JP2018028712A - Terminal management system and method for terminal management - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a terminal management system and a method for terminal management which can efficiently prevent illegal payment of electronic money.SOLUTION: A management card ID is registered into an electronic money settlement terminal 10, and settlement check including the management card ID is performed in a management center 20. If the management center 20 gives notice of the result of the settlement check (including a status) corresponding to the management card ID, the electronic money settlement terminal 10 enables transaction of electronic money when the states shows "available", and disables transaction of electronic money when the status shows "unavailable".SELECTED DRAWING: Figure 1

Description

  The present invention relates to a terminal management system and a terminal management method that can efficiently prevent illegal payment of electronic money.

  2. Description of the Related Art Conventionally, an electronic money depositing machine that deposits electronic money to a storage medium such as a card or a mobile wallet is known. This type of electronic money depositing machine is provided with a reader / writer that reads and writes data, and by adding the amount of money inserted through this reader / writer to the electronic money balance of the storage medium, We perform deposit processing called money charge.

  Here, if such an electronic money deposit machine is illegally taken out of a place different from the installation location during normal operation, the money stored in the electronic money deposit machine is not only taken out but also stored in a recording medium. There is a risk of fraud in which electronic money is repeatedly deposited.

  For this reason, in Patent Document 1, the position information of the position where the electronic money depositing machine should be installed is pre-registered in the management apparatus, and the position information of the electronic money depositing machine actually arranged is pre-registered. There has been disclosed an electronic money depositing machine capable of preventing illegal payment of electronic money by disabling electronic money deposit processing when it is different from information.

JP 2008-234252 A

  However, according to Patent Document 1, a module of a satellite positioning system called GPS (Glovel Positioning System) is added to an electronic money deposit machine, and the position information acquired by the GPS module is transmitted to the management device for verification. Therefore, there is a problem that a great amount of manpower and cost are required for system development.

  In particular, when the electronic money amount of the electronic money depositing machine and the identification information of the storage medium are associated with each other and managed by the management device, it is necessary to check and update the electronic money amount in the management device. If the position confirmation processing of the electronic money depositing machine is also performed, the processing load on the management apparatus becomes excessive. Such processing load increases as the number of installed electronic money deposit machines increases and as the frequency of position confirmation increases.

  Accordingly, it is an object of the present invention to provide a terminal management system and a terminal management method that can efficiently prevent illegal payment of electronic money using an electronic money deposit machine.

  In order to solve the above-described problems and achieve the object, the present invention provides a management unit that manages availability information related to availability of the electronic money identification information for each electronic money identification information, and a processing request from a predetermined settlement terminal A management device having a use availability information notifying unit for notifying use availability information corresponding to the electronic money identification information included in the processing request and a process including the electronic money identification information given to the device itself A settlement terminal having a processing request unit that makes a request, and a state control unit that controls an operation state of the device according to availability information notified in response to the processing request from the management device. Features.

  Also, the present invention is characterized in that, in the above invention, the management unit manages the availability information and the amount of electronic money in association with electronic money identification information.

  Further, according to the present invention, in the above invention, when the state control unit indicates that the availability information is available, the electronic information stored in the storage medium possessed by the user by the processing request unit is stored. It is characterized by allowing a processing request including money identification information.

  Further, according to the present invention, in the above invention, when the status control unit indicates that the availability information is not usable, the electronic information stored in the storage medium possessed by the user by the processing request unit is stored. The processing request including money identification information is rejected.

  Further, the present invention is characterized in that, in the above invention, the settlement terminal further includes a display control unit that controls display of a processing result corresponding to the processing request by the processing request unit on a predetermined display unit.

  Further, the present invention is the above invention, wherein the payment terminal further includes a storage unit that stores electronic money identification information assigned to a storage medium dedicated to the device, and the processing request unit includes a predetermined condition. When the above is established, a processing request including electronic money identification information stored in the storage unit is performed.

  Further, the present invention is characterized in that, in the above invention, the processing request unit makes a processing request including electronic money identification information stored in the storage unit when the power supply of the own device is activated. .

  Further, the present invention is characterized in that, in the above invention, the processing request unit makes a processing request including electronic money identification information stored in the storage unit at regular time intervals.

  Further, the present invention is the above invention, wherein the payment terminal further includes a cumulative amount calculation unit that calculates a cumulative amount deposited in a storage medium possessed by a user in the own device, and the processing request unit includes: When the cumulative amount calculated by the cumulative amount calculation unit reaches a predetermined value, a processing request including electronic money identification information stored in the storage unit is performed.

  In the present invention, the processing request is an electronic money balance inquiry or a charge request.

  The present invention also relates to a payment terminal that makes a processing request including electronic money identification information stored in a storage medium possessed by a user, and availability information relating to the availability of the electronic money identification information for each electronic money identification information. A terminal management method in a terminal management system that is communicably connected to a management device that manages communication, wherein the payment terminal makes a processing request including electronic money identification information given to the device, When the management device accepts a processing request from the payment terminal, a use availability information notifying step for notifying the availability information corresponding to the electronic money identification information included in the processing request; and the payment terminal, the management device And a state control step for controlling the operation state of the device according to the availability information notified from the device.

  According to the present invention, illegal deposit of electronic money using an electronic money deposit machine can be efficiently prevented. In particular, the GPS module is configured to prevent unauthorized payment of electronic money using a mechanism for checking the balance corresponding to the electronic money identification information of the user and the electronic money identification information given to the electronic money deposit machine. It will be possible to reduce human labor and costs associated with new system development.

