JP2013084032A - Credit card settlement system and settlement method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a settlement system and a settlement method of a credit card which inhibit encoded information concerning credit card settlement from being decoded by preventing encoded key information concerning credit card settlement from being skimmed.SOLUTION: Each of magnetic heads of card readers in settlement terminals 102-1 to 102-n reads authentication information from a credit card. The authentication information is encrypted by an encryption key recorded in a ROM, and transmitted to a relay server 108 with a terminal number individually assigned to the settlement terminal via an internet communication line 104. The relay server calls a decryption key recorded in association with the terminal number of the settlement terminal from a decryption key table recorded in its own ROM, and decrypts the encrypted authentication information. The decrypted authentication information is transmitted to a settlement center server 112 via a private line 110, then settlement processing is performed. A result of the settlement processing is transmitted to the settlement terminal via the relay server.

Description

The present invention relates to a credit settlement system and a settlement method that improve safety against skimming in credit settlement using a credit card.
In particular, the present invention relates to a settlement system and a settlement method that improve safety against skimming of credit settlement using a credit card performed via an Internet communication line.
The present invention also relates to a credit card settlement system and a settlement method that improve the countermeasure against skimming by not putting key information for encryption and decryption on a communication line.
Furthermore, the present invention relates to a credit card settlement system and a settlement method with improved skimming countermeasures in a credit card settlement suitable for a charging charger for an electric vehicle.
In this specification, the credit card may be any of the commonly used magnetic card method, IC card method, bar code card method, etc. Also, the shape of the card is a rectangular or coin type Any of these may be used.

In this specification, skimming refers to extracting information (recorded or stored information) written on a credit card and copying a credit card having exactly the same information, but in this specification, It means that recognition information (for example, a card number) written mainly on a credit card is illegally stolen when communicating on a communication line.
The recognition information refers to information for authenticating a credit card recorded (including storage, hereinafter referred to as “record”) on the credit card. For example, a card number, a password, etc.
The terminal identification information refers to identification information individually given to a terminal for credit settlement including a card reader.
The relay server is a server interposed between the payment terminal and the payment center server, and has a decryption key information table in which the decryption key information is recorded corresponding to the payment terminal identification information. Say.
The settlement center server refers to a server that performs processing for credit settlement such as credit for credit settlement and settlement processing.
The number is generally composed of numbers, but includes a combination of only letters such as alphabets, Greek letters, or katakana, or a combination of letters and numbers.
Finally, raw information refers to binary information that can be processed by an electronic computer, or encrypted binary information that can be easily decrypted.

As a first conventional technique, a charging system for charging an electric vehicle battery that pays a fee by a credit card is known (see, for example, Patent Document 1).
As a second prior art, a card in which only a card key is recorded is provided, and the card key, a card number unique to a customer, and a personal identification number are associated with each other and recorded in the database 7 of an independent host computer. The card key read from the card via the data reading device 5 and the password entered by the customer are transferred to the host computer, the authenticity of the card and the customer is determined by processing on the host computer side, and only the determination result is stored in the store. It is known to determine whether or not credit settlement can be executed by sending it back to the service terminal (see, for example, Patent Document 2).
Furthermore, as a third conventional technology, a card transaction processing terminal used in a card transaction matching system for performing a transaction using a card such as a credit card, at least used for transaction data of the card transaction, the card transaction An input means capable of inputting a password of the card, an operation means for calculating a transaction validity confirmation code based on the transaction data input by the input means, the password, and a unique system key; There is known a card transaction processing terminal comprising a transaction validity confirmation code generated by a means and a connection means for transmitting and receiving data such as transaction data (see, for example, Patent Document 3).

Patent No. 2546594 (FIG. 5, 0013-0016) JP2003-271885 (FIGS. 1 to 11, 0022 to 0074) JP-A-6-150081 (FIGS. 1 to 4, 0008 to 0018)

In the first prior art, it is described that a credit card is used as a charging price settlement means for an electric vehicle, but no fraud prevention means such as skimming at the time of settlement with a credit card is disclosed.
In other words, since measures for preventing skimming are not taken, there is a problem that information necessary for personal authentication such as a card number and a personal identification number is skimmed during transmission of recognition information.
Therefore, as in the second prior art, only the card key is recorded in the credit card, and at the time of credit settlement, it is confirmed whether this card key exists in the card key table recorded in the credit company settlement host computer, It is possible to make settlement only when it exists.

