JP2005267045A - Settlement system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To reduce costs in setting an ATM, and to simplify the money payment/reception processing of an ATM. <P>SOLUTION: This settlement system is configured to store identification information, authentication data and settlement data in a USB memory key, and to use them in order to make an authentication server 2 authenticate a USB memory key itself, or to make a settlement server 3 perform settlement processing. Authentication in the authentication server 2 includes not only the authentication of the USB memory key itself but also authentication related with use limit and validity term due to loss. Thus, when the authentication is performed, settlement processing is performed by a selected settlement institute. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to a payment system using a network, and more particularly, to an automatic teller machine (ATM) using the Internet.

  In recent years, ATMs capable of depositing / withdrawing cash have been installed in many places without bothering people with the progress of IT technology. When installing this ATM, since it is necessary to draw a dedicated line into the ATM, the cost and labor for installing the ATM become large.

On the other hand, in order to reduce the cost and labor at the time of such ATM installation, the ATM using the internet is devised (refer patent document 1).
JP 2001-273397 A (abstract)

  However, in the system described in Patent Document 1 described above, a transaction number is notified to the user on the Internet, and the user inputs the notified transaction number into an ATM together with a password to perform a withdrawal process. is there.

  Therefore, the user needs to input a transaction number and a password when using the ATM, and it takes time and effort for the deposit / withdrawal process. Further, the transaction number to be notified relates to a specific settlement organization, and the user cannot perform settlement processing at a desired settlement organization at the time of settlement.

  The present invention has been made in view of the above circumstances, and is a payment system that can reduce the cost of ATM installation and can simplify ATM deposit and withdrawal processing at a desired payment institution. The purpose is to provide.

In order to achieve the above object, according to the first aspect of the present invention, identification information of a portable storage device connected to a network, payment data required for making a payment, and authentication of the portable storage device An authentication server for authenticating a portable storage device in which authentication data for recording is recorded, an automatic cash dispenser connected to the network and having a cash withdrawal function, and connected to the network, In the payment system comprising a payment server that performs payment based on the automatic teller machine, the cash automatic depositing / withdrawing machine has a means for reading identification information, authentication data and payment data from the portable storage device, and a password for the portable storage device. A means for accepting the authentication request including the read identification information, authentication data, and accepted password to the authentication server; The authentication server includes a means for determining whether authentication is possible based on the identification information, authentication data, and password included in the authentication request, and a message indicating whether the authentication is determined. Means for outputting to an automatic teller machine, the automatic teller machine further includes means for receiving a message indicating whether or not authentication is possible from the authentication server, and the message indicates permission of authentication. Means for outputting a payment request including the read payment data to the payment server, wherein the payment server receives the payment request output from the automatic teller machine; Based on the settlement data included in the received settlement request, a means for determining whether settlement is possible and a method for outputting a message indicating whether settlement is determined to the automatic teller machine. The cash automatic depositing and dispensing machine further includes means for receiving a message indicating whether or not payment is possible from the payment server, and if the message indicates permission for payment, A payment system comprising: means for executing a process based on the payment method.

According to the second invention, in the first invention, the authentication server includes identification information of the portable storage device, a password, and a flag indicating whether or not use of the portable storage device is permitted. And a database for recording in association with each other, and
The database is searched using the received identification information as a key, the received password matches the password corresponding to the searched identification information, and the flag corresponding to the searched identification information is used in the portable storage device. A means for deciding to perform authentication if it indicates that it is permitted, and if it is determined to perform authentication, authentication is performed based on the received authentication data to determine permission of authentication A payment system.

  Further, according to a third invention, in the second invention, the database further stores information indicating an expiration date of the portable storage device in association with the identification information, and the authentication propriety determining means includes: The database is searched using the received identification information as a key, the received password matches the password corresponding to the searched identification information, and the flag corresponding to the searched identification information is used in the portable storage device. Authentication is performed when it is indicated that authorization is permitted and the time when the authentication request is made is within the expiration date indicated by the information indicating the expiration date corresponding to the retrieved identification information. It is a payment system characterized by determining that.