FIG. 1 is an explanatory diagram for explaining the concept of the terminal management system according to the first embodiment. FIG. 2 is a diagram showing an external configuration of the electronic money settlement terminal. FIG. 3 is a functional block diagram showing the internal configuration of the electronic money payment terminal according to this embodiment. FIG. 4 is an explanatory diagram for describing an internal configuration according to the present embodiment of the management center. FIG. 5A shows an example of management card ID data. FIG. 5B is a diagram illustrating an example of accumulated amount data. FIG. 5C shows an example of the card data 25a. FIG. 6 is an explanatory diagram (part 1) for explaining screen display contents, operation contents, and process contents related to the management card registration process in the electronic money settlement terminal. FIG. 7 is an explanatory diagram (part 2) for explaining the screen display contents, operation contents, and process contents related to the management card registration process in the electronic money settlement terminal. FIG. 8 is an explanatory diagram for explaining screen display contents and process contents related to the apparatus state setting process in the electronic money settlement terminal. FIG. 9 is a flowchart showing a processing procedure of transaction processing in the electronic money settlement terminal. FIG. 10 is a flowchart illustrating a processing procedure of device state setting processing in the electronic money settlement terminal according to the second embodiment. FIG. 11 is a diagram illustrating a screen example during device state setting in the electronic money settlement terminal according to the second embodiment.

  Exemplary embodiments of a terminal management system and a terminal management method according to the present invention will be described below in detail with reference to the accompanying drawings. In the following embodiment, a case where an IC card of a user that associates electronic money of a specific brand is used as a storage medium is shown.

<Concept of Terminal Management System According to Embodiment 1>
First, the concept of the terminal management system according to the first embodiment will be described. FIG. 1 is an explanatory diagram for explaining the concept of the terminal management system according to the first embodiment. An electronic money settlement terminal 10 shown in FIG. 1 is a device that performs electronic money balance confirmation and deposit processing (hereinafter simply referred to as “charge”). The “charge” means a process of adding the balance of electronic money associated with the user's IC card (hereinafter simply referred to as “user card”), and the amount of electronic money corresponding to the amount of cash input Is added to the balance of electronic money. It should be noted that the predetermined points associated with the user card can be consumed and charged (added) to the balance of electronic money.

  FIG. 1 shows a series of processing in the case where the balance check is performed in the electronic money settlement terminal 10. The electronic money settlement terminal 10 stores a specific card ID (hereinafter referred to as “management card ID”) inside the apparatus. For example, the management card ID is acquired at the time of manufacture of the electronic money payment terminal 10, and the management card ID is stored in advance in the storage unit of the electronic money payment terminal 10. In addition, after the electronic money settlement terminal 10 is installed, an operator can perform a specific attendant operation, and the management card ID can be stored in advance in the storage unit of the electronic money settlement terminal 10.

  The management card ID is the same as the card ID given to the user card (hereinafter referred to as “user card ID”), and the card ID of a special numbering system is the management card. It is not an ID. Further, an IC card corresponding to this management card ID (hereinafter referred to as “management card”) is strictly managed by the administrator of the electronic money settlement terminal 10 and is not used for actual charge transactions. .

  As shown in FIG. 1, when the apparatus is activated when the electronic money settlement terminal 10 is turned on (1), the electronic money settlement terminal 10 makes a balance inquiry to the management center 20 using the management card ID. Perform (2). The management center 20 uses the balance information corresponding to the management card ID included in the balance inquiry (including the status (available or unavailable) indicating the availability of the management card ID) as the balance inquiry result as an electronic money settlement. It transmits to the terminal 10 (3).

  Then, the electronic money settlement terminal 10 confirms the balance inquiry result from the management center 20 and sets the state of the own device (4). Here, although the management card ID is not used for electronic money transactions, the management center 20 does not handle the management card ID separately from the user card ID, and therefore when the management center 20 responds normally. The balance information itself is notified to the electronic money settlement terminal 10. Since there is no situation where electronic money is charged to the management card ID, the balance information in this case is “balance 0”.

  If the electronic money settlement terminal 10 receives “usable” together with the balance as a balance inquiry result from the management center 20, it is assumed that a normal response by the management center 20 has been confirmed, and the apparatus is normally activated, and the user card It is assumed that electronic money charge transactions using can be made. On the other hand, if “unusable” is received as a balance inquiry result from the management center 20, a message indicating that the electronic money charging transaction is not possible is displayed, and the electronic money charging transaction is performed on the device itself. It is in a state where it cannot be done.

  Here, when the management card ID is issued, “usable” is set in the management card ID. However, when the electronic money payment terminal 10 is stolen, the management center 20 In the above, “unusable” is set in the management card ID. Even when the expiration date has expired, “unusable” or “expired” indicating expiration is set in the management card ID.

  By performing the above series of processes, the transaction state of the electronic money payment terminal 10 can be controlled using the balance inquiry mechanism by the user card ID, so that without greatly modifying the existing electronic money management system, Further, it is possible to efficiently cope with theft of the electronic money settlement terminal 10 without introducing a GPS module or the like. In particular, in the conventional technology that performs mutual authentication between the management center 20 and the electronic money settlement terminal 10, it is not guaranteed whether or not a charge transaction of electronic money is possible, and the mutual authentication is simply performed normally. However, according to the first embodiment, it is possible to confirm the mutual authentication and the transaction possibility at a time. Become.