In the case of using the second prior art, since authentication is performed in the host computer only by the card key, even if skimming occurs, only the card key is leaked, and the card number or PIN Will not leak.
However, after authentication, the card number and personal identification number are placed on the communication line, which may be skimmed during communication. To prevent this, the communication line can be made a dedicated line. Further, since communication charges are expensive, further cost reduction is demanded.

  An Internet communication line can be used to reduce the cost, but since the risk of skimming increases, the recognition information is usually encrypted and transmitted as disclosed in the second prior art. However, even when encrypted, the encrypted information is encrypted according to a certain rule, so when the rule is specified, it is easily decrypted and recognition information such as a card number is skimmed. There is a problem of end.

  Therefore, in the second prior art, only the card key is recorded on the credit card, and the card key, the card number unique to the customer, and the personal identification number are associated with each other and recorded in a database of an independent host computer. In the transaction, the card key read from the credit card by the card data reader and the password entered by the customer are transferred to the host computer 2, and the host computer (payment server) corresponds to the card key and the password. Only when the card number exists, the card number is authenticated as authentic. In the second prior art, since the card number is not communicated via the communication line, the safety against skimming is significantly improved.

  However, the payment server must collate the card key and PIN for credit payment received from the whole country or the whole world, and a very large amount of processing is required, and there is a possibility that rapid credit processing cannot be performed due to authentication delay. Yes.

In the third prior art, in order to avoid such an increase in processing in the payment server, the personal identification number is encrypted using the system key recorded in the computing means of the credit terminal and communicated to the payment server. Decryption is performed using the system key recorded in.
In other words, since there is only one system key for encryption and decryption, the chance of decryption by skimming increases, and the risk of decryption may increase. In addition, since the decryption process is performed in the settlement server, there is a problem that the burden on the settlement server is increased, and a rapid process cannot be performed when the process is concentrated.

A first object of the present invention is to provide a credit card settlement system and a settlement method in which recognition information related to credit settlement is not skimmed.
A second object of the present invention is to provide a credit card settlement system and settlement method in which encryption key information is not skimmed and information relating to credit settlement is not decrypted.
A third object of the present invention is to provide a credit card settlement system and a settlement method in which decryption key information is not skimmed.
A fourth object of the present invention is to provide a credit card settlement system and a settlement method that do not adversely affect settlement processing at a settlement center server by performing decryption processing of encrypted information at a relay server. Is to provide.

In order to achieve this object, the first invention according to the present invention is configured as follows.
A credit card that encrypts the recognition information read from the credit card at the payment terminal and transmits it to the payment server, decrypts it at the payment server, and determines whether or not payment processing is possible based on the decoded recognition information. In the payment system, the payment terminal includes at least a card reader that reads the recognition information recorded on a credit card, and an encryption that records the recognition information read by the card reader in an encryption key information recording device. An encryption device that performs encryption based on key information, and a terminal identification information recording device that records terminal identification information individually assigned to the payment terminal, wherein the payment server includes at least A relay server and a settlement center server, wherein the relay server recovers the terminal identification information and the decryption key information. Decryption key information table recording device, Decryption key information output device for outputting the decryption key information recorded in the Decryption key information table recording device corresponding to the terminal identification information received from the settlement terminal, and the decryption Credit processing including a decryption device that decrypts the recognition information based on decryption key information from the decryption key information output device, wherein the settlement center server performs credit settlement processing based on the decrypted recognition information A credit card payment system including a device.

  According to a second aspect, in the first aspect, the recognition information is an individual number assigned to a credit card.

  A third invention is characterized in that, in the second invention, the recognition information is recorded in a nonvolatile IC chip.

  The fourth invention encrypts the recognition information read from the credit card in the payment terminal and transmits it to the payment server, decrypts it in the payment server, and determines whether or not the payment processing is possible based on the decoded recognition information. In such a credit card payment system, the recognition information recorded in the credit card is read by a card reader provided in the payment terminal, and the read recognition information is stored in the non-volatile recording in the payment terminal. After encrypting by a predetermined encryption method using the encryption key information recorded in the device, it is transmitted to the relay server via the Internet communication line together with the settlement terminal identification information set for each settlement terminal. In the relay server, the decryption key information table recorded corresponding to the settlement terminal identification information is used. The decryption key information is retrieved based on the received terminal identification information, and the received encrypted recognition information is decrypted using the retrieved decryption key information. The credit card settlement method, wherein the decrypted recognition information is transmitted to a settlement center server, and the settlement center server performs a credit settlement process based on the received decrypted recognition information. .