  Further, according to a fourth invention, in the first invention, the settlement request output means includes means for presenting a settlement institution permitted to be used in the automatic teller machine, and the read settlement. A payment system comprising: means for outputting, to the payment server, payment data corresponding to a payment agency selected based on the presented payment agency.

  Further, according to the fifth invention, means for reading out identification information of the portable storage device, payment data required for performing payment, and authentication data for performing authentication of the portable storage device from the portable storage device And a means for outputting an authentication request including the read identification information, authentication data, and accepted password to the authentication server via the network, and a message indicating whether or not the authentication server can authenticate the authentication request. Means for outputting a payment request including the read payment data to a payment server when the received message indicates authorization, and whether or not payment from the payment server is possible for the payment request. Means for receiving a message indicating the payment, and if the message indicates permission of payment, performs processing based on the requested payment. It is automatic cash depositing and dispensing machine, which is characterized by comprising: means for.

  It is possible to provide a settlement system that can reduce the cost when installing ATMs and can simplify ATM deposit / withdrawal processing at a desired settlement organization.

  Hereinafter, a payment system according to an embodiment of the present invention will be described with reference to the drawings.

  FIG. 1 is a diagram showing a settlement system according to an embodiment of the present invention. As shown in FIG. 1, an authentication server 2 of a service organization, a settlement server 3 of a settlement organization, and an automatic cash dispenser (ATM) 4 are connected to the Internet 1.

  The authentication server 2 of the service institution performs processing such as authentication of a USB memory key used in the payment system according to the embodiment of the present invention.

  The settlement server 3 of the settlement organization includes a settlement server 3a of a credit card company, a settlement server 3b of a cash card company, a settlement server 3c of an online settlement company, and a settlement server 3d of internet banking. These payment servers 3a to 3d perform payment processing unique to each company. For example, the payment server 3a of the credit card company performs a payment process specific to the credit company. In addition, the payment server 3b of the cash company performs a payment process specific to the cash card company.

  The ATM 4 performs authentication processing with the authentication server 2 of the service organization, performs settlement processing with the settlement server 3 of the settlement organization, and performs cash withdrawal processing and the like.

  FIG. 2 is a diagram showing the configuration of the ATM. As shown in the figure, the ATM 4 includes a CPU 12 connected to the bus 11, a display unit 13, a USB terminal 14, a communication unit 16, a cash deposit / withdrawal device unit 17, an input unit 18, and a memory 19.

  The CPU 12 controls the entire ATM 4 and, in particular, performs a settlement process according to the embodiment of the present invention in addition to a normal ATM operation process.

  The display unit 13 is a display such as an LCD (Liquid Crystal Display).

  The USB terminal 14 is for connecting a device defined by the USB standard, and is used for connecting the USB memory key 15 in the present embodiment.

  The communication unit 16 controls communication with other servers 2 and 3 performed via the Internet.

  The cash deposit / withdrawal unit 17 mechanically performs cash deposit / withdrawal management based on an instruction from the CPU 12.

  The input unit 18 is an input interface such as a touch panel and buttons used for inputting a password and the like.

  The memory 19 operates as a normal ATM as well as a payment processing program 20 for realizing the processing of the payment system according to the embodiment of the present invention, electronic authentication data 21 read from the USB memory key, payment data 22, etc. Is stored.

  In addition, the memory 19 stores password data input by the user, data related to a payment request (for example, a transfer amount, a transfer method), and the like, and is also used as a work area for the payment processing program 20.

  FIG. 3 is a diagram showing data stored in the USB memory key.

  As shown in the figure, the USB memory key 15 stores electronic authentication data 21, settlement data 22-1 to 22-3, and identification information 23 of the USB memory key 15.

  The electronic authentication data 21 is data for authenticating the USB memory key 15 in the authentication server 2 of the service organization, and has at least data indicating the expiration date of the USB memory key 15.

