the available area is left out for a store or the like for various activities, it is also possible to make payment of electronic money by performing re-registration of the use area or by checking at a higher level.

These techniques can be used alone or in combination. The details of these techniques are detailed below.

Fig. 1 is an explanatory diagram showing an outline of a portable terminal according to an embodiment of the present invention. This will be described below with reference to this figure.

The portable terminal 101 of the present embodiment downloads a program distributed from a delivery server to a terminal hardware such as a smart phone or a mobile phone by a business operator or an operator of the electronic money system, and Implemented.

In general, the program executed by the terminal hardware can be recorded on CD, floppy disk, hard disk, optical disk, DVD, tape, ROM (Read Only Memory), EEPROM (Electrically Erasable Programmable ROM), flash A computer-readable, non-transitory information recording medium such as a memory or a semiconductor memory. The information recording medium can be separately delivered independently of the terminal hardware. Sold.

In the terminal hardware, a program recorded in a non-transitory information recording medium such as a flash memory is read out to a RAM (Random Access Memory) of a temporary memory device. Then, the instructions contained in the program to be read are executed by the CPU (Central Processing Unit). However, in an architecture in which ROM and RAM can be mapped into one memory space, the instructions contained in the program stored in the ROM are directly read and executed by the CPU.

Even the above-mentioned program can be distributed to the terminal hardware, etc., from a distribution server managed by a business person, through a transitory transmission medium such as a computer communication network, independently of a computer that executes the program. Sold.

Here, the portable terminal 101 includes an acquisition unit 102 and a control unit 103. Further, as an element that can be omitted, the presentation unit 104, the holding unit 105, the erasing unit 106, the notification unit 107, the setting unit 108, and the detecting unit 109 are provided. The following is an overview of the actions of each department.

The acquisition unit 102 acquires biometric information of the payer who is currently attempting to pay for electronic money. As the bioinformatics system, the fingerprint of the payer, the voiceprint, the shape of the face, the shape of the retina, the shape of the iris, and the like can be employed. The biological information is obtained by using a fingerprint sensor, a touch panel, a microphone, a camera, and the like provided in the terminal hardware.

The prompting unit 104 outputs a message for prompting the payer to agree to the payment required action. The message is based on the hardware of the terminal. Under the control of the CPU, it is displayed on a display device such as a touch screen provided in the terminal hardware. However, the speaker or the like provided in the terminal hardware can be used to urge the action.

As an action department, let the payer touch the button displayed on the touch screen, or let the payer say the consent to pay by voice. Here, if the biometric information is obtained from the action performed by the payer, the psychological resistance of the payer can be reduced, and the transaction can be smoothly performed. Moreover, compared with the process of obtaining biometric information and the process of requesting action, it is possible to reduce the trouble of the payer.

For example, if fingerprints are used as biometric information, when agreeing to pay, the payer is urged to touch the fingerprint sensor of the terminal hardware, and the fingerprint can be successfully obtained from the fingerprint sensor. For the action. In addition, the fingerprint of the payer can also be obtained from the touch screen of the terminal hardware.

If the voice is used as the biological information, the voice of the payer who agrees to pay is obtained by the microphone of the terminal hardware, and the voice recognition result is used to determine whether the action is performed, and When there is an action, the voiceprint is obtained from the sound.

When the biometric information is the shape of the face, the shape of the omentum, or the shape of the iris, the camera for photographing the terminal hardware itself can be used. In this aspect, the image captured by the camera can be reflected on the display device, and the graphic of the frame line as the guide can be reflected. Then, if the payment is agreed, the payer is urged to take the following action: to make the payment that was taken The contour of the face or pupil of the person is substantially the same as the direction of the guide frame. After the terminal hardware or the face of the payer is moved, the posture is maintained for a predetermined time (about several seconds). When the action is completed, the shape of the face or omentum and iris is also obtained.

In addition, in the present embodiment, the information of the image or sound obtained by the sensor or the microphone or the camera is not directly used as the biological information, but the feature quantity extracted from the information is regarded as the biological information. Thereby, an ideal system can be realized from the viewpoint of privacy. Further, the process of extracting the feature amount from the information of the obtained video or sound is performed by using a CPU of the terminal hardware or a dedicated wafer required for biological information processing, and the like. Well-known techniques can also be employed.

In the holding unit 105, the biometric information of the payer who has been acquired in the past is held for a predetermined period or a predetermined number. Further, the holding unit 105 may additionally hold biometric information of an operator who operates the terminal hardware such as a store clerk or a salesperson. The holding portion 105 is realized by a non-volatile non-transitory memory device such as a flash memory of a terminal hardware.

The control unit 103 controls the payment by the electronic value, and is realized by the CPU of the terminal hardware. The control unit 103 determines the possibility that the misconduct is performed, and determines whether or not the payment of the electronic value is directly accepted as the possibility. If the payment of the electronic value is directly accepted, the NFC chip of the terminal hardware is controlled to retrieve the nearby portable device. If the portable device is detected, the reduction instruction is sent to the portable device, and the result is received. If the instruction is successful, the electronic value is completed. pay.

In other cases, the payment of the electronic value from the payer may be rejected, or the payment of the electronic value may be started after passing other high-level inspections.

In the judgment of the presence or absence of misconduct caused by biological information, as a simple aspect, there are: comparing the bioinformation of the payer obtained in the past transaction or payment, and the electronic value from this time. The biological information obtained by the payer of the payment. In this aspect, if any of the former is in conformity with the latter, that is, when it is determined that the past payer is also the payer of this time, the probability of determining the misconduct is high, and if the current payer and the past are determined If the payers are different, the probability of misconduct is low.

When the payment of the electronic value is performed, the erasing unit 106 erases the biometric information acquired by the payer from the holding unit 105. In other words, the holding unit 105 is realized by cooperative operation of a CPU and a flash memory of the terminal hardware. As described above, the holding unit 105 holds the biometric information of the payer who has been obtained in the past for a predetermined period or a predetermined number.