<External Configuration of Electronic Money Payment Terminal 10>
Next, the external configuration of the electronic money settlement terminal 10 shown in FIG. 1 will be described. FIG. 2 is a diagram showing an external configuration of the electronic money settlement terminal 10 shown in FIG. As shown in FIG. 2, the electronic money settlement terminal 10 includes a display operation unit 11, an audio output unit 12, a card reader / writer 13, a receipt printer 14, and a banknote processing unit 15. In addition, although the detailed description is abbreviate | omitted here for convenience of explanation, a coin insertion port / return port or the like for charging electronic money using coins can also be provided.

  The display operation unit 11 is an input / output device such as a touch panel display that accepts an input operation by displaying a screen and operating a button displayed on the screen. The voice output unit 12 is an output device that outputs a voice operation guide, a caution message, and the like.

  The card reader / writer 13 is a device that reads information stored in a user card, that is, a non-contact type IC card, and writes data to the user card. Here, it is possible to read and write data by placing the user card on or close to the card reader / writer 13 instead of the contact type IC card that takes the user card inserted from the card insertion slot into the apparatus. The case where the non-contact knowledge IC card which becomes becomes is shown. In the first embodiment, the case where the user card is a non-contact IC card will be described for convenience of explanation. However, the present invention is not limited to this, and a mobile phone incorporating a non-contact IC chip or the like. Other than the card form, a contact type IC card may be used.

  The receipt printer 14 is a printing unit that issues a receipt as necessary when processing such as charging of electronic money or balance confirmation is performed. The banknote processing unit 15 is a processing unit that stores the banknotes inside the apparatus after denomination identification when accepting insertion of banknotes. Note that the bill processing unit 15 can also determine the authenticity of a bill.

<Internal configuration of electronic money settlement terminal 10>
Next, the internal configuration of the electronic money payment terminal 10 shown in FIG. 2 will be described. FIG. 3 is a block diagram showing an internal configuration of the electronic money settlement terminal 10 shown in FIG. As shown in FIG. 3, the electronic money settlement terminal 10 includes a display operation unit 11, an audio output unit 12, a card reader / writer 13, a receipt printer 14, a bill processing unit 15, a communication unit 16, and a storage unit. 17 and a control unit 18. Since the display operation unit 11, the audio output unit 12, the card reader / writer 13, the receipt printer 14, and the banknote processing unit 15 have already been described, description thereof will be omitted.

  The communication unit 16 is an interface unit for communicating with the management center 20 or the like via a predetermined communication line. Either a wired line or a wireless line can be used. The storage unit 17 is a storage device including a hard disk device, a nonvolatile memory, and the like. The storage unit 17 stores a management card ID 17a for managing the device state, and cumulative amount data 17b indicating the cumulative amount of money deposited by charging.

  The control unit 18 is a control unit that controls the electronic money settlement terminal 10 as a whole, and includes a device balance inquiry processing unit 18a, a user balance inquiry processing unit 18b, a pre-charge processing unit 18c, a charge amount determination unit 18d, and a charge execution unit. 18e, a display control unit 18f, an apparatus state management unit 18g, and a time management unit 18h. Actually, programs corresponding to these functional units are stored in a ROM or non-volatile memory (not shown), and these programs are loaded into a CPU (Central Processing Unit) and executed, thereby executing a device balance inquiry processing unit. 18a, the user balance inquiry processing unit 18b, the charge preprocessing unit 18c, the charge amount determination unit 18d, the charge execution unit 18e, the display control unit 18f, the device state management unit 18g, and the time management unit 18h. It will be.

  The device balance inquiry processing unit 18a is a processing unit that makes a balance inquiry including the management card ID 17a stored in the storage unit 17 to the management center 20 when the own device is activated. In this way, the apparatus balance inquiry processing unit 18a does not perform the original balance inquiry using the user card ID, but uses the existing balance inquiry mechanism to inquire about the pros and cons of processing related to electronic money. Part.

  The user balance inquiry processing unit 18b includes a user card ID with respect to the management center 20 when receiving an operation for making a balance inquiry from a user (proximity of user card and balance inquiry operation). It is a processing unit that performs a balance inquiry to the management server 20 and controls the display operation unit 11 to display the balance of electronic money included in the balance inquiry result notified from the management server 20 in response to the balance inquiry.

  The pre-charging processing unit 18c is a processing unit that identifies the latest balance as pre-charging processing when receiving an operation to charge electronic money from a user. Specifically, the charge preprocessing unit 18c transmits the user card ID acquired from the user card by the card reader / writer 13 to the management center 20 to perform a balance inquiry. Then, the balance included in the balance inquiry result managed by the management center 20 is specified.

  The charge amount determination unit 18d determines the upper limit of the charge amount based on the balance specified by the pre-charge processing unit 18c, receives the input of the charge amount within a range not exceeding the upper limit, and performs a process of determining the charge amount .

  If it is a charge by cash, the charge amount can be input by inserting a bill. In this case, the charge amount determination unit 18d accepts the insertion of banknotes one by one, and determines the charge amount based on the denomination and number of inserted banknotes. When charging using points, in addition to inputting the charge amount itself, the charge amount is determined by inputting the number of points to be used. In this case, the charge amount determination unit 18d receives an input of the number of points used for charging from the display operation unit 11, and determines the charge amount by converting the received point number into a monetary amount.

