JP2019082892A - Terminal management device, terminal management method, and terminal management program - Google Patents

Abstract

To improve the security in transaction against illegal operation on a terminal for reading card data of a card used for transaction.SOLUTION: A processing execution unit 11d executes a series of processing according to a processing request received by a communication unit 12. A determination unit 11a determines, with respect to a card processing terminal 2, whether or not there is a high possibility that the processing request which includes the card data read by the card processing terminal 2 is fraudulent. A processing restriction unit 11c is configured so as to, with respect to the card processing terminal 2 which is determined as high possibility of fraudulent of the processing request by the determination unit 11a, restrict the processing execution unit 11d from executing the processing according to the processing request which includes the card data read by the card processing terminal 2.SELECTED DRAWING: Figure 2

Description

  The present invention relates to a technology for managing a terminal that reads card data recorded on a card used in the transaction at the time of transaction.

  Conventionally, stores, shopping centers, credit card companies, etc. have implemented point service as one of customer services. As well known, the point service is a service for giving points of the number of points according to the amount of transaction to a customer who has made a transaction. Specifically, the number of points held by the customer who has made the transaction is updated to the number of points obtained by adding the number of points given in the current transaction to the number of points held immediately before the customer's transaction. In the point service, for example, there is a service in which the owned points can be used for settlement of a part or all of the transaction amount, and there is also a service in which the owned points can be exchanged for a prize. In a general point service, a card (point card, credit card, etc.) recording a card number is issued to a customer, and at the time of transaction processing, the card used in the transaction (in other words, the customer who holds the card) Grant points to

  Since point services are worth points, there is a need to improve the security of the process for giving points. In particular, in recent years, there have been reported cases where point grants have been made illegally by unauthorized operation of a terminal by a store clerk.

  On the other hand, Patent Document 1 describes a technique for preventing an unauthorized operation by a store clerk or the like in a payment terminal that processes credit transactions. The settlement terminal of Patent Document 1 is configured to stop the settlement operation when the sensor detects that the container has been opened. Opening the payment terminal is an act prohibited in normal use in order to prevent leakage of the card number due to skimming or the like.

  When the settlement terminal of Patent Document 1 resumes the stopped settlement operation, the settlement terminal requests the terminal management server to start settlement, and receives the settlement start permission from the terminal management server. In addition, the terminal management server refers to registration information, history information of the settlement start request, and the like for the settlement terminal which has requested the settlement start, and determines whether to permit or refuse the settlement start to the settlement terminal. It is a structure.

  The settlement terminal does not restart the stopped settlement operation if the terminal management server does not permit the settlement start (if it is rejected).

JP, 2004-86326, A

  However, when the payment terminal described in Patent Document 1 detects that the prohibited action (for example, opening) in normal use is performed due to a change in the physical state of the terminal body, the payment operation is performed. It is the composition to stop. That is, the payment terminal described in Patent Document 1 can not stop the payment operation if the state of the terminal body does not physically change, even if the action is illegal.

  For example, in the point service, when a customer does not present a card at the time of a transaction, a clerk has processed a transaction using a card such as himself or a friend, and a case is reported in which points are fraudulently given. In this case, points are awarded to those who have not made a transaction (ie, the owner of the card used in the transaction). The technology described in Patent Document 1 can not ensure the security of the transaction against an unauthorized operation in which the state of the main body does not physically change as in this case.

  An object of the present invention is to provide a technology for improving the security of a transaction against unauthorized operation at a terminal which reads card data of a card used in the transaction.

  The terminal management device of the present invention is configured as follows in order to achieve the above object.

  The terminal management device receives, in the communication unit, a processing request including card data of a card used in the transaction read by the terminal. The communication unit may be configured to directly communicate with the terminal, or may be configured to communicate with an apparatus for notifying card data read by the terminal.

  The processing execution unit executes processing according to the processing request received by the communication unit. For example, the processing execution unit may be configured to execute processing related to a point service, may be configured to execute processing related to a credit transaction, or configured to execute processing related to a debit transaction. It may be configured to execute other processing.

  The determination unit determines, for each terminal, whether or not the processing request including the card data read by the terminal is highly likely to be illegal. For example, the determination unit determines, using the history of processing requests received by the communication unit stored in the history information storage unit, whether the terminal is a terminal having a high possibility of being an unauthorized process request. It is presumed that a terminal whose processing request is likely to be fraudulent is likely to be fraudulently operated. The determination unit determines, for example, that a terminal whose processing request related to a transaction using the same card exceeds the first set number of times during the set time is highly likely to be an unauthorized processing request. Alternatively, it may be determined that a terminal in which a processing request for a transaction using the same card is continuous beyond the second set number of times is highly likely to be an unauthorized processing request.