Here, in the holding unit 105, the biometric information of the payer who has been acquired in the past is kept only one, or the erasing unit 106 erases the oldest biometric information after the payment of the electronic value, and covers the same. In the aspect of the biometric information of the payer involved in the payment, the biometric information of the payer held by the holding unit 105 will be the biometric information of the payer who has only paid the electronic value. Keep it older Biometric information of the payer. Therefore, further concerns can be made about the privacy of the payer.

Further, when the biometric information acquired by the acquisition unit 102 matches the biometric information of the operator held by the holding unit 105, it is considered that the express consent of the payer is not performed, and the operator takes the action instead. The possibility is high. Under such circumstances, it is considered that there is a possibility of misconduct, and it is only necessary to pass the higher-level inspection before the payment of the electronic value can be performed.

The notification unit 107 emits audible sound, visible light, and vibration by a display device, a speaker, a vibrator, an LED (Light Emitting Diode), or a light source provided in the terminal hardware, and the payment of the electronic value is performed. In fact, a person located near the portable terminal 101 is notified. In the terminal hardware, the setting unit 108 allows the operator to set the intensity of the output of the display device, the speaker, the vibrator, the LED or the lamp (the mode of the brightness or flicker, the volume of the sound, the size or the mode of the vibration) It is generally common, but the notification of the payment of the electronic value is intended to be output at a predetermined intensity even if the operator's setting is weaker than the predetermined intensity. If the operator's setting is greater than or equal to the predetermined intensity, it may be output as the predetermined intensity or in accordance with the operator's setting. By making eye-catching notices, it is possible to suppress misconduct in people and the like.

The detecting unit 109 is realized by various sensors that sense various states of the terminal hardware. For example, if the tilt sensor is used, the orientation or posture of the terminal hardware can be obtained. Therefore, only the front side and the back side of the plate-shaped terminal hardware are relatively wide surfaces, and the angle with the horizontal plane is smaller than When the threshold is set to be slightly parallel, the control unit 103 can perform NFC between the portable devices, and if the angle is outside the predetermined range, the NFC is restricted, and if so, the operation when accepting payment of the electronic money can be performed. The posture of the person is set to limit the inappropriate behavior in the crowd.

Further, if the tilt sensor is used, the change in the tilt of the terminal hardware can be obtained. If a microphone is used, an audible sound around the terminal hardware can be obtained. In addition, in order to determine the necessity of flash photography caused by LEDs or the like, the brightness of the surrounding surroundings is obtained based on the image captured by the brightness sensor or the camera.

Therefore, the CPU or the dedicated chip of the terminal hardware compares the change in the sound, brightness, and tilt measured by the sensor with the mode of the change notified by the notification unit 107, thereby detecting the notification actuality. The size of the people around you.

The size of the notified notification is compared with the strength when the notification is output. If it is large enough, the terminal hardware can be considered not to be improperly modified (for example, plugging the speaker, blocking the LED, and removing the vibrator) Etc.) or malfunction. The size of the notified notification is compared with the strength of the notification output, and when it is less than the predetermined judgment criterion, it can be judged that the terminal hardware is improperly modified or malfunctioned, and the possibility of misconduct is possible. .

Even if GPS is used, the position of the terminal hardware can be detected. In a case where the use area of the portable terminal 101 is restricted to suppress the inappropriate behavior, it is possible to determine whether or not it is within the use area based on the GPS detection result.

In addition, the terminal hardware has a wireless LAN (Local Area) When the communication function of the network is determined, the location of the terminal hardware can be detected by the SSID (Service Set IDentifier) of the detected access point.

Even ping or the like can be used to investigate whether a specific node in the network that is connected via the access point can be accessed from the terminal hardware (for example, a thin client server, a cash register, a network printer, etc.) According to the result, it is detected whether the terminal hardware is located in a specific area.

In addition, in the streamlined client mode, the portable terminal 101 exchanges instructions for processing the electronic value between the portable device and the reduced client server. Therefore, the reduced client server is set to operate only in the LAN, and cannot be reached from outside the LAN. In the case where the physical domain of the LAN is limited, the portable terminal 101 can communicate with the server for the reduced client. It can also be judged to be located in a specific area.

In the portable terminal 101, the first technique (biological information of the payer), the second technique (the tilt of the terminal hardware), the third technique (the notification by the audible sound, etc.), and the fourth technique (the location) Limitation) The process of processing under all aspects. Further, the first to fourth techniques can be appropriately selected and omitted. Further, in the following examples, it is assumed that the fingerprint is used as the biological information, and the fingerprint is acquired from the touch screen. However, as described above, various information can be used as the biological information system.

Further, in the following aspects, it is assumed that once a business person concludes a contract involving a digital money service with a plurality of providers (stores), a store code and a password are assigned to each provider. Business person, based on store Code and password, and for each provider, manage the electronic value of the cashier.

2 is a flow chart showing the flow of processing executed in the portable terminal according to the embodiment of the present invention. This will be described below with reference to this figure. As described above, the present process is started by executing a program on the terminal hardware, and the portable terminal 101 is realized by the processing.

Then, once the processing is started, the portable terminal 101 first accepts the input of the store code and password assigned to the provider in advance in order to perform the correspondence between the portable terminal 101 and the provider (step S201). .

In the process of step S201 in the present embodiment, first, an input form is displayed on a touch screen disposed on the front side of the terminal hardware. Figure 3 is a display example of the input form required by the provider to log in to the server for streamlining the client. This will be described below with reference to this figure.

As shown in the figure, on the front side of the terminal hardware 251, in addition to the touch screen 252, a camera 261 for photographing the person who is watching the touch screen 252 and a call for making a call are disposed. Or the sound is output to the desired microphone 262 and speaker 263. In the figure, an input form 301 is displayed in the touch screen 252.

In the input form 301, a store code field 302 and a password field 303 are prepared. Using the software keyboard of the terminal hardware (not shown), after the operator inputs the information to the user, once the advance button 304 is tapped, the entered store code and password, and the terminal hardware identification information (manufacturing number or MAC address, etc.), to the thin client server via wireless The LAN transmits and associates the portable terminal 101 with the provider (step S202).

