JP2017174034A - Mobile terminal authentication method, mobile terminal authentication device, and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a mobile terminal authentication method, a mobile terminal authentication device, and a program in an order entry system which can prevent an input error, falsification, and so on.SOLUTION: An authentication method includes the steps of generating a password composed of a numeric number of a predetermined digit in response to a request from a mobile terminal 7, and authenticating the mobile terminal 7 by comparing the number of authentication products ordered by a handy terminal 6.SELECTED DRAWING: Figure 2

Description

  The present invention relates to a mobile terminal authentication method, a mobile terminal authentication device, and a program, and more specifically, a mobile terminal authentication method, a mobile terminal authentication device, and a program for receiving an order from a mobile terminal owned by a customer in an order entry system About.

  Conventionally, for example, an order entry system disclosed in Patent Document 1 is known as an order entry system for managing customer orders in restaurants and the like. In this order entry system, an OES (Order Entry System) controller, a POS (Point Of Sale) terminal, a handy terminal, and a kitchen printer are connected via a wireless and wired network. Is to accept.

  Also, with the recent development of computer technology, mobile terminals called smartphones and tablet PCs have become widespread, and as a technology for performing authentication for using a customer-owned mobile terminal as a handy terminal, for example, the identification data of Patent Document 2 is used. Management devices are known. This identification data management device generates a URL (Uniform Resource Locator) from information for specifying a merchandise ordering destination and a customer, and performs authentication by accessing the URL from a mobile terminal owned by the customer.

JP 2001-307233 A JP 2013-69074 A

  The authentication method for a mobile terminal owned by a customer in the prior art is performed by the order entry system transmitting predetermined information to the mobile terminal and accessing the order entry system from the mobile terminal based on the information.

  Here, in order to be able to accept an order from a mobile terminal owned by a customer, it is necessary to associate information for specifying the mobile terminal that performs the order with information for managing the order such as a table number and a slip number. In the prior art, since such information is directly transmitted from the mobile terminal to the order entry system, there is a possibility that the information may be associated with another table or slip due to an input error or falsification.

  In view of the above-described problems, an object of the present invention is to provide a mobile terminal authentication method, a mobile terminal authentication apparatus, and a program that can prevent an input error or falsification in an order entry system.

  A mobile terminal authentication method according to the present invention made for the purpose of solving the above-mentioned problems is a mobile terminal authentication method in an order entry system, wherein the order entry system responds to a request transmitted from the mobile terminal. And issuing a password comprising a predetermined number of digits, and authenticating whether or not to accept an order from the mobile terminal based on the order information transmitted from the handy terminal. When the order information includes a preset authentication product, the authentication is performed based on whether or not the order number of the authentication product matches the issued password. .

  In the mobile terminal authentication method according to the present invention, the password is a temporary password that is valid only for a predetermined period, and the step of authenticating is when the order information including the authentication product is transmitted after the predetermined period has elapsed. It is preferable that the authentication fails.

  A mobile terminal authentication apparatus according to the present invention, which has been made for the purpose of solving the above-mentioned problems, is a mobile terminal authentication apparatus in an order entry system, and has a predetermined number of digits according to a request transmitted from the mobile terminal. A password issuing unit that issues a numerical password, and an authentication unit that authenticates whether to accept an order from the mobile terminal based on the order information transmitted from the handy terminal, the authentication unit including the When the authentication information set in advance is included in the order information, the authentication is performed based on whether or not the number of orders of the authentication product matches the issued password.

  In the mobile terminal authentication device according to the present invention, the authentication unit acquires the order information managed by the order management unit from the order management unit of the order entry system every predetermined period, and performs the authentication. Also good.

  According to the configuration of the present invention, authentication is performed by inputting a password consisting of a predetermined number of digits issued from the order entry system as the quantity of the product for authentication from the handy terminal, so that the customer who owns the mobile terminal Tampering and input mistakes can be prevented.

It is a figure which shows the structure of the whole order entry system in an example of embodiment of this invention. In the example of the same embodiment, it is the flowchart which showed the whole flow which orders from a mobile terminal. It is the flowchart which showed the flow of the password issuing in an example of the embodiment. It is the flowchart which showed the flow of authentication in an example of the embodiment.

Hereinafter, an exemplary embodiment according to the present invention will be described with reference to the drawings.
FIG. 1 is a configuration diagram showing the overall configuration of the order entry system according to the present embodiment. As shown in FIG. 1, the order entry system 1 according to this embodiment includes an OES controller 2, a POS terminal 3, a kitchen printer 4, an authentication device 5, a handy terminal 6, and a mobile terminal 7. Has been.

