JP2010211412A - Terminal equipment monitoring system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provided a terminal equipment management system for monitoring terminal equipment by setting an operation mode corresponding to a degree of a risk of theft which is improved in convenience by temporarily releasing monitoring. <P>SOLUTION: A theft monitoring system of settlement terminal equipment is configured of settlement terminal equipment 10 and an operator cellular phone 30 and a settlement center 20 (GPS management server 26) connected through a radio communication network to the settlement terminal equipment 10. The theft monitoring system is configured to monitor the location of the settlement terminal equipment 10 based on the location information of the settlement terminal equipment 10 by a GPS radio wave to thereby set an operation mode corresponding to the degree of the risk of theft to the settlement terminal equipment 10, and to perform the strengthening or damper processing of the monitoring of the terminal equipment. Thus, it is possible for an operator to carry the settlement terminal equipment to the outside of the area by providing a function for invalidating the setting of the operation mode. Also, it is possible for an operator to easily restore the temporarily executed damper processing according to the degree of the risk of theft. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to a terminal device monitoring system having a settlement function, and in particular, by using GPS (Global Positioning System) to acquire terminal device position information, the terminal device position is monitored to prevent theft of the terminal device. It is related with the terminal device monitoring system which can do.

With the spread of payment services using various credit cards, prepaid cards, cash cards, or (IC chips) embedded in mobile phones, payments by terminal devices have become widely performed. Along with this, portable payment terminal devices having card reading and writing functions are widely used.
This payment terminal device is connected to a payment center (payment center) via, for example, a commercial wireless communication network. The payment terminal device reads identification information such as a price and a card and sends it to the payment center. Generally, the payment is made based on the balance information or post-pay information.

By the way, since the portable terminal device is formed in a small and light weight so that it can be carried freely, there is a possibility that the portable terminal device is illegally taken out. If the terminal device is transferred to a third party and data such as an internal program is misused, for example, the credit of the entire payment system may be lost, which may result in serious damage.
Therefore, as GPS radio waves can be used freely and easily, a terminal device management system that uses GPS radio waves to grasp the location information of terminal devices for settlement and prevent abuse is proposed. ing.

For example, there is known a POS system that uses a GPS function to make it possible to grasp a store that has been stolen and illegally moved to a point of sale (POS) terminal device (see Patent Document 1).
In this system, the position information of the POS terminal device is acquired by the GPS receiving device provided in the POS terminal device, and it is determined whether the current position information matches the registered position information at the time of installation of the POS terminal device. Based on the determination, the operation or function of the POS terminal device is stopped.

As another example of a system that manages the position of a terminal device using the GPS function, a payment system is known in which a mobile phone is provided with a credit card function and payment is made with the terminal device (see Patent Document 2). ).
In this system, a GPS receiver unit and a point information inquiry unit are provided in a terminal device, and when a settlement processing start request is received from a mobile phone, a mobile phone registered in advance with respect to a storage device (GPS server) Inquire about the point information that can be processed by the selected payment method. If the point information matches the location information where the payment is actually made, start the payment process with the payment server. The payment process is interrupted.

  Furthermore, as another system, a mobile phone possessed by a legitimate user of a credit card or a cash card as an authentication system for authenticating the person when information is communicated via a credit card, a bank cash card or a network. When position information is acquired at a predetermined time interval from a terminal device such as a telephone and different position information is obtained at the time of authentication request, a path that can move between the different positions within the predetermined time interval is provided. There is also known an authentication system that determines whether or not a user exists and authenticates the user when there is a movable route, and does not perform authentication when the route does not exist (Patent Document 3). reference).

Each of the above conventional systems is intended to prevent unauthorized use of a credit card or cash card function by using position information by GPS radio waves, but the terminal device (payment terminal device) itself Since it is not intended to prevent unauthorized take-out, even if the terminal device is taken out illegally, the settlement is simply made impossible, and unless the taken-out terminal device is used illegally, the take-out is difficult to notice at an early stage.
However, unauthorized removal of a terminal device does not necessarily aim at unauthorized use of the terminal device, but is intended to steal information (data and programs) inside the terminal device or to illegally tamper internal data or programs. There is a case. It is an urgent issue to detect such illegal take-out of terminal devices at an early stage, quickly detect that the terminal device has been stolen, and perform necessary defense processing (tamper processing).

Therefore, using a conventional GPS-equipped terminal device, it is conceivable to construct a system for reporting the position information to the settlement center in a short cycle and remotely monitoring the terminal device at the settlement center. When GPS radio wave detection processing is performed and the terminal device is monitored thereby, there is a problem that it is difficult to monitor in a short cycle because the battery is consumed.
In addition, when the terminal device moves to a place where GPS radio waves do not reach such as in a building or an underground shopping area, there is a problem that the position cannot be confirmed and monitoring control at the settlement center must be stopped.
Furthermore, when a person who has illegally taken out turns off the power switch of the terminal device, automatic transmission to the settlement center cannot be performed in the first place.
For these reasons, the conventional system cannot sufficiently grasp the state of the terminal device at the settlement center, and there is a problem that it is difficult to quickly determine whether or not the terminal device has been stolen.