Further, if there is an error in the input of the store code or the password, and the authentication on the server for the client is reduced, the process returns to step S201, and the input is requested again (the illustration is omitted in the flowchart).

Furthermore, after the portable terminal 101 is associated with the provider, the portable terminal 101 acquires the biometric information of the operator (step S203). In this embodiment, a fingerprint login form is displayed on the touch screen of the terminal hardware. FIG. 4 is a display example of a fingerprint registration form required for an operator to log in to biometric information. This will be described below with reference to this figure.

The fingerprint registration form 401 is prepared with an elliptical touch area 402 for the finger to touch. According to the message "Please touch the elbow of the operator (salesperson)" in the message bar 405, the operator's finger touches the touch area 402, and if the fingerprint is obtained from the contact state of the touch screen, For information, in the message bar 405, "Please log in to this fingerprint to log in" (not shown).

By this means, when the operator taps the registration button 403, the portable terminal 101 writes the feature information to the flash memory or the like, and holds the biometric information of the operator in the holding unit 105 (step S204). When it is desired to log in a plurality of fingerprints of an operator, or when the operator has a plurality of digits, the processing of steps S203-S204 is repeated. Fig. 5A is an explanatory diagram for explaining an aspect of a holding portion for holding biological information. Fig. 5B is an explanatory diagram for explaining another aspect of the holding portion for holding biological information. The following description will be made with reference to these figures.

The holding unit 105 is provided with an operator field 451 required to hold the operator's biological information, and a payer field 471 required to hold the biometric information of the payer described later.

In the operator field 451 of this aspect, the biometric information of the operator is maintained as a list, and in the initial state, all the elements in the element are recorded as "none". When the biometric information is to be registered in step S204, first, the element with the record "None" is found from the list, and the biometric information of the new operator is written for the found element. The number of elements in the list has an upper limit (5 in this figure). If the upper limit is reached, more biometric information of the operator cannot be registered. In the figure, the operator's biometric information records only one state.

The payer field 471 is an area required for recording the biometric information of the payer, and the details thereof will be described later.

If the fingerprint of the operator is all registered, once the operator clicks the forward button 404, the summary form is displayed on the touch screen (step S205). Fig. 6 is a diagram showing an example of display of a summary form required for the outline of login and login. This will be described below with reference to this figure.

In the summary form 501, the store code received in steps S201-S204 and the number of registered fingerprints are displayed in the summary column 502. If there is no problem in accepting the payment of the electronic value by this content, the operator clicks the forward button 503. As a result, the processing proceeds to step S206.

On the other hand, if you want to log in again, the operator taps back to the start button 504. In this way, the processing returns to step S201. (The illustration is omitted in the flowchart).

In addition, if the feature information of the store code or password and the fingerprint of the operator is stored non-volatilely in the flash memory or the like, the input or operator of the explicit provider information may be omitted when the next program is started. Fingerprint login. In other words, the processing of steps S201 and S203-S204 is omitted, and the stored client terminal 101 and the provider are associated with each other in the reduced client server by the stored store code and password, and the process proceeds to step S205.

When the initialization of the portable terminal 101 is completed by the steps S201-S205, the detecting unit 109 detects the current position of the portable terminal 101 (step S206). The test indicates that GPS can be used if it is outside the house. In addition, in the case where there is a problem with the accuracy of the GPS, or the situation in which the GPS cannot be used for payment within the building, the time required for GPS positioning, or the battery consumption may be a problem, the wireless LAN located nearby may be acquired. The SSID of the access point, based on the information to determine the current location.

Then, it is determined whether or not the current position to be detected is located in an available area previously assigned to the store code (step S207). Here, the assignment of the available area of the store code is performed in the simplified client server, and when the related correspondence is performed, the server is downloaded from the reduced client server to the portable terminal 101. Use information from the region.

In addition, it is also possible to collect the SSID of the access point of the surrounding wireless LAN when the operator's fingerprint is registered. Collected The predetermined ratio of any of the SSIDs or the collected SSIDs is a period that can be detected by the wireless LAN, and is determined to be within the available area.

In addition, the current location of the entity may not be detected (step S206), and then it is determined whether the location is within the utilization possible range (step S207), but by whether or not a specific node within the LAN is available (for example, a POS located in the LAN) The cash register or management computer, network printer, etc.) successfully communicate to determine whether the current location is within the available area.

If it is known by these methods that the portable terminal 101 is located in the available area (step S207; Yes), the acceptance of the payment of the electronic value is started. On the other hand, if the portable terminal 101 is not located in the usable area (step S207; No), in this aspect, the process returns to step S201 and the initialization is performed again. However, it is also possible to return to step S206 after issuing a warning to the operator, or to terminate the program itself.

Then, once the acceptance of the payment of the electronic value is started, first, the amount form is displayed on the touch screen (step S208). Fig. 7 is a display example of an amount form for requesting input of the amount of electronic value involved in payment. This will be described below with reference to this figure.

The amount form 601 is provided with a value field 602 for displaying the amount of the electronic amount value required to be paid, and a software keyboard 603. Once the operator taps the numeric keypad of the software keyboard 603, the assigned number of the button is appended to the value field 602. If the operator taps the delete key, the value of the value field 602 will be deleted from the end.

Once the required payment is entered in the value field 602 For the amount of the amount, the operator taps the forward button 604. As a result, a payment confirmation form is displayed in the touch screen, prompting the payer to take the action required to agree to the payment (step S209). Fig. 8 is a display example of a payment confirmation form for requesting the payer to take an action of agreeing to pay. This will be described below with reference to this figure.

In the message column 702 of the payment confirmation form 701, the amount of the electronic amount to be paid by the payer entered in the amount form 601 and the message "Touch the ellipse if the payment is agreed" are displayed. If there is an error in the amount, if the return button 705 is tapped, the process returns to step S208 (the illustration is omitted in the flowchart) in order to re-enter the amount.