  The charge execution unit 18e is a processing unit that executes charging of electronic money. Specifically, when the charge amount determination unit 18d determines the charge amount, the charge execution unit 18e causes the card reader / writer 13 to read the user card ID again, and the read user card ID is the balance. It is determined whether or not it matches the user card ID used for the inquiry. The charge execution unit 18e notifies the management center 20 of a request to add the charge amount to the balance of electronic money on the condition that the user card IDs match, and receives a completion of addition from the management center 20. The balance display of the part 11 is updated. Thereafter, the completion of addition is displayed and the charging process is terminated.

  The display control unit 18f displays a standby menu, activates the corresponding function processing unit when the processing content is selected by the customer, and displays the screen on the display operation unit 11 according to the instruction of the activated function processing unit. And an input operation from the display operation unit 11 are accepted.

  The device state management unit 18g controls registration processing of a management card ID 17a, which will be described later. When the management card ID 17a is stored in the storage unit 17, the device state management unit 18g performs device state setting processing based on the management card ID 17a. Do. This apparatus state setting process is a process for setting a state in which electronic money transaction processing (charge processing, balance inquiry) is possible or impossible using a user card other than the management card. Detailed description thereof will be described later.

  The time management unit 18h is a management unit that has an RTC (real time clock) circuit and manages current time information. The time information managed by the time management unit 18h can be used when specifying the timing (for example, every hour) at which the balance inquiry using the management card ID is performed by the apparatus balance inquiry processing unit 18a.

<Internal configuration of management center 20>
Next, the internal configuration of the management center 20 shown in FIG. 1 will be described. FIG. 4 is a block diagram showing an internal configuration of the management center 20 shown in FIG. As illustrated in FIG. 4, the management center 20 includes a display unit 21, an operation unit 22, a communication unit 23, a control unit 24, and a storage unit 25.

  The display unit 21 includes a touch panel color liquid crystal display or the like, and is used for displaying information to the operator. The operation unit 22 includes a mouse, a keyboard, and the like, and accepts an input operation from the operator. The communication unit 23 is an interface unit for communicating with the electronic money payment terminal 10 via a predetermined communication line. The control unit 24 is a control unit that controls the entire management center 20, and includes a charge processing unit 24a and a card status control unit 24b. Actually, programs corresponding to these functional units are stored in a ROM or a non-volatile memory (not shown), and these programs are loaded into a CPU (Central Processing Unit) and executed, whereby the charge processing unit 24a and The card status control unit 24b is caused to execute a corresponding process.

  The charge processing unit 24a executes charge processing or balance inquiry processing in response to a request from the electronic money settlement terminal 10. When a charge request is received from the electronic money settlement terminal 10, a process of adding the requested amount to the electronic money balance of a specified card ID in the card data 25a described later is performed. The electronic money amount after completion is returned to the electronic money settlement terminal 10. When a balance inquiry is accepted from the electronic money settlement terminal 10, an electronic money balance of a specified card ID in card data 25a described later is returned to the electronic money settlement terminal 10.

  Here, when the card status stored in the card data 25a corresponding to the designated card ID is “unusable”, the balance even if the request from the electronic money settlement terminal 10 is an addition request signal by charging. Even if it is an inquiry request signal, “unusable” is returned and the corresponding processing is not performed. The card status control unit 24 b is a control unit that updates and stores “available” or “unusable” for the card status corresponding to the card ID in the card data 25 a based on the operation on the operation unit 22.

  The storage unit 25 is a storage device including a hard disk device, a nonvolatile memory, and the like. The storage unit 25 stores card data 25a including a card value associated with the card ID, a card usage status such as a last use date and availability / impossibility.

  A part of the card data 25a in the storage unit 25 can be accessed by a manager or a user of electronic money from a portable terminal or a personal computer held by the manager or a user via a public line (such as the Internet). ing.

  Although not shown, the management center 20 manages the transaction contents with the electronic money payment terminal 10 and the device status of the electronic money payment terminal 10 (transaction, transaction stopped, communication disabled, etc.). This state can be output (displayed, etc.).

<Example of data>
Next, an example of the management card ID 17a stored in the electronic money settlement terminal 10, the accumulated amount data 17b stored in the electronic money settlement terminal 10, and the card data 25a stored in the management center 20 will be described.

  FIG. 5A is a diagram illustrating an example of the management card ID 17 a stored in the storage unit 17 of the electronic money settlement terminal 10. This figure shows a situation where the card ID of the management card is “001234567” and the designated balance designated as the balance of this card is “0”. In the device state setting process described later, a balance inquiry process is performed for the management card ID stored in the management card ID 17a.

  FIG. 5B is a diagram illustrating an example of the accumulated amount data 17 b stored in the storage unit 17 of the electronic money settlement terminal 10. The figure stores a situation in which the cumulative amount is “30000”, the last transaction time is “13:50”, and the last transaction is “charge”. The accumulated amount is an accumulated amount of the added amount deposited in the charge transaction, and is added every time the deposit is performed until a predetermined reset process is performed. The last transaction time stores the last time at which a transaction (charge, balance inquiry) was performed by communication with the management center 20. The final transaction is data indicating the final transaction type (charge, balance inquiry) performed through communication with the management center 20.