In the first invention, the credit card user slides the credit card in the card reader or inserts it in a predetermined position. Thereby, the recognition information recorded on the credit card is read.
The read recognition information is encrypted according to a predetermined encryption method using the encryption key information recorded in the individual encryption key recording device built in the settlement terminal.
The encrypted recognition information is transmitted to the relay server together with the payment terminal identification information individually assigned to the payment terminal (card reader as a minimum unit).
The relay server has a decryption key information table in which decryption key information is recorded corresponding to the settlement terminal identification information assigned to each settlement terminal.

In the relay server, the decryption key information output device searches whether the decryption key information corresponding to the received payment terminal identification information exists in the decryption key information table recorded in the decryption key tail storage device. When there is no corresponding payment terminal identification information, the decryption key information output device does not output the decryption key information. Therefore, the received encrypted recognition information is not decrypted and is treated as an unprocessable (error).
When the payment terminal identification information exists in the decryption key information table, the decryption key information output device outputs the corresponding decryption key information. As a result, the decryption device 194 decrypts the encrypted recognition information received together with the payment terminal identification information by using a predetermined decryption method using the decryption key information.

The decrypted recognition information is transmitted to the settlement center server through a dedicated line. The settlement center server determines the authenticity based on the received recognition information, determines whether or not the credit settlement is possible, and if the credit settlement is possible, the settlement processing of the credit information is performed, and the result is sent to the relay server. To the payment terminal.
As a result, credit settlement processing can be performed at the settlement terminal.
In all cases where the recognition information is transmitted from the payment terminal, the recognition information is encrypted using the encryption key information recorded in the encryption key recording device built in the payment terminal, and the payment terminal identification information Sent with.

Accordingly, the recognition information is not transmitted through the communication line as raw information, the encryption key information is recorded individually in the encryption key recording device of the payment terminal, and the decryption key information is also decrypted by the relay server. Since none of the information recorded in the encryption key information table is communicated by the communication line, the possibility of skimming is extremely small.
In other words, the recognition information may be transmitted and skimmed on the Internet communication line, but it is encrypted and the encryption key information and the decryption key information are not placed on the communication line. There is very little risk of information being decrypted.

On the other hand, the terminal identification information for payment is transmitted through the Internet communication line without being encrypted, but is not connected to information such as recognition information, encryption key information, and decryption key information. The risk of information being skimmed is very small.
In addition, since the relay server concentrates a large amount of information processing, it can efficiently take measures against unauthorized access, so it can take advanced measures against skimming and the like, and there is a risk of skimming of decryption key information. Is very small.
Further, the settlement center server can take advanced measures against skimming and the like in the same manner as the relay server.
Further, since the relay server and the settlement center server are connected by a dedicated line, it is possible to take advanced measures for skimming.
As described above, since this payment system can take a high level of skimming countermeasures, the risk of skimming is extremely small.

According to the second invention, the recognition information in the first invention is an individual number assigned to the credit card.
That is, the individual number is a unique number for identifying a card member and is also called a so-called card number, and all credit settlement processes related to the credit card are performed based on this card number in principle. Therefore, there is an advantage that the settlement processing for one card number can be easily aggregated by using this card number.
Further, in addition to the card number, there is an advantage that the security of the personal authentication can be improved by using the password.

  According to the third invention, since the encryption key information is recorded in the nonvolatile IC chip in the second invention, it can be placed in a state that only the person who manufactured the nonvolatile IC chip can know. . Therefore, since the leakage of the encryption key information recorded on the nonvolatile IC chip can be further prevented, the possibility of skimming is extremely small.

According to the fourth aspect, at the time of payment at the payment terminal, the recognition information recorded on the credit card is read by the card reader. This recognition information is encrypted by a predetermined encryption method using encryption key information recorded in a non-volatile recording device built in the payment terminal, and then set separately for the payment terminal. Along with the identification information, it is transmitted to the relay server via the Internet communication line.
Then, in the relay server, the decryption key information recorded in the decryption key information table is searched based on the settlement terminal identification information, and the encrypted recognition information received by the retrieved decryption key information is decrypted. To do.
Then, the decrypted recognition information is transmitted to the settlement center server through a dedicated line, and processing necessary for credit settlement is performed.
Thus, when the recognition information is put on the Internet communication line, it is always encrypted, and since the encryption key information is recorded in the nonvolatile recording device, it is not skimmed. Further, since the decryption key information is also recorded in the decryption key information table in the relay server, it is not skimmed. Furthermore, although the raw recognition information is communicated between the relay server and the settlement center server via a dedicated line, the safety can be improved because of the dedicated line.
Therefore, there is an advantage that the risk of skimming the recognition information in the credit settlement process is extremely low.

