JP2003108901A - Card payment system and card payment assisting method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To enhance the safety of payment using a card while keeping its convenience. SOLUTION: This card payment system is provided with a pen 3 used for writing on a slip 1 carrying a printed positional code and transmitting the written data, a transaction data management part 10 controlling transmission and receipt of transaction data about the payment including the written data written on the slip 1 by means of the pen 3 by a user of a card number, and a member database 7 storing original signature data previously registered for every card number and personal data about the member of the card number. The transaction data management part 10 is provided with a slip number specifying function 16 for specifying the slip number of the written data on the basis of the positional code of the written data or the contents of the written data, a signature collating function 18 for collating the signature data in the written data with the original signature data as to the transaction, and a collation result informing function 20 for informing the collation result to an affiliated store terminal or a card management host.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a card settlement system utilizing a mechanism capable of detecting physical movement of a pen tip as data when a signature is made by a pen.

[0002]

2. Description of the Related Art Conventionally, for payment using a credit card, a user of the credit card who requests credit card authentication performs personal authentication to authenticate whether or not the owner (member) of the credit card. ing. A member store that provides goods and services by credit card payment, if this member store makes a payment at the physical storefront, the signature (signature) written on the back of the credit card.
It is confirmed whether or not the user of the credit card is the person himself / herself by collating it with the signature described in the slip for settlement. Also, when making a purchase via telephone or the Internet, you can either settle the payment without authenticating yourself with the card number, or use an identification number other than the card number,
By checking the expiration date of the card and personal information such as date of birth, illegal use by a stolen credit card or credit card number is prevented. Furthermore, in recent years, a proposal has been made to verify a signature as electronic image data using a computer.

As a method of digitizing writing by a pen and handling it as writing data, for example, there is a method of operating the pen on a tablet or a touch panel and detecting the trajectory of the pen with a pressure sensitive sensor or the like. Such a tablet is often used as a kind of pointing device connected to a computer.

First, the background art regarding the digitalization of writing with a pen will be described. Japanese Patent Laid-Open No. 9-11458
Japanese Patent No. 6 discloses a method of inputting the coordinates of a pen tip using a pen having a pressure sensor and an acceleration sensor incorporated therein. In this example, the pen can be used with the same feeling as writing on a normal sheet. Further, in US Pat. No. 5,852,434, a sheet on which a position code corresponding to the coordinates on the sheet is printed and C for reading the position code are described.
An optical position detecting device is disclosed which includes a pen having a CD and a computer which analyzes the output of the CCD. In this example, by writing on a paper on which the position code is printed using a pen having a CCD, it is possible to obtain writing data similar to the description content on this paper. Here, as an example of the position code, a code for specifying the position by the difference in the concentric patterns is disclosed.

When such a coordinate detection type pen is used,
A natural description can be made on a sheet and the written data can be handled by a computer. JP-A-9-114
In the technique described in Japanese Patent No. 586, relative coordinates from the writing start position can be obtained as writing data using a coordinate detection type pen. Also, US Pat. No. 5,852,
The technique described in Japanese Patent No. 434 can obtain the absolute coordinates on the sheet.

International Publication No. WO 00/73981 A1
In the gazette, a sheet on which a position code capable of individually specifying all the positions of a large number of sheets is printed (see FIG. 18) and a pen having a predetermined function (see FIG. 20) is used to place an order at a restaurant. Techniques for doing so are disclosed. In this publication,
As shown in FIG. 18A, a method is disclosed in which dots that are moved from the virtual grid to the upper, lower, left, or right are used as the position code to be printed on the paper. In the example shown in FIG. 18A, the interval of the virtual grid is enlarged for the sake of explanation. If the spacing of the virtual grid is set to 0.3 [mm], for example, the dots will be invisible or the background will not be noticeable.

In this conventional example, the writing data is generated by reading the dot pattern with a camera built in the pen and calculating the coordinate value from the position code. This FIG.
In the conventional example shown in (1), a wide-area coordinate system including a very large number of sheets is considered, and the coordinates of each sheet are made a part of this wide-area coordinate system. Therefore, the position in the wide area coordinate system can be obtained by referring to the coordinate value of the writing data. In the example shown in FIG. 18, since the coordinate value group of the entire sheet is a part of the wide area coordinates, most sheets do not have the origin (0, 0). In this conventional example, the point that the application of the sheet can be identified from a large number of sheets by the coordinates on the sheet is a characteristic of the conventional example using the wide area coordinates.

The above-mentioned International Publication No. WO 00/73981
The A1 discloses, by four 6 × 6 pieces of combinations of numbers, to generate a 4 ³⁶ of the position code, when the length between the dots and 0.3 [mm], the one coordinate, 4. 6x
It is disclosed that one point can be specified within the area (wide area coordinate) of 10 ⁶ [km ² ]. According to this disclosure, wide area coordinates for 73 × 10 ¹² sheets can be defined in A4. By allocating a part of the wide area coordinates to various commands and purposes, it is possible to develop a wide variety of application systems.

FIG. 18B is an explanatory view showing the relationship between the dot misalignment direction and the symbol numerical value in this conventional example. In this conventional example, when the dots are shifted to the right of one point on the virtual grid, the symbolic numerical value is "1". "2" when the dot moves up, "3" when left
, And "4" in the downward direction. 4 on one point of virtual grid
One of the two symbolic values (1, 2, 3, 4) can be represented. Enlarged 4 × 4 shown in FIG.
By decoding the range of, the numerical pattern shown can be obtained.

In the example shown in FIG. 18B, each symbolic value from 1 to 4 specifies the code (x, y). For example,
1: (1, 1), 2: (0, 1), 3: (1, 0),
4: Defined as (0,0). For example, if the symbolic numerical value by the dot pattern is 1, both the x code and the y code at that position are 1. When an x code and ay code are generated from the symbolic numerical value pattern shown in FIG.
It becomes the code shown in FIG. In the x code, the leftmost column is “0101”, and in the y code, the top row is “0001”.

In this conventional example, the x code and the y code are defined by a cyclic sequence. For x-code, the vertical direction (y
A circulation sequence that circulates in parallel to the axis is changed in the horizontal direction (x
Parallel to the axis). Then, the "difference" between adjacent numerical values in the direction (parallel to the x axis) orthogonal to the circulation direction is calculated,
If the remainder (Modulo7) modulo 7 (the total number of numbers in the circulation sequence) is taken for this difference, a combination of values unrelated to the y coordinate can be obtained. Here, the dividend is a value from 0 to 6 and the divisor is 7. Therefore, if the dividend is a positive value, it is the same value, and if the dividend is a negative value, the difference is 7. Based on this combination of remainders,
The x coordinate can be specified regardless of the y coordinate.

International Publication No. WO 00/73981 A1
FIG. 18 shows an example of a 7-bit circulation number disclosed in Japanese Patent Publication No.
It shows in (A). In this example, when the number sequence “0001010” is repeatedly arranged, arbitrary four numerical values (columns of 4 bits) do not overlap, and the position on the number sequence (0 to 6) can be specified. For example, the 4-bit string “0001” indicated by the chain double-dashed line in FIG. When the extraction position (start position) of the 4-bit string is shifted to the right by 1 bit, the 4-bit string becomes "0010". This is designated as position "1" on the sequence. 0 to 6 for 7-bit circular sequence
You can repeat up to 7 positions.

The x-code circulates several sequences in the vertical direction. In the x code shown in FIG. 19B, the leftmost x
Since the code string is "0101", referring to the definition shown in FIG. 19A, the position on the number sequence is "2".
The next column is “0001”, and the position on the sequence is “0”. The position on this sequence is the value of the 4-bit start position of the circulation sequence. As shown in FIG. 19B, when the x code is converted into a position group on a sequence by 4 bits in the vertical direction, the uppermost row is “2,0,4,6” and the next row is “3”. ，
1, 5, 0 ”. Focusing on the sequence above the sequence of x-codes, the numbers from 0 to 6 circulate.

When the difference between adjacent values (here, the value on the right side is subtracted from the value on the left side) is calculated for "2, 0, 4, 6" in the uppermost row, 0-2 = -2,4. −0 = 4,6
-2 = 2. That is, the difference is -2, 4, 2. Calculating the modulo 7 of these numbers,
5, 4, and 2 (minus remainder calculates difference from 7). In the next row, the difference between adjacent values is 1-3,5-
1,0-5, and the values are -2,4, -5. According to a simple difference, the value of the difference changes at the position where the position on the sequence changes from 6 to 0. However, when the remainder is calculated,
As shown in FIG. 19B, the same combination of values of 5, 4, and 2 can be obtained. As described above, in this conventional example, since the values 5, 4, and 2 can be obtained regardless of the value of the y coordinate, the values 5, 4, and 2 (the set of the remainder of the difference in the circulation sequence) are obtained. The x coordinate can be specified based on the above.

With respect to the x-code, three combinations of the remainders of the difference in the circulation sequence can be obtained for the x-coordinate in a 4 × 4 dot pattern. The combination of dot patterns is defined so that the x coordinate can be calculated based on the combination of these three values. The method of calculating the actual coordinates from the combination of the three values is determined in relation to the method of defining the coordinates. An example of a specific method is disclosed in the above publication. As for the y code, as shown in FIG.
By arranging the circulation sequence that circulates in the horizontal direction in the y direction according to a predetermined definition, the y code and the y coordinate can be associated. In addition, by making the feature of the combination of the remainder of the x code and the feature of the combination of the remainder of the y code different, it is possible to determine which direction of the virtual grid is the x direction regardless of the shooting direction of the dot pattern. It can be specified based on the combination of the remainders. In this way, the coordinate values in the wide area coordinates can be obtained by the 4 × 4 or 6 × 6 dot pattern. That is, when the dot pattern indicating the coordinates in the predetermined wide area coordinate system is read, the coordinates in the wide area coordinate system can be obtained based on the dot pattern.

20 and 21 are explanatory views showing a configuration example of the pen 3 for reading the position code printed on the paper such as the dot pattern. The pen 3 includes a pen tip 3B that transfers ink onto the surface of the paper, a pressure sensor 3C that detects whether the pen tip touches the paper, a camera 3D that captures a dot pattern on the paper at a constant cycle, Pressure sensor 3C
The processor 3A records the dot pattern image input from the camera 3D in the memory 3E during the period when it is detected that the pen tip 3B is touching the paper. Further, the processor 3A calculates the coordinate value indicated by the dot pattern from the dot pattern based on the method described above. This coordinate value is stored in the memory 3E. Further, the processor 3A controls the transmission of the coordinate value group (writing data) when a predetermined dot pattern is detected. The transceiver 3F transmits this writing data to an external communication terminal. When the processor 3A in the pen reads the dot pattern at a predetermined cycle along with the movement of the pen tip 3B, it is possible to generate writing data which is a continuous coordinate change.

International Publication No. WO 00/73981 A1
In the technique disclosed in the publication, a predetermined command is assigned to a specific coordinate in the wide area coordinate system, and the pen 3
When the user reads the coordinates, he or she can perform some operation or special assignment on the writing data. For example, by associating a specific coordinate range with a transmission command, the transmission of writing data can be started by writing a check on a sheet. For example, "send (sen
d) ”check box on the paper,
The coordinate value of the check box is set to a predetermined coordinate value. Then, the writer can give an instruction to the system by writing a check mark in the check box for "transmission". In addition, by associating specific coordinates with a certain product, an order for a dish or the like can be performed by the act of checking a check box with the pen 3 (said International Publication No. WO 00/73981).
A1).

As described above, various proposals have been made to electronically verify the signature required for credit card payment. Japanese Unexamined Patent Publication No. 6-2825858 discloses personal information such as the original signature (original signature data) of a user registered in a host computer at the store of a member store in order to prevent a trouble in using a credit card. A mechanism for transmitting to the installed signature verification terminal is disclosed. In this conventional example, by comparing the signature entered by the user on the slip and the master signature displayed on the signature verification terminal,
Authenticate yourself. In this case, there is no need to sign the credit card itself, and an unauthorized user cannot know what the signature is, which is disclosed to be useful for crime prevention.

In Japanese Patent Laid-Open No. 10-171985, signature data is generated by signing a slip placed on a tablet. The verification rate of this signature data and the original signature data stored in advance on the IC card or the like is obtained, and personal authentication is performed. In this conventional example, in particular, when the collation rate is less than a certain value, the collation rate is displayed on the member store terminal and the operator performs the final personal authentication to prevent erroneous determination due to computer collation. Has been done.

[0020]

In order to carry out secure card payment, it is necessary to perform personal authentication more reliably. However, the amount of money merchants can invest for card payments is limited. Furthermore, if various techniques are used to ensure personal authentication, the time required for payment generally becomes long, which makes the usability of card payment worse. On the other hand, with the spread of debit cards and small amounts of electronic money, credit card payments tend to be used for relatively high-value payments. Expectations for a solution are high.