  FIG. 5C is a diagram illustrating an example of the card data 25 a stored in the storage unit 25 of the management center 20. In the figure, the date and time when the card with the card ID “001234567” was most recently transacted is “July 15, 2016, 06:00”, the transaction type is “Balance inquiry”, and the balance is “ “0”, indicating that the card status is “available”. Further, the card with the card ID “123456789” is traded at “13:15 on July 15, 2016”, the transaction type is “charge”, the balance is “3000”, and the card status is “3000”. The situation is “available”. Further, for the card ID “578991011”, “Balance inquiry” is made at “12:15 on July 14, 2016” and the status of the card is “unusable”. Although not shown here, points are also managed for each card ID.

<Display Example of Electronic Money Payment Terminal 10>
Next, screen display contents, operation contents, and process contents related to the management card registration process performed by the device state management unit 18g of the electronic money settlement terminal 10 will be described with reference to FIGS. First, when the electronic money settlement terminal 10 is activated in the maintenance mode, a maintenance top menu is displayed as shown on the screen D1. In order to activate the electronic money settlement terminal 10 in the maintenance mode, for example, the power is turned on (ON) in a state where a switch in a device (not shown) is set at the maintenance position.

  In the top menu for maintenance, “management card registration”, “transaction log operation”, “time setting”, and the like are displayed. “Management card registration” is an item for storing the management card ID 17 a for managing the electronic money payment terminal 10 in the storage unit 17. The “transaction log operation” is an item for referring to the history of charge transactions and balance inquiry processing performed at the electronic money settlement terminal 10 and printing the referred history. “Time setting” is an item for setting time information recognized by the electronic money settlement terminal 10. The time information can also be set by communication with the management center 20.

  Then, if “register management card” is selected on the screen D1 and no management card is designated, a screen prompting the reading of the card to be registered is displayed as in the screen D2. In this case, when the management card has already been registered, the card ID and balance of the management card are displayed, and a screen prompting the reading of the card to be registered is displayed. Then, the card reader / writer 13 of the electronic money settlement terminal 10 stands by for reading the IC card. In this state, when the card reader / writer 13 does not read the IC card for a predetermined time, the standby state of the card reader / writer 13 is reset, and the screen returns to the top menu. On the other hand, if the IC card is read by the card reader / writer 13 within a predetermined time, a screen D3 shown in FIG. 7 is displayed.

  On the screen D3, the card ID read by the card reader / writer 13 is displayed. When the OK button is operated on the screen D3, the designated card ID “001234567” and the designated balance “0” are stored in the management card ID 17a as the management card ID, and this is displayed on the screen D4. The IC card designated as the management card here is strictly managed by the manager of the apparatus.

  By performing the above-described series of processes, the management card ID can be set and changed as appropriate, and an appropriate measure can be taken even when the management card is stolen.

<Screen example of device status setting processing>
Next, screen display contents and processing contents related to the device state setting process performed by the device state management unit 18g of the electronic money settlement terminal 10 will be described with reference to FIG. First, when the electronic money settlement terminal 10 is activated in the normal mode, an apparatus activation screen as shown in a screen D5 is displayed.

  And the balance inquiry using management card ID is performed to the management center 20 without displaying the transaction screen mentioned later, maintaining the starting screen of the screen D1. When “001234567” is designated as the designated card ID by the management card ID 17a, a balance inquiry including the card ID is performed. Receiving this balance inquiry, the management center 20 retrieves data corresponding to the designated card ID from the card data 25a, and returns the corresponding balance and card status to the electronic money settlement terminal 10 as a balance inquiry result. Thereafter, the management center 20 updates the transaction date and time and the transaction type.

  The electronic money settlement terminal 10 does not notify the balance inquiry result from the management center 20 even after a certain period of time has passed since the balance inquiry to the management center 20, and the balance even if the predetermined number of retry attempts is repeated thereafter. When the inquiry result cannot be obtained, it is determined that communication with the management center 20 is impossible (that is, balance acquisition is impossible). If the balance inquiry result cannot be acquired from the management center 20 or if the status of the management card acquired from the management center 20 is “unusable”, the electronic money settlement terminal 10 sets the status of the device to “suspend use” " When the use of the apparatus is suspended, a message indicating that the use has been suspended is displayed as shown in a screen D6. In a state where the device is “suspended use”, transactions such as balance inquiry and charge are impossible for all card IDs including the card ID designated as the management card. Note that the balance included in the balance inquiry result is compared with a designated balance (for example, “0”) stored in the management card ID 17a. You can also

  On the other hand, when the electronic money settlement terminal 10 receives the notification of the balance inquiry result from the management center 20 and the status of the management card is “available”, the management card has been successfully verified. The device status is determined as “available”, the transaction screen is displayed as shown in the screen D7, and the activation process is terminated.

  Here, when the fact that the electronic money payment terminal 10 is stolen or illegally used is found, the administrator of the electronic money payment terminal 10 uses the operation unit 22 of the management center 20 to manage the card ID for management. Is set to “unusable” as an accident card. When the card status of the management card becomes “unusable”, the setting of the device state in FIG. 8 is “usage stopped”, and thus the use of the electronic money payment terminal 10 can be restricted.

  In addition, when setting the device state at the time of starting the device, the same signal (balance inquiry request) as during the transaction is used, so the confirmation of the communication state including whether or not the subsequent transaction can be performed is an actual signal. Can be confirmed with certainty.