Further, in the payment confirmation form 701, the contact area 703 of the elliptical shape required for the payer's finger to be touched is prepared. Once the payer touches the touch field 703 as an action to agree to the payment of the electronic value, the obtaining unit 102 of the portable terminal 101 takes the feature information of the fingerprint as a payment from the contact state of the touch screen. The biometric information of the person is obtained (step S210).

Then, the control unit 103 checks whether the biometric information of the payer acquired in step S210 matches any of the biometric information of the operator held by the holding unit 105 (step S211). As described above, the biometric information of the operator is recorded in the bioinformation column of each element of the list of the operator field 451 of the holding unit 105, and the value is not "none" and the biometric information of the payer is Compare.

If it matches any one (step S211; Yes), it is the consent of the payment due to the payer, so return to the step S209. At this time, it is also appropriate to give a warning or message.

If it does not match any of them (step S211; No), it is checked whether the biometric information of the payer obtained in step S210 matches any of the biometric information of the past payer held by the holding unit 105. (Step S212). As will be described later, the biometric information of the payer acquired in step S210 is registered in the holding unit 105 after the completion of the payment, and is used as the biometric information of the past payer.

The biometric information of the payer is recorded in the bioinformation column of each element of the list of the payer field 471 of the holding unit 105, and the information of the value that is not "none" is compared with the biometric information of the payer. Correct.

If it does not match any of them (step S212; No), the inspection by the biological information is passed, and the process of accepting payment of the electronic value is started from the portable device of the payer.

First, the notification unit 107 outputs a notification indicating that the portable device is being detected, and outputs it at a predetermined intensity by audible sound, visible light, vibration, etc., to let the surrounding person know (step S214), the portable terminal The 101 is displayed on the touch screen 252 to display a communication form relating to the NFC of the portable device (step S215). Fig. 9 is a diagram showing an example of display of a communication form intended to start NFC with the portable device. This will be described below with reference to this figure.

In the message field 802 of the communication form 801, "Please turn the terminal over and bring the portable device closer to the vicinity of the mark." Thereby urging the operator to turn the terminal hardware 251 over, so that the payer can easily carry the portable Put it on. Fig. 10 is an explanatory view showing the state of the back side of the terminal hardware. This will be described below with reference to this figure.

On the back side of the terminal hardware 251, in addition to the camera 264 required to photograph a landscape or others, a mark 253 indicating a place where the NFC wafer is placed is attached. Once the payer approaches the portable device in a manner that overlaps the indicia 253, the NFC chip detects the portable device.

Further, when the return button 803 of the communication form 801 is tapped, the control returns to step S208, and restarts from the input of the amount of money (not shown in the flowchart). In this way, the acceptance of the payment of the electronic value due to the current amount can be cancelled.

Further, after the communication terminal 801 is urged to turn the portable terminal 101 over, the detecting unit 109 detects the tilt of the terminal hardware 251 by the tilt sensor (step S217). Then, it is investigated whether the detected inclination and the inclination of the target are within the predetermined error range (step S218). In the present embodiment, the direction of the front facing outward normal is measured and then taken as the inclination of the terminal, and the inclination of the target is assumed to be the direction of gravity.

If the two are not within the predetermined error range (step S218; No), the process returns to step S214. At this time, it can also be displayed in the message bar 802 of the communication form 801, please correct the tilt. Therefore, even if the NFC chip is very close to the portable device, the NFC system is possible, but the payment of the electronic value is still not performed.

On the other hand, if it is within the specified error range (step In S218; Yes), the back surface of the terminal hardware 251 faces upward, and the payer can visually confirm the state of the mark 253. Thus, the NFC chip of the portable terminal 101 attempts to detect whether NFC can be performed with the nearby portable device (step S219). Fig. 11 is an explanatory view showing a state in which the terminal hardware brings the portable device closer. This will be described below with reference to this figure.

As shown in the figure, once the payer closes the back of the terminal hardware 251 with the mark 253 overlapping the terminal hardware 251, the NFC chip detects the portable device so that both Communication is possible.

Here, if the portable device is not detected (step S219; No), the process returns to step S214. Therefore, the notification is repeatedly output while the portable terminal 101 attempts to detect the portable device.

Further, in this aspect, when the payer attempts to bring the portable device 254 close to the portable terminal 101, since the portable terminal 101 is turned over, the display of the touch screen is not paid or operated. Seen by the person. Therefore, it is preferable to change the notification mode according to whether the tilt of the portable terminal 101 is correct, that is, whether the outward normal vector of the front surface of the touch screen and the direction of gravity are within a predetermined error range. For example, if it is tilted correctly and when it is tilted incorrectly, the pitch of the notification sound or the timbre or melody is different, or the period of the wrong tilt is continuous vibration, and the correct tilt is intermittent vibration. If the vibration mode is different, the operator can know the current state of the portable terminal 101 even without the display of the touch screen.

In this aspect, only the back of the portable device 254 will be When the tilt of the upper side is detected, the detection of the portable device is attempted, but the tilt required for the detection may be used according to the shape of the terminal hardware or the use in the store. It can be changed as appropriate.

When it is detected that NFC can be performed with the portable device (step S219; Yes), the portable terminal 101 transmits the amount of payment to the reduced client server via the wireless LAN (step S220). Then, the relay of communication between the portable device and the reduced client server is started. In addition, the client server may be reduced, and if the amount of the payment to be paid is received from the portable terminal 101, it is confirmed whether the portable terminal 101 is the portable terminal 101 that has been associated in step S202, if not The portable terminal corresponding to the provider has refused to checkout. In this case, the portable terminal 101 reports an error and ends the process, or may return to step S201 to re-enter the login server for the reduced client (not shown in the flowchart).

Specifically, the portable terminal 101 receives the reduction command transmitted from the reduced client server via the wireless LAN (step S221), and transmits the received reduction command to the NFC chip. Carrying the device (step S222).

Then, the portable terminal 101 receives the execution result of the reduction command transmitted from the portable device (step S223), and transmits the received execution result to the reduced client server (step S224).

If the electronic value remaining in the account assigned to the portable device is above the payment amount, the reduction instruction is successful, and the payment is settled. It will be completed. The execution result at this time contains the amount of the electronic value remaining in the portable device after payment.