Further, with the spread of electronic commerce, credit cards are widely used for payment also in mail-order sales from commerce sites via computers and the Internet. In the card settlement in this electronic commerce, since the signature is not verified in the first place, even if the credit card itself is strictly managed, it will be misused if the number is stolen.

In the above-mentioned Japanese Patent Laid-Open No. 6-228558,
When issuing a credit card, the signature data is scanned and registered in the host. However, reading with this scanner takes time as an office process and increases costs. Moreover, some stores are reluctant to invest in a verification terminal with a display, and in this case, verification of the signature itself becomes impossible.

Further, in Japanese Patent Application Laid-Open No. 10-171985, a tablet is used for digital data, but since a tablet is always required for signature writing, some stores are reluctant to introduce the tablet, and ,
The user may also feel anxiety and annoyance in the input.

[0024]

It is an object of the present invention to improve the inconvenience of the conventional example, and particularly to improve the convenience of card payment by using a pen capable of generating signature data at the same time as signing a voucher. The purpose is to provide a card payment system.

[0025]

Therefore, in the card payment system according to the present invention, a position code in a predetermined coordinate system is printed in a writing area associated with a slip number for identifying a transaction using a card number. A slip and a pen used for writing on the slip and reading the position code near the pen tip according to the movement of the pen tip while writing in the writing area, and using the pen by the user of the card number. A transaction data management unit that controls the transmission and reception of transaction data related to the settlement including the written data written on the slip,
It is provided with original signature data registered in advance for each of the card numbers and a member DB in which personal data regarding members of the card numbers are recorded. The transaction data management unit is connected to a member store terminal of a member store that is a counterparty of the user's transaction or a card management host managed by a card issuing entity that has provided the member with the card number.
Further, the transaction data management unit identifies the slip number of the writing data based on the position code of the writing data or the content of the writing data, and the slip number specified by the slip number specifying function. A signature collating function for collating the signature data in the handwritten data with the original signature data regarding the transaction, and a collation result notifying function for notifying the member store terminal or the card management host of the collation result by this signature collating function. It is equipped with. This is intended to achieve the above-mentioned object.

A position code in a predetermined coordinate system is printed on the slip. When the position code is traced by the pen, that is, when writing is performed on the position code with the pen, the pen continuously reads the position code at a constant cycle to generate writing data indicating the writing content.
The transaction data management unit controls transmission / reception of this writing data. The “position code of the writing data” is the position code included in the writing data, and is the position code itself printed on the slip or the coordinates specified by the position code. The position code or coordinate is a value that represents a position on a plane such as the surface of the paper in the case of two-dimensional, (x,
y) can be defined. The "coordinate system" is a definition that connects a plane having an origin and an axis, which is a physical entity, with coordinates. Here, the position on the paper is defined by Cartesian coordinates for a two-dimensional plane.

The "predetermined coordinate system" is a wide range coordinate system (wide area coordinate system) for identifying a large number of sheets (slips), and the position code (coordinates) of the sheet to be written is the wide area coordinate. Included in the system. For example, A4 size slips are arranged vertically and horizontally without gaps, and a coordinate system with the lower left position of the lower left paper as the origin is defined. Then, the paper can be identified by the coordinates. Further, with respect to the range of specific coordinates, a predetermined function can be assigned instead of the position on the paper. This can be realized by associating the coordinates in the wide area coordinate system with the slip number, the position on the slip, and a predetermined function. Certain coordinates can identify a particular voucher, further locate it, or direct execution of a pre-assigned function. For example, in a graphical user interface, the position of the pointer executes a particular instruction. Similarly, in the case of using the wide area coordinate system, it is possible to receive the instruction of a specific command by the coordinates of the check box or the like assigned to the slip.

When the transaction data management unit is connected to the member store terminal or the card management host, this "connection" is an internal connection or an external connection. That is, the term “connected” includes a state in which the transaction data management unit is internally connected to the member store terminal. In this case, the member store terminal performs processing such as signature verification. That is, the member store terminal has a transaction data management unit. Then, the card payment system according to the present invention is equipped with a transaction data management unit that is a part of the member store terminal (first embodiment and the like). When the transaction data management unit is internally connected to the card management host, the card management host will include the transaction data management unit (second
Examples, etc.). Also, in the case of external connection, the transaction data management unit is connected to the Internet, etc. and has its own UR.
It can also be realized as a server having L.

When the pen is written by the answerer, the pen reads the position code with the pen tip in a predetermined cycle and transmits the change in the position code as the writing data. The position code may be, for example, the dot pattern according to the above conventional example, or another position code may be used. The writing data may be directly transmitted from the pen to the transaction data management unit, or may be transmitted to the transaction data management unit via a communication device or a member store terminal installed near the pen. .

The slip number specifying function specifies the slip number of the writing data based on the position code of the writing data or the content of the writing data. To specify the slip number based on the position code of the writing data, the coordinates are assigned to each slip so that the unique slip number can be specified by each coordinate.
To specify the slip number based on the content of the written data,
For example, character recognition processing is performed on the slip number data in the writing data, and the recognition result is used as the slip number. The signature collating function collates the signature data in the writing data with the original signature data regarding the transaction identified by the slip number identified by the slip number identifying function. The signature verification may be performed by a method of calculating the degree of similarity of image data, or the degree of coincidence may be determined based on the writing order and other characteristics of writing. Then, the verification result notification function notifies the verification result of the signature verification function to the member store terminal or the card management host. The matching result may be a match or mismatch result, or a numerical value such as 95% similarity. When transmitting the collation result to the member store terminal, the member store may determine whether or not the card settlement can be executed by referring to the collation result. On the other hand, this verification result may be used only at the card company side, not at the member store. When the verification result is used by the card company, for example, it has an effect of suppressing illegal use by a malicious member store. Further, in this case, in the case where the matching result is a mismatch or an extremely low matching rate, a mechanism for inquiring the member of the card whether or not there is a transaction may be adopted.

[0031]

BEST MODE FOR CARRYING OUT THE INVENTION Embodiments of the present invention will be described below with reference to the drawings. In the present embodiment, the usage pattern of the comparison result between the signature data in the writing data transmitted from the pen 3 and the original signature data stored in the member DB 7 will be mainly described. FIG. 1 is a block diagram showing a configuration example of this embodiment. The card payment system according to the present embodiment includes a slip 1 on which a position code in a predetermined coordinate system is printed in a writing area 2 associated with a slip number for identifying a transaction using a card number of a card 8, and this slip. 1 and a pen 3 for reading the position code in the vicinity of the pen tip according to the movement of the pen tip while writing in the writing area, and the slip 1 by the user of the card number using the pen 3.
A transaction data management unit 10 that controls the transmission and reception of transaction data relating to the settlement including the written data written in, and a member that records the original signature data registered in advance for each card number and personal data regarding the member of the card number. DB
7 and 7. Then, the transaction data management unit 10
Member store terminal 4 of the member store that is the counterpart of the user's transaction
Alternatively, it is connected to the card management host 6 managed by the card issuer who provided the card number to the member.

Further, the transaction data management unit 10 specifies the slip number specifying function 16 for specifying the slip number of the writing data based on the position code of the writing data or the content of the writing data, and the slip number specifying function 16. The signature verification function 18 for verifying the signature data in the writing data and the original signature data with respect to the transaction identified by the specified slip number, and the verification result by the signature verification function 18 is the member store terminal or the card management host. And a collation result notification function 20 for notifying the user.

The card 8 is, for example, a credit card issued to the member by the card management company, and the card number is specified for each card 8. The member uses the card number of this card 8 to request card payment with a member store of the card. The member store requests the card management company or the like for sales by card payment, and the card management company requests the member for payment for card payment. The card management company gives a certain amount of credit to the member, and provides personal information such as the member's telephone number, address, date of birth, credit amount, and whether or not the card can be used.
Store in B7.

In the present specification, a person or a corporation that has issued a credit card is called a "member", and a person who requests a card settlement using the issued card is a "user" regardless of whether he is a member or not. ". If the user and the member match, personal authentication has succeeded and the card payment is normal. On the other hand, it is illegal use to falsely claim that the user is a member and request payment using the card number. In order to prevent unauthorized use, the card user authenticates that the user is the member. At present, personal authentication is
The signature is made by comparing the original signature made by the member himself / herself on the back side of the card with the signature written by the user on the slip when the card is settled. In this embodiment, as one of the features of the present invention,
Personal verification is performed by electronically verifying signature data. This will prevent unauthorized use of credit card payments at actual stores, and will also provide a mechanism for effective personal authentication in electronic commerce with commerce sites.

The member terminal 9 is a computer notified to the card management company when a member joins a card member, and identifies the computer by, for example, an electronic mail address. This may be a mobile device such as a mobile phone or PDA as well as a computer.

The member store terminal 4 is a CAT (member store credit inquiry terminal) or POS-CA installed in the member store of the card.
T (point of sale information management terminal with CAT function added). The member store terminal 4 transmits the card number to the card management host 6 and receives the credit granting data for the card number from the card management host 6. The member store terminal 4 can receive information such as whether the card number is unusable or whether the transaction amount exceeds the amount of credit provided to the member of the card number. In addition, the member store terminal 4 is connected to the card management host 6 online, and the G-CAT that allows the member store to settle the sales is processed.
May be When the member store terminal 4 has a special configuration according to this embodiment, the member store terminal 4 may receive the writing data transmitted from the pen 3. A configuration in which the transaction data management unit shown in FIG. 1 functions as the member store terminal 4 will be described in detail as a first embodiment.

The commerce site 14 includes a commerce server that sends a page described in markup language (ML) such as html to a terminal, a DB that stores a product catalog, and the like. The operator of the commerce site sells the product to the user of the card number accessed through the Internet or the like and makes a card payment. The commerce site 14 may have the function of the member store terminal 4. That is, when making a credit card payment, it may be possible to connect to the card management host 6 online and receive credit for the card number. On the other hand, in the case of the commerce site 14, the physical card of the user cannot be confirmed. Therefore, it is not possible to confirm whether the user owns the physical card itself or the original signature written on the back of the card.

The network 5 comprises a closed network 5A using a public line network or a private line, and an open network 5B such as the Internet. Network 5A connecting the merchant terminal 4 and the card management host
Is, for example, CAFIS (credit information data communication system).

The card management host 6 includes a card management computer 6A such as a mainframe connected to the CAFIS 5A and the like, a card management server 6B connected to the member terminal 9 and the like via the Internet, and these computers 6A and 6B. It has a managed member DB 7. In the example shown in FIG. 1, the commerce site 14 exemplifies a configuration in which the member DB 7 is accessed via the Internet 5B and the card management server 6B, but the commerce site 14 and the card management computer 6A are connected online. You can Card management host 6
The configuration for providing various functions according to the present invention will be described in detail as the second and third embodiments.

A position code in a predetermined coordinate system is printed on the slip 1. As the position code, the dot pattern shown in FIG. 18 and other patterns are used. The “predetermined coordinate system” is, for example, a wide area coordinate that can identify many slips. Also, the same coordinates may be used for a plurality of slips. The relationship between the coordinates and the slip will be described in detail in the fourth embodiment. In this embodiment, the position code is printed in the writing area 2 associated with the slip number for identifying the transaction using the card number. The writing area includes a signature field 2A. The writing data described in the signature field is the signature data. Further, in the example of the slip sheet shown in FIG. 3 and the like, the dot pattern shown in FIG. 18 and the like is printed in advance, but the illustration is omitted.

The pen 3 is used for writing on the slip 1 and reads the position code near the pen tip according to the movement of the pen tip while writing on the writing area. Pen 3 of this embodiment
Adopts the configuration shown in FIGS. 20 and 21. The pen 3 converts the position code (dot pattern) read from the slip 1 into coordinate data using the method shown in FIG. The coordinates are coordinates in the wide area coordinate system. When this coordinate data is connected, it becomes writing data. After the writing is started, the pen 3 stores the writing data in its memory 3E, and transmits the writing data accumulated when the transmission check box is checked to a predetermined destination via the communication terminal 4B. To do. In the example shown in FIG. 1, it is transmitted to the transaction data management unit 10. When the position code changes in time series, the writing data includes the writing order. Writing data stored in the memory 3E of the pen 3 is stored in various terminals 4, 9A.
And the like to the transaction data management unit 10. Code 9
A is a communication device, for example, a member's mobile phone or personal computer (PC). When the user requests the card payment at the store, the communication device 9A is used as a mobile phone, and when the user uses the member terminal 9 to request the card payment for the commerce site, the member terminal 9 is used. May be the communication device 9A.