<Transaction processing procedure of electronic money settlement terminal 10>
Next, normal transaction processing executed by the electronic money settlement terminal 10 will be described with reference to FIG. This transaction process is started from a state in which the transaction screen of the screen D7 is displayed after the management card is normally verified in the apparatus state setting process in FIG.

  First, when one of the buttons “cash charge”, “point charge”, and “balance check” displayed on the transaction screen is selected and operated (step S101), a screen prompting to place a card is displayed. A card acceptance process is performed (step S102). When the card is placed, a card ID is acquired by the card reader / writer 13 and the acquired card ID is temporarily stored. When the card ID is acquired, the balance inquiry including the card ID is made to the management center 20 by the device balance inquiry processing unit 18a, the user balance inquiry processing unit 18b, or the pre-charge processing unit 18c (step S103). This balance inquiry processing is the same processing as the management card ID balance inquiry performed in D5 of FIG. Then, it waits for a balance inquiry result returned from the management center 20.

  If there is a response from the management center 20 (reply of the balance inquiry result) (step S104; Yes), the balance included in the balance inquiry result acquired from the management center 20 is displayed (step S105). Specifically, the balance and point balance of electronic money acquired from the management center 20 are displayed. Even if there is a response from the management center 20, if the balance inquiry result includes that the card status is “unusable”, the card is displayed as an unusable card and the transaction is terminated. In addition to the display of the charge amount balance and point balance, the display at the time of balance inquiry includes auto-charge setting for the card ID (automatically from the account associated with the card ID when the balance falls below a certain amount) It is also possible to obtain from the management center 20 whether or not a setting for debiting by a certain amount has been made, and this display can also be performed.

  Thereafter, when the selection menu is balance inquiry (step S106; Yes), since the balance inquiry is completed, the process proceeds to step S114. On the other hand, when the selection menu is not a balance inquiry (step S106; No) and the selection menu is not a point charge (step S107; No), the selection menu is a cash charge, so the process proceeds to step S108 to specify the charge amount. Wait. When the charge amount is determined by the charge amount determination unit 18d (step S108; Yes), the process proceeds to step S109 and waits for payment equal to or greater than the charge amount. Then, when the banknote processing unit 15 acquires a deposit equal to or greater than the charge amount (step S109; Yes), the process proceeds to step S110, a charge confirmation screen is displayed, and a confirmation operation on the display operation unit 11 is awaited. In addition, although the type determination of the selection menu is described in series in steps S106 and S107, it does not mean that the determination process is limited to serial execution, and for each selection menu in the menu selection operation in step S101. This includes the case where the processing flow branches.

  When the confirmation operation is performed (step S110; Yes), the process proceeds to step S111, and the charge request including the charge amount determined by the charge amount determination unit 18d to the management center 20 in the charge execution unit 18e and the card ID. Is sent. Then, it waits for a response from the management center 20 (step S112). When a response from the management center 20 (charge completion and transmission of the updated balance) is received (step S112; Yes), the updated balance is displayed (step S113), and the processing log and the cumulative total are displayed. The amount data 17b is updated (step S114), and the process ends. Further, when the accepted cash exceeds the charge amount, a process of returning the difference by the banknote processing unit 15 is performed. The processing log stores operations performed at the electronic money settlement terminal 10 and the history of transmitted signals in time series, and can be viewed in the transaction log operation on the screen D1 in FIG. The accumulated amount data 17b is as described above. When the selection menu is a cash charge, the charged amount is added to the accumulated amount and updated, and the final transaction time and final transaction items are updated. When the selection menu is other than the cash charge, only the last transaction time and the last transaction items are updated.

  If the selection menu is balance inquiry (step S106; Yes), the process proceeds to step S114 to update the process log / cumulative amount data (step S114), and the process ends. When the selection menu is point charge (charge addition from the number of points) (step S107; Yes), the process proceeds to step S115 to wait for designation of the number of charge points (number of points to be converted into the charge amount). When the number of charge points is specified in step S115 (step S115; Yes), the process proceeds to step S110 to wait for a confirmation operation, and thereafter the same process as the cash charge process is performed.

  Further, if there is no response from the management center 20 and there is no response after repeating a predetermined retry count request (step S104; No, step S112; No), it is determined that communication with the management center 20 is impossible. Then, a transaction impossible state is set and an error is displayed (step S116). Moreover, when cash is received before communication with the management center 20, the process which returns the banknote received by the banknote processing unit 15 is performed.

  As described above, in the first embodiment, in the communication between the electronic money settlement terminal 10 and the management center 20, only two types of signals “balance inquiry” and “charge request” are dealt with during the transaction processing. In addition, since the apparatus status setting process for confirming the validity (not tampered) of the electronic money settlement terminal 10 is also carried out using the “balance inquiry request”, the existing electronic money mechanism Can be used to efficiently prevent unauthorized charging of electronic money.

  It should be noted that the two types of signals “balance inquiry” and “charge request” in the first embodiment are performed with encrypted serial numbers in communication between the electronic money settlement terminal 10 and the management center 20. Therefore, even if an illegal signal is generated by copying the signal as it is, an error is processed due to duplication of serial numbers, so that it cannot be illegally charged and the device state cannot be illegally changed. For this reason, cost saving and security can be maintained.