The portable terminal 101 receives an instruction transmitted from the reduced client server (step S225). If the instruction is specified, the payment completion intention and the amount of the remaining electronic value (step S226; Yes), the portable terminal 101 determines that the biometric information of the past payer held by the holding unit 105 is retained. Whether or not the number is equal to or lower than the predetermined upper limit (step S227). When the upper limit is exceeded (step S227; No), the erasing unit 106 erases the biometric information of the earliest acquired payer (step S228), and proceeds to step S229. On the other hand, if it is equal to or less than the upper limit (step S227; Yes), the latest biometric information that has been acquired in step S210, that is, the biometric information of the payer involved in the payment is held in the holding unit 105 (step S229). ).

In this way, the number of pieces of biological information held in the holding unit 105 can be controlled to be less than a predetermined number. If the upper limit is 1, the holding unit 105 stores only one biometric information of the past payer. Therefore, the period during which the biometric information of the past payer is held in the portable terminal 101 can be shortened to the minimum necessary, and the use of privacy can be considered.

Here, the biometric information of the payer is recorded in the payer field 471 of the holding unit 105. The payer field 471 is implemented by a list. In the example shown in FIG. 5A, a bioinformation field and a timestamp column are prepared in each element, and the number of elements in the payer field 471 is plural (in the figure) Is 4). Recorded in the bioinformatics column of each element The biometric information of the paid payer is paid, and in the time stamp column, the date and time when the biometric information was obtained or the date and time when the payment was completed is recorded.

On the other hand, in the example shown in FIG. 5B, the element of the payer field 471 is only one bioinformation column, but there is no timestamp column.

In the biometric information column 473 and the time stamp column 474 in each element 472 of the payer field 471, "None" is recorded if there is no registration as in the operator field 451. In the example shown in FIG. 5A, in order to erase the oldest biological information, it is found that the date and time recorded in the timestamp column 474 is the oldest element 472, and the biological information field 473 and time stamp of the element 472 Just write "None" in column 474. In the example shown in FIG. 5B, in order to erase the oldest biological information, since the unique element 472 has the oldest biological information, it is only necessary to write "none" in the biological information field 473 of the element 472. can.

Further, in the above description, in step S228, although the oldest biological information is erased first, and then the biological information is maintained, it is also possible to aggregate them, and the oldest element in the list of the payer field 471. 472, overwrite the biometric information of the payer and the date of the acquisition or the date of payment completion.

In the case where the payment of the electronic money can be started after the correspondence between the portable terminal 101 and the provider is completed, the holding unit 105 does not hold the biometric information of the past payer, but the past payer of the holding unit 105 The initial value of the biological information can also be used in the final Recorded biometric information of the operator. In this case, it is also preferable to omit the comparison with the biometric information of the operator (step S211).

Then, the notification unit 107 outputs the notification of completion of the checkout by audible sound, visible light, vibration, or the like (step S230). The notification here, and the notification of the period during which the portable device is being detected, is different in the output mode, which is ideal.

The operator knows that the payment of the electronic value has been completed from the output mode of the notification, and the portable terminal 101 is turned over, and the touch screen can be seen.

On the other hand, the portable terminal 101 displays the message form on the touch screen (step S231). Fig. 12 is a diagram showing an example of display of a message form indicating that the payment of the electronic value has been completed. This will be described below with reference to this figure.

As shown in the figure, the message field 902 of the message form 901 displays the amount of the electronic value to be paid, the amount of the electronic value remaining in the account of the portable device, and the greeting. Once the advance button 903 of the message form 901 is tapped, the control returns to step S208 to start the acceptance of the payment of the next electronic value.

If the electronic value cannot be paid from the account of the portable device, the reduced client is sent by the server to pay the instruction of the incomplete. Then, if the instruction received by the portable terminal 101 does not specify the completion of the payment (step S226; No), the notification unit 107 outputs the notification of the failure of the checkout to the audible sound, the visible light, the vibration, or the like. (Step S232). Notices here, other notices, and The output mode is different and ideal. In this way, the operator can know from the output mode of the notification that the payment of the electronic value has failed.

If the checkout fails (step S226; No), the portable terminal 101 changes the display of the message field 802 of the communication form 801 to the fact that the balance is insufficient (step S233), and returns to step S214. Fig. 13 is a diagram showing an example of display of a communication form indicating that the balance of the electronic value is insufficient. This will be described below with reference to this figure.

In the message field 802 of the communication form 801, the message "The balance is insufficient. Please close the other portable devices" is displayed. Therefore, the operator turns the portable terminal 101 over and confirms the intention. Further, if it is desired to give up the payment itself, as described above, the return button 803 of the communication form 801 can be tapped by the operator or the like.

Further, in the present embodiment, when the biometric information of the past payer matches the biometric information of the payer (step S212; Yes), the operator makes a higher level of confirmation, so that the payment of the electronic money becomes may. This confirmation requires time and procedures, so that it is possible to suppress the inappropriate behavior from being repeated.

That is, the portable terminal 101 displays the payment confirmation form 701 on the touch screen (step S234). Fig. 14 is a display example of a payment confirmation form for requesting a higher level of confirmation from the payer. This will be described below with reference to this figure.

In the payment confirmation form 701, unlike the step S209, the message column 702 reads "The operator touches the ellipse to confirm", prompting the operator to take action.

When the operator touches the touch area 703, the acquisition unit 102 of the portable terminal 101 acquires the biometric information of the operator from the contact state with the touch screen (step S235).

Then, the control unit 103 of the terminal device 101 checks whether the biometric information of the operator acquired in step S233 matches any of the biometric information of the operator held in the holding unit 105 (step S236). If it coincides with either one (step S236; Yes), it is determined that the operator has confirmed that the payer agrees to pay, and proceeds to step S214.

If it is not the case (step S236; No), if the acquisition of the biometric information of the operator in step S234 has not reached the predetermined number of retries (step S237; No), the process returns to step S235.

