JP2019032802A - Settlement system and settlement terminal - Google Patents

Abstract

To make it possible to freely make settlement by using a terminal with a party selected by a user themselves.SOLUTION: A settlement system 1 in an embodiment includes a terminal Tand a terminal T. The terminal Tcalculates first encryption information on the basis of transaction information including a transaction amount and secret information 9 shared with the terminal T, provides settlement information 17 including the transaction information and first encryption information to the terminal T, and subtracts the transaction amount from the balance of a first account in first account information Aon the first terminal T. If the terminal Tobtains the settlement information 17, it calculates second encryption information on the basis of the secret information 9 shared with the terminal Tand the transaction information included in the settlement information 17, and adds the transaction amount to the balance of a second account in second account information Aon the terminal Tif the first encryption information accords with the second encryption information.SELECTED DRAWING: Figure 1

Description

  The present invention relates to a payment system and a payment terminal.

  In an example of settlement using a two-dimensional code, a user reads a two-dimensional code displayed on a store terminal with a mobile terminal, and the mobile terminal executes a settlement process based on the two-dimensional code.

  In another example of settlement using a two-dimensional code, the store terminal reads the two-dimensional code displayed on the user's mobile terminal, and the store terminal executes a settlement process based on the two-dimensional code.

JP 2012-216155 A

  In the example of the settlement using the two-dimensional code as described above, one of the settlements is a specific business operator such as a store, and the settlement is not freely performed between arbitrary users.

  The present invention has been made in view of the above circumstances, and provides a payment system and a payment terminal that allow a user to freely make a payment with a partner that the user has selected using the terminal.

  According to one aspect of the present invention, a first terminal and a second terminal are included. The first terminal manages the first account information. The second terminal manages the second account information. The first terminal calculates the first encryption information based on the transaction information including the transaction amount and the secret information shared with the second terminal, and the settlement information including the transaction information and the first encryption information To the second terminal, and the transaction amount is deducted from the balance of the first account in the first account information. When the second terminal acquires the payment information, the second terminal calculates the second encryption information based on the secret information shared with the first terminal and the transaction information included in the payment information, When the encrypted information and the second encrypted information match, the transaction amount is added to the balance of the second account in the second account information.

  In the present invention, payment can be freely performed using a terminal selected by the user and the terminal.

The block diagram which shows an example of a structure of the payment system which concerns on 1st Embodiment. The flowchart which shows an example of the payment process performed between the mobile terminals which concern on 1st Embodiment. The figure which shows the example of a screen transition state when a payment button is designated and a decision button is designated after that. The figure which shows the example of a screen transition state when a receipt button is designated. The figure which shows the example of a screen transition state when the redisplay button is designated. The figure which shows the example of the change of the balance of the account which generate | occur | produces by the transaction between mobile terminals. The figure which shows an example of a two-dimensional code. The figure which shows an example of the receipt information transmitted to a server apparatus from a recipient's mobile terminal. The figure which shows an example of the payment information transmitted to a server apparatus from a payer's mobile terminal. The block diagram which shows an example of the change of the account information memorize | stored in the memory | storage part of a payer's mobile terminal. The block diagram which illustrates the outline of the flow of the payment process performed with the payment system of 1st Embodiment. The figure which shows the example of a screen transition state when the deposit / withdrawal button is designated. The figure which illustrates the transition to the screen for foreign exchange transactions.

  Hereinafter, each embodiment will be described with reference to the drawings. In the following description, substantially or substantially the same functions and components are denoted by the same reference numerals, and description thereof is omitted or described as necessary.

(First embodiment)
The settlement system according to the present embodiment provides a settlement service that gives the user a sense of security similar to cash settlement, and realizes cashless settlement without the trouble of cash settlement.

  The transaction of this embodiment (hereinafter also referred to as “settlement”) may be used, for example, for electronic money or virtual currency transactions. The transaction may be electronic settlement such as electronic commerce.

  FIG. 1 is a block diagram illustrating an example of a configuration of a payment system 1 according to the present embodiment.

The payment system 1 includes a server device 2 and a plurality of mobile terminals T _{1 to} T _n .

Communication between any terminal of the server apparatus 2 and the mobile terminal T ₁ through T _n, and the communication between the first terminal and the second terminal of the mobile terminal T ₁ through T _n May be realized by a synchronization (pairing) function.

The server device 2 is, for example, a device managed by a payment service provider. The server device 2 is an example of an information processing device and can communicate with the mobile terminals T _{1 to} T _n via the network 3, but may temporarily be unable to communicate with the mobile terminals T _{1 to} T _n. . Various functions of the server device 2 may be realized by a plurality of server devices.

  The server device 2 includes a storage unit 4, a communication unit 5, and a processor 6.

  The storage unit 4 stores a management program 7, account (account) information 8, secret information (secret code) 9, an application program (hereinafter referred to as an application) 10, and other various data used in settlement processing. The storage unit 4 may be divided into a plurality of memory devices or storage devices.

The communication unit 5 receives data from other devices (for example, any _{one of} the mobile terminals T _{1 to} T _n ) via the network 3 and transmits data to other devices via the network 3.

  The processor 6 functions as a management unit 61 that executes various management processes for providing a settlement service by executing the management program 7 stored in the storage unit 4.

The management unit 61 transmits the application 10 stored in the storage unit 4 to the mobile terminals T _{1 to} T _n via the communication unit 5 and the network 3. The application 10 may be transmitted from another information processing apparatus that is not the server apparatus 2 to the mobile terminals T _{1 to} T _n via the network 3.

The management unit 61 generates (updates) secret information 9 that is unknown to a third party every time a predetermined period (secret information change period) passes, stores the secret information 9 in the storage unit 4, and the communication unit 5 and It transmits to the mobile terminals T _{1 to} T _n via the network 3.

The management unit 61 receives data from the mobile terminals T _{1 to} T _n via the network 3 and the communication unit 5 and updates the account information 8 stored in the storage unit 4 based on the received data. The account information 8 includes the account status and transaction (settlement) history of each user of the mobile terminals T _{1 to} T _n .

The management unit 61 generates data for managing payment based on the data stored in the storage unit 4 as necessary, and transmits the data for managing payment via the communication unit 5 and the network 3. Transmit to the destination device among the mobile terminals T _{1 to} T _n . For example, the management unit 61 transmits information prompting to communicate with the server device 2 to a mobile terminal that has not communicated with the server device 2 for a predetermined period.

More specifically, for example, the management unit 61 uses, for example, user identification information (hereinafter referred to as ID), user name, mobile terminal ID, bank system API (Application Information for accessing the bank account of the user through the Programming Interface), information for accessing the card information of the user through the API of the credit card company system, and the like are managed. The management unit 61 manages account information 8 including, for example, an account ID, a user ID, a currency ID, and a balance for each account. The management unit 61 manages, for example, transaction history information that associates a transaction ID, a payer ID, a receiver ID, a currency ID, a transaction amount, a transaction time, and the like for each account. The management unit 61 includes, for example, a deposit / withdrawal function for increasing or decreasing the balance of the user's account, a foreign exchange transaction function, a secret information 9 generation function, a hash value calculation function, a hash value comparison function, etc. And a function for notifying the mobile terminals T _{1 to} T _n of various data, information, commands, requests, and the like.

The mobile terminals T _{1 to} T _n are examples of an information processing apparatus, and may be a mobile phone such as a smartphone or a tablet computer, for example. Some of the mobile terminals T _{1 to} T _n may be installed information processing apparatuses that are not supposed to be moved and used.

In the present embodiment, the mobile terminal T ₁ is a payer's terminal, the mobile terminal T _n is a recipient's terminal, and the mobile terminal T ₁ and the mobile terminal T _n are described as representative examples. Any of T _{1 to} T _n may be a payer's terminal or a recipient's terminal.

The payer's mobile terminal T ₁ includes a storage unit M ₁ , a communication unit 12, an operation receiving unit 13, a display unit 14, a photographing unit 15, and a processor 16.

The recipient's mobile terminal T _n includes a storage unit M _n , a communication unit 12, an operation reception unit 13, a display unit 14, a photographing unit 15, and a processor 16.

Storage unit M ₁ of the mobile terminal T ₁ of the payer, app 10, and stores the account information A ₁ of the secret information 9, the payer.

Storage unit M _n of the mobile terminal T _n of the recipient, app 10, secret information 9, and stores the account information A _n of the recipient.

  The communication unit 12 receives data from another device (for example, the server device 2) via the network 3, and transmits data to the other device via the network 3. The communication unit 12 performs wireless communication, for example, but may perform wired communication.

  The operation receiving unit 13 is, for example, a touch panel or a keyboard, and receives an operation from a user.

  The display unit 14 is a display device, for example.

  The imaging unit 15 is a camera, for example. In the present embodiment, the imaging unit 15 is used for reading the two-dimensional code 17 which is an example of payment information. However, a code reader may be used for reading the two-dimensional code 17 instead of the imaging unit 15.