For the data transfer from the pen 3 to the communication device 9A or the like, a wireless communication technique using electromagnetic waves can be used. That is, the writing data can be transmitted in a contactless manner by infrared communication or radio communication by radio waves. Other devices 4, 6 from the communication device 9A via the network 5
To send to 10 etc., you may use e-mail,
Registration in a database (DB) via a Web server may be used, or an original transmission method may be used.

The process of generating coordinate data and writing data from a dot pattern may be executed by the position control server 12 shown in FIG. In this case, the pen 3 transmits the dot pattern data to the position control server 12 via the communication terminal 4B. The position control server generates writing data from the dot pattern data,
This handwritten data is transmitted to the transaction data management unit 10.

A process for specifying various IDs such as a slip ID, a transmission destination, and information of a writer corresponding to a pen ID which is a unique number to the pen based on the coordinates in the wide-area coordinate system. Is called a lookup service here. This lookup service is based on the position control server 1
2 may be executed, or a specific server such as the transaction data management unit 10 may be used for a specific lookup service. Further, the basic function of converting the position code into the writing data may be executed by the processor 3A of the pen 3.

The handwriting data can have various data structures. Here, it is provided with data indicating an absolute position in the wide-area coordinate system, and drawing data capable of drawing the written content as a figure by a change in the absolute position or a relative change from the absolute position. For example, a pen pressure sensor 3C
Absolute coordinates at the position where the pressure is detected, and a vector sequence from these absolute coordinates may be used, or an absolute coordinate group arranged in time series may be used. Image data having the coordinates as the reference position may be used. Further, since the detected position is sampled sampled data, the sampled data may be converted into smooth continuous data at a frequency lower than a predetermined frequency. For example, if a low-pass filter such as a spatial moving average process is applied to the sampled coordinates, the writing data becomes smooth data.

When the method shown in FIG. 18 and the like is used, the wide area coordinates can identify the coordinates of 73 × 10 ¹² sheets of A4 paper, so first of all, it is assigned to companies and government offices of various industries.
Then, each company or each government office can use the dot pattern (coordinate range) within the range according to the purpose.

In the present embodiment, the pen ID of the pen 3 can be used to authenticate the identity of the card member. That is,
When transmitting the writing data from the transceiver 3F of the pen 3, the pen ID of the pen is used to identify the member of the writing data. The member can be specified using the pen ID when the relationship between the pen and the member is registered. on the other hand,
It can be assumed that the pen shown in FIG. 23 is owned by the store and is lent to the user of the card number for use. If the pen ID and the member cannot be associated with each other in this way, the identity is confirmed by verifying the signature or the like.

In the example shown in FIG. 1, the transaction data management unit is
It is connected to the network 5B as a unit of server. However, some or all of the functions 16, 18, ..., 28 of the transaction data management unit 10 may be included in the member store terminal 4 or may be included in the card management host 6. When the card management host 6 and the transaction data management unit 10 as a unit of server realize the characteristic functions of this embodiment, the member store imposes a new burden on the card user without making any new investment. Without
Card payments can be made more secure.

The slip number specifying function 16 specifies the slip number of the writing data based on the position code of the writing data or the content of the writing data. To specify the slip number based on the position code of the writing data, the coordinates are assigned to each slip so that the unique slip number can be specified by each coordinate. To specify the slip number based on the content of the writing data, for example, character recognition processing is performed on the slip number data in the writing data, and the recognition result is used as the slip number. In this case, the slip number identification function has a character recognition processing function.
In the character recognition process, when the writing data includes the stroke order, the character code may be specified based on the stroke order.

By the slip number specifying function 16 specifying the slip number of the writing data, it is possible to correlate with which slip the signature data in the writing data is applied.

The signature verification function 18 is a slip number identification function 1
Regarding the transaction identified by the slip number specified by 6, the signature data in the writing data and the original signature data are collated. The signature verification may be performed by a method of calculating the similarity between the image data, or the coincidence between the two signature data may be determined based on the writing order and other writing characteristics. Then, the verification result notification function 20 notifies the verification result of the signature verification function 18 to the member store terminal 4 or the card management host 6. The matching result may be a match or mismatch result, or a numerical value such as 95% similarity.

When the verification result is transmitted to the member store terminal 4,
The member store may determine whether or not the card settlement can be executed by referring to the collation result. On the other hand, this verification result may be used only at the card company side, not at the member store. When the verification result is used by the card company, for example, it has an effect of suppressing illegal use by a malicious member store.

Further, in this case, in the case where the matching result is a mismatch or an extremely low matching rate, it may be arranged to inquire the member of the card whether or not there is a transaction. To refer to the card member for the presence or absence of a transaction, for example, the card management host 6 sends an electronic mail or the like for confirming the presence or absence of the transaction to the member terminal 9. In this example, the collation result notification function 20 has a function of transmitting transaction data including the collation result to the member terminal 9 previously specified by the member during or after the settlement of the transaction.

When the transaction data including the collation result is transmitted to the member terminal 9 during the settlement of the transaction, if the response from the member terminal 9 is answered and the settlement is completed, a safer transaction is possible. However, in general, the time required for settlement becomes long. When transaction data is sent after payment, fraudulent use will be detected early and the use of the card number will be stopped.

Further, the transaction data management unit 10 stores the transaction data including the signature data and the verification result in the transaction data DB 21.
It is also possible to provide the member with a search function for the transaction data in accordance with the operation of the member terminal 9. Then,
Members can electronically manage copies of payment data with a signature, and by utilizing a predetermined electronic signature, it is possible to contribute to computerization of accounting processing and tax processing. Also,
When using credit card payment as part of a business, it is possible to assist the purchaser in making reports and the like by making it possible to search and browse transaction data.

In this example, the transaction data management section 10 is provided with a transaction data DB 21 for recording transaction data including the signature data and the verification result for each slip number of the member store. Then, the transaction data management unit 10 transmits a list of transaction data stored in the transaction data DB 21 to the member terminal 9 in response to a search operation on the member terminal 9 used by the member. 22 is provided. The transaction data search control function 22 transmits the contents of the transaction data to the member terminal 9 according to the operation on the list of transaction data. Also, the transaction data management unit 10 attaches a time stamp, an electronic signature of the card management company, or the like to the transaction data including the signature data and the verification result so as to prove the originality of the transaction data. Good.

FIG. 2 is a sequence diagram showing an example of settlement processing in the configuration shown in FIG. In the example shown in FIG. 2, the settlement is completed after the verification result of the signature data is notified. In the example shown in FIG. 2, first, the user informs (a person in charge of) the member store that he / she wants to make a card payment regarding a transaction with the member store, and deposits the card in the member store. At the member store, it is confirmed visually that the card is not a forged item, and the member store terminal 4
The card is read by the card reader, etc., and the operation of inquiring about credit is performed. The member store terminal 4 transmits the card number, the transaction amount, etc. to the card management host 6, and the card management host 6 provides credit for the transaction with this card number (step S2). At this time, the member store terminal 4 and the card management host store the relationship between the slip number and the card number.

When credit is normally provided, the member store terminal 4 prints the transaction content, the slip number, the card number, etc. on the slip 1 having the position code in the signature area 2A (step S3). FIG. 3 is an explanatory diagram showing an example of a slip with a pattern, and in this example, the accommodation fee of a two-night sentence is paid with a XX card. The member store requests the user to sign the printed slip 1. The card user uses the pen 3 to sign the slip 1. The user is
In the example shown in (1), the slip number “kbh00123” and the signature “Kunihontaro” are written. Then, the pen 3 reads the position code printed in advance in the signature area 2A and the slip number area 2B, and generates writing data based on the change of this position code (position change of the pen tip 3B) (step S).
4). In the example shown in FIG. 3, when the transmission check box 2E is checked, the pen 3 moves to the communication device 9A.
The handwriting data is transmitted to the transaction data management unit 10 via.

In the wide area coordinate system, a predetermined role can be assigned to each coordinate. Therefore, it is possible to determine that the writing on the slip number area 2B is the writing data representing the slip number and the writing on the signature area 2A is the signature data based on the coordinates of the writing data. If a transmission check button is used as one of the functions assigned to the coordinates, the completion of writing and the transmission of writing data can be instructed by the work of checking the slip with a pen.

When the transaction data management unit 10 receives the writing data, the transaction data managing unit 10 identifies the slip number of the writing data based on the position code of the received writing data or the content of the writing data (step S6, slip number identifying step). This slip number identification step S6 is a process by the slip number identification function 16. Therefore, the unique slip number (kbh001
23) can be specified, the slip number is specified based on these coordinates (position code of the writing data). On the other hand, when the slip number cannot be specified based on the coordinates, character recognition processing is performed on the writing data in the slip number area 2B, and the member store and its slip number are specified from the recognition result. In the example shown in FIG. 3, the code that identifies the member store is included in the first three digits of the slip number, so the code from this kbh is "K".
The member store name "Business Hotel" is specified. And
Specify the slip number using the last five digits.

Subsequently, the signature data and the original signature data are collated with respect to the transaction identified by the slip number identified in the slip number identifying step S6 (step S7, signature matching step). The signature verification is a process by the signature verification function 18. Hereinafter, when the process name and the function name are the same, each process is the execution of the function. In the signature verification process,
The coincidence degree and the similarity degree of the signature are calculated by using the two writing data as image data such as tiff and gif. Further, character recognition may be performed using a neural network or the like. Further, when the writing data by the pen 3 includes the writing order, the matching degree of the signature may be calculated based on the writing order.

The transaction data management unit 10 notifies the member store terminal 4 of this collation result. If the matching rate is low or if the matching results do not match, the card management host sends personal information for matching to the member terminal and asks the user for the date of birth, telephone number, etc. Authentication may be performed. When the member store succeeds in confirming the identity of the user, the member store passes the copy slip and the card to the user and completes the settlement.

In the example shown in FIG. 2, in particular, the transaction data management section 10 browses the transaction data including the verification result in the signature verification step S8 for the member store which is the counterpart of the transaction of the member or the user. The transaction data is recorded in the transaction data DB 21 (step S9, transaction data recording step). The transaction data management unit 10 further controls the retrieval of the transaction data stored in the transaction data DB according to the member's operation of the member terminal 9 (step S10, transaction data retrieval control step). In this transaction data search control step S10, a list and contents of transaction data may be transmitted to the member store terminal 4.

Next, with reference to FIGS. 1 and 4, an example will be described in which signature verification is performed before settlement, and if the signature data do not match, the personal information of the user is transmitted to the member store terminal. In this example, when the transaction data management unit 10 determines that both signature data do not match by the signature verification function before the settlement between the user and the member store is completed, the transaction information management unit 10 outputs the personal information of the member of the card number. The personal information transmission control function 24 for transmitting the personal information to the member store terminal 4 for confirming the identity at the member store is provided. The “case where it is determined that they do not match” corresponds to a case where the matching results do not match and a case where the similarity or the matching rate is smaller than a predetermined value. When the signature data does not match, the personal information is transmitted to the member store terminal 4, and the member store authenticates whether the user is the member or not based on the telephone number, the date of birth and other numerical values and information. be able to.
In addition, by transmitting the personal information only when there is a mismatch, the personal information is not notified to the member store in a general case where the matching is successful.

FIG. 4 is a flow chart showing a processing example in the case of verifying a signature before settlement. First, the user requests the member store to make a payment with a card (step S2).
1). Then, the member store terminal 4 transmits the card number and transaction details for credit inquiry to the card management host 6 (step S22). The card management host reads the original signature data and the personal information based on the card number, and at this stage, first provides credit (step S23). And
When credit is provided, a voucher is issued at the member store terminal. The user writes a signature on the printed slip (step S
25). Then, the pen 3 transmits the writing data to the transaction data management unit 10.

The transaction data management unit 10 specifies the slip number of the writing data based on the coordinates or the content of the writing data (step S26). Then, the transaction data management unit 10
Compares the original signature data read in step S23 with the received signature data (step S27). If the signatures match, it means that the personal authentication has succeeded, so the settlement process is performed (step S30), and the transaction data with the signature data is stored in the transaction data DB 21 (step S31).

On the other hand, if the signature verification does not match,
The collation mismatch is displayed on the member store terminal 4 (step S2).
8). When the collation mismatch occurs, the card management host 6 transmits the personal information read in step S22 to the member store terminal. The member store terminal 4 displays the received personal information on the display of the member store terminal 4 or prints it. The notification of the personal information to the member store may be made by telephone from the person in charge of the card management company to the person in charge of the terminal of the member store. If the member store can confirm the identity based on the personal information, the member store performs the settlement process (step S30).
On the other hand, if the identity cannot be confirmed by the personal information, the crime prevention process is performed.