FIG. 1 is an overall schematic diagram of a credit card payment system according to an embodiment of the present invention. FIG. 2 is a schematic configuration diagram of a payment terminal of the credit card payment system according to the embodiment of the present invention. FIG. 3 is a schematic configuration diagram of the relay server of the credit card settlement system according to the embodiment of the present invention. FIG. 4 is an example of a decryption key information table in the relay server of the credit card settlement system according to the embodiment of the present invention. FIG. 5 is an explanatory diagram for explaining the operation of the credit card settlement system according to the embodiment of the present invention.

In the best mode of the present invention, the recognition information read from the credit card in the payment terminal is encrypted and transmitted to the payment server, decrypted in the payment server, and whether or not the payment processing is possible based on the decoded recognition information. In the credit card payment system,
A payment terminal reads a card reader that reads at least an individual number recorded on a credit card, and encrypts the individual number read by the card reader based on encryption key information recorded on a nonvolatile IC chip. An encryption device, and a terminal identification information recording device for recording terminal identification information individually assigned to the payment terminal, wherein the payment server includes at least a relay server and a payment center server. The relay server records the decryption key information table recording device of the terminal identification information and the decryption key information, and the decryption key information table recording device corresponding to the terminal identification information received from the settlement terminal. A decryption key information output device for outputting the decrypted decryption key information, and the encrypted recognition based on the decryption key information from the decryption key information output device Includes a decoding device for decoding the broadcast, the settlement center server is a credit card system that includes a credit processing apparatus that performs credit settlement processing based on the recognition information which is the decoded.

  The credit card settlement system according to the present invention is roughly divided into settlement terminals 102-1, 102-2 to 102- for credit settlement installed in individual stores 100-1, 100-2 to 100-n. n, an internet communication line 104, and a settlement server 106 connected to the internet communication line 104. The settlement server 106 includes a relay server 108 and a settlement center server 112 connected to the relay server 108 via a dedicated line 110. In this embodiment, a magnetic stripe card 118 in which recognition information 132 is recorded on the magnetic stripe 116 is used as the credit card 114.

First, payment terminals 102-1 and 102-2 to 102-n (when the payment terminals are collectively referred to, reference numeral 102 is used) will be described.
Settlement terminals 102-1 and 102-2 to 102-n are terminals that are individually installed in each store 100-1 and 100-2 to 100-n, and are used for settlement by credit card 114. In each store 100-1, 100-2 to 100-n, only one payment terminal 102 may be arranged, or 100 or more may be arranged.
Payment terminals 102-1 and 102-2 to 102-n are integrated into cash registers 122-1 to 122-n (generally referred to as reference numeral 122), credits, as shown in FIG. Any type of card payment terminal can be used, such as one provided independently (not shown).
In this embodiment, cash registers 122-1 to 122-n are integrated with settlement terminals 102-1 and 102-2 to 102-n, respectively.
These payment terminals 102-1 and 102-2 to 102-n all have the same configuration.
The cash registers 122-1 to 122-n include display devices 124-1, 124-2,... 124n (generally, reference numeral 124 is used), and printers 126-1, 126 for issuing receipts. -2 ··· 126-n (the symbol 126 is used when collectively referred to).

  The payment terminal 102 reads the recognition information 132 recorded on the magnetic stripe 116 of the credit card 114 and executes a credit payment process for the first time when the payment server 106 receives a signal that enables credit processing such as credit. Have The payment terminal 102 can employ a device other than the embodiment as long as it has the same function as that described above.

As described above, there are various forms in which the payment terminal 102 is installed, but the basic configuration is the same, so the basic configuration of the payment terminal 102 will be described with reference to FIG.
The payment terminal 102 roughly includes (incorporates) a card reader 128, and in this embodiment, a magnetic card reader 129 and a terminal control device 130.