The processor 16 of the payer's mobile terminal T ₁ functions as the settlement unit B ₁ by executing the application 10 stored in the storage unit M ₁ .

Processor 16 of mobile terminal T _n recipients, by executing the application 10 stored in the storage unit M _n, which functions as a settlement unit B _n.

The settlement units B ₁ and B _n accept user operations from the operation accepting unit 13.

The settlement units B ₁ and B _n receive the secret information 9 from the server device 2 via the network 3 and the communication unit 12 every time a predetermined period elapses, and store the secret information 9 in the storage units M ₁ and M _n . To do.

Based on the transaction information including the transaction amount (payment amount) designated by the payer and the secret information 9 stored in the storage unit M ₁ , the payment unit B ₁ of the payer has the safety of the transaction information. The secured two-dimensional code 17 is generated, and the generated two-dimensional code 17 is displayed on the display unit 14. In addition, the payer's settlement unit B ₁ updates the payer's account information A ₁ stored in the storage unit M ₁ together with the display of the two-dimensional code 17.

Settlement unit B _n of the recipient, the two-dimensional code 17 displayed on the display unit 14 of the mobile terminal T ₁ of the payer photographed by the photographing unit 15, and the stored 2-dimensional code 17 was taken in the storage unit M _n Account information of the recipient stored in the storage unit M _n based on the transaction amount (receipt amount) included in the transaction information. to update the a _n.

The payment unit B ₁ of the payer generates payment information including the transaction information of the payer based on the account information A ₁ stored in the storage unit M _1, and sends the payment information from the communication unit 12 via the network 3 to the server. Transmit to device 2.

Settlement unit B _n recipients, the server based on the account information A _n stored in the storage unit M _n generates receipt information including transaction information recipient, the receipt information from the communication unit 12 via the network 3 Transmit to device 2.

  Specific contents of the two-dimensional code 17, payment information, and receipt information will be described later.

To explain with reference to more specific examples, the settlement unit B _1, B _n are realized by the application 10, for example, account information A _1, A _n, the payment screen data received screen data, receipt and payment screen data, foreign function for controlling the display of the screen data exchange transactions, deposit and withdrawal functions, the ability to add or subtract the account balance information a _1, a _n in accordance with the transaction amount, the ability to calculate a hash value, function of comparing the hash value A function of displaying the two-dimensional code 17, a function of reading the two-dimensional code 17 displayed by another device, and communicating data including transaction information with another device instead of the two-dimensional code 17 by short-range wireless communication or the like Functions, a function of communicating various data with the server device 2, a synchronization function, a function of managing the account information A ₁ and _An and the secret information 9, and the like.

Furthermore, the settlement unit B _1, B _n, such as transaction information contained in the mobile terminal T _1, T _n for example, account information A _1, A _n, relates settlement stored in the storage unit M _1, M _n When the amount of data exceeds a predetermined value and when the period during which the mobile terminals T ₁ and T _n do not communicate with the server device 2 exceeds a threshold value, the user is prompted to communicate with the server device 2. Includes functionality.

In the present embodiment, the server device 2 and the mobile terminals T ₁ and T _n perform data communication with other devices via the network 3 using the communication units 5 and 12, but in the following, for simplification, Description of the communication units 5 and 12 and the network 3 is omitted.

In the present embodiment, account information A ₁ , A _n , 8 is managed by each of the payer's mobile terminal T ₁ , the recipient's mobile terminal T _n , and the server device 2. In the account information A ₁ , A _n , 8, the increase / decrease in the balance of the payer's account and the increase / decrease in the balance of the recipient's account are updated so as to be consistent with each other.

In the settlement system 1 according to the present embodiment, application 10 in each of the mobile terminal T ₁ ~T _n is or downloaded installation, between the mobile terminal T ₁ ~T _n, around the world, anywhere, with anyone, the settlement Can be done.

The settlement units B ₁ and B _n manage account balances of various currencies in the mobile terminals T ₁ and T _n . The payer's settlement unit B ₁ executes a process for payment (balance reduction) on the payer's account information A ₁ . The settlement unit _Bn of the recipient executes a process for receipt (an increase in the balance) on the account information _An of the recipient.

In this embodiment, the display unit 14 of the payer's mobile terminal T ₁ displays the two-dimensional code 17, and the photographing unit 15 of the receiver's mobile terminal T _n reads the displayed two-dimensional code 17. Provision and acquisition of transaction information used for settlement processing is realized.

In the payment system 1, the payer operates the mobile terminal T ₁ and the recipient operates the mobile terminal T _n to make a face-to-face payment through display and reading of the two-dimensional code 17. At the time of exchanging the transaction information between the mobile terminals T _1, T _n, the mobile terminal T _1, T _n and the server apparatus 2 is an incommunicable state (i.e. off-line) even transactions between mobile terminals T _1, T _n rows Is called. Transactions between the mobile terminals T ₁ and T _n are permitted when the server apparatus 2 receives receipt information from the recipient's mobile terminal T _n within a predetermined period (transaction valid period) after this transaction. is canceled when the server apparatus 2 in the rear predetermined period does not receive the receipt information from the mobile terminal T _n recipients (or disabled).

The payment system 1 does not require a special accessory device or a special payment terminal. By installing or downloading the application 10 on the mobile terminals T ₁ and T _n , cashless payment can be made with anyone anywhere in the world. Can be executed.

  For example, online payment using the other party's phone number or email address is used, but the processing executed in the payment system 1 is different from online payment using such other party's phone number or email address. Since payment can be made without exchanging personal information such as a telephone number or an email address, payment can be made with peace of mind with anyone.

Settlement unit B _1, B _n based on the account information A _1, A _n, payment information, and generates the received information, the generated payment information, and transmits the received information to the server apparatus 2. Thereby, information can be shared and matched between the mobile terminals T ₁ and T _n and the server device 2.

Further, when the mobile terminals T ₁ and T _n and the server device 2 are communicable (online state), the settlement units B ₁ and B _n use the usage managed by the server device 2 according to the user's operation. from's access information to a bank account or the like, it is possible to perform a deposit process to the user accounts managed by account information a _1, a _n of the mobile terminal T _1, the T _n.

Furthermore, if the mobile terminal T _1, T _n and the server device 2 can communicate (online), the settlement unit B _1, B _n is the account information A _1, A _n between accounts of different currencies managed by You can make deposits and withdrawals (foreign exchange transactions).

Below, the payment process performed with the payment system 1 which concerns on this embodiment is demonstrated more concretely. This settlement process is realized by the application 10 provided in the mobile terminals T ₁ and T _n and the management program 7 provided in the server device 2.

In the payment system 1, the mobile terminal T ₁ stores the payer's account information A ₁ , the mobile terminal T _n stores the receiver's account information _An , and the server device 2 stores the account information of the payer and the receiver. 8 is memorized. Then, the settlement system 1, between the server apparatus 2 and the mobile terminal T ₁ and the mobile terminal T _n, inconsistent payer and recipient's account to ensure the integrity of account so as not to cause.

In the present embodiment, first, the payer's mobile terminal T ₁ and the recipient's mobile terminal T _n exchange transaction information. As with the cash settlement, at the stage where the exchange of transaction information has been carried out between the mobile terminal T ₁ and the mobile terminal T _n, the payer of the mobile terminal in the T ₁ of the payer account information A ₁ and the recipient mobile update in accordance with the transaction amount is made to the account information a _n recipients at the terminal T _n. However, the mobile terminal T _n of the recipient, the transaction amount received, manages the temporary account in the account information A _n recipients until communication with the server device 2.

Next, when the mobile terminal T ₁ or the mobile terminal T _n and the server apparatus 2 communicate with each other, the server device 2 is based on the payment information received from the mobile terminal T ₁ or the reception information received from the mobile terminal T _n. The balance of the account of the payer or the recipient in the account information 8 is processed.

However, the server device 2, the recipient mobile terminal T _n transactions after a predetermined period (e.g., 1 month) if no communication with the server apparatus 2, the transaction (payment) between the payer and recipient Is canceled (or invalidated). Detecting a transaction between the server apparatus 2 is the mobile terminal T ₁ receives the payment information from the mobile terminal T ₁ of the payer, T _n, the mobile terminal receipt information corresponding to the transaction in after the transaction predetermined period T _n if it does not receive from, or if the server apparatus 2 is detected that communication with any of the mobile terminals T _1, T _n from transactions between a mobile terminal T _1, T _n after a predetermined period of time from the payment information or receipt information , the management unit 61 of the server apparatus 2, the settlement section B ₁ of the mobile terminal T ₁ of the payer, the payment unit B _n of the mobile terminal T _n recipient, account information 8, account information a _1, the account information a _n On the other hand, a process of refunding the transaction amount of the temporary account to the payer's account is executed. In the present embodiment, the management unit 61 of the server device 2 uses a common temporary account for all recipients.