In the example shown in FIG. 4, since the verification of the signature is performed electronically, the safer transaction can be realized, but the user must wait for the verification result until the settlement is completed. .. The electronic verification of the signature can contribute to the overall security of the transaction not only by such verification before settlement but also by the mechanism of verification after settlement.

An example of performing signature verification after payment is described with reference to FIGS. 1 and 5. In this example, when the signature verification function 18 determines that the two signature data do not match after the completion of the payment between the user and the member store, the transaction data management unit 10 includes the transaction data including the verification result regarding the payment. Is provided with a payment information transmission control function 26 for transmitting to the member terminal 9 designated in advance by the member in order to confirm whether or not the transaction is performed by the user himself. The payment information transmission control function 26 transmits the transaction data to the member terminal 9 by transmitting all or a part of the transaction data to the e-mail address of the member designated in advance. The transaction data is transmitted by, for example, a specific UR that records the transaction content of the Web server including the transaction data management unit 10.
Includes a mechanism to encourage access by members by sending L by e-mail. In this case, it is not necessary to describe the transaction details in the e-mail, and by using a predetermined password to access the URL, the transaction details can be protected in a substantially secure manner while more securely protecting personal information. Can be transmitted to the member terminal 9.

FIG. 5 is a flow chart showing a processing example in the case of verifying a signature after settlement. Steps S21 to S26 are the same as the steps shown in FIG. In the example shown in FIG. 5, after the user writes the signature, the user makes a payment without waiting for the verification result (step S41). Then, the signature is verified after the payment (step S42), and if the verification results do not match, the payment information transmission control function 26 transmits the payment data to the member terminal 9. The member confirms whether or not the transaction contents are made by himself (step S4).
4). If the transaction is not done by itself, it is denied and the card management company performs a crime prevention process such as prohibiting the use of the card number (step S45).

If the signatures match, or if the contents of the transaction data are confirmed by the member to be normal, the transaction data management unit 10 stores the transaction data with the signature data in the transaction data DB 21 (step S32).

Nowadays, there has been proposed a mechanism for improving the convenience of card payment by eliminating the need for a signature when paying a small amount by card. In accordance with this mechanism, or separately, the verification before payment and the verification after payment are separated according to the transaction amount, whereby the safety and convenience of card payment can be harmonized.

With reference to FIGS. 1 and 6, the personal information transmission control function 24 and the settlement information transmission control function 2 according to the transaction amount.
An example of separating 6 and 6 will be described. In this example, when the transaction amount of the transaction identified by the slip number is equal to or more than a predetermined amount, the transaction data management unit 10 sets the timing of the collation by the signature collating function 18 before the settlement and the amount of the transaction. If it is less than the verification timing control function 27 that sets the verification timing after payment and the signature verification function 18 determines that both signature data do not match before payment, personal information of the member of the card number When the signature data is determined to be inconsistent by the signature verification function 18 and the personal information transmission control function 24 for sending the personal information to the member shop terminal for identity verification at the member shop, the verification result regarding the payment Settlement information transmission that transmits transaction data including And a control function 26.

FIG. 6 is a flow chart showing an example of processing for switching the settlement method according to the transaction amount. Step S
21 to S26 are the same as the steps shown in FIGS. The transaction data management unit 10 verifies the signature when the transaction amount is equal to or more than a certain amount (step S2).
7) If they do not match, the member store is prompted to confirm the identity by displaying personal information on the member store terminal 4 (steps S28 and S29), and the settlement process (step S30) or the crime prevention process (step S32) is performed.

On the other hand, when the transaction amount is less than the fixed amount (step S49), the settlement process is immediately performed (step S41) and the card or the like is returned to the user. Then, FIG.
Similarly to the case shown in (1), the posterior signature verification is performed (step S42). If they do not match, the transaction data is transmitted to the member terminal (step S43) to urge the member to confirm the contents (step S44), and the unauthorized use of the card can be detected early. This ex-post signature verification may be included in the process of finding fraudulent use based on the progress of the card settlement transaction which is generally performed.

As described above, according to the present embodiment, the signature data is obtained by using the slip on which the position code is printed and the pen for reading the position code during writing to obtain a signature on the same paper as usual. be able to. Then, in the present embodiment, the signature data and the original signature data are collated before or after the settlement, and in each case, the personal information is transmitted to the member store terminal or the transaction information is transmitted to the member terminal. The security of card use can be further enhanced. While improving the convenience and security of such card payment, it can be realized without imposing a new burden on the card user. Further, by providing the pen 3 to the card member or purchasing the pen 3 by the member, it is possible to prove that the member is a member by the pen 3, thereby further improving the reliability and security of the card settlement. You can

[0077]

Example In the above-described embodiment, the transaction data management unit 1
It has been explained that the function of the transaction data management unit 10 may be the function of the member store terminal or the function of the card management host, mainly when 0 is an independent server. The following embodiments disclose application examples in which various elements are limited.
It also specifically discloses how to identify the slip number and the like from the coordinates.

In the first embodiment, the signature verification is performed by the member store terminal 4 of the member store. That is, the member store terminal includes the transaction data management unit 10. In the second embodiment, an example of realizing the advantages of the present invention as the function of the card management host 6 will be described. For example, in the second embodiment, the signature data is combined with the transaction data record. In the third embodiment, the commerce site 1
4 and the function of the card management host 6 connected via the network 5 will be described. For example, in the third embodiment, the writing data is attached to the electronic bill at the commerce site 14. In the fourth embodiment, a form of using the dot pattern will be described. Specifically, in the fourth embodiment, details of the slip number identifying function 16 shown in FIG. 1 according to the type of slip 1 will be disclosed.

In the fifth embodiment, a mechanism will be described in which a card number pattern is printed on (on the back side of) a card, and this card number pattern is checked after signing, which is useful for personal authentication. In the sixth embodiment, additional functions of the above embodiment will be described. For example, in the sixth embodiment, the specification of the amount range by the pattern and the animation display of the signature data will be disclosed.

<First Embodiment> In the first embodiment, the signature verification is performed at the member store terminal of the store. FIG. 7 is a block diagram showing a configuration example of the first embodiment of the present invention. As shown in FIG. 7 (A), the member store terminal according to the first embodiment uses a card reader 30 for reading a card number or the like recorded on a credit card, and a credit for a transaction with this card number and the transaction amount. A credit data management unit 32 for inquiring the management host 6, a display unit 34 for displaying a credit result and the like by the credit data management unit 32, and a position code in a predetermined coordinate system for printing transaction data are printed. A slip printing unit 36 that prints on the slip 1 and a transaction data management unit that receives writing data transmitted from the pen 3 that reads the position code near the pen tip while writing on the slip 1 according to the movement of the pen tip. 10 and 10.

Moreover, the transaction data management unit 10 uses the slip number specifying function 16 for specifying the slip number of the writing data based on the position code of the writing data or the content of the writing data, and the slip number specifying function 16. A signature collating function 18 for collating the signature data in the writing data with the original signature data received from the card management host for the transaction identified by the specified slip number, and the signature data by the signature collating function 18. When it is determined that the two do not match, the personal information display control function 24 for displaying the personal information regarding the member of the card number transmitted from the card management host on the display unit.

The card reader 30 reads a card number or the like recorded on the credit card as a magnetic stripe or the like. When the card is an IC card, the data stored in the IC memory may be read. Further, in this case, the original signature data may be stored in the IC memory. The credit data management unit 32 inquires of the card management host 6 about the credit number related to the transaction with the card number and the transaction amount. In response to the inquiry of the credit data management unit 32, the card management host 32 uses the credit data as information such as whether or not the transaction of the card number is suspended and whether or not the transaction amount is within the credit amount. It is transmitted to the management unit 32. The display unit (display) 34 displays various information such as the credit result by the credit data management unit 32. Although the display unit 34 is not essential in the above embodiment, the member store terminal 4 has the display unit 34 in this embodiment. The slip printing unit 36 prints the data about the transaction on the slip 1 on which the position code in the predetermined coordinate system is printed.

Each function 16, 1 of the transaction data management unit 10
8 and 24 are the same as the functions shown in FIG.
Further, the member store terminal 4 may record transaction data, perform browsing search control, and the like. Further, in the example shown in FIG. 7, the destination of the writing data from the pen 3 is the member store terminal 4. In this case, the member store terminal 4 includes a wireless communication receiver.

In the example shown in FIG. 7, the member store terminal 4 is provided with a CPU as a calculation means. The functions of the credit data management unit 32, the transaction data management unit 10, and the medium reading unit 11 are realized by the CPU executing a predetermined program. Further, these functions 10, 11, 32 of the member store terminal 4 may be realized by an LSI instead of a combination of a CPU and a program. FIG. 8 shows a processing example of card payment at the member store terminal 4.

Referring to FIG. 8, first, the card reader 30 reads the card number from the card 8 (step S51). Then, the credit data management unit 32 inquires of the card management host about the credit for this card number (step S52). If credit is obtained from the card management host 6 for this transaction (step S5
3) Then, the transaction data and the like are printed on the slip using the slip printing unit 36 to issue the slip (step S54).

Subsequently, the user writes down the signature and the slip number if necessary (step S55), and then the transaction data management unit 10 of the member store terminal 4 receives this written data (step S56). ). The slip number specifying function 16 specifies the slip number based on the coordinates or contents of the writing data,
The signature verification function 18 verifies the signature. If they do not match, the fact that they do not match is displayed on the display unit 34 of the member store terminal 4 (step S59), and the personal information received from the card management host 6 is displayed on the display unit 34 (step S60). The member store authenticates the person based on this personal information, performs settlement processing if the person can be confirmed (step S61), and saves transaction data (step S6).
2).

The configuration shown in FIG. 7 and the operation shown in FIG. 8 can be realized by the CPU of the member store terminal 4 executing a predetermined member store terminal program. These programs are stored in the program storage unit provided in the CPU. In addition, an operating system that performs basic input / output, management programs such as databases 7, 21, 48, and access from a browser such as member terminal 9 when dealing with search / browsing of transaction data A Web server program for transmitting a page described in a markup language such as HTML according to the above, and for registering data is also stored in this program storage unit. The program storage unit may be secured in an auxiliary storage device such as a hard disk provided in parallel with the CPU, or may be provided in a data center or the like connected to the CPU via a network.

A program for such a member store terminal is C
It is provided with a command for operating a PU (calculation means). For example,
The program for the member store terminal corresponds to the configuration shown in FIG. 7 and FIG. 8, and the program for card payment is based on the position code of the writing data or the content of the writing data as an instruction to operate the transaction data management unit. A slip number specifying command (corresponding to S57) for specifying the slip number of the writing data, and the signature data in the writing data and the card management regarding the transaction identified by the slip number specified according to the slip number specifying command. A signature verification command (corresponding to S58) for verifying the original signature data received from the host, and personal information relating to the member of the card number transmitted from the card management host when the signature data is determined not to match. And a personal information display control command (corresponding to S60) to be displayed on the display unit.

By executing these commands, the calculating means 4 operates as the slip number identifying function 16 and the signature collating function 18, and the slip number identifying step S57 and the signature collating step S are performed.
Execute 58. In addition, the program for merchant terminals is
The CPU realizes various functions by providing each means, each part or each function to be realized in the embodiment of the present invention such as a card settlement system, and the command according to each step of the flowchart. For example, in the fourth embodiment, the slip number identification function 1
6 has various functions 43, 44, 4 according to the type of slip.
5, 46 are provided. When the configuration of the fourth embodiment is adopted in the card payment system shown in FIG. 7, the member store terminal program causes the corresponding command (for example, a member) to implement each function 43, 44, 45, 46. Store slip ID identification command).

The member store terminal program is stored in a recording medium 11A such as a disk or a magnetic tape (MT), conveyed, and read by the medium reading unit 11. The member store terminal program stored in the recording medium is read by the medium reading unit 11 and then stored in the program storage unit. In addition, the program can be provided to the program storage unit from another host device via a communication line.

Regarding the program, when the “command to operate the CPU (calculation means such as transaction data management unit)” is referred to, the command to operate the CPU only by each command and the operating system etc. stored in the program storage unit in advance. Either or both of a command to operate the CPU depending on another program are included. here,
"Operating system" has a broad interpretation.
It includes a database manager, a lookup service provided by the position control server 12, and the like.

For example, the personal information display control command is SQL
It may be only a command to hand over the personal information acquired using a sentence or the like to the operating system for display. In this way, the recording medium 11A storing the program for the member store terminal
In the recording medium 11A for carrying the program to the user, for example, only the "command for passing personal information to the operating system for display" is stored.
The actual display of data may be done by the operating system. This is determined by the relationship with the operating system of the computer to operate. In this respect, the same applies when a command (program or script) is provided via a communication line.