First, the magnetic card reader 129 will be described.
The magnetic card reader 129 has a function of encrypting and outputting the recognition information 132 read from the magnetic stripe card 118.
In other words, since the individual card number 136 is normally recorded as the recognition information 132 in the magnetic stripe 116 of the magnetic card 118, this card number 136 is used. However, instead of the card number 136, different recognition information 132, for example, a completely different number can be used for the card number 136. That is, the recognition information 132 may be the only individual information in the world.
As the magnetic card reader 129, a device other than the embodiment can be used as long as it has the same function as that described above.
The magnetic card reader 129 includes a card reader main body 138, a demodulation device 142, an encryption device 144, and an encryption key information recording device 146.

The card reader body 138 has a function of reading the recognition information 132 from the magnetic stripe 116 of the magnetic stripe card 118. In other words, it has a function of reading the arrangement of the magnetic bodies in the magnetic stripe 116, acquiring analog information, and outputting it to the next process.
In the present embodiment, the card reader body 138 has a slide groove 152 having a concave cross section formed by a vertically long slit 148 formed on one surface of a prismatic card reader body 138.
A magnetic head (not shown) is arranged on the back side of the side wall constituting the slide groove 152, and the recognition information 132 recorded on the magnetic stripe 116, in this embodiment, the card number 136 is read. Therefore, the card reader main body 138 outputs an analog signal related to the card number 136 acquired by a magnetic head (not shown).
The card reader main body 138 can use a standard product generally sold.

Next, the demodulator 142 will be described.
The demodulator 142 has a function of converting an analog signal from a magnetic head (not shown) into a digital signal and outputting it.
As long as the demodulator 142 has the same function as that described above, a device other than the embodiment can be employed.
As the demodulator 142, a generally sold integrated circuit can be used.

Next, the encryption device 144 will be described.
The encryption device 144 has a function of encrypting and outputting the digital card number 136 output from the demodulation device 142 based on a predetermined encryption protocol. As the encryption device 144, any device other than the embodiment can be adopted as long as it has the above-described function.
The encryption device 144 can use a dedicated integrated circuit, and an RSA encryption method or the like is used as a predetermined encryption protocol.
In the present invention, the encryption device 144 performs encryption based on the encryption (public) key information 154 recorded in the encryption key information recording device 146.

Next, the encryption key information recording device 146 will be described.
The encryption key information recording device 146 has a function of recording and outputting encryption (public) key information 154 used when the encryption device 144 encrypts the recognition information 132. The encryption key information recording device 146 may employ a device other than the embodiment as long as it has the same function as the above function.
The encryption key information recording device 146 is a read only memory that records and outputs the encryption key information 154, and is a nonvolatile semiconductor memory that is a nonvolatile recording device, such as a nonvolatile IC chip or a semiconductor A read-only medium other than a memory can be used.
Considering the safety of recording, a read-only device in which the recorded contents cannot be rewritten, that is, a mask ROM in which the recorded contents cannot be changed is most preferable. However, considering the cost, One Time
Programmable) ROM is preferable, and EPROM such as UV-EPROM can be used for further cost reduction. In order to further reduce the cost, an EEPROM such as a flash memory that can be written on an embedded circuit can be used.
The encryption key information 154 recorded in the encryption key information recording device 146 is encrypted in the encryption key information recording device 146 by the manufacturer of the payment terminal 102 and, in the smallest unit, by the manufacturer of the card reader body 138. Key information 154 is recorded. Accordingly, the encryption key information 154 recorded in the payment terminal 102 is strictly managed by the manufacturer and kept secretly. In other words, only the manufacturer of the card reader body 138 or the payment terminal 102 can know the encryption key information 154.
On the other hand, the decryption key information 186 corresponding to the encryption key information 154 is secretly notified to the operator of the relay server 108 together with the corresponding terminal identification information 156.

Next, the terminal control device 130 will be described.
The terminal control device 130 has a terminal processing function for credit payment, and more specifically, the terminal identification individually assigned to the payment terminal 102 with the encrypted recognition information 132 output from the encryption device 144 It has a function of transmitting to the relay server 108 together with the information 156 and performing a predetermined settlement terminal process based on a signal from the relay server 108. The terminal control device 130 can employ a device other than the embodiment as long as it has the same function as that described above.
In this embodiment, the terminal control device 130 includes a read control device 158, a terminal microprocessor 162, a terminal identification information recording device 164, a terminal inquiry control device 166, a terminal ROM 168, a terminal RAM 172, a terminal communication interface 174, and communication between them. A terminal bus line 176 is provided for use.
The terminal control device 130 can be configured as an electric circuit using a dedicated board. However, in order to improve versatility, the terminal microprocessor 162 is used, and necessary information is written to the terminal RAM 172 at any time based on a program recorded in the terminal ROM 168. It is preferable to control while reading.