When the server device 2 receives payment information or receipt information including transaction information from one of the payer's mobile terminal T ₁ and the recipient's mobile terminal T _n , the account information according to the transaction information is received. 8 is updated. After that, the server device 2 executes transaction information confirmation processing (judgment of transaction amount consistency, etc.) when receiving payment information or receipt information from the other of the mobile terminal T ₁ and the mobile terminal T _n. To do.

FIG. 2 is a flowchart showing an example of a settlement process executed between the mobile terminals T ₁ and T _{n according} to the present embodiment. FIG. 2 shows an example of processing until the transaction amount is paid and received between the mobile terminals T ₁ and T _n and then the communication is executed between the mobile terminal T _n of the recipient and the server device 2. Is shown.

FIGS. 3 to 5 are diagrams showing examples of screen transition states in the settlement process executed between the mobile terminals T ₁ and T _n .

In step S201, the mobile terminal T ₁ of the payer in accordance with the operation of the settlement unit B ₁ displays a screen i ₁ as illustrated in FIG. 3, and receives specification of payment button b ₁ by the payer (the depression). When the payment button b ₁ is designated, the payer's mobile terminal T ₁ displays a screen i ₁ for inputting a transaction amount (payment amount) as exemplified in FIG. The payer's mobile terminal T ₁ accepts the transaction amount.

In step S202, when the payer's mobile terminal T ₁ accepts the transaction amount from the payer and accepts the designation of the determination button b ₂ by the payer, the screen including the two-dimensional code 17 illustrated in FIG. i ₃ is displayed. The mobile terminal T ₁ receives the transaction amount from the payer, displays a confirmation button after the decision button b ₂ is designated, and a screen including the two-dimensional code 17 when this confirmation button is designated. i ₃ may be displayed.

When the 2-dimensional code 17 is displayed, in step S203, the mobile terminal T ₁ of the payer, to reduce the transaction amount from the balance of the account of the payer that is managed by the payer's account information A _1.

In step S204, the mobile terminal T _n recipients displays a screen i ₁ as illustrated in FIG. 4 in accordance with the operation of the settlement unit B _n. The screen i ₁ includes a plurality of receipt buttons corresponding to a plurality of recipient accounts. Mobile terminal T _n recipients receives designation of recipients to either receipt button b ₃ of the plurality of receipt button on screen i _1. Then, the recipient's mobile terminal T _n executes a process (photographing mode) for reading the two-dimensional code 17 and displays a screen i ₄ that prompts the reading of the two-dimensional code 17. Mobile terminal T _n of recipients, to read the 2-dimensional code 17, for example, 2-dimensional, which is displayed on the display unit 14 of the mobile terminal T ₁ of the payer by the mobile terminal T _n imaging unit 15 of the recipient Take the code 17.

In step S205, the mobile terminal T _n of recipients, to confirm the reading and interpretation of the transaction information indicated by the two-dimensional code 17 was, transaction amount contained in the transaction information indicated by the two-dimensional code 17 (receipt amount) A confirmation button screen is displayed.

In step S206, the mobile terminal T _n of recipient, upon receiving a designation of confirmation button of the transaction amount by the recipient, trading balance of recipients of temporary accounts managed by the recipient account information A _n Add the amount.

In step S207, the mobile terminal T _n of recipient, if successful receipt of transaction amount, displays a screen indicating the receipt success or failure of the receipt of the transaction amount, a screen indicating the receipt failure indicate.

Payer, the screen that is displayed on the mobile terminal T _n of the recipient, or show a receipt success, or, or show a receipt failure, to make sure.

In step S208, the mobile terminal T ₁ of the payer, displays a screen i ₃ including a completion / redisplay button as illustrated in FIG. 5, the receipt of the transaction amount payer in the mobile terminal T _n recipients When it is confirmed that it is successful, the designation of the completion button b ₄ is accepted from the payer and the two-dimensional code 17 is deleted. On the other hand, if the payer's mobile terminal T ₁ confirms that the payer has failed to receive the transaction amount at the receiver's mobile terminal T _n , the payer's mobile terminal T ₁ accepts the designation of the redisplay button b ₅ from the payer. A redisplay screen i ₅ for redisplaying the two-dimensional code 17 as illustrated in FIG. When redisplaying the two-dimensional code 17, the payer's mobile terminal T ₁ changes the color of the two-dimensional code 17 or clearly indicates that it is redisplayed. The redisplay screen i ₅ is displayed so that the transaction based on the dimension data 17 can be clearly and easily grasped. If the two-dimensional code is displayed again, the process returns to step S204.

In step S209, the mobile terminal T _n recipients communicates with the server device 2.

Then, in step S210, the mobile terminal T _n of recipients, recipient account information A to balance the transaction amount account recipient being managed by adding at _n, transaction amount from the balance of the recipient of the temporary account Is deducted.

FIG. 6 is a diagram illustrating an example of a change in the account balance that occurs due to the transaction between the mobile terminals T ₁ and T _n .

Pattern A in FIG. 6 shows the account change state when the recipient's mobile terminal T _n communicates with the server device 2 before the payer's mobile terminal T ₁ after the transaction between the mobile terminals T ₁ and T _n. An example is shown.

First, in step A-1, the settlement section B ₁ of the mobile terminal T ₁ of the payer, and displayed on the display unit 14 the two-dimensional code 17 including transaction information indicating that the transaction amount is XXX, the payer subtracting the XXX from the balance of payment's account, which is managed by the account information a _1. Also, the settlement section B _n of the mobile terminal T _n of the recipient, reads the two-dimensional code 17 including transaction information indicating that the transaction amount is XXX, it is managed by the recipient account information A _n in accordance with the transaction information XXX is added to the balance of the recipient's temporary account.

Next, in Step A-2, the settlement section B _n of the mobile terminal T _n of recipients, the management unit 61 of the server apparatus 2 transmits the reception information including the transaction information. Then, the settlement section B _n of the mobile terminal T _n recipients subtracts the XXX from balance of recipients of temporary accounts managed by the recipient account information A _n, adds XXX to balance the recipient's account To do. In addition, the management unit 61 of the server apparatus 2 subtracts XXX from the balance of the payer's account managed by the account information 8 based on the transaction information, and adds XXX to the balance of the recipient's account.

Next, in step A-3, the payment unit B ₁ of the payer's mobile terminal T ₁ transmits payment information including transaction information to the management unit 61 of the server device 2. Then, the management unit 61 of the server device 2, for example, receives the transaction information received from the settlement unit B _n of the mobile terminal T _n recipients previously from the settlement unit B ₁ of the mobile terminal T ₁ of the payer transactions Compare with information to determine consistency.

Pattern B in FIG. 6 shows the account change state when the payer's mobile terminal T ₁ communicates with the server device 2 before the recipient's mobile terminal T _n after the transaction between the mobile terminals T ₁ and T _n. An example is shown.

  Step B-1 is the same as Step A-1.

Next, in Step B-2, the settlement section B _n of the mobile terminal T ₁ of the payer, the management unit 61 of the server apparatus 2 transmits the payment information including the transaction information. Then, the management unit 61 of the server device 2 deducts XXX from the balance of the payer's account managed by the account information 8 based on the transaction information, and records (adds) XXX to the temporary account.

Next, in Step B-3, the settlement section B _n of the mobile terminal T _n of recipients, the management unit 61 of the server apparatus 2 transmits the reception information including the transaction information. Then, the settlement section B _n of the mobile terminal T _n recipients subtracts the XXX from balance of recipients of temporary accounts managed by the recipient account information A _n, adds XXX to balance the recipient's account To do. In addition, the management unit 61 of the server apparatus 2 subtracts XXX from the balance of the temporary account managed by the account information 8 based on the transaction information, and adds XXX to the balance of the recipient's account.

In FIG. 6, the transaction between the payer's mobile terminal T ₁ and the recipient's mobile terminal T _n is executed between the mobile terminals T ₁ and T _n without communicating with the server device 2. Since the server device 2 operated by the service provider manages the account between the payer and the recipient, the account information 8 managed by the server device 2 is promptly exchanged between the payer and the recipient as soon as possible. It is preferable to reflect the contents of the transaction in between.

In this embodiment, the recipient cannot use the funds of the temporary account until communication is performed between the recipient's mobile terminal T _n and the server device 2. Also, the recipient, for example, until a predetermined period of time, such as one month from the transaction has passed, if not executing communication between a mobile terminal T _n of the server apparatus 2 and the recipient, the recipient of the temporary account The balance will be refunded. Therefore, the recipient wants to update the recipient's account on the server device 2 side as soon as possible.

In this embodiment, the recipient is often a seller who sells goods to the payer or a provider who provides services to the payer, and is doing business in the country where the settlement transaction was made. There are many cases. In this case, it is considered that the recipient has many opportunities to communicate with the server device 2 through the network 3 using the mobile terminal T _n and the communication cost is low.