If the number of retries is reached (step S237; Yes), in order to notify that the payment cannot be settled, the portable terminal 101 displays the message form 901 on the touch screen (step S238). The reason for such a situation is that, in addition to the failure of the operating procedure on the provider side or the failure of the fingerprint sensor or the like, it is also considered that the portable terminal 101 is stolen or the like. Fig. 15 is a diagram showing an example of display of a message form for which the payment of the electronic value cannot be performed. This will be described below with reference to this figure.

The message field 902 of the message form 901 indicates that the checkout of the payment of the electronic value cannot be performed, the error code, the telephone number of the contact person of the business, and the like, and the inquiry from the provider is induced.

Here, once the forward button 903 is tapped, in this aspect, the processing returns to step S208 to restart the payment of the payment amount of the electronic value. In. However, here, the program itself may be stopped, and the process returns to step S201 to perform the re-login of the provider.

In addition, instead of touching the touch area 402, 703 displayed on the touch screen, the operator or the payer may touch the action of the fingerprint sensor prepared on the terminal hardware. To obtain the biological information of the operator or the payer, and to act as the consent of the payer.

In the electronic money system, in order to make payment in electronic money in the store, it is necessary to introduce a CCT (Credit Center Terminal) connection type or a POS (Point of Sale) direct connection type in principle, but especially for small-scale stores. In this case, the cost of the introduction of the checkout terminal cannot be ignored. Therefore, one of the important keys required for the popularity of electronic money systems is to reduce the cost of the introduction of checkout terminals. According to the present embodiment, by using an inexpensive terminal hardware such as a smart phone or a mobile phone, the cost required for the introduction of the checkout function of the electronic money system can be reduced, and the electronic money can be easily imported into a small-scale store. Pay.

Further, according to the present embodiment, the payment of the electronic value is considered by the technique involved in the notification of the biometric information of the payer, the tilt of the terminal hardware, the audible sound, and the like, and the limitation of the place. In the case where the possibility of misconduct is high, the method of not making payment is made to advance the control flow, thereby restricting the NFC with the portable device, thereby effectively suppressing the improper behavior.

[Embodiment 2]

Whether 2 biometric information is obtained from the same person, usually by Whether the similarity between the two exceeds a predetermined threshold is determined. That is, if the bioinformation is more consistent, the similarity is high, and if there is more inconsistency, the similarity is low.

Therefore, in the present embodiment, each of the biometric information of the past payer held by the holding unit 105 is compared with the biometric information of the current payer, and the similarity between the two is used.

In the above-described embodiment, it is very rare for a payer to purchase an item and leave the cash register after purchasing an item, and then returning to the cash register to purchase another item, which is very rare, if the previous payment is made. When the biometric information of the person matches the biometric information of the payer, it is determined that it is necessary for the operator to confirm, and the NFC required for payment is limited.

However, it is very common to purchase items at the shop on the next day when the item is purchased on a certain day. That is, when a payer makes a payment at the storefront, the possibility that the payer pays again is a function of the elapsed time between the previous payment and the current payment.

Therefore, in the present embodiment, when the biometric information is compared, the threshold of the degree of similarity that matches the biometric information is changed as the elapsed time from the acquisition of the biometric information of the past payer is performed. Comparison of biological information.

As described above, if a long time has elapsed since the previous payment, the possibility that the same payer will pay again will become higher. Therefore, even if the biometric information of the past is very similar to the bioinformation of this time, as long as it has been a long time since the previous payment, it is considered that the restriction of the payment is not possible.

In the present embodiment, the threshold value is established for each of the biometric information of the past payers held in the holding unit 105. Then, the longer the elapsed time from the payment of the biometric information of the payer, the greater the threshold for which the biometric information is established.

Then, when the control unit 103 obtains the similarity between the biometric information of the past payer and the biometric information of the current payer, the similarity is compared with the threshold of the past biometric information of the payer. For comparison, if the similarity exceeds the threshold, it is considered that the two systems are consistent, and the payment of the electronic value is limited. If the similarity is below the threshold, it is judged that the two are not in conformity.

In addition, it may not be the elapsed time from the payment of the biometric information of the payer, but the elapsed time from the completion of the payment involved in the biometric information of the payer. For example, at the store cash register, after purchasing the item, an additional item placed next to the cash register will be purchased, which may be taken by the general consumer. In this case, from the completion of the previous payment, to the instructor to inform the store staff of the intention to purchase the item, the clerk checks the amount of the item and inputs it, and obtains the consumer's payment consent, which takes about several tens of seconds.

On the other hand, those who attempt to steal electronic value continuously by misconduct will want to immediately make the next improper acquisition once the previous improper success is achieved. Therefore, the time of the improper acquisition, from the completion of the previous payment (theft), to the input of the next payment amount, and the acquisition of the biological information may be only a few seconds.

If such a situation is considered, the threshold is based on the previous payment. It is ideal to complete the calculation of the elapsed time. That is, if the elapsed time is only a few seconds, the threshold is lowered, and the threshold is raised for several tens of seconds. Thereafter, the threshold is rapidly reduced and then gradually increased.

Corresponding to the threshold of the elapsed time, the setting may be appropriately changed according to the action mode of the provider's passenger layer and the action mode of the inappropriate user.

Further, it is preferable that the threshold value of the degree of similarity when the biometric information of the operator is compared with the biometric information of the payer is maintained at a constant value. This is because the operator does not change during the period in which the payment due to the electronic value is accepted.

According to the embodiment, the comparison of the biological information can be appropriately performed according to the action of the payer.

[Example 3]

In the above-mentioned way, it is possible to pay for the electronic value as long as it is checked by the biometric information of the payer, but in this aspect, from the viewpoint of further suppressing improper use, it is designed to be Confirm the operator.

That is, in the above description, each time the payment amount is transmitted to the server for the reduced client, it is confirmed whether or not the portable terminal 101 is associated with the provider. In this aspect, the operator's inspection is performed each time a payment is made.

For example, in addition to the login operator in steps S203-S204 Biometric information also requires the operator to log in to the checkout password.