  By the way, in the above-described first embodiment, the case where the electronic money payment terminal 10 is validated (device status setting process) when the electronic money payment terminal 10 is activated has been described. However, the accumulated amount data 17b is stored. The electronic money settlement terminal 10 may be configured to perform a validity confirmation process each time the accumulated amount reaches a predetermined amount. Therefore, in the second embodiment, a case will be described in which validity confirmation processing is performed every time the cumulative amount reaches a predetermined amount. In addition, about the part which overlaps with Example 1, the detailed description is abbreviate | omitted by attaching | subjecting the same code | symbol.

  The apparatus state setting process according to the second embodiment will be described with reference to FIG. The flowchart shown in FIG. 10 is a process that is recursively performed every time the transaction process ends after the transaction process shown in FIG. 9 of the first embodiment is performed.

  First, it is determined whether or not a cash charge process has been performed in the transaction process (step S201). If it has not been performed (step S201; No), the process is terminated as it is. On the other hand, if a cash charge process is performed in the transaction process (step S201; Yes), whether the accumulated amount of the accumulated amount data 17b exceeds a predetermined value (has reached a predetermined value) (Step S202). The “predetermined value” is a value arbitrarily set by the administrator of the electronic money settlement terminal 10 and is, for example, 30000 yen.

  As a result, when the cumulative amount of the cumulative amount data 17b does not exceed a predetermined value (step S202; No), the processing is ended as it is. On the other hand, when the predetermined value is exceeded (step S202; Yes), the apparatus state is set (step S203). This device status setting is the same as the processing in FIG. 8 of the first embodiment, but the screen that is being inquired is different from the point that it does not accompany the activation of the device. That is, when a balance inquiry request is made using the designated card ID stored as the management card ID in the management card ID 17a and the balance returned from the management center 20 matches the designated balance, a transaction possible state is set, In other cases (balance acquisition impossible, card status “unusable”, balance mismatch), a transaction impossible state is set. In this case, for example, as shown in FIG. 11, the in-query screen is a display indicating that the maintenance is in progress and the transaction is impossible.

  As a result of the apparatus state setting, if the transaction is impossible, the same screen as the screen D6 of FIG. 8 is displayed. If the transaction is possible, the transaction screen of the screen D7 is returned. Returning to the flowchart of FIG. 10, when the apparatus state setting process in step S205 is completed, the accumulated amount of the accumulated amount data 17b is initialized to 0 (step S204), and the process ends.

  In the second embodiment, since the validity of the electronic money payment terminal 10 is confirmed based on the accumulated amount of money deposited, it can be configured to confirm the validity according to the risk of fraudulent payment, Reasonable operation is possible.

  In the second embodiment, the legitimacy of the electronic money settlement terminal 10 is confirmed based on the accumulated amount of the charge deposit. Instead, the amount of the banknote received by the banknote processing unit 15 is used. It is also possible to configure so that the electronic money settlement terminal 10 is validated (apparatus state setting process) based on the accumulated amount.

  The confirmation of the validity of the electronic money payment terminal 10 (device state setting process) is based on the current time managed by the time management unit 18h of the electronic money payment terminal 10 and a predetermined time has elapsed since the previous confirmation. May be performed when the time management unit 18h determines. In this way, the validity of the electronic money settlement terminal can be confirmed at regular time intervals, and security can always be maintained at a certain level. In this case, the confirmation screen is the same as that shown in FIG.

  A plurality of triggers for confirming the validity of the electronic money settlement terminal 10 (device state setting process) described in the first and second embodiments can be used in combination. For example, when the device starts up, the device status setting process is performed when at least one of the following conditions is satisfied: when the accumulated amount reaches a certain value, or when a certain amount of time has passed since the previous confirmation You can also. Further, the electronic money settlement terminal 10 can be configured to hold a history of the results of confirmation of validity.

  In addition, the trigger for confirmation of the validity of the electronic money settlement terminal 10 (device state setting process) described in each of the first and second embodiments is not limited to the configuration that is performed immediately when the condition is satisfied, It may be performed after a certain time after filling. For example, when the configuration is such that the confirmation is performed when the device is activated, the confirmation processing may be performed with a delay of a certain time from the activation, or the delay time may be different at each activation.

  Furthermore, the validity of the electronic money payment terminal 10 may be confirmed by using the methods shown in the first and second embodiments and other methods in combination. For example, it may be used together with a method of confirming the position of the electronic money settlement terminal 10 using GPS, and the method of confirming the position in this case may be a single positioning method or an interference positioning method.

  In the above-described first and second embodiments, the case where the operation of the electronic money settlement terminal 10 is controlled using the status at the time of balance inquiry (usable or unusable) is shown, but the present invention is not limited to this. The operation can also be controlled using a balance included in the balance inquiry result. Specifically, since the electronic money is not charged to the management card ID 17a, the balance of the management card ID 17a should be originally “0”. If the balance is “other than 0”, it is considered that some fraud has occurred, and even if the status of the management card ID 17a is “available”, the operation of the electronic money settlement terminal 10 is restricted. Can be configured. In addition, a predetermined balance such as “12345” is intentionally given to the balance of the management card ID 17a and stored in the electronic money settlement terminal 10, and the balance included in the balance inquiry result notified from the management center 20 If they do not match, the operation of the electronic money settlement terminal 10 can be limited.

  In the first and second embodiments, the legitimacy of the electronic money settlement terminal 10 is confirmed using “balance inquiry”. However, the present invention is not limited to this, and the electronic money settlement terminal is used using “charge request”. You may make it confirm 10 correctness. Specifically, the balance of the management card ID is held in the electronic money settlement terminal 10, and a predetermined amount (for example, 1) is charged for the management card ID in the device state setting process. Thus, it is conceivable to check whether the balance after addition returned as a response from the management center matches the value obtained by adding the above-mentioned fixed amount to the balance before addition.