  The payment data 22-1 to 22-3 is payment data required for performing payment processing in a server of each payment company (for example, credit card company, cash card company, online payment company, Internet banking, etc.). Yes, for example, an ATM4 ID, password, PIN (Personal Identification Number), card number, card expiration date, digital signature, and the like. These differ for each settlement company.

  FIG. 4 is a diagram showing a database of the authentication server.

  As shown in the figure, the database 30 of the authentication server 2 stores USB memory key identification data (ID) 31, data 32 indicating the expiration date, password data 33, and permission flag data 34.

  The data 32 indicating the expiration date is data indicating the expiration date of the USB memory key 15, the password data 33 is data indicating the password of the corresponding USB memory key 15, and the permission flag 34 is the usage of the USB memory key 15. If the USB memory key 15 is reported lost or stolen, a flag indicating rejection of the use of the USB memory key 15 is set by the service organization.

  Next, before explaining the operation of the settlement system according to the embodiment of the present invention, the premise operation will be explained.

  First, the USB memory key 15 storing the identification information of the USB memory key 15, electronic authentication data, and settlement data is distributed to the user by the service organization. Further, in the embodiment of the present invention, since it is assumed that the bank ATM service is used, it joins the bank's Internet settlement service. In addition, when a credit card cashing service is used, it joins a credit card internet settlement service. In other words, it is assumed that each payment institution is affiliated with the Internet payment service.

  Further, it is assumed that data indicating the Internet payment service to which the user has joined is stored in the memory 19 of the ATM 4. Further, out of the payment processing for each payment institution registered in the payment processing program 20 stored in the memory 19 of the ATM 4, based on the data indicating the Internet payment service that has been stored in the memory 19 of the ATM 4 The payment process corresponding to the payment service is validated. As a result, the ATM4 payment processing program cannot perform payment processing other than the Internet payment service to which it has joined.

  Next, the operation of the settlement system according to the embodiment of the present invention will be described with reference to the flowcharts of FIGS.

  When the user inserts the USB memory key 15 distributed from a service organization such as a bank into the USB terminal 14 of the ATM 4 and selects “Emit memory key use” on the screen for selecting the withdrawal method as shown in FIG. The identification information, electronic authentication data, and settlement data stored in the USB memory key 15 are read (S1).

  Next, on the password input screen as shown in FIG. 10, the ATM 4 accepts the password of the USB memory key 15 input by the user (S2). Thereafter, the ATM 4 receives a payment request from the user (S3).

  For example, the settlement request is designated on the screen for designating the settlement destination as shown in FIG. 11, and the payment amount and the settlement method (lump sum payment, 10 times on the screen for designating the settlement content as shown in FIG. Installment payment, 30 payments, 60 payments, etc.).

  The settlement destination for selection is displayed by displaying the internet settlement service corresponding to the settlement information read from the USB memory key 15 among the affiliated internet settlement services stored in the memory 19 of the ATM 4. .

  Next, an authentication request is transmitted from the ATM 4 to the authentication server 2 (S4). Here, the authentication request includes identification information read from the USB memory key 15, electronic authentication data, and a password input from the user.

  The authentication server 2 receives the authentication request transmitted from the ATM 4 and performs an authentication process (S5). FIG. 7 is a flowchart for explaining the authentication processing in S5.

  In the authentication server, first, it is determined whether or not the authentication data is valid (S21). This determination is performed by searching the database shown in FIG. 4 using the identification information of the USB memory key 15 transmitted from the ATM 4 as a key and referring to the permission flag 34 corresponding to the identification information. If the permission flag 34 indicates that the USB memory key 15 is permitted to be used, the authentication data is valid. If the permission flag 34 indicates that the use is not permitted, the authentication data is not valid.

  If it is determined in S21 that it is not valid, it is determined that authentication is not established (S25), and a message indicating that authentication is not established is transmitted to ATM 4 (S26).