From the above circumstances, in the present embodiment, at least the recipient can be given an incentive to promptly execute communication between the recipient's mobile terminal T _n and the server device 2. The account information 8 can be updated promptly.

  FIG. 7 is a diagram illustrating an example of the two-dimensional code 17.

  The two-dimensional code 17 includes transaction information 20, a hash value 21 of transaction information, and a payer ID 23.

The transaction information 20 includes a currency ID, a transaction amount, a transaction ID, and a time stamp 22. The time stamp 22 is time information generated at the time of a transaction between the mobile terminals T ₁ and T _n by the clock function of the payer's mobile terminal T _1. The time stamp 22 is the generation time of the two-dimensional code 17 or the two-dimensional code 17. Is provided from the payer's mobile terminal T ₁ to the recipient's mobile terminal T _n . This time stamp 22 is used to determine whether or not a predetermined time has elapsed since the transaction between the mobile terminals T ₁ and T _n .

  The hash value 21 of the transaction information is a value obtained by hashing the transaction information 20 with a hash function using the secret information 9 as a salt.

The payer ID 23 is information for identifying the payer. Since the recipient's mobile terminal T _n may not be able to recognize the payer ID 23 included in the two-dimensional code 17, the payer ID 23 included in the two-dimensional code 17 may be encrypted.

FIG. 8 is a diagram illustrating an example of the reception information 18 transmitted from the recipient's mobile terminal T _n to the server device 2.

  The receipt information 18 includes transaction information 20, a hash value 21 of the transaction information, a payer ID 23, and a recipient ID 24. The payer ID 23 included in the receipt information 18 may be encrypted.

The hash value 21 of the transaction information included in the received information 18, the hash value 21 of the transaction information mobile terminal T _n recipients are included in the two-dimensional code 17 acquired from the mobile terminal T ₁ of the payer using Of the transaction information for comparison calculated by the recipient's mobile terminal T _{n based on the} transaction information 20 included in the two-dimensional code 17 and the secret information 9 stored in the storage unit M _n . A hash value may be used.

When receiving the receipt information 18 from the recipient's mobile terminal T _n , the management unit 61 of the server device 2 first stores the transaction information 20 included in the receipt information 18 and the storage unit 4 of the server device 2. A hash value calculated by the server is calculated based on the secret information 9 that is stored. And the management part 61 of the server apparatus 2 is the transaction information contained in the receipt information 18, when the hash value 21 of the transaction information contained in the receipt information 18 and the hash value of server calculation correspond. 20, the account information 8 stored in the storage unit 4 is updated.

In updating the account information 8, the management unit 61 of the server device 2 calculates the balance of the recipient account managed by the account information 8. The management unit 61 of the server device 2, accounts and account balances recipients of which are managed by the information 8, the recipient mobile terminal T _n account information A _n balance recipient account managed by the Is determined to be valid, and if not, it is determined to be invalid. The management unit 61 of the server device 2 updates the account information 8 when it is determined to be valid.

FIG. 9 is a diagram illustrating an example of payment information 19 transmitted from the payer's mobile terminal T _n to the server device 2.

  The payment information 19 includes transaction information 20, a hash value 21 of transaction information, and a payer ID 23.

  As the hash value 21 of the transaction information included in the payment information 19, the hash value 21 of the transaction information calculated when the two-dimensional code 17 is generated may be used.

When receiving the payment information 19 from the payer's mobile terminal T ₁ , the management unit 61 of the server device 2 is first stored in the transaction information 20 included in the payment information 19 and the storage unit 4 of the server device 2. A hash value calculated by the server is calculated based on the secret information 9 that is stored. And the management part 61 of the server apparatus 2 is the transaction information contained in the payment information 19, when the hash value 21 of the transaction information contained in the payment information 19 and the hash value of server calculation correspond. 20, the account information 8 stored in the storage unit 4 is updated.

In updating the account information 8, the management unit 61 of the server device 2 calculates the balance of the payer's account managed by the account information 8. Then, the management unit 61 of the server apparatus 2 balances the account of the payer managed by the account information 8 and the account balance of the recipient managed by the account information A ₁ of the payer's mobile terminal T _1. Is determined to be valid, and if not, it is determined to be invalid. The management unit 61 of the server device 2 updates the account information 8 when it is determined to be valid.

  In the payment system 1, the user may use the mobile terminal as a payer, and may use the mobile terminal as a recipient.

When performing a transaction as recipient, the settlement section B _n of the mobile terminal T _n is the time of the transaction between the mobile terminals T _1, T _n, adds the transaction amount to the temporary account managed by the recipient account information A _n and (a-1 and B-1 of FIG. 6), when the communication performed between the mobile terminal T _n and the server device 2, from the temporary account managed by the recipient account information a _n, recipients of recipient being managed by the account information a _n into account reclassified the transaction amount (a-2 and B-3 of FIG. 6).

When performing a transaction as a payer, the settlement unit B ₁ of the mobile terminal T ₁ subtracts the payment amount from the payer's account managed in the account information A ₁ of the payer at the time of the transaction (above 6A-1 and B-1), when the payer's mobile terminal T ₁ and the server device 2 communicate with _each other, the settlement unit B ₁ of the payer's mobile terminal T ₁ displays the payer's account information A _1. There is no need to make changes to payer accounts managed by.

When the management unit 61 of the server apparatus 2 performs communication with the server apparatus 2 prior to the payer's mobile terminal T ₁ after the transaction between the mobile terminals T ₁ and T _n , the receiver's mobile terminal T _n. The transaction amount from the payer's account managed by the account information 8 to the recipient's account is transferred (A-2 in FIG. 6).

On the other hand, the management unit 61 of the server device 2 is managed by the account information 8 when the payer's mobile terminal T ₁ communicates with the server device 2 after the transaction between the mobile terminals T ₁ and T _n. transfer the transaction amount from the account to the temporary account of the payer who is (B-2 of FIG. 6), then, when the mobile terminal T _n recipient has performed a communication with the server device 2 is managed by the account information 8 The transaction amount is transferred from the existing temporary account to the recipient's account (B-3 in FIG. 6).

As described above, when the mobile terminals T ₁ and T _n communicate with the server apparatus 2, the account balance of the payer's mobile terminal T ₁ , the account balance of the receiver's mobile terminal T _n , and the account balance of the server apparatus 2 are invalid. Or as long as there is no error.

  Hereinafter, the safety of the two-dimensional code 17 will be described.

  First, a first example of ensuring the safety of the two-dimensional code 17 will be described.

In order to prevent the two-dimensional code 17 from being copied and the copied two-dimensional code 17 from being reused, for example, the transaction information 20 of the two-dimensional code 17 includes a time stamp 22. In other words, the settlement unit B ₁ includes the generation time in the two-dimensional code 17. The settlement unit B _n of the mobile terminal T _n of recipient, if the timestamp 22 of the transaction information 20 belongs to the permissible range determined time information obtained from the clock function of the mobile terminal T _n of the recipient as a reference On the other hand, when the two-dimensional code 17 is determined to be valid and the time stamp 22 does not belong to the allowable range, the two-dimensional code 17 is determined to be invalid. Further, even when the time stamp 22 is used, it is conceivable that the payer collaborates with a plurality of recipients and presents the two-dimensional code 17 having the same contents almost simultaneously. In this case, the server device 2, first by only the mobile terminal recipient that communicates with the server apparatus 2 it is judged to be a mobile terminal T _n legitimate recipient, to prevent overlapping use of the two-dimensional code 17 .

  Next, a second example of ensuring the safety of the two-dimensional code 17 will be described.

  In order to detect that the two-dimensional code 17 is generated by the legitimate application 10, for example, it is assumed that the two-dimensional code 17 includes encryption information. For example, even if a malicious payer creates and uses a program that only displays a two-dimensional code, it is necessary for the recipient to detect and eliminate the two-dimensional code that has been illegally generated. When the two-dimensional code 17 has simple contents including transaction information 20 including a currency ID, transaction amount, transaction ID, time stamp 22 and the like, and displayed by information that can be recognized by the recipient, the two-dimensional code 17 Need to be prevented from being imitated. For example, when a malicious user copies the two-dimensional code 17 displayed by another payer in the past and changes only the time stamp 22 of the transaction information 20 to generate an illegal two-dimensional code 17, this illegal It is necessary to detect and eliminate the two-dimensional code 17. In the present embodiment, unique cryptographic information is used to detect an illegally generated two-dimensional code 17. In the present embodiment, in order to detect that the two-dimensional code 17 is generated by the legitimate application 10, the payer application 10 and the recipient application 10 are used using encryption information that only the application 10 can know. And mechanically check the two-dimensional code 17. When the encryption information is included in the two-dimensional code 17, it is necessary to prevent reuse by copying the displayed two-dimensional code 17, and that the encryption information is not imitated. As for the former, by calculating the hash value of the transaction information 20 including the time stamp 22, the encryption information is changed with the time, and reuse is prevented. For the latter, first, the management program 7 generates secret information 9, the management program 7 and the application 10 share the secret information 9, and uses this secret information 9 as a salt, currency ID, transaction amount, transaction ID, The encryption information obtained by hashing the transaction information 20 including the time stamp 22 is associated with the transaction information 20. The application 10 generates the two-dimensional code 17 based on the transaction information 20 and the encryption information that are related to each other. Thereby, it is possible to prove that the transaction information 20 included in the two-dimensional code 17 is generated by the legitimate application 10.