The description of this program, system or method, carrier medium, etc. is the same in the embodiments described later. In particular, the functions, processes, and commands having the same names correspond to each other in each embodiment.

<Second Embodiment> In the second embodiment, the function of the card management host 6 will be mainly described. FIG. 9 is a block diagram showing a configuration example of the second and third embodiments of the present invention. The card management host 6 according to the second embodiment controls a data communication with a member store terminal installed at a store of a member store, and a credit control from the member store terminal 4 via the communication control unit 36. When an inquiry is made, the credit for the transaction is determined, and the credit provision management unit 38 for notifying the determination result to the member store terminal, a position code in a predetermined coordinate system, and transaction data for the transaction. Transaction data management unit 10 for receiving handwritten data in which handwritten contents are printed on a slip printed with, original signature data signed by a member who gave a card number, and an address of a member terminal used by the member. And a member DB 7 storing member data including personal data such as. Further, in the example shown in FIG. 9, the card management host includes a transaction data DB 21 that stores transaction data including signature data and verification results.

The transaction data management unit 10 identifies the slip number of the writing data based on the position code of the writing data or the content of the writing data, and the slip specified by the slip number identifying function 16. A transaction data recording function 40 for synthesizing the transaction data relating to the transaction identified by the number and the writing data of the slip number and recording the synthesized transaction data for retrieval from the member store terminal or the member terminal. There is. The transaction data recording function 40 is the transaction data search control function 2 shown in FIG.
This is a function of storing transaction data in, for example, the transaction data DB 21 in order to enable retrieval by 2.

Further, the transaction data management unit 10 may add the electronic signature of the card management company to the transaction data to be recorded. Further, it may be provided with an electronic certification function for attaching data for certifying the originality such as a hash value for tampering prevention. Further, in the example shown in FIG. 9, the transaction data management unit 10 uses the signature verification function 18 shown in FIG.
Also, it is provided with a matching result notification function 20, a transaction data search control function 22, and a payment information transmission control function 26.

FIG. 10 is a flow chart showing a processing example according to the second embodiment. When the card management host 6 receives a credit inquiry from the member store terminal 4 or the commerce site 14,
Credit is determined for the card number, and credit is provided (step S72). Merchant terminal 4 and commerce site 1
4 controls printing of the slip and the user writes a signature (step S72), the card management host 6 receives the writing data via the user's mobile phone 9A or the like or the member store terminal 4 (step S72). S73). Then, the slip number specifying function 16 of the card management host specifies the slip number of this writing data (step S74). When the slip number is specified, the transaction data corresponding to this slip number can be specified. Subsequently, in the example shown in FIG. 10, the transaction data with signature data is recorded without verifying the signature (step S75).

Then, the card management host 6 sends transaction data to the member terminal 9 under the control of the member terminal 9. In the second embodiment, since the transaction data is retrieved from the member terminal 9 via the card management server 6B or the like, the member can arbitrarily retrieve the electronic copy of the voucher signed by the member. It can be useful for making household accounts, making travel statements, making expense reports, and accounting and taxing in the accounting department. In the example in which the transaction data management unit 10 has the electronic certification function, since the originality of the transaction data is proved with a certain degree of reliability, the physical paper ledger is abolished, and accounting and tax management are electronically performed. It can be carried out.

As shown in FIG. 9, in the second embodiment as well, the card management host 6 executes a predetermined card management host program, so that the configuration shown in FIG. 9 and FIG.
The operation shown in can be executed. This card management host program, as a command to operate the transaction data management unit 10, is based on the position code of the writing data or the content of the writing data, corresponding to the configuration shown in FIG. 9 and the processing steps shown in FIG. A slip number specifying command (corresponding to S74) for specifying the slip number of the writing data, and transaction data relating to the transaction identified by the slip number specified according to the slip number specifying command and the writing data of the slip number are synthesized. Along with the transaction data recording command (corresponding to S75) for recording the synthesized transaction data from the member store terminal or the member terminal for retrieval, the transaction data is transmitted to the member terminal previously specified by the member of the card. And a payment information transmission control command (corresponding to S76).

In order to realize the configuration of the card management host shown in FIG. 9, the card management host program has a command corresponding to each function, which is similar to the relationship described in detail in the first embodiment. . This also applies to the third embodiment. In addition, the explanation about the program for the member store terminal, such as the definition of "command to operate", can be found in Section 2.
It is also applicable to the card management host program in the embodiment. In the case of the present embodiment, the computer or server of the card management host 6 has the above-mentioned program storage unit.

<Third Embodiment> In the third embodiment, the function of the card management host connected to the commerce site via the network will be disclosed. In the third embodiment, writing data is attached to an electronic invoice on a commerce site. The third embodiment does not include the use in a real store,
It is an application example of the second embodiment specialized in the relationship with the commerce site. Referring again to FIG. 9, the card management host 6 according to the third embodiment has a communication control unit 36 connected via a network 5B to a commerce site 14 that performs electronic commerce with the card user, and the communication control unit 36. When there is a credit inquiry from the commerce site 14 via the credit commerce site, the credit for the transaction is determined and the credit provision management unit 38 for notifying the commerce site of the determination result, and the position in a predetermined coordinate system. The transaction data management unit 10 receives the writing data in which the writing content on the slip in which the code and the transaction data regarding the transaction are printed is converted into data.

Then, the transaction data management unit 10 specifies the slip number specifying function 16 for specifying the slip number of the writing data based on the position code of the writing data or the content of the writing data, and the slip number specifying function 16. And a handwriting data transmission function 42 for transmitting handwriting data relating to a transaction identified by the created slip number to the commerce site 14 as image data. Writing data transmission function 4
2 identifies the slip number and sends the writing data as image data to the commerce site 14. Therefore, the commerce site 14 attaches the image data having the signature to the electronic invoice issued by the commerce site. You can As a result, the intention of the card user can be clearly recorded as signature data, for example, preventing the card user from denial of the fact.

In the third embodiment, the card management host 6 verifies the signature, and the verification result is sent to the commerce site 14.
Alternatively, it may be transmitted to the member terminal 9. In this case, the transaction data management unit 10 stores the member DB 7 that stores the member data including the original signature data signed by the member who gave the card number and the personal data such as the electronic mail address of the member terminal used by the member. Be attached. Then, the transaction data management unit uses the slip number identification function 1
6, a signature verification function 18, and a verification result notification function 20. The matching result notification function 20 notifies the commerce site 14 or the member terminal 9 of the matching result. Furthermore, by providing the signature verification function 18 and the verification result notification function 20,
It is possible to realize the card settlement in which the functions 24, 26, and 28 shown in FIG.

Further, similarly to the second embodiment, the transaction data management unit 10 may be provided with the transaction data recording function 40, the transaction data search control function 22, the electronic certification function and the like. Transaction data recording function 40 on the card management host side
By providing such as, it is possible to collectively handle transaction data relating to card settlement (transaction) at a plurality of member stores.

FIG. 11 is a sequence diagram showing an example of typical settlement processing according to the third embodiment. The processing example shown in FIG. 11 supports card settlement for electronic commerce between a commerce site and a card member. First, the user of the card number
Operate the member terminal 9 to access the commerce site 14
Then, the items are selected and the order is placed. Then, a settlement operation is performed to settle this order as a card settlement (step S81). The commerce site 14 makes an online credit inquiry to the card management host 6 for the card number input according to the settlement operation.
Credit is provided to the commerce site for the electronic commerce (step S82). Subsequently, the commerce site 14 generates bill data relating to the electronic commerce in response to the operation of the member terminal 9 by the card user (S83,
Invoice generation process). The bill data is data in a format that can be printed on the slip 1 at the member terminal. Subsequently, the commerce site 14 supports printing of the bill data on the slip 1 having the position code in the predetermined coordinate system (S84, printing support control step). That is, the commerce site 14 prompts the card user to set the slip having the signature area 2A, the slip number area 2B, etc. in the printer of the member terminal by further describing the HTML page, and further prints and prints it. Ask the card user to sign the invoice.

The card user uses the pen to write in the signature area 2A of the printed invoice, and the slip number area 2
Write the slip number for identifying the bill (transaction) in B. Then, the pen 3 generates a change in the position code near the pen tip as writing data according to the writing on the printed slip (S85, writing data generation step). This handwritten data is transmitted to the transaction data management unit 10 of the card management host 6 via the member terminal 9 or the like.

The card management host 10 receives the writing data generated by the pen 3 and specifies the slip number of the transaction based on the coordinates or contents of the writing data (S86, slip number specifying step). Here, the writing data is subjected to character recognition processing based on the writing on the slip number area 2B to specify the slip number. Then, the card management host 6 transmits the writing data specifying the slip number to the commerce site corresponding to this slip number (S87, writing data transmission step). Then, the commerce site 14 synthesizes the signature data of the writing data transmitted from the card management host 6 with the bill data corresponding to the slip number (S88, signature data generation process with signature). As a result, the electronically written bill data can be combined with the actually written signature data. Therefore, the physical original of the bill is kept at the card user's hand, and the same bill data as this original remains on the commerce site 14.

The card user performs a final settlement confirmation operation based on the bill data in which the signature data is combined, and the settlement between the operator of the commerce site 14 and the card user is completed. The commerce site 14 and the card management host 6 store the transaction data with signature (invoice data with signature data) in the transaction data DB 21 or the like (step S90). Then, the member uses the member terminal 9 to subsequently retrieve and browse the invoice data with the signature data (step S91).

As described above, according to the third embodiment, the second
In addition to the same effect as the embodiment, even in the case of electronic commerce through the network such as the Internet, the signature data of the orderer can be left on the invoice, which allows the card user to confirm the intention of the transaction. Be clear. Further, since the signature data signed for each bill is combined with the bill data, it is possible to prevent the malicious use of the malicious card number on the commerce site.

<Fourth Example> In the above-described embodiments and examples, wide area coordinates based on position codes such as dot patterns,
The relationship between the slip 1 and the slip number specifying function 16 has been described as having various modes. In the fourth embodiment, three types of forms are disclosed, and a configuration example of the form number identification function 16 for each form of each form will be described. The description of this example can be applied to the embodiment and each example. FIG. 12 is a block diagram showing a configuration example of the fourth embodiment. In the example shown in FIG.
The transaction data management unit 10 is provided with a coordinate slip DB 48 that stores the relationship between coordinates and slips. Further, the slip number identification function indicated by reference numeral 16 is the function 43, 44, 45, 46.
Is equipped with. Other configurations are similar to the elements shown in FIG.

FIG. 13A is a diagram showing the relationship between the type of slip and transaction attribute information. In the fourth embodiment, slip 1
There are three types, a complete specific slip, a commercial specific slip, and a common slip. The completely specified slip is a writing area 2 (for example, a writing area 2) associated with a slip number for identifying a transaction using a card number.
The slip number area 2B) is a slip in which a position code in completely specified coordinates that uniquely specifies the member store and the slip number is printed. The commercial specific slip is a slip in which a position code at specific commercial coordinates for uniquely specifying the slip number for each slip sheet is printed in the slip number area 2B. The common slip is a slip in which the position code at common coordinates common to each slip is printed in the writing area 2.

As shown in FIG. 13A, the completely specified slip corresponds to the member store slip ID based on the position code (coordinates) of the writing data. The member store voucher ID uniquely identifies one member store among all member stores using the mechanism of the present embodiment and the example, and also identifies all (or within a certain period of time) transactions of the member store. To do. In order to uniquely identify the member store, for example, part or all of the URL may be used for the ID or the like. The completely specified slip is a slip in which different dot patterns (coordinates) are printed for each slip of each member store. It is suitable for merchants with a large number of transactions per day or for those who want faster settlement.

The commercial specific slip specifies the slip ID based on the coordinates of the position code. The OCR of the written content is used to identify the member store and the number of the slip bundle used in this member store.
Here, it is assumed that a pattern for specifying the slip ID is printed for each page and is sold as a bundle of 50 or 100 slips. When using a commercial specific slip, the cost can be reduced as compared with a complete specific slip. When a plurality of voucher bundles are used in parallel at a member store, it is necessary to identify the voucher bundle. When transmitting the writing data via a mobile phone or the like, it is necessary to specify which member store, which bundle of bills, and which slip number the writing data is.
For this reason, in the example shown in FIG. 13A, the slip ID is specified based on the coordinates, and the contents (description) of the writing data is character-recognized to specify the member store slip bundle ID.