  If it is determined in S21 that the authentication data is valid, it is next determined whether or not the password transmitted from ATM 4 is valid (S22). This determination is made by searching the database shown in FIG. 4 using the identification information of the USB memory key 15 transmitted from the ATM 4 as a key, and the password transmitted from the ATM 4 and the password searched in the database using the identification information as a key. The password is valid if they match, and it is determined that the password is invalid if they do not match.

  If it is determined in S22 that the password is invalid, authentication is not established (S25), and a message indicating that authentication is not established is transmitted to ATM 4 (S26). On the other hand, if it is determined in S22 that the password is valid, it is next determined whether or not the memory key 15 is valid (S23).

  This determination is performed by searching the database shown in FIG. 4 using the identification information of the USB memory key 15 transmitted from the ATM 4 as a key, and the time when the authentication request is made is within the expiration date 32 corresponding to the identification information. It is judged by. If it is not within the expiration date, it is determined that the memory key 15 is not valid, and if it is within the expiration date, it is determined that the memory key 15 is valid.

  If it is determined in S23 that the memory key 15 is not valid, authentication is not established (S25), and a message indicating that authentication is not established is transmitted to ATM 4 (S26). On the other hand, if it is determined in S23 that the memory key 15 is valid, authentication processing is performed based on the received authentication data (S24), and a message indicating that authentication has been established is sent to ATM4. (S27).

  In S5, when an authentication process is performed and a message is transmitted from the authentication server 2 to the ATM 4, the message is received in the ATM 4 (S6). Then, based on the received message, it is determined whether or not authentication is permitted (S7). If it is determined that authentication is not permitted, an error is displayed in Article 4 of ATM ( S8). FIG. 14 is a diagram illustrating an example of an error display when authentication is not established due to the expiration of the memory key.

  On the other hand, if it is determined in S7 that the authentication is permitted, a settlement request is transmitted to the settlement institution server selected in S3 (S9). This payment request includes payment data corresponding to the payment agency determined in S3 among payment data read from the USB memory key 15 in addition to data indicating the payment agency and payment method determined in S3. It is. This settlement data is data required for settlement at the selected settlement organization.

  In S9, when a settlement request is transmitted from the ATM 4 to the settlement server of the settlement institution, the settlement request is received at the settlement server of the settlement institution selected by the user and a settlement process is performed (S10).

  FIG. 8 is a flowchart for explaining a settlement process in a settlement organization.

  When the settlement organization receives the settlement request, it is determined whether the settlement data included in the settlement request is valid. The determination of the validity of the settlement data is performed based on a determination process unique to each settlement organization.

  If it is determined in S31 that the payment data is not valid, it is determined that the payment is not established (S32), and a message indicating that the payment is not established is transmitted to ATM 4 (S33).

  On the other hand, if it is determined in S31 that the payment data is valid, payment processing is performed based on the received payment request (S34), payment is established (S35), and payment is established. A message is sent to ATM 4 (S36).

  When the ATM 4 receives a message from the settlement server (S11), it determines whether or not the received message indicates settlement permission (S12). If it does not indicate settlement permission, it displays an error ( S13). FIG. 15 is a diagram illustrating an example of an error screen in the case where payment is not established due to expiration of the card. In S12, when the message indicates permission of settlement, the settlement processing designated in S3 such as cash withdrawal is performed in ATM4 (S14). FIG. 13 is a diagram illustrating an example of a screen indicating that the payment process has been completed.

  As an option, the completion of payment is notified from the ATM 4 to the authentication server 2 of the service institution, and the authentication server 2 associates the identification information of the memory card 15 with the mail address, and makes payment to the user of the memory card 15. May be notified by e-mail, or the details of settlement results made at various settlement institutions may be displayed on the WEB.

  Therefore, according to the payment system according to the embodiment of the present invention, the payment data necessary for personal payment is stored in the USB memory key, and the authentication data of the USB memory key itself is stored, and these are used for the Internet. Since the settlement can be performed above, it is not necessary to install an ATM dedicated line, and the settlement system can be easily introduced.

  In addition, by introducing a step of invalidating the USB memory key in preparation for theft in the authentication server, it is possible to provide a payment system that further increases the security of payment.