The secret information 9 is generated by the server apparatus 2 and is shared by the application 10 when the user application 10 communicates with the server apparatus 2. The mobile terminals T ₁ and T _n store the secret information 9 in the storage units M ₁ and M _n in a form that the user cannot access. The payer's mobile terminal T ₁ passes the encryption information including the transaction information hash value 21 obtained by hashing the transaction information 20 using the secret information 9 together with the transaction information 20 to the recipient's mobile terminal T _n . Mobile terminal T _n recipients calculates a hash value of the received transaction information 20 and transaction information for comparison of transaction information from the secret information 9 for being stored in the mobile terminal T _n, the encryption information for comparison Generate. The recipient's mobile terminal T _n matches the encryption information of the two-dimensional code 17 received from the payer's mobile terminal T ₁ and the comparison encryption information generated by the recipient's mobile terminal T _n . Furthermore, if it belongs to the permissible range determined time information with the time stamp 22 of the transaction information 20 is a mobile terminal T _n recipients, based on, is determined as valid the two-dimensional code 17. On the other hand, the recipient mobile terminal T _n does not match the encryption information of the two-dimensional code 17 and the comparison encryption information generated by the recipient mobile terminal T _n , or the time of the transaction information 20. When the stamp 22 does not belong to the allowable range, tampering of the two-dimensional code 17 is detected.

It is extremely difficult to back-calculate the secret information 9 from the hash value, and it takes time to calculate the secret information 9 from the hash value even if back-calculation is possible. Therefore, in the present embodiment, the validity of the two-dimensional code 17 is ensured by changing the secret information 9 every time a predetermined time elapses, even when the secret information 9 is calculated from the hash value. For example, if the secret information 9 is changed once a month, the user's mobile terminals T ₁ and T _n need to communicate with the server device 2 at least once a month. If it is necessary to communicate with the server device 2 too frequently, it becomes a burden on the user (particularly the payer side). For this reason, the secret information 9 may be updated about once a month, for example.

  Since it takes an enormous amount of time to decrypt the hashed information, the confidentiality can be sufficiently secured by updating the secret information 9 every time a predetermined period elapses. When encryption information is generated using a plurality of secret information 9, it is further difficult to decrypt the encryption information, and the security of the two-dimensional code 17 can be ensured.

In the present embodiment, the secret information 9 is, for example, when the mobile terminals T ₁ and T _n execute communication with the server device 2 using the application 10 (payment units B ₁ and B _n ) at the beginning of each month. transmitted from the apparatus 2 is received in the mobile terminal T _1, T _n, are stored in the security secure area of the storage unit M _1, M _n of the mobile terminal T _1, T _n. The time information may be a numerical value that changes every certain interval (for example, 30 seconds) in consideration of the difference between the payer's mobile terminal T ₁ and the recipient's mobile terminal T _n . For example, the mobile terminals T ₁ and T _n may allow the difference between the predetermined units before and after the time information comparison. The application 10 (settlement units B ₁ and B _n ) may have a function of synchronizing time information between the mobile terminals T ₁ and T _n that perform transactions.

  Next, a third example of ensuring the safety of the two-dimensional code 17 will be described.

If the mobile terminal T _n recipient fails to read the 2-dimensional code 17, or recipient measures are necessary when executing a multiple reads the two-dimensional code 17. In this embodiment, the application 10 issues a transaction ID when the payer's mobile terminal T ₁ generates the two-dimensional code 17, and redisplays the two-dimensional code 17 with the same transaction ID as necessary. (Corresponding to the re-display of the two-dimensional code 17 in step S208 in FIG. 2). When redisplaying the two-dimensional code 17 of the same transaction ID, the payment unit B ₁ of the payer's mobile terminal T ₁ reduces the balance from the payer's account managed by the payer's account information A _1. not, and if the settlement unit B _n of the mobile terminal T _n of the recipient to read the 2-dimensional code 17 in the same transaction ID, and the balance of recipients of temporary accounts managed by the recipient account information a _n Not going to change.

  Next, a fourth example of ensuring the safety of the two-dimensional code 17 will be described.

In step S203 of FIG. 2, the payment unit B ₁ of the payer's mobile terminal T ₁ displays the two-dimensional code 17 on the display unit 14, and the payer managed by the payer's account information A ₁ is displayed. Reduce the transaction amount from your account. At this stage, the payer alone has reduced the balance of the payer's account without handing over funds to the recipient. In the present embodiment, as described above, when the recipient's mobile terminal T _n does not communicate with the server device 2 within a predetermined period (eg, one month) from the transaction, A process of refunding the transaction amount reduced from the current account is executed, and the balance of the payer's account is restored. Thereby, the consistency of the account information A ₁ , A _n , 8 can be ensured.

  As described above, in the present embodiment, the safety of the two-dimensional code 17 is ensured, and for example, it is possible to prevent an inappropriate operation by a malicious user from affecting the transaction.

Hereinafter, prevention of data forgery in the mobile terminals T ₁ and T _n will be described.

In the present embodiment, account information A ₁ and _An are stored in the storage units M ₁ and M _n of the mobile terminals T ₁ and T _n . Therefore, protection of account information A _1, A _n is important, it is necessary to prevent the account information A _1, A _n is forged.

In the present embodiment, the mobile terminal T _1, T storage unit provided in the _n M _1, M _n, for example, with ensuring security area. Reading from data stored in the security ensuring area from other programs other than the application 10 is restricted. Account A ₁ including the balances and transaction information for the account, A _n, for example, is encrypted, the encrypted account information A _1, A _n is, the mobile terminal T _1, T _n Securing area for storing Is done. This makes it possible to prevent forgery of account information A _1, A _n.

Furthermore, in this embodiment, the forgery of data of the mobile terminals T ₁ and T _n is prevented using the secret information 9.

To prevent forgery of account information A _1, A _n by the user is stored in the mobile terminal T _1, T _n (e.g., increasing the balance), for example, the application 10 (the payer payment unit B ₁ ) Has a function of checking the validity of the account balance before making a payment.

FIG. 10 is a block diagram showing an example of changes in the account information A ₁ stored in the storage unit M ₁ of the payer's mobile terminal T ₁ . In FIG. 10, data is stored in order from top to bottom.

The storage unit M ₁ includes a security ensuring area MS ₁ and a semi-security ensuring area MS ₂ . Secret information 9 is stored in the security ensuring area MS ₁ . Account information A ₁ is stored in the semi-security ensuring area MS ₂ .

In the example of FIG. 10, first, when the payer's mobile terminal T ₁ and the server apparatus 2 communicate with each other, the payer settlement unit B ₁ determines the balance X ₀ of the payer's account and the balance X ₀ . The hash value HX ₀ calculated in combination with the secret information 9 is associated and stored in the account information A ₁ .

Next, the payment unit B ₁ of the payer combines the balance X ₀ of the payer's account with the secret information 9 immediately before the transaction (payment by the payer) between the mobile terminals T ₁ and T _n for comparison. A hash value is calculated, and the previously calculated hash value HX ₀ is compared with the hash value for comparison. If the comparison results match, the payer's settlement unit B ₁ determines that the balance X ₀ of the payer's account is valid.

When the balance X ₀ of the payer's account is valid, the payment unit B ₁ of the payer calculates the hash value HY ₁ of the transaction information by combining the transaction information Y ₁ and the secret information 9. Then, the payment unit B ₁ of the payer stores the transaction information Y ₁ and the hash value HY ₁ of the transaction information in association with each other in the account information A ₁ . Then, the payment unit B ₁ of the payer displays the transaction information Y ₁ and the two-dimensional code 17 generated based on the hash value HY ₁ of the transaction information on the display unit 14, and displays the transaction information on the mobile terminal T of the recipient. Pass to _n .

As a result of the transaction, the payment unit B ₁ of the payer calculates the balance X ₁ of the new payer's account by subtracting the transaction amount included in the transaction information Y ₁ from the account balance X ₀ . The payment unit B ₁ of the payer stores the balance X ₁ of the new account of the payer and the hash value HX ₁ calculated by combining the balance X ₁ and the secret information 9 in the account information A ₁ in association with each other. To do.

Thereafter, the account information A ₁ is similarly updated.

For example, when the payer's mobile terminal T ₁ and the server device 2 communicate with each other in the account information A ₁ in which the account balance X _n and the hash value HX _n are associated with each other, the server device 2 is managed. The unit 61 compares the balance of the payer managed by the account information 8 of the server device 2 with the balance of the payer managed by the account information A ₁ of the payer's mobile terminal T ₁ , and they match. Whether or not the balance of the payer's account is consistent.