The read control device 158 will be described.
The read control device 158 has a function of controlling whether to read the encrypted recognition information 132 (card number 136) output from the encryption device 144 based on a command from the terminal microprocessor 162. As the reading control device 158, a device other than the embodiment can be adopted as long as it has the same function as the above function.
The encrypted recognition information 132 read by the read control device 158 according to a command from the terminal microprocessor 162 is temporarily held in the RAM 172.

Next, the terminal identification information recording device 164 will be described.
The terminal identification information recording device 164 has a function of outputting the recorded terminal identification information 156 to the terminal bus line 176 based on a command from the terminal microprocessor 162. The terminal identification information recording device 164 may employ a device other than the embodiment as long as it has the same function as the above function.
The terminal identification information 156 is a concept that includes not only combinations of numbers but also letters such as alphabets. For example, ABC12345 is also included in the terminal identification information 156.
As the terminal identification information recording device 164, it is preferable to use a recording device such as OTP ROM, EPROM, etc. that can be written but cannot be erased.
The terminal identification information 156 is a number assigned to each payment terminal 102 and is the only number in the world. The terminal identification information 156 is written in the terminal identification information recording device 164 at the time of shipment of the payment terminal 102 from the factory and is added to a later-described decryption key information table 182 in the relay server 108. For example, the relay server company operating the relay server 108 to which the payment terminal 102 is connected is secretly contacted and stored secretly in the decryption key information table 182.

Next, the terminal inquiry control device 166 will be described.
The terminal inquiry control device 166 has a function of transmitting the encrypted recognition information 132 temporarily held in the terminal RAM 172 and the terminal identification information 156 recorded in the terminal identification information recording device 164 to the relay server 108. .
Further, it has a function of accepting payment information transmitted from the relay server 108. As long as the terminal inquiry control device 166 has the same function as the above function, a device different from the embodiment can be adopted.

Next, the terminal communication interface 174 will be described.
The terminal communication interface 174 has a function for managing communication with the POS terminal. As long as the terminal communication interface 174 has the same function as the above function, a device different from the embodiment can be adopted.

Next, a POS (point of sale system) terminal 177 will be described.
The POS terminal 177 is a cash register 122 in this embodiment.
Therefore, in this system, information from the cash register 122 can also be transmitted to one management server (not shown) via the Internet communication line 104.
Specifically, the settlement amount 204 output from the cash register 122 is output.

Next, the Internet communication line 104 will be described.
The Internet communication line 104 is a line for high-speed communication of information, and is a wired line such as ADSL or an optical communication line, or a wireless communication line such as Wi-Hi.

Next, the relay server 108 will be described.
The relay server 108 performs predetermined processing while writing to the relay RAM 198 as needed based on the relay server program recorded in the relay ROM 178 by the relay arithmetic device 196.
Based on the terminal identification information 156 sent from the settlement terminal 102 via the Internet communication line 104, the decryption key information 186 is retrieved from the decryption key information table 182 for decryption, and the terminal identification information 156 is obtained. When the corresponding decryption key information 186 exists, the received encrypted recognition information 132 is decrypted and transmitted to the settlement center server 112. As long as the relay server 108 has the same function as that described above, a device other than the embodiment can be employed.
The relay server 108 includes the inquiry control device 192, the decryption key information table recording device 195, the relay operation device 196, the decryption key information output device 197, the relay RAM 198, the relay ROM 178, the communication control device 199, and communication between them. The relay bus line 202 is included.

First, the inquiry controller 192 will be described.
The inquiry control device 192 has a function of taking information from the settlement terminal 102 transmitted via the Internet communication line 104 into the relay server 108 and placing it on the relay bus line. The inquiry control apparatus 192 may employ an apparatus other than the embodiment as long as it has the same function as the above function.
The inquiry target control device 192 can be constituted by a combination of an integrated circuit and a logic circuit, or a microprocessor and software.