JP 2005-310826 A JP 2006-350450 A JP 2008-134849 A

Therefore, in order to solve the above-mentioned conventional problem, it is possible to report that the payment terminal device has moved to a place where GPS radio waves do not reach such as in a building or an underground shopping area while monitoring the position with GPS radio waves while suppressing battery consumption as much as possible. Thus, it is possible to determine at an early stage whether or not a person has been stolen. Also, even if a person who has illegally taken out turns off the power switch or tries to use it illegally, the payment terminal device can set the payment center. It is conceivable that automatic notification of the location of the payment terminal device can be made, the fraudulent takeout of the payment terminal device is surely determined, and the defensive measures are taken at an early stage.
Such a terminal device monitoring system is extremely effective in illegally taking out a terminal device, but on the other hand, once there is a suspicion of illegal takeout or theft, the terminal device will be tampered with. If an operation or an administrator inadvertently takes it out, it cannot be said that it is fraudulent, but it is difficult to distinguish it from fraudulent takeout, and if measures are not taken, tampering may be performed even in such cases There is.
Also, once tamper processing is performed, it is not easy to recover when particularly heavy tamper processing is performed in the terminal device.
Therefore, the present invention has been made to solve the problem newly generated in such a terminal device monitoring system, and its purpose is to temporarily disable the theft monitoring function by disabling the management mode of the terminal device monitoring system. Thus, the terminal device can be taken out of the set operation area, such as at home, freely, and the terminal device is tampered with by mistake to receive GPS radio waves and transmit position information based on the tampering process. Prevent measures such as shortening the cycle from being taken. Further, after the tamper process is performed on the terminal device, the operator can easily restore the tamper process of the terminal device.

The invention of claim 1 comprises a payment terminal device and a payment center connected to the payment terminal device via a wireless communication network, the payment terminal device receiving means for receiving GPS radio waves, and receiving the received GPS radio waves. A means for acquiring its own location information, a transmission cycle setting unit for setting a transmission cycle of the location information to a predetermined cycle, and a management mode setting unit for setting its own management mode. Is a position monitoring unit that determines whether the position of the payment terminal device is within or outside a predetermined area based on the position information transmitted from the payment terminal device, and a payment that performs payment based on the payment information of the payment terminal device. The management mode setting unit sets a predetermined management mode when the position monitoring unit determines that the terminal device is outside a predetermined area for the terminal device; In the terminal device monitoring system that sets a transmission cycle of the position information according to the management mode, the setting unit includes means for invalidating the setting of the management mode outside the predetermined area of the terminal device. .
According to a second aspect of the present invention, in the terminal device monitoring system according to the first aspect, the settlement center suspends settlement by the settlement unit when a predetermined management mode is set.
According to a third aspect of the present invention, in the terminal device monitoring system according to the first or second aspect, the terminal device includes a tamper processing unit that performs tamper processing, and the tamper processing unit performs tamper processing according to each management mode. It is characterized by performing.
According to a fourth aspect of the present invention, in the terminal device monitoring system according to any one of the first to third aspects, the terminal device includes an input operation monitoring unit, and when the input operation monitoring unit detects an abnormal input operation, The management mode setting unit sets a predetermined management mode for the abnormal input.
According to a fifth aspect of the present invention, in the terminal device monitoring system according to any one of the first to third aspects, the means for invalidating the management mode setting is a switch means for invalidating the management mode setting unit. It is characterized by that.
According to a sixth aspect of the present invention, in the terminal device monitoring system according to any one of the first to third aspects, the means for invalidating the setting of the management mode is the terminal device stored in a storage unit of a settlement center. The history information outside the predetermined area is compared with the position information of the terminal device, and the position information monitoring unit invalidates the determination when the two match.
A seventh aspect of the present invention is the terminal device monitoring system according to any one of the first to fourth aspects, further comprising an operator mobile phone having a GPS function possessed by an operator of the terminal device, and the management mode The means for invalidating the setting is a means for invalidating the setting of the management mode when the position information transmitted from the terminal device and the operator mobile phone to the settlement center matches.
According to an eighth aspect of the present invention, in the terminal device monitoring system according to the seventh aspect, the operator mobile phone has operation signal output means for restoring tamper processing of the terminal device, and the operation signal The terminal device processing is restored.
A ninth aspect of the present invention is the terminal device monitoring system according to the seventh or eighth aspect, wherein the operator mobile phone has an operation signal output means for invalidating the management mode setting of the terminal device. The management mode is invalidated based on the operation signal.

  According to the present invention, the terminal device monitoring system that monitors the theft based on the location information and unauthorized use information of the terminal device is provided with a function to stop the theft monitoring at the will of the terminal device operator or automatically. The operator can freely take the terminal device out of a predetermined area, or when an erroneous operation is performed, unintentional tamper processing is performed on the terminal device, or the GPS signal is received or the terminal is It is possible to prevent measures such as shortening the transmission cycle of the position information of the device to the settlement center, and improve the usability of the terminal device. Moreover, even if the tampering process is performed on the terminal device, the operator can easily recover.

It is a block diagram which shows roughly the terminal device monitoring system which concerns on embodiment of this invention. It is a block diagram of a payment center. It is a front view of the payment terminal device concerning this embodiment. It is a block diagram explaining the function of the payment terminal device shown in FIG. It is a figure explaining the relationship between the operation area in which the payment terminal device was set, and the payment terminal device. It is a flowchart explaining the procedure of a process when a payment terminal device enters into the area which cannot receive a GPS electromagnetic wave. It is a flowchart explaining the procedure of a process when a payment terminal device leaves an operation area.

First, a terminal device monitoring system as a premise of the present invention will be described with reference to the accompanying drawings.
FIG. 1 is a block diagram schematically showing the terminal device monitoring system.
This terminal device monitoring system includes a payment terminal device 10 as an example of a terminal device, a payment center 20 that performs payment of electronic money or the like, and a mobile phone possessed by an operator, that is, an operator mobile phone 30. The telephone 30 is used as a pair with the payment terminal device 10.
The payment terminal device 10 is roughly a control unit 11 including a CPU, RAM, and ROM that controls the entire operation of the payment terminal device 10, an external memory 12, and GPS that is longitude / latitude information from the GPS satellite 40. A GPS receiver 14 that receives radio waves, and reads card information (including identification information and electronic money information) such as a credit card and a cash card, or, for example, a balance reading and writing unit (R / W) as necessary 16, a settlement center 20 that performs electronic money settlement, a commercial wireless communication unit 18 that performs wireless communication via a commercial wireless communication network, an antenna 19 that performs communication with the settlement center 20, and the like.