In addition, there is also a way to simplify the client's use of the server and set the validity period (typically only today) for the checkout password. In this aspect, if the portable terminal 101 is associated with the provider, the reduced client server generates a checkout password, and when the login is successful, the portable terminal 101 is notified. The portable terminal 101 is a checkout password notified from the server for the reduced client, and is displayed in the summary form 501 in step S205, and is made known to the operator.

Then, instead of tapping the forward button 604 in the amount form 601, the operator re-enters the checkout password, or the operator enters the checkout again before the payment of the consent action by the payer. Use a password or the like to thereby confirm the identity of the operator and adopt such a method.

In addition, in steps S203-S204, the portable device owned by the operator itself is detected, and the identity of the operator is confirmed by the identification number of the portable device. In this aspect, the operator (salesperson) puts his own portable device on the portable terminal 101, allowing the payer to watch the demonstration of the payment operation method, and also the operator caused by the portable device. Certification.

In this aspect, the following procedure can also be used: when the operator logs in, the portable device prepared by the operator is mortgaged for a certain amount (about one day's turnover), and the same portable device is placed after the business is over. , return the electronic value of the mortgage.

In addition, the operator’s identity confirmation is available to streamline customers. The end server is used, and may be determined by the portable terminal 101 based on the checkout password stored in the portable terminal 101.

[Example 4]

In the above description, the payment is approved by the payer touching the touch screen or the fingerprint sensor. In this aspect, it may be replaced or otherwise provided by the payer. Smart phones, etc.

That is, the portable terminal 101 of the operator who has input the payment amount by the operator generates a one-time password for settlement. The one-time password can be randomly generated each time, and it is also suitable to use the pre-preparer.

Then, the operator's portable terminal 101 transmits the amount of payment and one-time payment to the display terminal of the payer's smart phone or mobile phone by short-range communication such as Bluetooth (registered trademark) or infrared communication. password.

The payer's display terminal displays the amount of the received payment and the one-time password on the screen. Thereafter, the payer, if agreeing to the payment of the displayed amount, performs an action of inputting the displayed one-time password to the operator's portable terminal 101.

In this aspect, the check by the biometric information of the payer can be used in the same manner as the above, but the identification information (MAC address or manufacturing number) to which the payer's smart phone or mobile phone is assigned can also be used. Etc.), used instead of the bioinformation of the payer in the above description.

In addition, in the comparison of the identification information, it is determined whether the consistency is the same, that is, the similarity is 0% or 100%. Therefore, it may be that even if the same identification information is still payable after the tens of seconds, but it will become unpayable after a while, and after a few hours, it becomes payable, etc., even if the same identification information, You can still switch to accept payment with elapsed time. This aspect is equivalent to the above-described manner in which the threshold value of the alignment is changed as time elapses.

In the case of using the identification information of the payer's smart phone or the like to replace the biometric information of the payer, the improper use of the device is not possible unless a large amount of the machine equivalent to the "payer's smart phone" is prepared. Repeat the improper deduction. Therefore, improper use can be suppressed.

[Possibility of industrial use]

According to the present invention, a portable terminal suitable for suppressing improper use and a delivery servo for distributing a program executed on the portable terminal can be provided in a portable terminal that is presented to the payer of the electronic value by the operator. The control method of the portable terminal, and the program.

101‧‧‧Portable terminal

102‧‧‧Acquisition Department

103‧‧‧Control Department

104‧‧‧ Tips Department

105‧‧‧ Keeping Department

106‧‧‧Demeritary Department

107‧‧‧Notice Department

108‧‧‧Setting Department

109‧‧‧Detection Department

Claims (19)