The settlement unit B ₁ of payer, because the mobile terminal T ₁ and the server device 2 of the payer has communicated, combined with outstanding Z ₀ of the new account payer, and the balance Z ₀ and secret information 9 Is stored in the account information A ₁ in association with the calculated hash value HZ ₀ .

In the present embodiment, the payment unit B ₁ of the payer, when the balance of the payer's account is larger than the transaction amount in order to prevent a transaction amount exceeding the balance of the payer's account from occurring. A function of permitting the transaction may be included.

In FIG. 10 described above, a mechanism for protecting data is described by taking an example of a change in the account information A ₁ of the storage unit M ₁ of the payer's mobile terminal T _1. However, the storage unit of the recipient's mobile terminal T _n is described. it is possible to apply similar mechanism also account information a _n of M _n. However, if the receipt is a change in the recipient's account is only temporary account, the provisional account status is transferred to the recipient's account is when the mobile terminal T _n recipient has communicated with the server apparatus 2 In this case, a transaction and balance consistency check is executed between the recipient's mobile terminal T _n and the server device 2. Therefore, checking the hash value corresponding to the account balance (e.g., X _n) (e.g. HX _n), to be newly calculated, it is only the front and rear make payments.

FIG. 11 is a block diagram illustrating an outline of the flow of a payment process executed in the payment system 1 of the present embodiment. In FIG. 11, for simplicity of explanation, the server device 2, the management unit 61, the mobile terminals T ₁ and T _n , and the settlement units B ₁ and B _n are illustrated, and other components are omitted. Yes.

In the first state C-1, the settlement units B ₁ and B _n of the mobile terminals T ₁ and T _n receive the secret information 9 from the management unit 61 of the server device 2 every predetermined period. For example, the settlement units B ₁ and B _n of the mobile terminals T ₁ and T _n receive the secret information 9 from the management unit 61 of the server device 2 when first communicating with the management unit 61 of the server device 2 in each month. To do. The settlement units B ₁ and B _n of the mobile terminals T ₁ and T _n store the secret information 9 received from the server device 2 in the storage units M ₁ and M _n . The secret information 9 stored in the storage units M ₁ and M _n is the same. As described above, the management unit 61 of the server device 2, the same time sending a plurality of secret information 9 to the settlement unit B _1, B _n of the mobile terminal T _1, T _n, the mobile terminal T _1, T _n The settlement units B ₁ and B _n may store a plurality of secret information 9 in the storage units M ₁ and M _n , but in order to simplify the description in FIG. T _1, T _n the settlement unit B _1, the secret information 9 that is sent at the same time to the B _n is one is.

In the second state C-2, when the settlement unit B ₁ of the payer's mobile terminal T ₁ accepts the transaction amount designation from the payer, the current account of the payer managed by the account information A ₁ is displayed. Calculate the hash value of the balance. When the payment unit B ₁ of the payer's mobile terminal T ₁ matches the hash value of the balance of the payer's current account with the hash value that is managed by the account information A ₁ and calculated earlier, Determine if the payer's current account balance is greater than or equal to the transaction amount. The settlement unit B ₁ of the payer's mobile terminal T ₁ determines that the transaction is invalid if the hash values do not match or the balance of the payer's current account is not equal to or greater than the transaction amount.

The settlement unit B ₁ of the payer's mobile terminal T ₁ displays the two-dimensional code 17 on the display unit 14 when the hash values match and the balance of the payer's current account is equal to or greater than the transaction amount.

The settlement unit B ₁ of the payer's mobile terminal T ₁ subtracts the transaction amount from the balance of the payer's account managed by the payer's account information A ₁ along with the display of the two-dimensional code 17.

The imaging unit 15 of the recipient's mobile terminal T _n reads the two-dimensional code 17.

The settlement unit B _n of the recipient's mobile terminal T _n interprets the two-dimensional code 17 and converts the secret information 9 stored in the storage unit M _n and the transaction information 20 included in the two-dimensional code 17. Based on this, the hash value of the transaction information for comparison is calculated. Then, the settlement unit B _n of the recipient's mobile terminal T _n matches the hash value 21 of the transaction information included in the two-dimensional code 17 with the hash value of the transaction information for comparison, and the transaction information 20 the balance of the included time stamp 22 is may fall within the allowable range from the time information with the mobile terminal T _n recipients, temporary account managed by the recipient account information a _n, the 2-dimensional code 17 Is added to the transaction amount indicated by the transaction information 20 included. Settlement unit B _n of the mobile terminal T _n recipients, if the hash values do not match, or if the time stamp 22 is not within the allowable range, abort the transaction, it displays the information indicating that it has stopped the transaction unit 14 is displayed.

Incidentally, the settlement section B _n of the mobile terminal T _n recipients communicates with the server device 2, when the validity of the transaction is confirmed, the recipient account information A _n temporary recipient being managed by Execute the process of transferring the account balance to the recipient's account.

In the third state C-3, when the payment information 19 is transmitted from the payment unit B ₁ of the payer's mobile terminal T ₁ to the management unit 61 of the server device 2, the management unit 61 of the server device 2 stores the storage unit The hash value of the transaction information for comparison is calculated based on the secret information 9 stored in 4 and the transaction information 20 included in the payment information 19. And the management part 61 of the server apparatus 2 compares the hash value 21 of the transaction information contained in the payment information 19 with the hash value of the transaction information for comparison.

Similarly, when the receipt information 18 is transmitted from the settlement unit B _n of the recipient's mobile terminal T _n to the management unit 61 of the server device 2, the management unit 61 of the server device 2 is stored in the storage unit 4. Based on the secret information 9 and the transaction information 20 included in the receipt information 18, a hash value of comparison transaction information is calculated. Then, the management unit 61 of the server device 2 compares the hash value 21 of the transaction information included in the receipt information 18 with the hash value of the transaction information for comparison.

When the management unit 61 of the server device 2 indicates that the comparison result does not match, the transaction is stopped, and information indicating that the transaction is stopped is sent to the payment unit B ₁ and the receiver of the payer's mobile terminal T _1. to the transmission to the settlement unit B _n of the mobile terminal T _n.

  When the management unit 61 of the server device 2 indicates that the comparison results match, the management unit 61 executes a process of transferring the transaction amount from the payer account managed by the account information 8 of the server device 2 to the recipient account. . In the transfer process, the transaction amount may be transferred from the payer's account to the recipient's account via the temporary account.

Further, the management unit 61 of the server device 2 includes the balance of the payer's account managed by the account information 8 of the server device 2 and the balance of the payer's account managed by the payer's mobile terminal T _1. comparing, and compares the balance of recipients of accounts managed by account information 8 of the server device 2, the recipient being managed by the mobile terminal T _n recipients account and balance.

  The management unit 61 of the server apparatus 2 determines that the transaction is valid when the balance comparison results indicate that they match.

When the management unit 61 of the server device 2 indicates that the balance comparison results do not match, the management unit 61 determines that the transaction is unfair, cancels the transaction, and indicates information indicating that the transaction has been stopped. Transmit to T ₁ and the recipient's mobile terminal T _n .

FIG. 12 is a diagram illustrating an example of a screen transition state at the time of deposit / withdrawal in the mobile terminals T ₁ and T _n .

The screen i ₁ includes the balance of the account of the user in each currency, a payment button, and a receipt button. Further, the screen i ₁ includes a deposit / withdrawal button b ₆ for instructing deposit / withdrawal. The user, in the case of deposits and withdrawals, to specify the withdrawal button b _6. Then, a screen i ₆ for designating a deposit / withdrawal destination such as a bank or a credit card company is displayed on the mobile terminals T ₁ and T _n . In this embodiment, it is assumed that deposits and withdrawals with respect to a bank account are possible, deposits and withdrawals using a credit card are possible, and deposits and withdrawals using a service provided by a convenience store are also supported. For this reason, the payment system 1 of the present embodiment can cooperate with each other using a bank system, a credit card company system, a convenience store system, and an API.

  FIG. 13 is a diagram illustrating a transition to a screen for forex trading.

The mobile terminals T ₁ and T _n may perform foreign exchange transactions by communicating with the server device 2.

In the present embodiment, the application 10 may be capable of cooperating with software for foreign exchange transactions. The screen i ₁ includes an FX transaction button b ₇ for instructing to move to a screen for foreign exchange transactions. When the FX transaction button b ₇ is designated by the user, a screen i ₇ for accepting a foreign exchange transaction operation is displayed.

The user, the balance of the account between each currency that is managed by the account information A _1, A _n of the mobile terminal T _1, T _n, it is possible to transfer through foreign exchange transactions.

The mobile terminals T ₁ and T _n accept the designation of trading currency in accordance with the operation of the user, and perform, for example, a transaction for converting yen to US dollars or a transaction for converting US dollars to euros.