The settlement center 20 that performs electronic money settlement includes a GPS management server 26, and the GPS management server 26 has a communication function with the operator mobile phone 30.
FIG. 2 is a block diagram of the settlement center 20.
The settlement center 20 includes a control unit 21 including a CPU that controls the entire settlement center 20, a RAM having a working memory area, and a ROM that stores necessary programs, a settlement unit 211, and the settlement terminal device 10 and commercial communication. A communication unit 22 for communicating using the system, a memory 23 for storing input settlement information, identification information for each card, identification information for an operator, etc., a display unit 24 by a liquid crystal (LCD), etc. , The input unit 25 for performing key input, the GPS management server 26, and an antenna 27 for performing communication with the settlement terminal device 10 and the like.

  The GPS management server 26 includes a control unit 260 including a CPU, a ROM, and a RAM for controlling the entire GPS management server 26, a position monitoring unit 261, a memory 262, a display unit 263, and an input as functional units of the control unit 260. Unit 264, connected to payment terminal device 10 via communication unit 22 of payment center 20, and connected to operator mobile phone 30 via a commercial mobile phone network. A signal from the mobile phone 30 or position information of the operator mobile phone 30 is input to the control unit 21 (GPS management server 26) of the payment center 20 and a signal from the payment center 20 is transmitted to the mobile phone 30.

The position monitoring unit 261 monitors the GPS information of the settlement terminal device 10 and manages the position information. For example, based on the location information of the payment terminal device 10 transmitted from the payment terminal device 10, the payment terminal device 10 is compared with the set operation area information by comparing the location information of the payment terminal device 10 with the set operation area information. If the payment terminal device 10 is determined to be outside the operation area, the communication terminal 22 of the payment center 20 transmits a signal outside the operation area to the payment terminal device 10.
The memory 262 includes basic area and operation area information of the payment terminal device 10 and the operator mobile phone 30, movement history information of the payment terminal device 10, and other management information of the payment terminal device 10 (management mode, theft risk level information). Memorize etc.
The display unit 263 displays an input result, an input screen, and the like.
The input unit 264 includes, for example, a keyboard for inputting basic area information and the like together with identification information of the payment terminal device 10 and the operator mobile phone 30, an input screen of the display unit, and the like.
The control unit 260 of the GPS management server 26 performs settlement of the settlement terminal device 10, management of location information, and crisis management in cooperation with the control unit 21 of the settlement center.

FIG. 3 is a front view of the settlement terminal device according to the present embodiment.
The settlement terminal device 10 includes a key input unit 15, a display unit 17 using, for example, an LCD (liquid crystal), a commercial wireless communication unit 18 having a data communication function in a mobile phone, a contactless provided service, product information, or card information. And an antenna 19 that receives an abnormality signal (signal) or the like when the abnormality described later is transmitted to the settlement center 20 and receives a command signal such as a tamper processing start signal from the settlement center 20. ing.

FIG. 4 is a block diagram for explaining the function of the settlement terminal device 10 shown in FIG. 1 in more detail.
As shown in the figure, for example, service or product price input information 15a, power ON / OFF switch information 15b, for example, tamper input information 15c is input to the control unit 11 having a CPU, and the memory 12 is tampered with. It is shown that the memory tamper unit 12a for storing information 15c and the other memory unit 12b are included.
The power ON / OFF switch is configured by software, and the operation is performed by operating an icon displayed on the display unit 17, so that the function of the power ON / OFF switch can be freely set by software. .

  The control unit 11 monitors the operation status of the settlement terminal device 10 and determines an abnormal operation from the preset operation status, the abnormal operation monitoring unit 111 of the GPS management server 26, and the abnormal operation of itself. A management mode setting unit 112 that sets a management mode and a theft risk level according to the determination result of the monitoring unit 111, and a GPS radio wave reception and settlement center 20 (GPS management server 26) corresponding to the setting of the management mode setting unit 112 The GPS radio wave transmission cycle setting unit 113 that changes the transmission cycle to the tamper processing unit 114 that selects and executes tamper processing according to the determination results of the position monitoring unit 261 and its own abnormal operation monitoring unit 111, and display The display control unit 115 for executing the display control of the unit 17, as will be described later, when the theft risk reaches a preset level, It consists of ON / OFF switch 15b from the power setting unit 116. to set the time of power OFF when OFF operation.

The management mode setting unit 112 has a theft risk level and a theft risk that indicate the theft risk of the settlement terminal device determined in advance based on the position information of the position monitoring unit 261 of the GPS management server 26 and the operation status information of the abnormal operation monitoring unit 111. The GPS radio wave transmission cycle setting unit 113 sets the reception and transmission cycle of GPS radio waves according to the set theft risk level, and the tamper processing unit 114 sets the above-described setting. According to the management mode, the contents of the tamper process are read from the corresponding process table and executed.
In other words, as the theft risk level rises, the management mode is switched from the normal mode step by step to the theft monitoring mode, abnormal operation mode, pseudo theft mode, theft confirmation mode, search mode, and a different management mode is set, Along with that, the theft risk level goes up. In addition, as the theft risk level increases, the GPS radio wave reception and reporting center 20 (GPS management server 26) reporting cycle is shortened, and the tamper processing is set to shift to heavier processing.
The contents of the management mode, that is, what kind of processing is performed in a specific management mode can be freely determined in advance.