Next, the decryption key information table recording device 195 will be described.
The decryption key information table recording device 195 has a function of recording the decryption key information table 182 for decryption. As long as the decryption key information table recording device 195 has the same function as that described above, a device different from the embodiment can be adopted.
As shown in FIG. 4, the decryption key information table 182 is configured to search the decryption key information 186 based on the terminal identification information 156.
The terminal identification information 156 and the decryption key information 186 secretly notified to the operator of the relay server 108 by the payment terminal manufacturer or the card reader manufacturer are decrypted by the operator of the relay server 108. Is recorded (stored) in the activation key information table 182. This registration is also performed in a secret manner, and decryption key information 186 corresponding to the terminal identification information 156 is recorded using a system device to which only an access authorized person registered in advance is given access authority.

Next, the decryption key information output device 197 will be described.
The decryption key information output device 197 searches the decryption key information table 182 recorded in the decryption key information table recording device 195 to determine whether the received decryption key information 186 corresponding to the terminal identification information 156 exists. If it exists, the decryption key information 186 is output, and if it does not exist, an error signal is output. As long as the decryption key information output device 197 has the same function as that described above, a device other than the embodiment can be employed.

Next, the decoding device 194 will be described.
The decryption device 194 decrypts the encrypted recognition information 132 (card number 136) transmitted from the payment terminal 102, using the decryption key information 186 output from the decryption key information output device 197. It has a function. As long as the decoding device 194 has the same function as that described above, a device other than the embodiment can be employed.
The decrypted recognition information 132 is sent to the settlement center server 112 via the dedicated line 110, and used for credit settlement processing such as credit in the settlement center server 112.

Next, the relay arithmetic device 196 will be described.
The relay arithmetic device 196 has a function of controlling predetermined processing in the relay server 108 while writing to and deleting from the relay RAM 198 as needed based on a program recorded in the relay ROM 178.

Next, the relay RAM 198 will be described.
The relay RAM 198 has a function of recording information necessary for processing in the relay arithmetic device 196 in a timely manner.

Next, the relay ROM 178 will be described.
In the relay ROM 178, a program for processing in the relay server 108 is written.

Next, the communication control device 199 will be described.
The communication control device 199 has a function of controlling communication with the settlement center server 112 via the dedicated line 110 on the relay server 108 side.

Next, the relay bus line 202 will be described.
The relay bus line 202 has a function of transmitting information necessary for processing in the relay server 108.

Next, the settlement center server 112 will be described.
The settlement center server 112 has a function of performing settlement processing such as credit processing and trading value processing based on the recognition information 132 sent via the dedicated line 110 from the plurality of relay servers 108 installed throughout Japan or abroad. .
In other words, the settlement center server 112 includes a credit processing device 200 that executes a credit settlement process. The settlement center server 112, in other words, the credit processing device 200 is configured by, for example, a high-speed arithmetic processing device.

Next, the operation of this embodiment, in other words, the credit card settlement method will be described with reference to the flowchart of FIG.
First, in the payment terminal 102, when the payment amount 204 in the cash register 122 is confirmed in step S1 and credit card payment is selected, the process proceeds to step S2 and the terminal control device 130 outputs a recognition information request command 206.
By the recognition information request command 206, the card reader 128 becomes ready to read the magnetic stripe card 118.
In step S3, the operator slides the magnetic stripe card 118 in the slide groove 142 of the card reader body 138.
Thus, in step S4, the card number 136 as the recognition information 132 recorded on the magnetic stripe 116 is read as an analog signal by a magnetic head (not shown) of the card reader body 138.

  The read card number 136 is demodulated by the demodulator 142, digitized, and output to the encryptor 144.

  In step S5, the encryption device 144 encrypts the card number 136 by a predetermined encryption method based on the encryption key information 154 recorded in the encryption key information recording device 146.

  In step S6, the reading control device 158 in the terminal control device 130 reads the encrypted card number 136 output from the encryption device 144 at a predetermined timing, and the terminal identification information 156 from the terminal identification information recording device 164. Then, the terminal inquiry control device 166 transmits the encrypted card number 136, the terminal identification information 156, and the payment amount 204 to the relay server 108 via the Internet communication line 104.