Printing different dot patterns for each page of the bundle of slips is more costly than printing for all pages of the same dot pattern. Further, in the situation described in the third embodiment, the member prints the bill,
It is operationally preferable to use a completely common slip. That is, it is difficult for a member to hold in advance the slip 1 having the position code (coordinates) corresponding to the slip number issued at the commerce site 14, and the paper with a specific number is attached to the printer. It is troublesome for the user to print the bill and the like. Therefore, in such a case,
The use of a common voucher that can be used for any merchant or invoice is preferred. In the case of a common slip, the slip number is not specified by coordinates, but the member store slip ID is specified based on the character recognition result of the writing data.

FIG. 13B is a diagram showing an example of allocation of wide area coordinates. Of the wide area coordinates, the coordinate ranges A and B are used for the completely specified slip. Coordinate range A is a member store A
Assign to company. Company A associates this coordinate range with the member store slip ID. The same applies to the coordinate range B.
The coordinate range C is used for a commercial specific slip. In the commercial specific slip, the coordinates and the slip ID are associated with each other. The coordinate range D is used for a common slip. No relationship with the ID is assigned to the common slip. The coordinate range E is used to specify what role the area plays by using coordinates. For example, the coordinate range E is assigned to the signature area 2A in the common slip, the slip number area 2E, and the like. Further, in the example shown in FIG. 13, the coordinate range F is assigned to various commands. For example, some coordinates in the coordinate range F are
Specifies that the location is a send check box. The relationship with these various commands may be managed by the pen 3 or the position control server 12.

When referring to "slip number", in the example shown in FIG. 13, the member store slip ID or the member store slip bundle I
It means a combination of D and a slip ID.

FIG. 13C is a diagram showing an example of the role of the slip ID. As shown in FIG. 13A, even if various slips are used, the slip ID can be specified based on the coordinates or the description of the writing data. This slip ID is a number that identifies a transaction. Therefore, the ID of the signature data included in the writing data and the card number are linked.

The coordinate slip DB stores the relationship between the coordinates of the completely specified coordinates and the member store and the slip number so that the completely specified slip can be used. In this case, the slip number identification function 16 of the transaction data management unit 10 includes a member store slip ID identification function 43 that identifies the member store slip ID of the handwritten data by referring to the coordinate slip DB based on the coordinates of the handwritten data. . In addition, in order to be able to use a commercial specific slip,
The coordinate DB stores the relationship between the coordinates of commercially available specific coordinates and the slip number. Then, the slip number specifying function 16 refers to the coordinate slip DB based on the coordinates of the writing data to specify the slip ID of the writing data, and the slip ID specifying function 4
4 and the member store voucher I for specifying the member store and the voucher bundle to which the handwriting data belongs based on the content of the handwriting data
The member store slip bundle ID recognition function 45 for recognizing D is provided. In order to make the common slip available, the slip number identification function recognizes the contents of the writing data in characters and recognizes the member store and the slip number to which the writing data belongs based on the text data as the recognition result. Shop slip ID
A recognition function 46 is provided.

The use of the completely specified slip has an advantage that the slip number (member store slip ID) can be surely and easily specified. On the other hand, a special dot pattern is individually printed for each slip number by, for example, offset printing. Since it has to be done, it takes a certain amount of time and cost before it is used. In the case of using a common slip, the card user can use it for printing in electronic commerce with a commerce site etc., and it is easy to use, and there is no possibility that all the coordinates in the wide area coordinate system will be used up. .

<Fifth Embodiment> FIG. 14 is a block diagram showing a configuration example of a card settlement system according to the fifth embodiment. In the fifth embodiment, a mechanism for preventing unauthorized use due to a card number being stolen in electronic commerce or the like will be described. In non-face-to-face type commercial transactions such as electronic commercial transactions, the member store does not see the card 8. Therefore, even if the card itself is not stolen, the card number is stolen and the card is illegally used. The fifth embodiment discloses a mechanism that requires a real card even in such mail order.

The card settlement system according to the fifth embodiment is
Voucher 1 in which a position code in a predetermined coordinate system is printed in a writing area associated with a voucher number identifying a transaction using a card number, and a card position for identifying card attribute information corresponding to the card number A card 8 on which the code 8A is printed and issued to the card member, and a pen for reading the position code near the pen tip while writing on the writing area 2 or the position code 8A on the card according to the movement of the pen tip. 3 and 3. In this embodiment, the pen 3
In-pen memory 3E for temporarily accumulating writing data by handwriting in the writing area, and after reading the card position code 8A, specifies card attribute information based on the card position code, and also specifies the card attribute information. An in-pen processor 3A for composing and transmitting the handwriting data is provided. Further, in the example shown in FIG. 14, the transaction data management unit 10 is provided with a coordinate member DB 49 that stores the relationship between the coordinates of the position code to be printed on the card position code and the member information such as the card number.

That is, in the fifth embodiment, by printing the on-card position code 8A on the card 8 and using it as the transmission check box 2E, not only the card number but the actual card 8 can be displayed. If you don't, you can't pay by credit card.

By setting the on-card position code 8A as a different position code (coordinates) for each member, it is possible to prevent unauthorized use of another person's card. That is, the transaction data management unit 10 specifies the card number of the writing data based on the card attribute information of the writing data transmitted from the in-pen processor 3A, and
A card holder authentication function 50 for authenticating that the user is a card holder is provided. Further, in the example shown in FIG. 14, as in the example shown in FIG.
6, signature verification function 18, transaction data search control function 2
It has 2 etc. In particular, in the present embodiment, the transaction data management unit 10 has an authentication verification result notification function 52 that notifies the member store terminal or the card management host of the verification result by the cardholder authentication function 50 and the verification result by the signature verification function. I have it.

The "card attribute information" is information assigned to the on-card position code. Here, the card number is included in the card attribute information. Thereby, the cardholder authentication function 50 can authenticate that the card user holds the card itself having the card number.

FIG. 15 is a sequence diagram showing a processing example of the card settlement system according to the fifth embodiment. The example shown in FIG. 15 discloses an example in which the on-card position code 8A is used for electronic commerce between the card user and the commerce site.
Steps S81 to S85 are the third operation shown in FIG.
It is similar to the embodiment. That is, the commerce site 14 generates invoice data relating to the electronic commerce in response to the card user's settlement operation S81 (S83, invoice generation step). Then, the commerce site supports the printing of the bill data on the slip having the position code in the predetermined coordinate system (S84, print support control step).
When the card user makes a signature, the pen 3 generates writing data and temporarily stores it in the memory 3E (S85, writing data generation step).

In the fifth embodiment, the card user checks the on-card position code 8A printed on the back surface of the card 8 with the pen 3 after the completion of the signature. Then, the pen 3 specifies the card attribute information based on the on-card position code after reading the on-card position code 8A. This card attribute information may include information for identifying the card number. The pen further combines the card attribute information with the writing data generated in the writing data generating step and transmits the writing data (S101, writing data transmitting step).

The writing data with the card attribute information is transmitted to the card management host via the card user's mobile phone 9A or the member terminal 9. Upon receiving this writing data, the card management host specifies the card number of the writing data based on the card attribute information and authenticates that this card user is a card holder (S10).
2, cardholder authentication process). This cardholder authentication step S102 may be a step of authenticating that the sender of the writing data holds the card of this card number at the stage where the card number identified by the card attribute information is specified. Also, if the slip number of the writing data is known in advance, the relationship between the slip number and the card number based on this writing data is compared with the relationship between the card number and the slip number in the transaction data, and they match. In this case, it may be a step of authenticating that the card user has the card. Before and after this cardholder authentication step S102, if the writing data includes the pen ID of the pen, it is authenticated that the user is a member of the card number based on the pen ID. You may do so (member identification process).

Before and after the cardholder authentication step S87, the card management host 6 specifies the slip number of the writing data based on the position code of the writing data or the content of the writing data (S86, slip number identification). Process). Further, the card management host 6 collates the signature data in the writing data with the original signature data for the transaction identified by the slip number identified in the slip number identifying step S86 (S103, signature matching step). Then, the card management host 6 notifies the commerce site 14 of the authentication result in the cardholder authentication step S102 and the verification result in the signature verification step S103 (S104, authentication verification result notification step).

In this embodiment, the operators of the commerce site and the card management host each provide credit for the card number and transaction amount, prevent the card from being forged by using the position code on the card, and allow the card user to use the card. The card settlement with the card user can be performed by referring to the authentication that the user has it, a clear intention of the transaction by the signature of the card user, and the personal authentication by verifying the signature.
This, in turn, prevents transactions that exceed the credit amount, prevents counterfeiting of cards by non-visual methods such as printing holograms and facial photographs, and prevents unauthorized use due to the theft of card numbers only. It is possible to prevent post-repudiation of transactions by using, omit complicated procedures such as pre-registration of computers used for commerce sites, etc., and prevent unauthorized use if the card is stolen by signature verification. . Further, in the present embodiment, the above-described embodiments and each embodiment, since the original signature data is read from the member DB 7, it is not necessary to write the original signature on the back surface of the card. Therefore, even if the card is stolen, there is no signature on the back side, and the unauthorized user cannot know what the signature is. By adding such a mechanism,
Card payments can be protected from various unauthorized use.

If the card number itself is used as the card attribute information, there is a possibility that the information will be stolen by an unauthorized user during the transmission / reception of the writing data regarding the transaction.
Therefore, for example, if the card attribute information is the position code string or the dot pattern itself, it is possible to effectively prevent the illegal use of such information. Furthermore, if the position code 8A on the card is made wider so that it is not checked for the same writing starting from the same place, it is completely the same as the card attribute information (for example, the position code string and coordinate string) in the previous transaction. If it is the card attribute information, it may be determined that the card holder is not the cardholder himself.
This makes it possible to prevent the reuse of the dead copy of the card attribute information.

The card attribute information may be a dot pattern for identifying the card number, or an identification numerical value of several digits determined in association with the card number. In the operation that when the card number and this number are the same, it is the authentic card number.Only the card number is sent and received for crediting the card number and generating invoice data, and this identification number is sent by another network route. (For example, by transmitting the card attribute information from the mobile phone), it is possible to prevent unauthorized access to the data.

In the example of using the on-card position code according to the present embodiment, the card settlement can be protected from the above various illegal use. At this time, the card user uses the pen 3
It's as simple as getting the common paper, and printing the invoice, signing it, and checking the on-card position code 8A printed on the back of the card 8. Also,
At the commerce site 14, the card payment can be made safer by only slightly changing the operation of the card payment such as prompting the printing of the bill.

<Sixth Embodiment> Next, another useful function that can be added to each of the above embodiments will be described. FIG. 16 shows the sixth
It is a block diagram which shows the structural example of an Example. In the sixth embodiment, the transaction data management unit has functions 54, 55 and 56. This function is a function that can be added to other embodiments. The slip 1 also includes an additional area 2C.
Other configurations are similar to those shown in FIG.

In the example shown in FIG. 16, confirmation of the transaction amount and
In order to prevent the modification of the transaction amount at malicious merchants,
Specify the range of transaction amount using the position code. In this example, the slip 1 includes an amount range specifying area 2C for specifying the amount range of the transaction amount. FIG. 17 shows an example of the amount range specifying area 2C. And the transaction data management unit 1
0 is a slip number specifying function 16 that specifies the slip number of the writing data based on the position code of the writing data or the content of the writing data, and the transaction based on the amount range specifying information described in the amount range specifying area 2C. Whether the transaction amount of the transaction identified by the amount range specifying function 54 for specifying the amount range of the amount of money and the slip number specified by the slip number specifying function 16 is within the amount range specified by the amount range specifying function 54. An amount range matching function 55 for verifying whether or not is provided. If the transaction amount is not included in this amount range, the amount range collating function 55 may display an amount range error to the member store to disable the transaction, or may be ex post facto to the member terminal 9. You may make it transmit the said amount range error information.

In the example shown in FIG. 17, the transaction amount is 16,8.
00. Therefore, it is included in the money range of 5,001 to 30,000. The card user checked the amount range according to the transaction amount in the card settlement for this transaction. Then, the amount range specifying function 54 first extracts the writing data including the coordinates assigned to the amount range specifying area 2C from the writing data. Then, based on the coordinates, the monetary amount frame is identified by referring to the coordinate DB or the like. In the example shown in FIG. 17, the amount-of-money range specifying function 54 is based on the coordinates (position) in the amount-of-money range specifying area 2C, and the writing data including the signature data is from 5,001 to 30,0.
It is determined that the transaction is within 00. Then, the amount range matching function 55 refers to the transaction data, and indicates the transaction amount 1
Make sure 6,800 is in this range.

In the example shown in FIG. 17, a check box is provided for each amount range, but the transaction amount may be specified with fineness depending on the resolution of the position code (coordinates). For example, a real number with a fixed number of significant digits corresponding to a number line for expressing the transaction amount on a straight line position may be selected as an answer by writing a circle or the like on the number line.