FIG. 5 is a diagram for explaining the positional relationship between an operation area set for the settlement terminal device 10 described later and the settlement terminal device 10.
In the present payment terminal device monitoring system, for the payment terminal device 10 as an initial registration, personal identification information assigned to the operator, identification information of the payment terminal device 10 such as (MAC information), a telephone number of the operator mobile phone 30, etc. Together with the identification information, the basic area information (latitude / longitude information) of the installation location of the settlement terminal device 10 and the area of, for example, a radius of 500 m centering on the installation location, and the longitude / latitude information as the GPS management server 26 The memory 262 is set in advance. That is, the payment terminal device 10 receives the GPS radio wave, detects its own position, transmits it to the payment center 20 (GPS management server 26), and receives the payment terminal received by the position monitoring unit 261 of the GPS management server 26. Based on the position information of the device 10, whether or not the payment terminal device 10 is within the set operation area, that is, the latitude and latitude of the current position of the payment terminal device 10 are determined from the longitude or latitude of the installation location (basic position). It is determined whether it is between the longitude and latitude of the operation area, and it is always normal when the payment terminal device 10 is in this operation area, and abnormal when it comes out of this area, The measures for time can be taken quickly.

Next, operation | movement of the theft monitoring system of the payment terminal device 10 demonstrated above is demonstrated.
First, in the theft monitoring system of the payment terminal device 10 according to the present embodiment, in order to suppress battery consumption, a special management mode related to theft is set and transmitted to the GPS management server 26 at an appropriate GPS radio wave reception timing. I do.
Specifically, the management mode and theft risk level of the mobile payment terminal device 10 are determined, and the detection of GPS radio waves and the notification interval according to each theft risk level in the payment terminal device 10 are determined as follows.

Management mode Theft risk level GPS detection interval (management level)
(1) Normal mode
(I) Basic area mode 0 1 hour and settlement center communication (ii) Operation area movement mode 1 10 minutes (2) Theft monitoring mode (i) No GPS signal mode 25 minutes (ii) Outside area movement mode 3 1 minute (iii) Abnormal operation mode 4 30 seconds (3) Pseudo theft mode 5 15 seconds (4) Theft confirmation mode 6 10 seconds or settlement center instruction time (5) Search mode 7 5 seconds or settlement center instruction time

"Normal mode"
When the payment terminal device 10 is registered and within the basic area, and when moving (transporting) within the operation area, the management mode setting unit 112 stores these pieces of information in the management center 20 (of the GPS management server 26). Received from the position monitoring unit 261), each of the payment terminal devices 10 is set to the normal mode, and set to (intra-basic area mode) and (intra-area movement mode), respectively, and the above-described theft risk level (management level) is set to 0 , 1 and GPS radio wave reception and notification intervals are set to 1 hour and 10 minutes, respectively.

"Theft monitoring mode (2) (i), (ii), (iii)"
Next, (2) (i) when the settlement terminal device 10 moves to a place where GPS radio waves do not reach, (2) (ii) when it moves outside the operation area, (2) (iii) the settlement terminal device 10 When an abnormal operation is performed, the management mode setting unit 112 receives these pieces of information from the settlement center 20 (the position monitoring unit 261 of the GPS management server 26) or judges the abnormal operation by itself and monitors theft respectively. Switch to mode (2) (i), (ii), (iii) to perform tamper processing determined in advance in the theft monitoring mode and processing necessary for the settlement of the settlement terminal device 10 at the settlement center 20 .

When a predetermined pseudo theft mode described later is entered, the management mode setting unit 112 switches to the pseudo theft mode and at the same time performs a predetermined tamper process in the pseudo theft mode (3), for example, the contents of the memory 12. to erase.
Further, for example, when the operator reports the theft to the settlement center 20 via the GPS management server 26 via the GPS management server 26 and the theft is confirmed, the settlement center 20 sends a signal (theft signal) to the settlement terminal device 10. send. When the settlement terminal device 10 receives the theft signal, the management mode setting unit 112 sets the management mode to the theft confirmation mode (4), raises the theft risk level to 6, and sets the GPS radio wave reception and notification interval to 10 seconds. Alternatively, if there is an instruction from the settlement center, the time interval is shortened. In addition, when the management mode is set to the theft confirmation mode, the tamper processing unit 114 reads the tamper processing information at the time of the theft confirmation of the memory tamper 12a according to the signal and performs the tamper processing (in this case, For example, the application program is deleted or the OS is deleted.)

  Further, when the setting instruction for the search mode (5) is issued from the payment center 20, the management mode setting unit 112 sets the payment terminal device 10 to the search mode, and the GPS radio wave transmission period setting unit 113 according to the setting. The GPS radio wave reception and settlement center 20 transmission cycle to the GPS management server 26 is further shortened to 5 seconds, or GPS radio wave transmission to the GPS management server 26 is performed at a cycle specified separately from the settlement center 20. .

  In the present embodiment, according to each of the above theft risk levels, for example, when it is determined that the user is moving outside the operation area, the first-stage relatively light tamper process is activated. Thereafter, as the theft risk level increases, the stage of erasure processing of other data and software by tamper processing is increased. That is, when the payment terminal device 10 leaves the operation area, a relatively light tamper process such as removal of the operator identification information (in this case, the operator identification information is simply read by the payment terminal device 10 to restore the original However, when the theft determination mode is entered, heavy processing such as OS erasure processing is performed. Thereby, it is possible to reliably prevent the stored information from being stolen or the internal software from being analyzed or copied due to theft.

Next, the above management mode will be described more specifically.
(1) (i) When the payment terminal device 10 is in the pre-registered basic area When the payment terminal device 10 determines that the payment terminal device 10 is in the basic area based on the monitoring result of the position monitoring unit 261 of the GPS management server 26 Since it is in a normal state, the management mode setting unit 112 of the settlement terminal device 10 sets the theft risk level to 0. At the same time, the GPS radio wave transmission cycle setting unit 113 sets the GPS radio wave reception and transmission cycle to one hour, and receives a GPS radio wave and transmits position information to the GPS management server 26 every hour by a timer in the settlement terminal device 10. I do.
(1) (ii) When the payment terminal device 10 moves or moves within the operation area The position monitoring unit 261 determines that the payment terminal device 10 is within the operation area although it is away from the basic area. If it is determined, the management mode setting unit 112 switches to the in-area movement mode although it is in the normal mode. In this case, from the viewpoint that monitoring is required, the theft risk level is raised to 1, the GPS radio wave reception and transmission cycle is shortened to 10 minutes, and the whereabouts are observed.