  In the above-described embodiment, the USB memory key 15 has been described. However, the present invention is not limited to this. For example, a device having a recording medium having a predetermined capacity such as an IC card or a mobile phone may be used.

  In the present embodiment, the case where the ATM 4 communicates with the authentication server 2 and the settlement server 3 has been described. However, the present invention is not limited to this, and the computer communicates with the authentication server 2 and the settlement server 3. You may make it make ATM process with respect to cash deposit / withdrawal, and various modes of realization can be considered.

  Note that the present invention is not limited to the above-described embodiment as it is, and can be embodied by modifying the constituent elements without departing from the scope of the invention in the implementation stage. In addition, various inventions can be formed by appropriately combining a plurality of components disclosed in the embodiment. For example, some components may be deleted from all the components shown in the embodiment. Furthermore, constituent elements over different embodiments may be appropriately combined.

It is a figure which shows the payment system which concerns on embodiment of this invention. It is a figure which shows the structure of ATM. It is a figure which shows the data stored in a USB memory key. It is a figure which shows the database of an authentication server. It is a flowchart for demonstrating operation | movement of the payment system which concerns on embodiment of this invention. It is a flowchart for demonstrating operation | movement of the payment system which concerns on embodiment of this invention. It is a flowchart for demonstrating operation | movement of the payment system which concerns on embodiment of this invention. It is a flowchart for demonstrating operation | movement of the payment system which concerns on embodiment of this invention. It is a figure which shows an example of the screen which selects the drawing-out method. It is a figure which shows an example of a password input screen. It is a figure which shows an example of the screen which designates a payment destination. It is a figure which shows an example of the screen which designates the content of payment. It is a figure which shows an example of the screen which shows that the payment process was completed. It is a figure which shows an example of the error display in case authentication is not materialized due to expiration of the memory key. It is a figure which shows an example of the error screen when payment is not materialized by expiration of a card.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 ... Internet, 2 ... Service organization authentication server, 3 ... Payment organization payment server, 4 ... ATM, 11 ... Bus, 12 ... CPU, 13 ... Display unit, 14 ... USB terminal, 15 ... USB memory key, 16 ... Communication unit, 17 ... cash deposit / withdrawal device unit, 18 ... input unit, 19 ... memory, 20 ... settlement processing program, 21 ... electronic authentication data, 22 ... settlement data, 30 ... database of authentication server.

Claims (11)