  The processing restriction unit responds to the processing execution unit about the processing request including the card data read by the terminal for the terminal determined to have a high possibility of the processing request being incorrect by the determination unit. Limit the execution of the process. Therefore, it is possible to improve the security of the transaction against the unauthorized operation at the terminal reading the card data of the card used in the transaction.

  The terminal further includes a group management unit that classifies and manages the terminals into groups, and the processing restriction unit causes the processing execution unit to determine that the processing unit is highly likely to be a processing request, and a terminal With respect to other terminals belonging to the same group as the terminal, the execution of processing according to the processing request including card data read by the terminal may be limited.

  For example, by classifying the terminal into a group at the store where the terminal is installed, card data read by the terminal for all the terminals installed in the store where there is a high possibility that a clerk or the like is operating the terminal illegally Execution of the process according to the process request including

  According to the present invention, it is possible to improve the security of the transaction against the unauthorized operation at the terminal reading the card data of the card used in the transaction.

It is the schematic which shows the point service system concerning this example. It is a block diagram which shows the structure of the principal part of a point management server. It is a figure explaining terminal management information memorized by terminal management information storage DB. It is a figure which shows the log | history information of a certain card processing terminal. It is a block diagram which shows the structure of the principal part of a card processing terminal. It is a flowchart which shows operation | movement of a card processing terminal. It is a flowchart which shows operation | movement of a point management server. It is a flowchart which shows the process stop terminal registration determination processing concerning s15. It is a flowchart which shows registration cancellation determination processing.

  Hereinafter, embodiments of the present invention will be described.

<1. Application example>
FIG. 1 is a schematic view showing a point service system using a terminal management apparatus according to an embodiment of the present invention. The point service system (hereinafter referred to as a point system) includes a point management server 1 and a plurality of card processing terminals 2. A plurality of card processing terminals 2 are connected to the point management server 1 via the network 5. The point management server 1 performs data communication with the card processing terminal 2 via the network 5.

  In this example, the point management server 1 manages the operation of the point system. In this example, the point management server 1 corresponds to an embodiment of the terminal management apparatus according to the present invention. The point management server 1 is installed at, for example, a center. Moreover, the card processing terminal 2 is installed in the shop which is performing the point service with respect to the customer using this point system. In this point system, some stores have one card processing terminal 2 installed, and some stores have a plurality of stores. In this example, the card processing terminal 2 corresponds to a terminal in the present invention.

  In the point system of this example, a point card (hereinafter simply referred to as a card) is issued to a customer who can receive point service. At least a card number for identifying the card is recorded as card data in the card. The card may be a magnetic card in which a card number is recorded as magnetic data, or may be a contact type IC card in which a card number is recorded in an IC (an IC card in which an IC contact is exposed on the card surface) May be a contactless IC card (IC card having a short distance wireless function) in which the card number is recorded in the IC, and further, a one-dimensional bar code or a two-dimensional bar code indicating the card number is printed. It may be a card. Furthermore, the card may be, for example, a combination card of a magnetic card and an IC card of contact type, or may be a combination card of other combinations.

  The customer uses the card when making a transaction at the store. The store clerk causes the card processing terminal 2 to read card data including a card number recorded on the customer's card. The card processing terminal 2 transmits a point processing request including the card number read from the card to the point management server 1. In addition to the card number, the point processing request includes the identification code of the card processing terminal 2, the transaction number assigned to the current transaction, the transaction amount for the current transaction, and the like as necessary. In this example, in addition to the card number, at least the identification code of the card processing terminal 2, the transaction number assigned to the current transaction, and the transaction amount for the current transaction are included in the point processing request. . Also, the transaction number is a number incremented (plus one) for each transaction in this example, and can be used to identify the transaction, and can also confirm the order in which the transactions were processed.