  The OES controller 2 includes a product management unit 21 for managing products and an order management unit 22 for managing orders. The OES controller 2 is a core in the order entry system 1 such as product management and order management, slip management, POS terminal, and kitchen printer control. It is a device that indicates the ideal position. Specifically, the OES controller 2 is a known computer, that is, a computer in which a CPU and a memory, a secondary storage device, an input / output device, and the like are connected by a bus. The server device is operated as the OES controller 2 by loading the program recorded in the secondary storage device of the OES controller 2 into the memory and executing it by the CPU.

  The OES controller 2 may be a single computer or a plurality of computers. For example, it may be composed of a server device that executes a program for operating a computer as the OES controller 2 and a database server device for managing each piece of information managed by the order entry system. You may comprise from an independent apparatus group for every function group, such as the management part 22. FIG. Further, as will be described later, the OES controller 2 may also serve as the authentication device 5.

  The POS terminal 3 is a register device for POS management, and the kitchen printer 4 is a printer device arranged in a kitchen or the like. The POS terminal 3 and the kitchen printer 4 are devices that communicate with the OES controller 2 to manage and output slips.

  The authentication device 5 accepts an order from the password issuing unit 51 that issues a password for authenticating the mobile terminal 7, the authentication unit 52 that executes authentication processing using the password, and the authenticated mobile terminal 7, and performs OES This is an apparatus including an order transfer unit 53 for transferring to the order management unit 22 of the controller 2. Specifically, the authentication device 5 is a well-known computer, that is, a computer in which a CPU and a memory, a secondary storage device, an input / output device, and the like are connected by a bus. The computer is operated as the authentication device 5 by loading the program recorded in the secondary storage device of the authentication device 5 into the memory and executing it by the CPU.

  Although the authentication device 5 in this embodiment is a computer separate from the OES controller 2, the OES controller 2 provides the functions of the authentication device 5 so that the OES controller 2 also serves as the authentication device 5. May be. If the OES controller that also serves as the authentication device 5 accepts orders directly from the mobile terminal 7 as in this case, the order transfer unit 53 is unnecessary. Similarly to the OES controller 2, the authentication device 5 may be a single computer or a plurality of computers. As will be described later, the authentication device 5 records the password generated and the information for identifying the mobile terminal 7 in association with each other. However, the authentication device 5 may include a database for recording the password, and a separate database server device may be provided. You may prepare. Further, it may be recorded in the database of the OES controller 2. In the present embodiment, the authentication device 5 is a computer separate from the OES controller 2 and, as will be described later, the authentication device 5 periodically inquires the OES controller 2 about order information in the authentication process. . With this configuration, in a store where an order entry system has already been introduced, it is possible to add a new function for receiving an order from a mobile terminal without changing the existing equipment such as the OES controller 2, the POS terminal 3, and the handy terminal 6. . Since it is not necessary to replace existing equipment, the cost of introduction can be minimized.

  The handy terminal 6 is a terminal used when a store clerk or the like accepts an order. When an order is received, a unit for managing the order, such as a table number and a slip number, is input, and then an order product and quantity are input, and order information is transmitted to the OES controller 2.

  The mobile terminal 7 is a computer such as a smartphone or a tablet PC owned by a customer. Specifically, like the OES controller 2 and the authentication device 5, a CPU and a memory, a secondary storage device, an input / output device, and the like are connected by a bus. In the present embodiment, as will be described later, the mobile terminal 7 and the authentication device 5 communicate with each other by HTTP (Hyper Text Transfer Protocol), and a predetermined URL of the authentication device 5 is accessed using a well-known WEB browser program. However, communication with the authentication apparatus 5 may be performed using a dedicated client program, or a communication protocol other than HTTP may be used.

  In this embodiment, the OES controller 2, the POS terminal 3, the kitchen printer 4, the authentication device 5, and the handy terminal 6 communicate via a LAN (Local Area Network) in a store or the like where an order entry system is provided, The OES controller 2 and the management terminal 5 communicate with the mobile terminal 7 through a wide area network such as the Internet. However, the POS terminal 3 and the kitchen printer 4 do not need to be able to communicate with other than the OES controller 2 in the present embodiment, and may be connected to the OES controller 2 using an arbitrary communication cable, for example. In addition, the mobile terminal 7 does not necessarily have to communicate with the OES controller 2 and / or the management terminal 5 via a wide area network such as the Internet. When the mobile terminal 7 is connected to a LAN such as a store, the mobile terminal 7 You may communicate with. Furthermore, in the present embodiment, it is assumed that at least the mobile terminal 7 performs communication with other terminals by wireless communication, but may be configured to perform wired communication.