(2) (i) When the payment terminal device 10 moves to a place where GPS radio waves do not reach, (2) (ii) When the payment terminal device 10 moves outside the operation area, or (2) (iii) Abnormal operation When the monitoring unit 111 determines that a predetermined abnormal operation of the settlement terminal device 10 has been performed, the management mode setting unit 112 performs management corresponding to each based on the monitoring result information of the position monitoring unit 261 of the GPS management server 26 The mode is switched to the setting mode GPS radio wave-free mode, the operation area outside mode, or the abnormal operation mode, and at the same time, the settlement center 20 is notified to stop the settlement function for the settlement terminal device 10. At the same time, the GPS radio wave transmission cycle setting unit 113 sets the position information transmission cycle to (2) (i) 5 minutes when the payment terminal device 10 moves to a place where GPS radio waves do not reach, (2) (Ii) Set to 1 minute when the payment terminal device 10 moves out of the operation area and (2) (iii) 30 seconds when an abnormal operation is performed.

Here, the processing procedure when the payment terminal apparatus 10 enters an area where GPS radio waves cannot be received will be described in detail with reference to the flowchart of FIG.
When the payment terminal device 10 cannot receive the radio wave from the GPS satellite 40 (S101, NO), the payment terminal device 10 activates the mobile phone function of the payment terminal device 10 and makes payment via the commercial wireless communication network from the commercial wireless communication unit 18. A signal indicating that the radio wave from the GPS satellite 40 cannot be received, that is, a GPS radio wave interruption signal is transmitted to the center 20 (S102). When the settlement center 20 receives the signal from the settlement terminal device 10 (S103), the settlement center 20 performs a specific operation on the settlement terminal device 10, that is, executes a specific operation when a GPS radio wave such as a predetermined key input cannot be received. A signal instructing a prompting display is transmitted (S104). When the payment terminal device 10 receives the signal from the payment center 20 (S105), the display control unit 115 reads a predetermined message from the memory 12b to prompt the display unit 17 to execute a predetermined operation, and displays a display signal. It is displayed on the unit 17 (S106).

When the payment terminal device 10 executes the specific operation based on the message displayed on the display unit (S107), the payment terminal device 10 transmits a response signal for executing the specific operation to the payment center 20, and the payment center 20 If a response signal for executing a specific operation is received from the settlement terminal device 10 within a predetermined time after transmitting a signal for instructing execution of the specific operation (S108, YES), it is determined to be normal. The payment processing function is maintained as it is (S109). On the other hand, if the settlement center 20 cannot receive a response signal based on the specific operation within a predetermined time after receiving the GPS radio wave interruption signal from the settlement terminal device 10 (S108, NO), it is determined as abnormal. Theft monitoring mode is entered (S110), and the settlement function is stopped (S111).
On the settlement terminal device 10 side, a timer is started when the GPS radio wave interruption signal is transmitted (S102), and when the GPS radio wave is not received within the predetermined time (S112, NO), the first stage tamper processing is performed. Perform (S113). When the GPS radio wave is received within the predetermined time (S112, YES), this process is terminated without performing the tamper process. In this case, the management mode setting unit 112 returns the management mode to the normal mode and sets the theft risk level to 0 or 1 according to the location of the management mode, that is, if the payment terminal device 10 is in the basic area or the operation area. Return to. At the same time, the received position information is transmitted to the GPS management server 26 of the settlement center 20, and the GPS management server 26 that has received the position information from the settlement terminal device 10 updates the position information.

In the first-stage tamper processing, the tamper processing unit 114 reads and executes the tamper processing (in this case, the first-stage tamper processing content) to be executed from the memory tamper 12a. In the present embodiment, for example, identification information for identifying the operator is deleted from the memory 12.
Thereby, the third party can be made unable to use the payment terminal device 10.
The first-stage tamper process is a process that can be recovered by a simple operation. Here, a specific operation by the operator, for example, the identification information of the operator is input or read to restore the memory, and the settlement terminal device 10 can be returned to a normal state.
The above is the processing when the payment terminal device 10 is in the operation area.

Regarding “Movement Outside Operation Area” Next, a processing procedure when the payment terminal device 10 leaves the operation area will be described with reference to the flowchart of FIG. 7.
The GPS receiver 14 of the settlement terminal device 10 receives radio waves from the GPS satellites 40 at predetermined time intervals (S201) and sends them to the controller 11. The control unit 11 calculates latitude / longitude information from the GPS radio wave to obtain position information, and transmits the position information to the GPS management server 26 of the settlement center 20 (S202). The position monitoring unit 261 of the GPS management server 26 stores the memory. By reading and comparing the longitude / latitude information of the preset operation area of the payment terminal device 10 stored in 262, it is determined whether the payment terminal device is inside or outside the operation area (S203). Here, when the position monitoring unit 261 determines that it is out of the area (S203, NO), the settlement center 20 transmits a signal (out-of-area signal) to the settlement terminal device 10 (S204), and the settlement terminal device 10 sends this signal. Is received (S205), the display control unit 115 displays a message to that effect and a specific operation from the memory 12b (the message of this reminder is displayed with, for example, sound and image, and can be understood by the operator of the payment terminal device 10). Is not understood by a third party) and displayed on the display unit 17 (S206). If a specific operation is performed within a predetermined time (S207, YES), the process is terminated as it is, and if the specific operation is not performed (S207, NO), the reading / writing operation of the settlement terminal device 10 is suspended (S207). The payment terminal device 10 automatically transmits an abnormal signal to the payment center 20 via the commercial wireless communication unit 18 (S209).