  The point management server 1 determines, for each of the card processing terminals 2, whether the point processing request including the card data read by the card processing terminal 2 is highly likely to be unauthorized. In addition, the point management server 1 registers the card processing terminal 2 determined to have a high possibility of the point processing request being unauthorized as the processing stop terminal. In addition, the point management server 1 cancels the registration as the processing stop terminal when receiving the deregistration request satisfying the predetermined release condition for the card processing terminal 2 registered as the processing stop terminal. When the point management server 1 receives, for example, a deregistration request including an appropriate personal identification number from a deregistration terminal (not shown) determined in advance with respect to the card processing terminal 2, registration that satisfies the predetermined release condition is performed. Judge that it is a cancellation request.

  The deregistration terminal is preferably installed at a place other than the store where the card processing terminal 2 is installed. That is, it is preferable to install the card processing terminal 2 and the deregistration terminal so that they can not be operated at the same place.

  In addition, the point management server 1 does not execute the process according to the point processing request transmitted from the card processing terminal 2 for the card processing terminal 2 registered as the processing stop terminal. On the contrary, the point management server 1 executes the process according to the point processing request transmitted from the card processing terminal 2 which is not registered as the processing stop terminal. Therefore, in this point system, it is possible to improve the security of the transaction against the unauthorized operation at the card processing terminal 2 which reads the card data of the card used in the transaction.

  In this example, it is described that the point management server 1 and the card processing terminal 2 communicate directly via the network 5, but the card processing terminal 2 is connected to a POS terminal that performs product registration and the like. The POS terminal may communicate with the point management server 1 via the network 5 (the card processing terminal 2 may not be connected to the network 5). In this case, the card processing terminal 2 notifies the POS terminal of card data read from the card. Then, the POS terminal generates a point processing request and transmits it to the point management server 1. That is, in either configuration, there is a possibility that the point processing request is incorrect for the card processing terminal 2 that has read the card data included in the transmitted point processing request. To determine if is high.

<2. Configuration example>
FIG. 2 is a block diagram showing the configuration of the main part of the point management server according to this example. The point management server 1 includes a control unit 11, a communication unit 12, a terminal management information storage database 13 (terminal management information storage DB 13), a history information storage database 14 (history information storage DB 14), and a point management information storage database 15. (Point management information storage DB 15).

  The control unit 11 controls the operation of each part of the point management server 1 main body. The control unit 11 further includes a determination unit 11a, a process stop terminal storage unit 11b, a process restriction unit 11c, and a process execution unit 11d. Details of the determination unit 11a, the processing stop terminal storage unit 11b, the processing restriction unit 11c, and the processing execution unit 11d will be described later.

  The communication unit 12 performs data communication with the card processing terminal 2 installed in the store via the network 5.

  The terminal management information storage DB 13 stores terminal management information used to manage the card processing terminal 2. FIG. 3 is a diagram for explaining terminal management information stored in the terminal management information storage DB. As shown in FIG. 3, the terminal management information is registered in association with an identification code, an IP address, a store code, business hours, a notification destination address, a cancellation terminal identification code, a personal identification number and the like for each card processing terminal 2. It is information. The identification code is a code unique to the card processing terminal 2 and can identify the card processing terminal 2. The IP address indicates the IP address assigned to the card processing terminal 2. The store code is a code for identifying a store where the card processing terminal 2 is installed. Business hours indicate the business hours of the store where the card processing terminal 2 is installed. The notification destination address is an e-mail address of a contact who notifies that when the card processing terminal 2 is registered as the processing stop terminal. The cancellation terminal identification code is a code for identifying the registration cancellation terminal. The registration cancellation terminal may or may not be set to receive the e-mail sent to the notification destination address. The password is used to cancel the registration of the processing stop terminal for the card processing terminal 2.

  The history information storage DB 14 stores the history of the point processing request transmitted. Specifically, the transmitted point processing request is classified by the identification code of the card processing terminal 2 included in the point processing request, and the history is stored. FIG. 4 is a diagram showing a history of point processing requests whose identification code is AA00123. This history indicates, for each point processing request that has been sent, the reception time of that point processing request, the IP address of the device that has sent that point processing request, the transaction number included in that point processing request, and that point The card number etc. which were contained in the process request are matched and registered. In this example, the history information storage DB 14 corresponds to the history information storage unit in the present invention.

  In the history of point processing requests whose identification code is AA00123, point processing requests have been sent from terminals impersonating the card processing terminal 2 whose identification code is AA00123 (hereinafter referred to as spoofing terminals). In this case, the point processing request sent from this spoofing terminal is included.

  The point management information storage DB 15 stores, for each point card, point management information in which the card number of the point card is associated with the current number of owned points. The point management information may or may not include information such as the address, name, age, contact telephone number, contact e-mail address, etc. of the customer who issued the point card.