The above is the configuration of the order entry system of this embodiment.
Next, an authentication flow for receiving an order from the mobile terminal 7 in the present embodiment will be described. FIG. 2 is a diagram showing an overall flow from authentication to order reception in the present embodiment.

  As shown in FIG. 2, first, a password is requested from the mobile terminal 7 owned by the customer to the authentication device 5, and the authentication device 5 issues a password accordingly (steps S1 and S2).

  The password issued in step S2 is displayed on the mobile terminal 7. When this is input from the handy terminal 6 as the quantity of the product for authentication when the order is received, it is recorded as an order in the OES controller 2 (steps S3 and S4). This is acquired by the management terminal 5 for every predetermined period, and authentication is performed (step S5).

  After the authentication is completed, an order is issued from the mobile terminal 7 to the authentication device 5, and the authentication device 5 transfers this order to the OES controller 2, and the OES controller 2 performs the order receiving process (steps S6 to S8).

FIG. 3 is a flowchart showing a specific processing flow of steps S1 and S2.
As shown in FIG. 3, when a password issuance request is transmitted from the mobile terminal 7 to the authentication device 5 (step S11), the authentication device 5 receives this and acquires information for specifying the mobile terminal 7 (step S21). , S22). As described above, in this embodiment, the mobile terminal 7 and the authentication device 5 communicate with each other by HTTP, and the password issue request in step S11 is transmitted to the authentication device 5 as an HTTP request message. In addition, as information for specifying the mobile terminal 7, an individual identification number of the mobile terminal 7, address information on the network of the mobile terminal 7, or the like may be used as appropriate. When information not included is used, required information is requested to the mobile terminal 7 as an HTTP response message in step S22, and an HTTP request message including the necessary information is transmitted from the mobile terminal 7 to the authentication device 5 again. You may make it do.

  When the information specifying the mobile terminal 7 is acquired, the authentication device 5 generates a password consisting of a predetermined number of digits (step S23), and records the information specifying the mobile terminal 7 and the generated password in association with each other. The generated password is transmitted to the mobile terminal 7 (steps S24 and S25). The password is temporary, as will be described later, and the password and information for specifying the mobile terminal 7 may be appropriately deleted from the authentication device 5 after a predetermined period. Since the password to be generated is input from the handy terminal 6 as the quantity of the product for authentication as will be described later, the password needs to be a numerical value within a range that can be input from the handy terminal 6 as the quantity. In this embodiment, a maximum three-digit numerical value (0 to 999) is generated as a password.

  When receiving the password from the authentication device 5, the mobile terminal 7 displays it on the display device of the mobile terminal 7 (step S12). In the present embodiment, since HTTP is used for communication between the mobile terminal 7 and the authentication device 5 as described above, the HTTP response message transmitted by the authentication device 5 in step S25 includes the password generated in step S24, A command for instructing how to display the password on the display device of the mobile terminal 7 is included. The communication protocol may be selected as appropriate, and if the mobile terminal 7 is executing a dedicated program, the content transmitted in step S25 may be only a password. Note that steps S21 to S25 in the present embodiment are executed by the password issuing unit 51 of the authentication device 5.

  FIG. 4 is a diagram showing a specific processing flow of steps S3 to S5 described above. When a store clerk or the like receives an order and operates the handy terminal 6 to perform an order receiving process, the order information, which is information relating to the received order, is transmitted from the handy terminal 6 to the OES controller 2 for order management. The data is recorded in the OES controller 2 by the unit 22 (steps S3 and S4). Here, when the password displayed on the mobile terminal 7 in step S12 described above is ordered as the quantity of the authentication product, the order information including the order for the authentication product is recorded in the OES controller 2. The product for authentication is a product for authentication set in advance in the OES controller 2, and may be a product dedicated to authentication or a free service equivalent product such as water or an ashtray. You may select suitably which goods are used as goods for authentication.

  The authentication device 5 periodically makes an inquiry to the order management unit 22 of the OES controller 2, and acquires information related to the order made after the previous inquiry from the OES controller 2 (step S51). In the present embodiment, the inquiry is made every minute, but the inquiry interval may be changed as appropriate.

  When the authentication device 5 obtains information related to the order in step S51, the authentication device 5 detects the authentication product by determining whether or not the authentication product is included in the order (step S52). If the acquired order does not include an authentication product, the subsequent process is not performed. If a plurality of orders are acquired in step S51, the process after S52 is performed for the next order, and there is no other order. In this case, the process waits for a predetermined time and executes step S51 again.