  In addition, although the management card in the first and second embodiments is basically assumed to operate with one management card (1ID) corresponding to one electronic money payment terminal, the present invention is not limited thereto. The present invention is not limited, and a plurality of management cards may be set per unit, or one management card may be set for a plurality of units. In the former case, the number of electronic money settlement terminals 10 that can control the device state according to the authority and level of the administrator can be varied. In the latter case, unified operation / operation suspension can be performed when a plurality of electronic money payment terminals 10 are operated at the same location.

  In each of the first and second embodiments described above, the case is shown in which the balance information of the card is not written on the IC card side, but the processing is performed based on the balance information on the management center 20 side. However, the balance information of the card may be held also on the IC card side. In this case, since the final balance information is also held on the IC card side, the balance information on the card or the processing history information on the management center 20 side or the electronic money settlement terminal 10 side is matched to verify the validity of the card balance information. Therefore, it is possible to confirm the authenticity of the electronic money settlement terminal 10 using the balance information of the card with higher security.

  Further, in each of the first and second embodiments described above, it is assumed that there is an IC card designated as a management card. However, there is no IC card itself, and only an ID designated as a management card is present. It may be configured to exist. For example, in the card data 25a in the management center 20, an ID range for designating as a management card ID is set in advance, and an IC card having an ID in the range is not issued, and each electronic money settlement terminal 10 And used only as a management card ID stored in the electronic money settlement terminal 10. This eliminates the need to pay attention to the storage of the IC card designated as the management card.

  Each configuration illustrated in the first and second embodiments is functionally schematic and does not necessarily need to be physically configured as illustrated. That is, the form of distribution / integration of each device is not limited to that shown in the figure, and all or a part thereof may be functionally or physically distributed / integrated in an arbitrary unit according to various loads or usage conditions. Can be configured.

  As described above, the terminal management system and the terminal management method according to the present invention are suitable for efficiently preventing illegal payment of electronic money.

DESCRIPTION OF SYMBOLS 10 Electronic money payment terminal 11 Display operation part 12 Audio | voice output part 13 Card reader / writer 14 Receipt printer 15 Bill processing unit 16 Communication part 17 Storage part 17a Management card ID
17b Cumulative amount data 18 Control unit 18a Device balance inquiry processing unit 18b User balance inquiry processing unit 18c Pre-charge processing unit 18d Charge amount determination unit 18e Charge execution unit 18f Display control unit 18g Device state management unit 18h Time management unit

Claims (11)

For each electronic money identification information, when receiving a processing request from a predetermined settlement terminal and a management unit that manages the availability information related to the availability of the electronic money identification information, the electronic money identification information included in the processing request A management device having a use availability information notifying unit for notifying corresponding use availability information;
A processing request unit for making a processing request including electronic money identification information given to the own device, and a state for controlling the operation state of the own device according to the availability information notified in response to the processing request from the management device A terminal management system comprising: a settlement terminal having a control unit.   The terminal management system according to claim 1, wherein the management unit manages the availability information and the electronic money amount in association with electronic money identification information. The state control unit
The processing request including the electronic money identification information stored in the storage medium possessed by the user by the processing request unit is permitted when the availability information indicates that it can be used. The terminal management system according to 1 or 2. The state control unit
The processing request including electronic money identification information stored in a storage medium possessed by a user by the processing request unit is rejected when the availability information indicates that the information is not usable. The terminal management system according to any one of 1 to 3. The payment terminal is
The terminal management system according to claim 1, further comprising: a display control unit configured to display and control a processing result corresponding to the processing request by the processing request unit on a predetermined display unit. The payment terminal is
It further has a storage unit for storing electronic money identification information given to a storage medium dedicated to the device itself,
The processing request unit includes:
The terminal management system according to any one of claims 1 to 5, wherein when a predetermined condition is satisfied, a processing request including electronic money identification information stored in the storage unit is performed. The processing request unit includes:
The terminal management system according to claim 6, wherein when the power supply of its own device is activated, a processing request including electronic money identification information stored in the storage unit is made. The processing request unit includes:
The terminal management system according to claim 6, wherein a processing request including electronic money identification information stored in the storage unit is made at regular time intervals. The payment terminal is
A cumulative amount calculation unit for calculating a cumulative amount deposited in a storage medium owned by the user in the device;
The processing request unit includes:
The terminal according to claim 6, wherein when the cumulative amount calculated by the cumulative amount calculation unit becomes a predetermined value, a processing request including electronic money identification information stored in the storage unit is performed. Management system.   10. The terminal management system according to claim 1, wherein the processing request is an electronic money balance inquiry or a charge request. A settlement terminal that makes a processing request including electronic money identification information stored in a storage medium possessed by the user, and a management device that manages the availability information related to the availability of the electronic money identification information for each electronic money identification information; Is a terminal management method in a terminal management system that is communicably connected,
A processing request step in which the payment terminal makes a processing request including electronic money identification information given to the device;
When the management device receives a processing request from the payment terminal, a usage information notification step of notifying usage information corresponding to the electronic money identification information included in the processing request;
A terminal management method, comprising: a state control step in which the payment terminal controls an operation state of the own device in accordance with availability information notified from the management device.

Images