  When the settlement center 20 receives the abnormal signal (S210), the settlement center 20 stops the settlement function for the settlement terminal device 10 (holds the processing if settlement is in progress) (S211) (note that a predetermined mail is transmitted to a fixed address) The settlement process may be suspended), and a signal indicating that the settlement process has been suspended is sent to the settlement terminal device 10 via the commercial wireless communication network (S212). When the settlement terminal device 10 receives this signal (S213), it executes a tampering process (S214), and then the settlement terminal device 10 transmits a tampering operation end to the settlement center 20 (GPS management server 26) (S215), The management server 26 receives this transmission (S216). Thereby, the process when the payment terminal device 10 leaves the set operation area is completed.

Next, monitoring of “operation of settlement terminal device” will be described.
The abnormal operation monitoring unit 111 monitors the abnormal operation of the payment terminal device 10 and sets “when the power switch is OFF” when it is determined that the operation is abnormal.
Note that the setting of “when power is OFF” is set when the abnormal operation monitoring unit 111 has reached a predetermined level at which the power switch of the payment terminal device 10 has a risk of theft (the level can be arbitrarily set). Alternatively, in the theft monitoring mode, it is set when the power is turned off while reaching the level of movement outside the area (theft risk level 3) or higher. In this setting, a part of the power supply is turned on so that the radio wave can be received at a specific timing and transmitted to the settlement center 20 (GPS management server 26).
The power switch of the settlement terminal device 10 is configured by software. Even when the power switch is turned off, the power for receiving GPS radio waves or transmitting to the settlement center 20 (GPS management server 26) is on. Based on the monitoring result of the abnormal operation monitoring unit 111, it can be set automatically by the power supply setting unit 116 or by remote operation from the settlement center 20 (setting when the power supply is off).

In the present embodiment, the setting when the power is turned off is specifically performed in the following case.
(1) Even if a warning is displayed outside the operation area, if there is no specific operation within a certain time (if a predetermined specific operation is performed within a certain time, the operator moves the settlement terminal device 10 out of the operation area. (Theft risk is 0 because you know you have taken it out.)
(2) After it is determined that an operation of the payment terminal device 10 described later is an “abnormal operation” described later,
(3) When there is a pseudo-theft report from an operator (a pseudo-theft means that the theft has not yet been confirmed, but the suspicion of theft is high due to progress and circumstances).
In the case of (1) and (2) above, the payment terminal device 10 automatically performs “setting when the power supply is off”, and in the case of (3), “power supply is off” by remote control from the payment center 20. Time setting "is made.

Further, the settlement terminal device 10 of the present embodiment has a function of detecting an abnormality in the operation of the settlement terminal device 10 by itself, performing the above tamper processing, and transmitting to the settlement center 20. When the payment center 20 receives an operation abnormality signal from the payment terminal device 10, the payment center 20 stops the payment function for the payment terminal device 10.
Here, the abnormal operation is, for example,
(1) Continuous meaningless key operation Specifically, when a meaningless key operation is performed a predetermined number of times, for example, three times continuously,
(2) Unnatural payment processing (payment processing far from the stored normal payment: how far away it is can be set in advance)
The settlement terminal device 10 can set an upper limit amount, for example, and when an amount exceeding the upper limit amount, for example, 30,000 yen is input, it can be set as a separate settlement process.
(3) High-value payment that is unsuitable for use (high-value processing far away from the same kind of use that is stored, how far away it is, and how much it can be set in advance) be able to.
The application of the payment terminal device 10 is limited to a specific one. For example, it is limited to use for transportation ticket settlement. In that case, it is determined that the operation is abnormal when a high-value (preset) payment request is made that greatly exceeds the maximum fare per person on the route handled by the payment terminal device.

When an abnormal operation is performed, the management mode setting unit 112 sets the theft monitoring mode to the pseudo theft mode and sets the theft risk level to 5.
In the pseudo theft mode, the payment terminal device 10 sends a signal to the payment center 20 that the pseudo theft mode has been set, and the payment center 20 stops the payment function for the payment terminal device 10 and the GPS The radio wave transmission cycle setting unit 113 shortens the interval between reception of GPS radio waves and notification to the settlement center 20 (GPS management server 26) to 15 seconds, and frequently receives and reports GPS radio waves.

The control unit 260 of the GPS management server 26 determines that the theft has been made when there is no input of the personal identification number from the operator mobile phone 30 of the operator after a predetermined time has elapsed after the settlement terminal device 10 enters the pseudo-theft mode. The management mode setting unit 112 and the tamper processing unit 114 of the payment terminal device 10 are remotely controlled via the communication unit 22 of the payment center 20 to set the management mode of the payment terminal device 10 to the theft confirmation mode and the theft risk The tamper process at the time of theft is performed in the theft confirmation mode with the level set to 6.
The tamper process in this case is the heaviest process, and for example, the program is deleted or the OS is deleted. Note that this deletion does not involve physical destruction, but performs data conversion according to an algorithm using random numbers, for example.

Next, in the terminal device management system described above, an embodiment of the present invention that invalidates or cancels the theft monitoring mode or restores tamper processing once performed will be described.
A means for invalidating or canceling the theft monitoring mode once according to the embodiment of the present invention will be described.
“Release the monitoring status when the GPS signal does not reach”
As already described, for example, even if the settlement terminal device 10 is in a place where GPS radio waves do not reach, such as in a building or underground mall, and once in the theft monitoring mode, a specific operation, for example, a certain number is keyed in For example, the payment terminal device 10 can be safely transmitted to the payment center 20 (GPS management server 26) via the commercial radio base station (update of location information) by using the mobile phone function installed. Not taken out). Thereby, the management mode of the payment terminal device 10 on the payment center 20 side is changed from “theft monitoring mode” to “normal mode”. At the same time, the management mode setting unit 112 of the payment terminal device 10 changes the management mode from the theft monitoring mode to the normal mode.
In this case, for example, a 4-digit password is input as a special operation. Accordingly, the location information of the payment terminal device 10 in the payment center 20 (GPS management server 26) is updated on condition that the commercial radio is the same base station. Alternatively, the location information of the payment terminal device 10 stored in the memory 262 of the GPS management server 26 is updated by network communication, for example, by inputting a password from the operator mobile phone 30.