A portable terminal is a portable terminal that is required to be presented to a pre-paid payer by an operator who is required to pay a payer of an electronic value, and is characterized in that the portable terminal is provided with an acquisition unit by executing a program. The first biological information obtained by the former payer; the control department is the second biological information, which is regarded as the payment of the electronic value involved in the biometric information obtained by the pre-recording acquisition unit in the past. The biometric information held in the holding unit by the portable terminal and the biological information that has been completed in the past is not in accordance with the first biometric information, and the payment of the payment of the pre-recorded electronic value value as the pre-paid payer is started. Near-field communication between the sourced portable devices; if the payment of the pre-recorded electronic value of the portable terminal is completed by the near-field communication that has been started, the pre-recording department is the first creature of the pre-record Information, as the payment of the electronic value involved in the biometric information obtained by the Pre-Record Department in the past, has been completed in the past through the pre-recorded portable terminal. Biological information is maintained. The portable terminal according to claim 1, further comprising: a prompting unit that outputs a message to urge the pre-paid payer to touch the fingerprint sensor and the forward-receiving portable terminal of the pre-recorded portable terminal; The microphone is provided for sounding, or the posture of the camera photographed by the portable terminal is maintained for a predetermined period of time as an action required to agree to the pre-payment; the pre-recording acquisition unit detects from the fingerprint sensor The fingerprint, the voiceprint detected by the microphone, or the photo taken by the camera. Get the first biometric information. The portable terminal according to claim 1 or 2, wherein the pre-recording control unit limits the pre-recorded near-field communication if the second bio-information matches the pre-recorded first bio-information. The portable terminal according to claim 1 or 2, wherein the pre-recording control unit uses the biometric information of the pre-recorder as the initial value of the bio-information held in the pre-recording unit to pre-record the operator's The biological information is regarded as the biological information that has been completed in the past by the pre-recorded portable terminal. The portable terminal according to claim 1 or 2, wherein the pre-recording holding unit holds the biological information acquired by the pre-recording obtaining unit for a predetermined period or the biological information obtained by the pre-recording obtaining unit in the past. The newer number of biological information is maintained; if any of the biological information held in the pre-recording department is in accordance with the first biological information, the pre-recording control department limits the pre-field communication. A portable terminal is a portable terminal that is required to be presented to a pre-paid payer by an operator who is required to pay a payer of an electronic value, and is characterized in that the portable terminal is provided with an acquisition unit by executing a program. The first bio-information of the payer is obtained by the pre-recorder, and if the second bio-information obtained by the pre-recording acquisition unit does not match the first bio-information, the pre-recorded electronic amount is used by the pre-paid payer. The portable device that pays for the value starts near field communication; The holding unit holds the biological information that has been acquired by the pre-recording acquisition unit for a predetermined period of time, or holds a predetermined number of biological information that has been updated by the bio-information obtained by the pre-recording acquisition unit in the past; Each piece of biological information held in the holding unit is associated with: a threshold that changes as the time after each piece of biological information is acquired or after the completion of the payment related to the biological information is completed; The degree of similarity between the information and the first biometric information exceeds the threshold value at which each biometric information is established, and the bioinformation information of each biometric information conforms to the first biological information of the predecessor. The portable terminal according to claim 6, wherein the pre-recording holding unit further holds biometric information of the pre-recording operator; and the threshold value corresponding to the bio-information of the pre-recording operator is constant. The portable terminal according to claim 5, further comprising: an erasing unit, wherein if the payment of the electronic value of the pre-recording is completed, the biological information that is first acquired among the biological information held in the pre-recording unit is given Eliminate. The portable terminal according to claim 1 or 2, further comprising: a detecting unit that detects a tilt of the portable terminal; and if the detected tilt is not within the predetermined range, the pre-control unit It is limited to the pre-field communication. The portable terminal as recited in claim 1 or 2, further comprising: The notification unit outputs a notification by at least one of audible sound, visible light, or vibration; the setting unit sets the intensity to be outputted by the pre-recording notification; and the detecting unit notifies the pre-recording before being output. The size of the notification unit is a notification that the pre-record communication system is carried out. The pre-recording notification unit outputs the pre-recorded near-field communication system at a predetermined intensity regardless of the strength set in the pre-record. The pre-recording notice of the intention; if the size of the pre-recorded object is less than the specified lower limit, the pre-recording control unit limits the pre-field communication. The portable terminal according to claim 10, wherein the pre-recording control unit starts the near-field communication before the size of the pre-recorded minimum is equal to or greater than the predetermined lower limit. The portable terminal according to claim 1 or 2, wherein if the pre-recorded portable terminal is not in the predetermined area, the pre-recording control unit limits the pre-field communication. The portable terminal according to claim 12, wherein if the pre-recorded portable terminal successfully performs wireless communication with the node associated with the area defined in the preceding note, the pre-recorded portable terminal is regarded as being located in the predetermined area. The portable terminal as claimed in claim 2, wherein the pre-recorded portable terminal notifies the server by wireless communication by means of the pre-recorded action of the pre-recorded user, and is in the server and The pre-recorded portable devices are relayed to perform pre-recorded near field communication. A portable terminal is a portable terminal that is required to be presented to a pre-paid payer by an operator who is required to pay a payer of an electronic value, and is characterized in that the portable terminal is provided with a generating unit by executing a program. a prompt for generating a one-time password; the prompting unit is configured to forward the message to the pre-recorder by urging the payer to urge the one-time password generated by the pre-record to be input to the portable terminal in order to agree to the pre-payment. The display terminal; the control unit, if the password involved in the action taken by the pre-paid payer is consistent with the one-time password generated by the pre-record, the payment of the payment of the advance electronic value made by the pre-paid payer is started. Near field communication between sourced portable devices. The portable terminal according to claim 15, further comprising: an acquisition unit that acquires first identification information of the display terminal of the predecessor payer; and a pre-record control unit that is the second identification information acquired by the pre-recording acquisition unit in the past If it matches the first identification information of the previous note, it restricts the pre-field communication. A delivery server includes a delivery unit that is a portable terminal that is presented to a prepaid payer by an operator who is required to pay a payer of an electronic value, and a delivery program whose feature is A program in which the portable terminal functions by executing a pre-program: the acquisition unit obtains the first biometric information of the pre-paid payer; The control unit is the second biological information, and the payment of the electronic value related to the biological information acquired by the pre-recording acquisition unit in the past is the biological information that has been completed in the past through the pre-recorded portable terminal. The biometric information held in the holding unit is a near field communication between the portable device that starts to communicate with the prepaid electronic value of the prepaid electronic value, which is inconsistent with the first biometric information; If the payment of the pre-recorded electronic value of the pre-recorded portable terminal is completed by the near-field communication that has been started, the pre-recording maintenance department regards the first bio-information as the pre-recorded acquisition unit in the past. The payment of the electronic value involved in the obtained biological information is maintained by the biological information that has been completed in the past through the portable terminal. A control method is a method for controlling a portable terminal that is requested by an operator who is required to pay a payer of an electronic value to a predecessor payer, and is characterized in that: the obtaining step is to obtain the first one of the prepaid payer The biological information; the control step is the second biological information, which is the biological value involved in the biometric information obtained in the past as the pre-recording acquisition step is the biological activity that has been completed in the past through the pre-recorded portable terminal. The biological information held by the information is the near field communication between the portable device that is the source of payment for the payment of the pre-recorded electronic value as the pre-recorder; If the payment of the pre-recorded electronic value of the pre-recorded portable terminal is completed by the near-field communication that has been started, the first bio-information is regarded as having been obtained by the pre-recording acquisition department in the past. Health The payment of the electronic value involved in the information is maintained through the biological information that has been completed in the past through the portable terminal. A computer program is a program executed by an operator who is required to pay a payer of an electronic value to a pre-paid payer's portable terminal, characterized in that the pre-program is to enable the portable terminal to function. The acquisition unit is the first bio-information of the pre-paid payer; the control unit is the second bio-information, which is regarded as the electronic value of the bio-information acquired by the pre-recording acquisition unit in the past. The payment is the biological information held in the holding unit by the biometric information that has been completed in the past by the portable terminal, and is the first electronic information that is not in accordance with the first biometric information, and starts with the pre-recorded electronic value as the pre-paid payer. The near field communication between the portable devices of the payment source; if the payment of the pre-recorded electronic terminal value of the portable terminal is completed by the near field communication that has been started, the pre-recording department The first bio-information of the biometric information that has been obtained by the pre-recording acquisition department in the past is based on the pre-recorded portable terminal. The biological information that has been completed in the past is maintained.