The sixth embodiment discloses the animation display of the signature data, in addition to the function for specifying the amount range. In this example, the transaction data management unit 10 follows the writing order of the pen tip on the transaction identified by the slip number specified by the slip number specifying function 16 based on the time-series position change information of the writing data. An animation display control function 56 is provided for animation-displaying the signature data in the handwriting data on the member store terminal 4 or the card management host 6.

By displaying the writing data on the display unit or the like of the member store terminal 4 in the writing order, the signature data including the writing order can be compared. As a result, even if an unauthorized user of the card tries to imitate a signature, if the writing order is different, the person is not authenticated, and a more secure card payment can be realized.

Further, as another function, the pen 3 may be provided with a time stamp function of recording the start and end times of recording of the writing data (signature data) as the time stamp in the writing data. Further, by applying the techniques for encryption of written data and transaction data, electronic signatures, and proof of originality to the embodiments and examples of the present invention, it is possible to perform processing according to the characteristics of the network. Become.

[0140]

According to the present invention, when the card user signs a voucher in the same manner as in the conventional art, the position code is printed on the voucher and the pen reads the position code, so that the signature is written. It can be acquired as data. Then, the slip number identification function identifies the slip number of the writing data based on the position code of the writing data or the content of the writing data, and the signature verification function identifies the signature in the writing data regarding the transaction identified by this slip number. In order to collate the data with the original signature data, the writing data transmitted from the pen can be associated with the slip number. Further, the verification result notification function notifies the verification result by the signature verification function to the member store terminal or the card management host. Therefore, when transmitting the verification result to the member store terminal, the verification result is referred to and whether the card settlement can be executed or not. Can be determined at the member store. In addition, when using the verification results on the card company side, the existence of this system can prevent the fraudulent use by malicious member stores, and when the verification results do not match or have a very low matching rate, By inquiring about the transaction of the card member, it can contribute to the early detection of unauthorized use of card payment. As described above, according to the present invention, the card user can improve the security of card payment by simply signing the voucher as before.

[Brief description of drawings]

FIG. 1 is a block diagram showing a configuration example of this embodiment.

FIG. 2 is a sequence diagram showing an example of payment processing in the configuration shown in FIG.

FIG. 3 is an explanatory diagram showing an example of a slip with a pattern.

FIG. 4 is a flowchart showing a processing example in the case of verifying a signature before settlement.

FIG. 5 is a flowchart showing a processing example in the case of verifying a signature after settlement.

FIG. 6 is a flowchart showing an example of processing for switching a payment method according to a transaction amount.

FIG. 7 is a block diagram showing a configuration example of a first embodiment of the present invention, FIG. 7 (A) is a diagram showing an overall configuration, and FIG. 7 (B) is a detail of a transaction data management unit. It is a figure which shows a structure.

FIG. 8 is a flowchart showing a processing example according to the first embodiment.

FIG. 9 is a block diagram showing a configuration example of second and third embodiments.

FIG. 10 is a flowchart showing a processing example according to the second embodiment.

FIG. 11 is a sequence diagram showing an example of payment processing according to the third embodiment.

FIG. 12 is a block diagram showing a configuration example of a fourth embodiment.

FIG. 13 is an explanatory diagram showing types of slips,
FIG. 13 (A) is a diagram showing the relationship between the types of slips and transaction attribute information, etc., FIG. 13 (B) is a diagram showing an example of global coordinate allocation, and FIG. 13 (C) is an example of the role of a slip ID. FIG.

FIG. 14 is a block diagram showing a configuration example of a card payment system according to a fifth embodiment.

FIG. 15 is a sequence diagram showing a processing example of the card payment system according to the fifth embodiment.

FIG. 16 is a block diagram showing a configuration example of a sixth embodiment.

FIG. 17 is an explanatory diagram showing an example of an invoice used in a configuration having an amount range matching function.

FIG. 18 is an explanatory diagram showing an example of a position code according to a conventional example, FIG. 18 (A) is a diagram showing an example of a dot pattern, and FIG. 18 (B) is a diagram showing an example of symbol numerical values;
(C) is a figure which shows the example of definition of x code and y code corresponding to a symbolic numerical value.

FIG. 19 is an explanatory diagram showing an example of processing for identifying coordinates in a wide-area coordinate system using a circulation sequence, and FIG. 19A is a diagram showing a relationship between the circulation sequence and positions on the sequence; B) is x
FIG. 19C is a diagram showing an example for obtaining a specific number of examples from a code, and FIG. 19C is a diagram showing a relationship between a y-code and a group on a number sequence.

FIG. 20 is a perspective view showing a configuration example of a conventional pen.

21 is a block diagram showing a configuration example of an electric system of the pen shown in FIG.

[Explanation of symbols]

1 Voucher 2 Writing area 2A Signature field (signature area) 2B Voucher number area 2C Amount range specific area 2E Transmission check box 3 Pen 4 Merchant terminal 5 Network 5A Closed network (eg dedicated line) 5B Open network (eg Internet ) 9 Member terminal 9A Communication equipment 8 Credit card 8A Position code on card 10 Transaction data recorder

─────────────────────────────────────────────────── ─── Continuation of front page (51) Int.Cl. ⁷ Identification code FI theme code (reference) G06K 9/62 G06K 9/62 G 17/00 17/00 V (72) Inventor Akira Tanaka Higashisei-ku, Osaka 6-1 1-1 Oimazato Minami KOKUYO CORPORATION (72) Inventor Masaaki Kimura 6-1-1 1-1 Oimazato Minami Higashinari-ku, Osaka City F-Term inside KOKUYO CORPORATION (reference) 2C005 HA03 HA04 HB01 HB17 HB20 JA02 JA09 JA10 JA13 JA17 JA26 JB07 JB22 LA08 LA18 LA24 LB02 LB04 LB19 LB52 LB53 LB55 5B058 KA37 YA01 5B064 AA07 AB04 BA05

Claims (25)