“Release of theft monitoring mode when payment terminal device 10 goes out of the operation area”
The cancellation of the theft monitoring mode when the payment terminal device 10 goes out of a predetermined operation area will be described.
In the present embodiment, for the above purpose, the payment terminal device 10 is linked with the operation area information registered in the GPS management server 26 of the payment center 20 and the position information of the GPS receiver of the operator mobile phone 30. It is determined whether or not it is in a normal state.
Therefore, the operator mobile phone 30 is registered in the settlement center 20 in advance. Specifically, the identification information of the operational mobile phone 30 is registered in the GPS management server 26 together with the identification information of the operator, the identification information of the payment terminal device 10, and the position information (basic area information, operational area information). Specifically, a list table of the operator, the payment terminal device 10, the operator mobile phone 30, and its position information is created in the memory 262 of the GPS management server 26.
The operator mobile phone 30 establishes a network communication mode with the GPS management server 26 so that it can communicate freely at any time.

When the GPS management server 26 acquires the location information of the payment terminal device 10, the GPS management server 26 calls the operator mobile phone 30 at the same time and automatically picks up the location information from the operator mobile phone 30. The position information received from 30 and the position information transmitted from the payment terminal device 10 are collated, and if they match, a signal is transmitted from the payment center 20 to the payment terminal device 10 and the payment terminal device 10 The management level setting unit 112 is remotely operated to change the setting of the management mode from “theft monitoring mode” to “normal mode” and to return the theft risk level from 2 to 0.
That is, even if the payment terminal device 10 is out of the operation area, if the operator mobile phone 30 is also out of the area, the operator performs processing that regards the payment terminal device 10 as being carried, and stores its position (learning) )
The stored area is automatically set as an exclusion area for theft monitoring, so that the operator can take the payment terminal device 10 home, for example.

Separately from this, for example, by performing a predetermined key operation on the settlement terminal device 10, for example, setting a take-home mode to the home, the location information of the theft monitoring exclusion area outside the operation area is stored. In addition, off-area transportation in the same area after the next time can be excluded from the theft monitoring area.
Specifically, when the payment terminal device 10 is set to be taken home, the position monitoring unit 261 determines that the payment terminal device 10 has gone out of the operation area even if the payment monitoring device 20 is out of the operation area. An abnormal signal is not transmitted, and as the position information of the settlement terminal device 10 at that time, the operator receives the position information of the home from the GPS radio wave together with the information of the specific position such as the nearest station, for example. It memorize | stores in the memory 12b. Further, the position information is transmitted to the settlement center 20 and stored in the memory 262 of the GPS management server 26.

  When the settlement terminal device 10 goes out of the operation area, the management mode setting unit 112 switches the setting mode from the normal mode to the theft monitoring mode (2) (ii) as described above, and the theft risk level is also 1 However, when the route information obtained from the position information matches the route information stored in the memory 12b when the previous home take-out mode is set, the management mode setting unit 112 Then, the process of switching the theft monitoring mode to the normal mode and returning the management level from 3 to 1 is performed.

Further, the GPS management server 26 searches the memory 262 based on the position information transmitted from the operator mobile phone 30 and refers to the past movement history of the payment terminal device 10, and the same route record exists. Is determined not to be a theft, a signal is sent to the payment terminal device 10 via the payment center 20, and a process of returning from the theft monitoring mode (2) (ii) "movement mode outside area" to "normal mode" is performed. Can do.
In addition, there is a case where the GPS management server 26 of the settlement center 20 searches the memory 262 and once returns to the normal mode after entering the theft monitoring mode (2) (i), (ii), (iii). If there is a pseudo-theft mode for the same reason (abnormal operation, unnatural settlement processing request, high-value settlement, etc.), it is possible to perform a process for returning to the normal mode without determining that this is theft. In addition, if there is another example of returning to the normal mode after entering the pseudo-theft mode, this also transmits a signal from the payment center 20 to the payment terminal device 10, and the management level setting unit 112 of the payment terminal device 10. Is remotely controlled to change the management mode from “pseudo-theft monitoring mode” to “normal mode” and return the theft risk level from 5 to 1 or 0.

"Release abnormal operation mode based on malfunction"
In this embodiment, (1) consecutive meaningless key operations, (2) unnatural settlement processing, and (3) high-value settlement unsuitable for use are monitored as abnormal operations. It may occur due to a malfunction such as when you are not used to handling it.
Therefore, in such a case, that is, when the payment terminal device 10 enters the theft monitoring mode (2) (iii) for the reasons (1) to (3) above, the fact is displayed,
For example, when the operator inputs a predetermined personal identification number (including symbols; the same applies hereinafter) of the operator mobile phone 30 carried with the payment terminal device 10, a signal is transmitted from the payment center 20 to the payment terminal device 10 for payment. The management level setting unit 112 of the terminal device 10 is remotely operated to change the management mode from “theft monitoring mode” to “normal mode” and to return the theft risk level from 2 to 1 or 0.

The control unit 11 of the payment terminal device 10 displays a similar message when the payment terminal device 10 enters the pseudo theft mode, and prompts the operator to perform an avoidance operation, that is, a switching operation to the normal mode. At this stage, switching to the normal mode can be performed by inputting a predetermined personal identification number from the operator mobile phone 30.
When the operator performs an avoidance operation, the management mode setting unit 112 returns the payment terminal device 10 to the normal mode.