  If the acquired order includes an authentication product, the authentication device 5 acquires the order quantity of the authentication product and executes authentication (step S53). Authentication in this embodiment is performed based on whether or not the number of products for authentication matches the password generated in step S23 described above, and the authentication result is recorded in the authentication device 5 (S54). If the quantity and password match, the authentication is successful. Thereafter, the order from the mobile terminal 7 is accepted, but if the quantity does not match, the authentication fails. The order from the mobile terminal 7 repeats the process of issuing the password and authenticating again. Not accepted unless authentication succeeds. In addition, the password of this embodiment is a temporary password with a valid period, and even if a quantity that matches the password is ordered, authentication fails if the valid period has passed. Note that steps S51 to S54 are executed by the authentication unit 52 of the authentication device 5.

  The above is the authentication process of the mobile terminal 7 in this embodiment. After successful authentication, an order can be received from the mobile terminal 7. The mobile terminal 7 issues an order to the order transfer unit 53 of the authentication device 5, the order transfer unit 53 transfers the order to the order management unit 22 of the OES controller 2, and information regarding the order is recorded in the OES controller 2. (Steps S6 to S8).

  In the present embodiment, the authentication of the mobile terminal 7 is divided into two steps: a password generation process (steps S11, S21 to 25, S12) and an authentication process (steps S31, S41, S51 to S54) based on the order of the authentication product. The password generation process is performed by communication between the mobile terminal 7 and the authentication device 5, and the authentication process is performed by communication between the handy terminal 6, the OES controller 2, and the authentication device 5. Orders received through the handy terminal 6 are specified by specifying the table or slip for which the order is received, so that there is no possibility of table numbers etc. being tampered with or entered incorrectly due to input errors, thus preventing erroneous orders. can do.

  Further, the existing handy terminal 6 is configured such that the password to be issued is a numerical value of a predetermined number of digits and is input as the quantity of the product for authentication, that is, the information required for authentication is input as a normal order. Can be used to authenticate the mobile terminal 7. In the present embodiment, since the authentication device 5 is configured separately from the OES controller 2, the mobile terminal 7 can be authenticated only by adding the authentication device 5 to the existing order entry system.

  Although the description of the present embodiment has been described above, the embodiment of the present invention is not limited to this. For example, although both the OES controller 2 and the authentication device 5 in the present embodiment are installed in a store or the like, they may be installed outside the store. Further, the OES controller 2 and the authentication device 5 may be configured as a so-called on-premises type that is operated by an operator of a store or the like, or may be configured as a so-called cloud type that is installed in a data center or the like and uses only functions. Good. Other specific configurations are not limited to the above-described embodiments, and various modifications can be made without departing from the spirit of the present invention.

DESCRIPTION OF SYMBOLS 1 Order entry system 2 OES controller 3 POS terminal 4 Kitchen printer 5 Authentication apparatus 51 Password generation part 52 Authentication part 53 Order reception part 6 Handy terminal 7 Mobile terminal

Claims (5)

A mobile terminal authentication method in an order entry system,
The order entry system is
Issuing a password consisting of a numerical value of a predetermined number of digits in response to a request transmitted from the mobile terminal;
Authenticating whether to accept the order from the mobile terminal based on the order information transmitted from the handy terminal;
With
The authenticating step comprises:
A mobile terminal, wherein when the order information includes a pre-registered authentication product, the authentication is performed based on whether or not the order number of the authentication product matches the issued password. Authentication method. The password is a temporary password valid only for a predetermined period,
2. The mobile terminal authentication method according to claim 1, wherein the authenticating step is configured not to perform the authentication when the order information including the authentication product is transmitted after the predetermined period has elapsed. . A mobile terminal authentication device in an order entry system,
In response to the request transmitted from the mobile terminal, a password issuing unit that issues a password consisting of a numerical value of a predetermined number of digits,
An authentication unit for authenticating whether to accept an order from the mobile terminal based on the order information transmitted from the handy terminal,
When the authentication unit includes a pre-registered authentication product in the order information, the authentication unit performs the authentication based on whether the order number of the authentication product matches the issued password. A mobile terminal authentication device. 4. The mobile terminal according to claim 3, wherein the authentication unit acquires the order information managed by the order management unit from the order management unit of the order entry system for each predetermined period, and performs the authentication. Authentication device. A program for causing a computer to execute the mobile terminal authentication method according to claim 1 or 2.