[Claims] 1. A slip in which a position code in a predetermined coordinate system is printed in a writing area associated with a slip number for identifying a transaction using a card number, and the writing area is used for writing on the slip. A transaction relating to the settlement including a pen that reads the position code near the pen tip during writing to the pen tip according to the movement of the pen tip, and writing data that is written on the slip by the user of the card number using the pen. A card payment system comprising: a transaction data management unit for controlling data transmission and reception; and a member DB in which original signature data registered in advance for each card number and personal data regarding members of the card number are recorded. The transaction data management unit is operated by the member store terminal of the member store that is the counterparty of the user's transaction or the card issuer who provided the card number to the member. The transaction data management unit is connected to a managed card management host, and the transaction data management unit identifies a slip number of the writing data based on the position code of the writing data or the content of the writing data, and a slip number specifying function. A signature collating function that collates the signature data in the writing data with the original signature data regarding the transaction identified by the slip number identified by the number identifying function, and the collation result by this signature collating function is the member store terminal or the A card settlement system having a verification result notification function for notifying a card management host. 2. The collation result notification function has a function of transmitting transaction data including the collation result to a member terminal previously specified by the member during or after the settlement of the transaction. The card payment system according to item 1. 3. The transaction data management section is provided with a transaction data DB for recording transaction data including the signature data and the verification result for each slip number of the member store, and the transaction data management section is provided by the member. 3. A transaction data search control function for transmitting to the member terminal a list of transaction data stored in the transaction data DB in response to a search operation at the member terminal used. Card payment system. 4. The transaction data management unit, when the signature verification function determines that the two signature data do not match before the settlement between the user and the member store, completes the personal information of the member of the card number. 2. The card settlement system according to claim 1, further comprising a personal information transmission control function for transmitting the information to the member store terminal for identity verification at the member store. 5. The transaction data management unit, when the signature collation function determines that the two signature data do not match after the settlement between the user and the member store is completed, the transaction data including the collation result regarding the settlement. 2. The card payment system according to claim 1, further comprising a payment information transmission control function for transmitting to a member terminal designated in advance by the member for confirming whether or not the transaction is performed by the user himself. 6. The transaction data management unit sets the timing of verification by the signature verification function before settlement when the transaction amount of the transaction identified by the slip number is equal to or more than a predetermined amount, and If the amount is less than the amount of money, the verification timing control function that sets the verification timing after payment, and if the signature verification function determines that both signature data do not match before payment, personal information of the member of the card number Is sent to the member store terminal for identity verification at the member store, and if the signature verification function determines that the two signature data do not match after payment, the verification result regarding the payment is displayed. Payment information transmission control for transmitting transaction data including the transaction data to a member terminal previously designated by the member for confirmation as to whether or not the transaction is performed by the user himself / herself. Card payment system according to claim 1, characterized in that a capability. 7. A slip in which a position code in a predetermined coordinate system is printed in a writing area for a slip number for identifying a transaction using a card number, and the slip is used for writing on the slip and is written in the writing area. A pen that reads the position code near the pen tip during writing according to the movement of the pen tip, and transaction data relating to the settlement including signature data written on the slip by the user of the card number using the pen. The user using a card payment system that includes a transaction data management unit that controls transmission and reception, and a member DB that records original signature data registered in advance for each card number and personal data regarding members of the card number. Is a card payment support method for supporting the payment of the writing, based on the position code of the writing data by writing on the slip or the content of the writing data. A slip number specifying step of specifying the slip number of the data, a signature checking step of checking the signature data and the original signature data with respect to the transaction identified by the slip number specified in the slip number specifying step, A transaction data recording step of recording transaction data including a verification result in the verification step for browsing of a member store which is a counterpart of the transaction of the member or the user. 8. A card reader for reading a card number or the like recorded on a credit card, a credit data management unit for inquiring a credit card management host about a credit for a transaction with this card number and the transaction amount, and this credit data management unit. A display unit that displays credit results, etc., a slip printing unit that prints data about the transaction on a slip printed with a position code in a predetermined coordinate system, and a pen tip vicinity while writing on the slip. And a transaction data management unit that receives writing data transmitted from a pen that reads the position code of the writing data according to the movement of the pen tip, and the transaction data management unit changes the position code of the writing data or the contents of the writing data. Based on the slip number identification function that identifies the slip number of the written data based on this, and the slip number identified by this slip number identification function. The signature verification function for verifying the signature data in the written data and the original signature data received from the card management host regarding the transaction, and the card management if the signature data is determined not to match by this signature verification function. A member store terminal, comprising: a personal information display control function of displaying personal information on a member of the card number transmitted from a host on the display unit. 9. A card reader for reading a card number or the like recorded on a credit card, a credit data management unit for inquiring a credit card management host about a credit for a transaction with this card number and the transaction amount, and this credit data management unit. A display unit that displays credit results, etc., a slip printing unit that prints data about the transaction on a slip printed with a position code in a predetermined coordinate system, and a pen tip vicinity while writing on the slip. A program for a member store terminal for supporting card payment by using a member store terminal including a transaction data management unit that receives writing data transmitted from a pen that reads the position code of the pen according to the movement of the pen tip. The credit card payment program uses the position code of the writing data or the writing data as a command to operate the transaction data management unit. The slip number specifying command for specifying the slip number of the writing data based on the contents of the above, and the signature data in the writing data and the card management regarding the transaction identified by the slip number specified according to the slip number specifying command. A signature verification command for verifying the original signature data received from the host, and when the signature data is determined not to match, the personal information regarding the member of the card number transmitted from the card management host is displayed on the display unit. A program for a member store terminal, characterized by comprising: a personal information display control command. 10. A communication control unit for controlling data communication with a member store terminal installed at a store of a member store, and the transaction when a credit inquiry is made from the member store terminal via the communication control unit. The credit provision management unit that determines the credit regarding the above and notifies the member terminal of the determination result, and the content written on the slip on which the position code in the predetermined coordinate system and the transaction data regarding the transaction are printed. The transaction data management unit that receives the written handwritten data and the member data including the original signature data signed by the member who gave the card number and the personal data such as the address of the member terminal used by the member are stored. The transaction data management unit includes a member DB, and the transaction data management unit identifies a slip number of the writing data based on the position code of the writing data or the content of the writing data. The number specifying function and the transaction data related to the transaction identified by the slip number specified by the slip number specifying function and the writing data of the slip number are combined, and the combined transaction data is output from the member store terminal or the member terminal. A card management host having a transaction data recording function for recording for retrieval of. 11. The transaction data management unit compares a signature data in the writing data with original signature data stored in the member DB, and a verification result of the signature verification function as transaction data. The card management host according to claim 10, further comprising a collation result notification function of notifying the member store terminal as a part. 12. The transaction data management unit has a payment information transmission control function for transmitting the transaction data to a member terminal previously specified by a member of the card, according to claim 10 or 11. Card management host. 13. A transaction control unit for controlling data communication with a member store terminal installed at a store of a member store, and a transaction concerned when a credit inquiry is made from the member store terminal via the communication control unit. The credit provision management unit that determines the credit regarding the above and notifies the member terminal of the determination result, and the content written on the slip on which the position code in the predetermined coordinate system and the transaction data regarding the transaction are printed. Stores transaction data management unit that receives digitized writing data, and original data that is signed by the member who gave the card number and member data including personal data such as the address of the member terminal used by the member. A card management host program for supporting card payment using a card management host equipped with a member DB, Gram, as a command to operate the transaction data management unit, in response to the slip number specifying command for specifying the slip number of the writing data based on the position code of the writing data or the content of the writing data, The transaction data relating to the transaction identified by the specified slip number and the writing data of the slip number are combined, and the combined transaction data is recorded for retrieval from the member store terminal or the member terminal. A program for a card management host, comprising a data recording command and a payment information transmission control command for transmitting the transaction data to a member terminal previously specified by a member of the card. 14. A communication control unit connected via a network to a commerce site that conducts electronic commerce with a card user, and if there is a credit inquiry from the commerce site via the communication control unit, the transaction is performed. The credit provision management unit that determines the credit regarding the above and notifies the determination result to the commerce site, the position code in a predetermined coordinate system, and the written content on the slip printed the transaction data related to the transaction. A transaction data management unit for receiving the written writing data, wherein the transaction data management unit specifies a slip number of the writing data based on the position code of the writing data or the content of the writing data. And the written data regarding the transaction identified by the slip number specified by the slip number specifying function as image data Card management host, characterized in that a handwritten data transmission function for transmitting to the site. 15. A member DB that stores member data including original signature data signed by a member who gave a card number and personal data such as an address of a member terminal used by the member in the transaction data management unit. In addition, the transaction data management unit collates the signature data in the writing data with the original signature data for the transaction identified by the slip number identified by the slip number identification function, and a signature collation function. 15. The card management host according to claim 14, further comprising a verification result notifying function of notifying the commerce site or the member terminal of a verification result obtained by a verification function. 16. The transaction data management unit synthesizes transaction data relating to a transaction identified by a slip number specified by a slip number specifying function and writing data of the slip number, and the combined transaction data is used by the member store. 15. The card management host according to claim 14, further comprising a transaction data recording function for recording for retrieval from a terminal or the member terminal. 17. A commerce site that conducts electronic commerce with a card user and a credit inquiry for the transaction when the commerce site is connected to the commerce site via a network and a credit inquiry is made from the commerce site. A card payment support method for supporting card payment for electronic commerce using a card payment system comprising a card management host for notifying a result to the commerce site, wherein the commerce site is operated by the card user. A bill generation step for generating bill data relating to the electronic commerce in response to the bill, and a print support control for supporting the printing of the bill data on the slip having the position code in the predetermined coordinate system by the commerce site. Process, and the pen is printed by the user according to the assist control by the print assist control process. A writing data generation step of generating a change in the position code near the pen tip as writing data in response to writing on the printed slip; and the card management host receiving the writing data generated by the pen and writing the writing data. A slip number specifying step of specifying the slip number of the transaction based on the coordinates or contents of the data, the card management host, a writing data transmitting step of transmitting the writing data specifying the slip number to a corresponding commerce site, The commerce site comprises a signed invoice data generation step of synthesizing signature data of the writing data transmitted from the card management host into invoice data corresponding to the slip number. How to help. 18. A complete specific slip in which a position code at a complete specific coordinate that uniquely identifies the member store and the slip number is printed in a writing area associated with the slip number for identifying a transaction using a card number, and Completely used for writing on a specific slip and a pen for reading the position code near the pen tip according to the movement of the pen tip while writing on the writing area, and the pen using the pen by the user of the card number. A transaction data management unit that controls the transmission / reception of transaction data relating to the settlement including written data written on a specific slip, original signature data registered in advance for each card number, and personal data regarding members of the card number are recorded. Member D
A card payment system comprising B and a coordinate slip DB storing the relationship between the coordinates of the completely specified coordinates and the member store and the slip number, wherein the transaction data management unit is a counterparty of the user's transaction. Is connected to a member store terminal of a member store or a card management host managed by a card issuer who has provided the member with the card number, and the transaction data management unit is based on the coordinates of the writing data. Regarding the member store slip ID specifying function for specifying the member store slip ID of the writing data with reference to the coordinate slip DB, and the transaction data identified by the member store slip ID specified by the member store slip ID specifying function A signature verification function for verifying the original signature data with the signature data therein, and the verification result by this signature verification function is used for the member store terminal or the card management host. A card payment system, which is provided with a verification result notification function for notifying a user of the card. 19. A commercial specific slip printed with a position code at specific commercial coordinates for uniquely specifying the slip number for each slip sheet in a writing area associated with the slip number for identifying a transaction using a card number. , A pen that is used for writing on this commercial specific slip and that reads the position code near the pen tip according to the movement of the pen tip while writing in the writing area, and by using the pen by the user of the card number A transaction data management unit that controls the transmission and reception of transaction data relating to the settlement including written data written on the commercial specific slip, original signature data registered in advance for each card number, and personal data regarding members of the card number. A card payment system comprising a recorded member DB and a coordinate slip DB that stores the relationship between the coordinates of the commercial specific coordinates and the slip number. The transaction data management unit is connected to a member store terminal of a member store that is a counterparty of the user's transaction or a card management host managed by a card issuer who has provided the member with the card number, and the transaction data. The management unit refers to the coordinate slip DB based on the coordinates of the writing data to specify the slip ID of the writing data, and a member store to which the writing data belongs based on the content of the writing data. And member store slip bundle ID for identifying slip bundle
Of the member store slip bundle ID recognition function for recognizing the member store and the transaction ID identified by the member store slip bundle ID recognized by the member store slip bundle ID recognition function.
A signature collating function that collates the signature data in the writing data with the original signature data regarding a transaction identified by a slip ID identified by a specific function, and a collation result obtained by the signature collating function by the member store terminal or card management. A card payment system comprising a verification result notification function for notifying a host. 20. A common slip in which a position code at common coordinates common to each slip is printed in a writing area associated with a slip number for identifying a transaction using a card number, and used for writing on this common slip. A pen that reads a position code near a pen tip during writing in the writing area according to movement of the pen tip, and writing data that is written on the common slip by the user of the card number using the pen. A card payment system including a transaction data management unit that controls transmission and reception of transaction data related to the payment, and a member DB that records original signature data registered in advance for each card number and personal data regarding members of the card number. Then, the transaction data management unit is a member store terminal of a member store that is a counterparty of the user's transaction or a car that has provided the member with the card number. The transaction data management unit is connected to a card management host managed by the issuer, and the transaction data management unit recognizes the content of the writing data and recognizes the member store and the slip to which the writing data belongs based on the text data as a recognition result. With respect to the member store slip ID recognition function for recognizing the number, and the transaction identified by the member store slip number recognized by the member store slip ID recognition function, the signature data in the writing data and the original signature data are collated. A card settlement system comprising a signature verification function and a verification result notification function of notifying the member store terminal or the card management host of the verification result obtained by the signature verification function. 21. A slip in which a position code in a predetermined coordinate system is printed in a writing area related to a slip number for identifying a transaction using a card number, and card attribute information corresponding to the card number is identified. A card that is printed with the on-card position code and is issued to the member of the card, and a pen that reads the position code near the pen tip while writing on the writing area or the on-card position code according to the movement of the pen tip. A transaction data management unit that controls the transmission and reception of transaction data relating to the settlement including the writing data written on the slip by the user of the card number using the pen, and the original data registered in advance for each card number. A transaction data management unit comprising: a card payment system including signature data and a member DB in which personal data regarding members of the card number are recorded. Is connected to a member store terminal of a member store that is a counterparty of the transaction of the user or a card management host managed by a card issuer who has provided the member with the card number, and the pen moves to the writing area. In-pen memory that temporarily stores writing data by writing, and after reading the on-card position code, specifies card attribute information based on the on-card position code and combines the card attribute information with the writing data. The transaction data management unit specifies the card number of the writing data based on the card attribute information of the writing data transmitted from the in-pen processor, and the user sends a card. A cardholder authentication function for authenticating that the user is a holder, and the position code of the writing data or the writing data. A slip number specifying function for specifying the slip number of the writing data based on the content, a slip number specified by the slip number specifying function, and signature data in the writing data regarding the transaction identified by the card number specifying function. A signature verification function for verifying the original signature data, and an authentication verification result notification function for notifying the member store terminal or the card management host of the verification result by the cardholder authentication function and the verification result by the signature verification function. A card payment system characterized by that. 22. A commerce site that conducts electronic commerce with a card user and a credit inquiry for the transaction when the commerce site is connected to the commerce site via a network and a credit inquiry is made from the commerce site. A card management host that notifies the commerce site of the result, a slip in which a position code in a predetermined coordinate system is printed in a writing area associated with a slip number for identifying electronic commerce using the card number, and the card The card on which the card position code for identifying the card attribute information corresponding to the number is printed and issued to the member of the card, and the position code near the pen tip during writing on the writing area or the card position code Support card payment in electronic commerce using a card payment system equipped with a pen that reads according to the movement of the pen tip A method for supporting card payment, wherein the commerce site generates a bill data relating to the electronic commerce according to an operation by the card user, and the commerce site has a predetermined coordinate system. A print support control step for supporting printing of the invoice data on a slip having a position code, and the pen printed the invoice data by the user according to the support control by the print support control step. A writing data generation step of generating a change in the position code near the pen tip as writing data in response to writing on the slip, and the card attribute information based on the card position code after the pen reads the card position code. And the card attribute information is combined with the handwriting data generated in the handwriting data generation step and transmitted. Data transmission step, the card management host specifies the card number of the writing data based on the card attribute information of the writing data transmitted from the in-pen processor, and confirms that the user is a card holder. A cardholder authentication step of authenticating, and a slip for the card management host to specify the slip number of the writing data based on the position code of the writing data or the content of the writing data before and after the cardholder authentication step. A number identifying step, the card management host, a signature collating step of collating the signature data in the writing data and the original signature data with respect to the transaction identified by the slip number identified in the slip number identifying step; The card management host sends the authentication result in the cardholder authentication step and the verification result in the signature verification step to the commercial A method for supporting card payment, comprising a step of notifying an authentication collation result for notifying a site. 23. When the writing data includes a pen ID of the pen before and after the cardholder authentication step, the card management host determines that the user has the card number based on the pen ID. 3. A member identification process for authenticating that the member is a member of
Card payment support method described in 2. 24. A slip in which a position code in a predetermined coordinate system is printed in a writing area associated with a slip number for identifying a transaction using a card number, and the writing area is used for writing on the slip. A transaction relating to the settlement including a pen that reads the position code near the pen tip during writing to the pen tip according to the movement of the pen tip, and writing data that is written on the slip by the user of the card number using the pen. A card payment system comprising: a transaction data management unit for controlling data transmission and reception; and a member DB in which original signature data registered in advance for each card number and personal data regarding members of the card number are recorded. The transaction data management unit is operated by the member store terminal of the member store that is the counterparty of the user's transaction or the card issuer who has provided the member with the card number. In addition to being connected to a managed card management host, the voucher has an amount range specifying area for specifying the amount range of the transaction amount, and the transaction data management unit stores the position code of the writing data or the writing data. A slip number specifying function for specifying the slip number of the handwritten data based on the content of, and an amount range specifying function for specifying the amount range of the transaction based on the amount range specifying information described in the amount range specifying area, A value range matching function for matching whether or not the transaction amount of the transaction identified by the slip number specified by the slip number specifying function is within the amount range specified by the amount range specifying function; Characteristic card payment system. 25. A slip in which a position code in a predetermined coordinate system is printed in a writing area associated with a slip number for identifying a transaction using a card number, and the writing area is used for writing on the slip. A transaction relating to the settlement including a pen that reads the position code near the pen tip during writing to the pen tip according to the movement of the pen tip, and writing data that is written on the slip by the user of the card number using the pen. A card payment system comprising: a transaction data management unit for controlling data transmission and reception; and a member DB in which original signature data registered in advance for each card number and personal data regarding members of the card number are recorded. The pen includes an in-pen processor that transmits a time-series position change of the position code as writing data, and the transaction data management unit includes The transaction data management unit is connected to a member store terminal of a member store that is a counterpart of the contract or a card management host that is managed by the card issuer who provided the card number to the member, and the transaction data management unit stores the position code of the writing data. Alternatively, the slip number specifying function for specifying the slip number of the writing data based on the contents of the writing data, and the time-series position change information of the writing data regarding the transaction identified by the slip number specified by the slip number specifying function. An animation display control function for displaying the signature data in the writing data in an animation on the member store terminal or the card management host based on the writing order of the pen tip.