Next, a process after erroneous theft control has been executed will be described.
“Suspension of settlement processing by GPS management server 26”
In the present embodiment, the GPS management server 26 performs the payment process from the operator mobile phone 30 that is linked, that is, registered in advance in the payment center 20 (GPS management server 26) in correspondence with the payment terminal device 10. Hold release and reset processing can be performed.
That is, the operator can request the reset processing to the settlement center 20 (GPS management server 26) by performing a specific operation on the operator mobile phone 30.
Furthermore, the operator mobile phone 30 may have a mechanism that can restore the tamper processing of the payment terminal device 10.
Thereby, the payment terminal device 10 whose function is stopped in the theft monitoring mode or the pseudo theft mode by transmitting a specific signal from the operator mobile phone 30 to the payment terminal device 10 for the data once deleted by the tampering process. The operator mobile phone 30 and the payment terminal apparatus 10 are preinstalled with a program for executing the processing procedure so that the processing for restoring the above function can be performed.

The monitoring system of the payment terminal device 10 has been described above. In the above description, the processing performed by the payment terminal device 10 is performed by the control unit 21 of the payment center 20, and a signal is transmitted to the payment terminal device 10 each time. The settlement terminal device 10 may be a remote management system that performs processing according to each signal.
Conversely, a position monitoring unit may be provided in the control unit 11 of the settlement terminal device 10 instead of or in addition to the position monitoring unit 261 of the GPS management server 26. In this case, registration of the basic area and the operation area is performed by the payment terminal device 10, and the payment terminal device 10 can independently have a theft monitoring function. In fact, when a report that the theft has occurred is sent from the operator to the settlement center 20 via the GPS management server 26, the tampering at the time of the theft is performed by the remote operation from the settlement center 20 according to the procedure described above. Process.

In addition, the payment terminal device theft monitoring system has been described. The payment terminal device targeted by this system is, for example, a terminal device for payment of bus charges, a terminal device for goods sales such as a station store, and other stores. It can be applied to a payment terminal device.
Note that the operator mobile phone 30 may be a terminal device using simple low-power radio.

  DESCRIPTION OF SYMBOLS 10 ... Payment terminal device, 11 ... Control part, 12 ... Memory, 14 ... GPS receiving part, 15 ... Key input part, 16 ... Reading and writing part, 17 ... Display unit, 18 ... commercial wireless communication unit, 19 ... antenna, 20 ... settlement center, 21 ... control unit, 22 ... communication unit, 23 ... memory, 24 ... display , 25 ... input unit, 26 ... GPS management server, 27 ... antenna, 30 ... mobile phone, 40 ... GPS satellite, 110 ... location monitoring unit, 111 ... abnormal Operation monitoring unit, 112 ... management mode setting unit, 113 ... GPS radio wave transmission cycle setting unit, 114 ... tamper processing unit, 115 ... display control unit, 116 ... power supply setting unit, 211 ..Settlement unit, 260 ... control unit, 261 ... position monitoring unit 262 ... memory, 263 ... display unit, 264 ... input section.

Claims (9)

The payment terminal device includes a payment terminal device and a payment center connected to the payment terminal device via a wireless communication network, and the payment terminal device acquires means for receiving GPS radio waves and location information based on the received GPS radio waves. And a transmission cycle setting unit that sets a transmission cycle of the position information to a predetermined cycle, and a management mode setting unit that sets its own management mode. The payment center transmits from the payment terminal device. A position monitoring unit that determines whether the position of the payment terminal device is within or outside a predetermined area based on the position information, and a payment unit that performs payment based on the payment information of the payment terminal device,
The management mode setting unit sets a predetermined management mode when the position monitoring unit determines that the terminal device is outside a predetermined area for the terminal device, and the transmission cycle setting unit responds to the management mode. In the terminal device monitoring system that sets the transmission cycle of the position information,
A terminal device monitoring system comprising means for invalidating the setting of the management mode outside the predetermined area of the terminal device. In the terminal device monitoring system according to claim 1,
The terminal device monitoring system, wherein the settlement center suspends settlement by a settlement unit when a predetermined management mode is set. In the terminal device monitoring system according to claim 1 or 2,
The terminal device includes a tamper processing unit that performs tamper processing,
The terminal device monitoring system, wherein the tamper processing unit executes tamper processing according to each management mode. In the terminal device monitoring system according to any one of claims 1 to 3,
The terminal device includes an input operation monitoring unit, and when the input operation monitoring unit detects an abnormal input operation, the management mode setting unit sets a predetermined management mode for the abnormal input. Terminal device monitoring system. In the terminal device monitoring system according to any one of claims 1 to 3,
The terminal device monitoring system, wherein the means for invalidating the setting of the management mode is a switch means for invalidating the management mode setting unit. In the terminal device supervision system according to any one of claims 1 to 3,
The means for invalidating the setting of the management mode compares the history information outside the predetermined area of the terminal device stored in the storage unit of the settlement center with the position information of the terminal device, and when the position matches, the position A terminal device monitoring system, characterized in that it is means for invalidating the judgment of an information monitoring unit. In the terminal device monitoring system according to any one of claims 1 to 4,
An operator mobile phone having a GPS function possessed by an operator of the terminal device;
The means for invalidating the setting of the management mode is a means for invalidating the setting of the management mode when position information transmitted from the terminal device and the operator mobile phone to the settlement center matches. Terminal device monitoring system. In the terminal device monitoring system according to claim 7,
The terminal mobile monitoring system, wherein the operator mobile phone has operation signal output means for recovering the tamper processing of the terminal device, and recovers the terminal device processing by the operation signal. In the terminal device monitoring system according to claim 7 or 8,
The operator mobile phone has an operation signal output means for invalidating a management mode setting of the terminal device, and invalidates the management mode based on the operation signal. .

Images