Authentication for authenticating a portable storage device connected to a network and recorded with identification information of the portable storage device, payment data required for performing payment, and authentication data for authenticating the portable storage device Server,
An automatic cash dispenser connected to the network and having a cash withdrawal function;
In a payment system comprising a payment server connected to the network and performing payment based on payment data,
The automatic teller machine is
Means for reading identification information, authentication data and payment data from the portable storage device;
Means for accepting a password for the portable storage device;
Means for outputting an authentication request including the read identification information, authentication data, and accepted password to the authentication server;
The authentication server is
Means for determining whether authentication is possible based on identification information, authentication data and a password included in the authentication request;
Means for outputting a message indicating whether or not the determined authentication is possible to the automatic teller machine,
The automatic teller machine is further
Means for receiving a message indicating whether or not authentication is possible from the authentication server;
Means for outputting a payment request including the read payment data to the payment server when the message indicates permission of authentication;
The payment server
Means for receiving a settlement request output from the automatic teller machine;
Means for determining whether payment is possible based on payment data included in the received payment request;
Means for outputting a message indicating whether or not the determined settlement is possible to the automatic teller machine;
The automatic teller machine is further
Means for receiving a message indicating whether payment is possible from the payment server;
And a means for executing a process based on the requested payment when the message indicates permission of the payment. The authentication server is
A database for associating and recording identification information of the portable storage device, a password, and a flag indicating whether or not use of the portable storage device is permitted;
The authentication propriety determining means includes
The database is searched using the received identification information as a key, the received password matches the password corresponding to the searched identification information, and the flag corresponding to the searched identification information is used in the portable storage device. Means to determine to authenticate if it indicates permission,
2. The settlement system according to claim 1, further comprising means for performing authentication based on the received authentication data and determining permission of authentication when it is determined to perform authentication. The database further comprises:
Storing information indicating an expiration date of the portable storage device in association with the identification information;
The authentication propriety determining means includes
The database is searched using the received identification information as a key, the received password matches the password corresponding to the searched identification information, and the flag corresponding to the searched identification information is used in the portable storage device. Authentication is performed when it is indicated that authorization is permitted and the time when the authentication request is made is within the expiration date indicated by the information indicating the expiration date corresponding to the retrieved identification information. The settlement system according to claim 2, wherein the settlement is determined. The settlement request output means includes
Means for presenting a settlement institution permitted to be used in the automatic teller machine;
2. The apparatus according to claim 1, further comprising means for outputting, to the payment server, payment data corresponding to a payment institution selected based on the presented payment institution from the read out payment data. Payment system.   The payment system according to claim 1, wherein the network is the Internet.   The settlement system according to claim 1, wherein the portable storage device is a USB memory key. Means for reading from the portable storage device identification information of the portable storage device, payment data required for payment and authentication data for authenticating the portable storage device;
Means for outputting an authentication request including the read identification information, authentication data, and accepted password to an authentication server via a network;
Means for receiving a message indicating whether or not the authentication server can authenticate the authentication request;
Means for outputting a payment request including the read payment data to a payment server when the received message indicates permission of authentication;
Means for receiving a message indicating whether or not payment is possible from the payment server in response to the payment request;
A cash automatic depositing and dispensing machine comprising: means for executing processing based on a requested settlement when the message indicates permission of settlement. The settlement request output means includes
Means for presenting a settlement institution permitted to be used in the automatic teller machine;
8. The apparatus according to claim 7, further comprising means for outputting, to the payment server, payment data corresponding to a payment institution selected based on the presented payment institution from the read out payment data. Automatic cash deposit and withdrawal machine.   8. The automatic teller machine according to claim 7, wherein the network is the Internet. Authentication for authenticating a portable storage device connected to a network and recorded with identification information of the portable storage device, payment data required for performing payment, and authentication data for authenticating the portable storage device Server,
An automatic cash dispenser connected to the network and having a cash withdrawal function;
In a settlement method in a settlement system connected to the network and comprising a settlement server that performs settlement based on settlement data,
The automatic teller machine reads identification information, authentication data, and settlement data from the portable storage device, accepts a password for the portable storage device, and includes the read identification information, authentication data, and accepted password Outputting an authentication request to the authentication server;
Based on the identification information, authentication data, and password included in the authentication request, the authentication server determines whether or not authentication is possible, and outputs a message indicating whether or not the determined authentication is possible to the automatic teller machine.
When the automatic teller machine receives a message indicating whether or not authentication is possible from the authentication server, and when the message indicates permission of authentication, a payment request including the read payment data is sent to the payment server. Output,
The settlement server receives a settlement request output from the automatic teller machine, determines whether or not settlement is possible based on settlement data included in the received settlement request, and indicates a message indicating whether or not settlement is determined. Output to the cash automatic depositing and dispensing machine,
The cash automatic depositing and dispensing machine receives a message indicating whether payment is possible from the payment server, and executes processing based on the requested payment when the message indicates permission of payment. Payment Method. Reading identification information of the portable storage device, payment data required for performing payment, and authentication data for authenticating the portable storage device from the portable storage device,
Output the authentication request including the read identification information, authentication data and accepted password to the authentication server via the network,
Receiving a message indicating whether or not the authentication server can authenticate the authentication request;
If the received message indicates authorization, output a payment request including the read payment data to the payment server;
Receiving a message indicating whether payment is possible from the payment server in response to the payment request;
A payment method in an automatic teller machine, wherein a process based on a requested payment is executed when the message indicates permission of the payment.

Images