  The back end of the settlement system 1 collects the user's foreign exchange transactions for each predetermined period (pool period, eg 30 minutes), sends only the net position to the foreign exchange transaction service provider's system, The system may execute foreign exchange transactions.

  The settlement system 1 may adjust the bid rate, offer rate, and spread presented to the user according to the market situation of the foreign exchange transaction, and may adjust a predetermined period for generating the net position. Since the number of users is small at the beginning of the introduction of the payment service by the payment system 1, it is possible to increase the spread for a predetermined period, or to spread the spread gradually. Good.

  With respect to foreign exchange transactions, a user may directly access a foreign exchange transaction service provider's system without going through an operator that provides a payment service by the payment system 1.

In the present embodiment described above, it is necessary to perform communication between the payer and the mobile terminal of the recipient transaction amounts between recipient from (settlement) within a predetermined time T _n and the server apparatus 2 However, even when the mobile terminals T ₁ , T _n and the server device 2 are not communicating at the time of the transaction between the payer and the recipient, the transaction can be performed between the mobile terminals T ₁ , T _n. .

In the present embodiment, by using the application 10 provided in the mobile terminal T _1, T _n, for realizing the settlement between mobile terminals T _1, T _n, it is not necessary to use a special device.

In the present embodiment, the account information A ₁ , A _n , 8 may be managed in a plurality of currencies, and can be deposited and withdrawn from a bank account or a credit card.

The settlement system 1 according to the present embodiment can provide a convenient and low-cost settlement service to a user such as a traveler in place of the settlement using cash or a card. Can be improved. For example, when a taxi fee is settled after arrival in a foreign country, the user can use a settlement with cash (for example, banknotes or coins), a settlement with a card with an international brand, or the like. However, settlement with cash is cumbersome and expensive, such as exchange fees. Payment by card requires a special card payment terminal and a network. For example, a recipient such as a member store needs to have special equipment for payment. On the other hand, when using the payment system 1 according to the present embodiment, the application 10 is installed in the mobile terminals T ₁ and T _n and the activated application 10 is operated, so that it can be easily performed anywhere and with anyone. Settlement is possible.

In the payment system 1 according to the present embodiment, only the account information A ₁ , A _n , 8 is updated, and banknotes or coins are not used. Therefore, cashlessness can be promoted.

In the payment system 1 according to the present embodiment, since transaction information between the mobile terminals T ₁ and T _n is collected in the server device 2, it is possible to trace transaction contents (for example, transaction partner and transaction amount) in cash. It is easier than trading.

In the present embodiment, payment can be made between the mobile terminals T ₁ and T _n even in an environment where at least one of the mobile terminals T ₁ and T _n cannot communicate with the server device 2.

In the present embodiment, a case where data for settlement between mobile terminals T ₁ and T _n is exchanged (provided / acquired) by displaying and reading (photographing) the two-dimensional code 17 will be described as an example. However, for example, various wireless communication, short-range wireless communication, infrared communication, communication using a server device other than the server device 2, transmission / reception by e-mail, and the like between the mobile terminals T ₁ and T _n You may exchange data with.

In the present embodiment, instead of the two-dimensional code 17, other types of data such as a one-dimensional code and encrypted information may be exchanged between the mobile terminals T ₁ and T _n .

In the present embodiment, after the payer's mobile terminal T ₁ displays the two-dimensional code 17 and the payer does not designate the completion button b ₄ , the payer's mobile terminal T ₁ automatically deletes the two-dimensional code 17 after a predetermined time has elapsed. It is good. Thereby, the state in which the two-dimensional code 17 is displayed is maintained, and it is possible to avoid a risk that the two-dimensional code 17 is read by another third party mobile terminal that is not the recipient.

In this embodiment, when the recipient's mobile terminal T _n fails to read the two-dimensional code 17 and the payer's mobile terminal T ₁ accepts the designation of the redisplay button b ₅ , the payer's mobile terminal T ₁ may re-display the same two-dimensional code 17 as the previously displayed two-dimensional code 17, recalculate the hash value of transaction information including a new time stamp, and transaction including a new time stamp The updated two-dimensional data may be displayed using the information and the recalculated hash value. By using the two-dimensional data updated with the transaction information including a new time stamp, to time information enables payment even when the change in the mobile terminal T _n recipients over time Can do. In this way, even when displaying updated two-dimensional data using transaction information including a new time stamp, it is possible to increase transaction safety by providing a time limit on the display of updated two-dimensional data. can do.

In the present embodiment, the account information A _n payer's account information A ₁ and the recipient may be respectively managing the accounts of the account and the private for business (public). For example, the settlement units B ₁ and B _n can perform deposit / withdrawal when a user's authentication is successful with respect to a business account, thereby realizing a storage agent service. Good. For example, the settlement units B ₁ and B _n may provide a prepaid payment service that does not allow a refund for a private account. When providing a prepaid payment service to a user's private account, the service provider uses the payment system 1 to calculate, for example, an estimated security deposit and use it if necessary. An upper limit of balance may be set for the private account of the person.

(Second Embodiment)
In the present embodiment, a modified example of the first embodiment will be described.

In the first embodiment, when the payer's mobile terminal T ₁ displays the two-dimensional code 17 and the transaction information 20 is exchanged by reading the two-dimensional code 17 on which the recipient's mobile terminal T _n is displayed. Is described as an example.

On the other hand, in the present embodiment, the recipient's mobile terminal T _n displays the two-dimensional code 17 and the payer's mobile terminal T ₁ reads the two-dimensional code 17 to exchange transaction information 20. Will be described.

If the mobile terminal T _n recipients to display a two-dimensional code 17 reads the two-dimensional code 17 that the mobile terminal T ₁ of the payer is displayed. The payer's mobile terminal T ₁ determines whether or not the transaction information 20 included in the read two-dimensional code 17 is valid, and updates the payer's account information A ₁ if the transaction information 20 is valid. ) Is displayed to indicate that it is permitted. Mobile terminal T _n of the recipient, reads the two-dimensional code indicating to permit the transaction, the 2-dimensional code read is if legitimate, and updates the account information A _n recipients.

As described above, the method of exchanging transaction information 20 between the payer's mobile terminal T ₁ and the recipient's mobile terminal T _n can be changed as appropriate.

(Third embodiment)
In the present embodiment, modified examples of the first and second embodiments will be described.

In the payment system 1 according to each of the above embodiments, the mobile terminals T ₁ and T _n may issue a warning message that prompts the user to communicate with the server device 2 periodically. Thereby, it is possible to prevent the transaction from being canceled because the transaction information 20 is not transmitted to the server device 2 even though the transaction is performed between the mobile terminals T ₁ and T _n .

In the present embodiment, the server device 2 indicates the time when the transaction is performed between the mobile terminals T ₁ and T _n , for example, the time stamp 22 included in the transaction information 20 of the receipt information 18 or payment information. Detection is based on a time stamp 22 included in 19 transaction information 20.

In the present embodiment, when the transaction is canceled and the transaction amount is refunded from the recipient's account to the payer's account, the settlement system 1 executes, for example, one of the following first to third refund processes. In the first to third refund of the following, the account information 8 recipient account information A _n and the management server 2, the recipient's account, in addition to the temporary account is used to manage a different account . The separate account is used to refund the transaction amount from the recipient to the payer. In this embodiment, the separate account is an account used in the background and does not need to be recognized by the user. In this embodiment, another account is managed in association with a transaction ID. In other words, a separate account is used for each transaction.

In the first refund process, the mobile terminals T ₁ and T _n do not communicate with the server device 2 until a predetermined period after the transaction elapses, and then the recipient mobile terminal T _n communicates with the server device 2. Thereafter, it is executed when the payer's mobile terminal T ₁ communicates with the server device 2.

In the first refund process, first, at the time of the predetermined period of time from the transaction, the settlement section B _n of the mobile terminal T _n of recipient, transaction amount of temporary accounts managed by the recipient account information A _n Move to another account.

Then, when the settlement unit B _n of mobile terminals T _n recipient has communicated with the management unit 61 of the server apparatus 2, the management unit 61 of the server device 2 is managed by the recipient account information A _n It is determined whether or not the transaction amount of another account is reflected in another account managed by the account information 8 of the server device 2. For unreflected, the management unit 61 of the server device 2, reflects a different account managed the transaction amount to another account managed by the recipient account information A _n in the account information 8 of the server device 2 ( add), to erase the transaction amount of the different accounts that are managed by the recipient of the account information a _n. At the same time, the management unit 61 of the server device 2 does not reflect (does not reduce) the transaction amount in the payer's account managed by the account information 8 of the server device 2.