In the relay server 108 that has received the information from the payment terminal 102, the decryption key information 186 is searched in the decryption key information table 182 based on the terminal identification information 156 received by the decryption key information output device 197 in step S7. To do.
If the terminal identification information 156 is not registered in the decryption key information table 182, and if the terminal identification information 156 exists but the decryption key information 186 is not registered, it is determined that an error (abnormal) has occurred. And output an error signal. This error signal is transmitted from the inquiry control device 192 to the corresponding payment terminal 102 via the Internet communication line 104.
The settlement terminal 102 that has received the error signal transmits it to the cash register 122, which is the POS terminal 177, and the cash register 122 displays an error on the display device 124.
If the terminal identification information 156 exists in the decryption key information table 182, the decryption key information output device 197 outputs the decryption key information 186 corresponding to the terminal identification information 156 in step S7.

  Next, in step S8, the decryption apparatus 194 decrypts the encrypted card number 136 received together with the terminal identification information 156 by using a decryption key information 186 by a predetermined method.

  Next, in step S9, the communication control device 144 transmits the decrypted card number 136, the terminal identification information 156, and the payment amount 204 to the payment center server 112 via the dedicated line 110.

  In the dedicated line 110, since the card number 136 is raw information, the card number 136 is specified immediately when skimming is performed. However, since the dedicated line 110 is used, a sufficient defense posture against unauthorized access can be obtained, so that the risk of skimming is extremely small.

  The settlement center server 112 performs a settlement process using the transmitted card number 136 or the like in step S10, and after that is completed, transmits the settlement information to the relay server 108 in step S11.

  The relay server 108 that has received the payment information outputs the payment processing information (for example, credit information) to the corresponding payment terminal 122 in step S12.

  Upon receiving the payment processing information, the payment terminal 102 displays the completion of the payment processing on the display device 124 of the POS terminal 177 and prints the payment contents by the small printer 126. The printed payment details are given to the credit card holder.

102 payment terminal
106 Payment server
108 Relay server
112 Payment center server
114 credit card
128 card reader
132 Recognition information
144 Encryption device
146 Encryption key information recording device
154 Encryption key information
156 Terminal identification information
164 Terminal identification information recording device
186 Decryption key information
194 Decryption key information output device
195 Decryption key information table recording device

Claims (4)

The payment information (132) read from the credit card (114) in the payment terminal (102) is encrypted and transmitted to the payment server (106), decrypted in the payment server (106), and the decoded recognition information ( 132) in a credit card payment system that determines whether payment processing is possible or not,
The payment terminal (102) reads at least the recognition information (132) recorded on the credit card (114), a card reader (128), and the recognition information (132) read by the card reader (128). ) On the basis of the encryption key information (154) recorded in the encryption key information recording device (146) and the payment terminal (102). Comprising a terminal identification information recording device (164) for recording the terminal identification information (156).
The settlement server (106) includes at least a relay server (108) and a settlement center server (112),
The relay server (108) includes a decryption key information table recording device (195) of the terminal identification information (156) and decryption key information (186), and a terminal identification received from the settlement terminal (102). A decryption key information output device (197) for outputting the decryption key information (186) recorded in the decryption key information table recording device (195) corresponding to the information (156), and the decryption key information output device A decryption device (194) for decrypting the recognition information (132) based on the decryption key information (186) from (197),
The settlement center server (112) includes a credit processing device (200) that performs a credit settlement process based on the decrypted recognition information (132). A credit card settlement system. In the credit card settlement system according to claim 1,
The recognition information (132) is an individual number assigned to the credit card (114). In the credit card settlement system according to claim 2,
The encryption key information (154) is recorded in a nonvolatile IC chip. The recognition information (132) read from the credit card (114) in the payment terminal (102) is encrypted and transmitted to the payment server (106), decrypted in the payment server (106), and the decoded recognition information (132) In a credit card payment system that determines whether payment processing is possible or not,
Reading the recognition information (132) recorded in the credit card (114) by a card reader (128) provided in the payment terminal (102),
The read recognition information (132) is encrypted by a predetermined encryption method using the encryption key information (154) recorded in the non-volatile recording device (146) built in the payment terminal (102). Then, the terminal identification information (156) set for each payment terminal (126) is transmitted to the relay server (108) via the Internet communication line (104),
In the relay server (108), the terminal identification information received using the decryption key information table (195) in which the decryption key information (186) is recorded corresponding to the terminal identification information (156) The decryption key information (186) is retrieved based on (156) and the received encrypted recognition information (132) is decrypted using the retrieved decryption key information (186). Send the recognition information (132) decrypted to the settlement center server (112) using the line (110,
The credit card settlement method, wherein the settlement center server (112) performs a credit settlement process based on the received decrypted recognition information (132).

Images