Next, when the settlement unit B ₁ of the payer's mobile terminal T ₁ communicates with the management unit 61 of the server device 2, the management unit 61 of the server device 2 is managed by the account information 8 of the server device 2. Determine if another account has a transaction amount corresponding to the refund. This determination is made based on the transaction ID. When it is determined that there is a transaction amount corresponding to the refund, the settlement unit B ₁ of the payer's mobile terminal T _{1 determines} the payer's mobile terminal T ₁ based on another account managed by the account information 8 of the server device 2. The payer's account managed by the account information A ₁ is recovered (the transaction amount is added to the payer's account managed by the payer's account information A ₁ ). Thereafter, the management unit 61 of the server device 2 deletes the transaction amount of another account managed by the account information 8 of the server device 2.

In the second refund process, the mobile terminals T ₁ and T _n do not communicate with the server device 2 until a predetermined period has elapsed after the transaction, and then the payer's mobile terminal T ₁ communicates with the server device 2. Thereafter, it is executed when the recipient's mobile terminal T _n communicates with the server device 2.

In the second refund process, first, at the time of the predetermined period of time from the transaction, the settlement section B _n of the mobile terminal T _n of recipient, transaction amount of temporary accounts managed by the recipient account information A _n Move to another account.

Next, when the payment unit B ₁ of the payer's mobile terminal T ₁ communicates with the server device 2, the management unit 61 of the server device 2 has the server device 2, even though a predetermined period has elapsed since the transaction. Detects that the account information 8 corresponding to the transaction is not updated. Then, the management unit 61 of the server apparatus 2 records the transaction amount in another account instead of the temporary account managed in the account information 8, and deducts the transaction amount from the payer's account managed in the account information 8. I won't do that. Management unit 61 of the server apparatus 2 instructs the payer account recovery payer to the settlement section B ₁ of the mobile terminal T ₁ is managed by the account information A _1. The payment unit B ₁ of the payer's mobile terminal T ₁ adds the transaction amount to the payer's account managed by the account information A ₁ to recover the payer's account.

Then, at the time when the settlement unit B _n of the mobile terminal T _n recipient has communicated with the server apparatus 2, the management unit 61 of the server device 2, trading different accounts managed by the recipient account information A _n It is determined whether or not the amount is reflected in the transaction amount of another account managed by the account information 8 of the server device 2. When it is determined that the transaction has been reflected, the management unit 61 of the server device 2 deletes the transaction amount of another account managed by the account information 8 of the server device 2, and the settlement unit _Bn of the recipient's mobile terminal _Tn. Send instructions to delete the transaction amount of another account. Settlement unit B _n of the mobile terminal T _n of recipients, according to an instruction received from the management unit 61 of the server apparatus 2 deletes the transaction amount to another account managed by the recipient account information A _n.

In the third refund process, the payer's mobile terminal T ₁ communicates with the server device 2, and then the recipient's mobile terminal T _n does not communicate with the server device 2 until a predetermined period has elapsed after the transaction. Thereafter, it is executed when the recipient's mobile terminal T _n communicates with the server device 2.

In the third refund process, the management unit 61 of the server apparatus 2 receives the payment information 19 from the payment unit B ₁ of the payer's mobile terminal T ₁ , and uses the account information 8 to determine the transaction amount included in the payment information 19. Transfer from a managed payer account to a temporary account.

When a predetermined period elapses from the transaction, the settlement section B _n of the mobile terminal T _n of the recipient, reclassified the transaction amount of the temporary account recipient being managed by the recipient account information A _n into different accounts. The management unit 61 of the server device 2 transfers the transaction amount of the temporary account managed by the account information 8 to another account.

Then, at the time when the settlement unit B _n of the mobile terminal T _n recipient has communicated with the server apparatus 2, the management unit 61 of the server device 2, trading different accounts managed by the recipient account information A _n It is determined whether or not the amount is reflected in the transaction amount of another account managed by the account information 8 of the server device 2. If it is determined that the already reflected, manager 61 of the server device 2 transmits an indication to erase the transaction amount to another account to the settlement section B _n of the mobile terminal T _n recipients. Settlement unit B _n of the mobile terminal T _n of recipients, according to an instruction received from the management unit 61 of the server apparatus 2 deletes the transaction amount to another account managed by the recipient account information A _n.

Thereafter, when the payment unit B ₁ of the payer's mobile terminal T ₁ communicates with the server device 2, the management unit 61 of the server device 2 repays to another account managed by the account information 8 of the server device 2. Determine whether there is a transaction amount corresponding to. If it is determined that there is a transaction amount corresponding to the refund, the management unit 61 of the server device 2, an indication that to recover the payer's account, to the settlement unit B ₁ of the mobile terminal T ₁ of the payer Send. When the payment unit B ₁ of the payer's mobile terminal T ₁ receives an instruction indicating that the payer's account is to be restored, the payment unit B ₁ pays based on another account managed in the account information 8 of the server device 2. The payer's account managed by the payer's account information A ₁ is recovered (the transaction amount is added to the payer's account). Thereafter, the management unit 61 of the server device 2 deletes the transaction amount of another account managed by the account information 8 of the server device 2.

  In other words, the first to third refund processes described above correspond to processes including the following first to fourth operations.

In the first operation, the settlement unit B _n of the recipient's mobile terminal T _n and the management unit 61 of the server device 2 transfer the transaction amount of the temporary account to another account when a predetermined period has elapsed from the transaction. .

In the second operation, the settlement section B ₁ of the mobile terminal T ₁ of the payer, and settlement unit B _n of the mobile terminal T _n of recipients, each time the communication with the server apparatus 2, the server device 2 management unit 61 checks another account managed by using the account information 8.

In the second operation, the payment unit B ₁ of the payer's mobile terminal T ₁ includes a transaction amount included in another account managed by the management unit 61 of the server device 2 using the account information 8. The payer's account managed by the payer's account information A ₁ is recovered. When the payer account managed by the account information 8 has already paid the transaction amount, the management unit 61 of the server apparatus 2 also recovers the payer account managed by the account information 8. .

In a second operation, the settlement section B _n of the mobile terminal T _n recipients, when a different account managed by the recipient account information A _n contains transaction amount, recipient account information A It is determined whether the transaction amount included in the separate account managed in _n is reflected in the separate account managed in the account information 8 of the server apparatus 2, and if not reflected, the server apparatus 2 to another account in the account information 8 it is managed, to reflect the transaction amount that is included in a separate account that is managed by the recipient of the account information a _n.

In the third operation, the management unit 61 of the server device 2 checks the transaction amount of another account managed by the account information 8 for the payer's mobile terminal T ₁ and the receiver's mobile terminal T _n . When both are finished, delete.

In the fourth operation, the settlement section B _n of the mobile terminal T _n of the recipient, another account managed by the recipient account information A _n, after checking in the second operation, to erase.

Accordingly, when a predetermined period has elapsed after the transaction but the recipient's mobile terminal _Tn has not communicated with the server device 2, the transaction amount can be appropriately paid back to the payer's account.

  Note that the present invention is not limited to the above-described embodiment as it is, and can be embodied by modifying the constituent elements without departing from the scope of the invention in the implementation stage. Moreover, various inventions can be formed by appropriately combining a plurality of constituent elements disclosed in the embodiment. For example, some components may be deleted from all the components shown in the embodiment. Furthermore, constituent elements over different embodiments may be appropriately combined.

1 ... settlement system, 2 ... server, 3 ... network, 4, M ₁ ~M _n ... storage unit, 5, 12 ... communication unit, 6, 16 ... processor, 61 ... management unit, B ₁ .about.B _n ... settlement , 7 ... Management program, 8, A _{1 to An} ... Account information, 9 ... Secret information, 10 ... Application, T _{1 to} T _n ... Mobile terminal, 13 ... Operation accepting part, 14 ... Display part, 15 ... Shooting Part, 17 ... two-dimensional code, 18 ... receipt information, 19 ... payment information, 20 ... transaction information, 22 ... time stamp.

Claims (2)

A first terminal for managing first account information;
A second terminal for managing second account information;
Comprising
The first terminal calculates first encryption information based on transaction information including a transaction amount and secret information shared with the second terminal, and the transaction information, the first encryption information, To the second terminal, and subtract the transaction amount from the balance of the first account in the first account information,
When the second terminal acquires the payment information, the second terminal uses the secret information shared with the first terminal and the second encryption information based on the transaction information included in the payment information. And the transaction amount is added to the balance of the second account in the second account information when the first encryption information and the second encryption information match.
Payment system. In the case of the payment side, first encryption information is calculated based on the transaction information including the transaction amount and the secret information shared with the recipient terminal, and the transaction information and the first encryption information are calculated. Providing a payment information to the recipient terminal, a first payment unit for subtracting the transaction amount from the balance of the first account in the first account information;
When the payment information is acquired from the payer terminal as a receiving side, based on the secret information shared with the payer terminal and the transaction information included in the payment information acquired from the payer terminal Second encryption information is calculated, and when the first encryption information and the second encryption information included in the payment information acquired from the payer terminal match, the second encryption information A second settlement unit that adds the transaction amount to the balance of the second account in the account information;
A payment terminal.

Images