  Next, the determination unit 11a, the process stop terminal storage unit 11b, the process restriction unit 11c, and the process execution unit 11d included in the control unit 11 will be described. The determination unit 11a determines, for each card processing terminal 2, whether the point processing request transmitted from the card processing terminal 2 is highly likely to be due to an unauthorized operation in the card processing terminal 2 or the like. . The determination unit 11a determines, for example, the following determination items (1) to (6), and determines that at least one of the determination items is applicable, the point processing request transmitted from the card processing terminal 2 However, it is determined that the possibility that the card processing terminal 2 or the like is due to an unauthorized operation is high.

(1) The point processing request for the same card is transmitted for the first set number of times (for example, about three times) during the set time (for example, about the last 30 minutes).
(2) A point processing request for the same card has been transmitted continuously for a second predetermined number of times (for example, about three times).
(3) The reception time of the point processing request this time is outside the business hours of the store where it is installed.
(4) The IP address of the card processing terminal 2 that has sent the point processing request is different from the registered IP address.
(5) The difference between the transaction numbers included in the temporally consecutive point processing request is larger than a predetermined value (for example, about 20).
(6) The transaction number included in the point processing request that is continuous in time is decreasing.

  The above (1) to (3) are mainly determination items for determining whether an unauthorized operation is performed in the card processing terminal 2, and (4) to (6) are mainly from the spoofing terminal This is a determination item for determining whether an unauthorized point processing request has been sent.

  In addition, the determination item which concerns on said (1)-(6) is an illustration to the last. The determination item used to determine whether the point processing request is highly likely to be due to an unauthorized operation on the card processing terminal 2 or the like may use a determination item (other determination item) other than the above. In addition, the determination item used to determine whether the point processing request is highly likely to be due to an unauthorized operation on the card processing terminal 2 or the like is part of the above (1) to (6). You may be what combined a part of said (1)-(6), and other determination items.

  The determination unit 11a registers (stores) the identification code of the card processing terminal 2 that is determined to have a high possibility of the point processing request transmitted being due to an unauthorized operation in the processing stop terminal storage unit 11b. The processing stop terminal storage unit 11 b is configured of, for example, a non-volatile memory. The card processing terminal 2 in which the processing stop terminal storage unit 11 b stores the identification code is a processing stop terminal.

  The process restriction unit 11 c determines whether the identification code of the card processing terminal 2 included in the point process request is registered in the process stop terminal storage unit 11 b as a process stop terminal. When the process restriction unit 11c is registered as the process stop terminal, the process restriction unit 11c prohibits the process execution unit 11d from executing the point process according to the point process request of this time.

  When instructed to execute point processing, the processing execution unit 11 d executes point processing according to the current point processing request. On the other hand, when execution is prohibited by the process restriction unit 11c, the process execution unit 11d does not execute the point process according to the current point process request.

  The control unit 11 of the point management server 1 according to this example is configured by a hardware CPU, a memory, and other electronic circuits. When the hardware CPU executes the terminal management program according to the present invention, the hardware CPU operates as the determination unit 11a, the process restriction unit 11c, and the process execution unit 11d. The memory has an area for expanding the terminal management program according to the present invention, an area for use as the processing stop terminal storage unit 11b, and an area for temporarily storing data generated at the time of execution of the terminal management program. The control unit 11 may be an LSI in which a hardware CPU, a memory, and the like are integrated. The hardware CPU is a computer that executes the terminal management method according to the present invention.

  Next, the card processing terminal 2 will be described. FIG. 5 is a block diagram showing the configuration of the main part of the card processing terminal. The card processing terminal 2 includes a control unit 21, a communication unit 22, a card processing unit 23, an operation unit 24, a display unit 25, and an input / output unit 26. The control unit 21 controls the operation of each part of the card processing terminal 2 main body.

  The communication unit 22 performs data communication with the point management server 1 described above via the network 5. The card processing unit 23 reads card data including a card number recorded in the card. The operation unit 24 has a numeric keypad or the like for performing an input operation on the main body of the card processing terminal 2. The display unit 25 displays a message or the like for a clerk operating the main body of the card processing terminal 2. The input / output unit 26 is an interface that executes processing related to registration of goods, settlement of transaction amount, etc., and inputs / outputs data to / from a POS terminal (not shown) that processes transactions.

  The card processing terminal 2 is not limited to the configuration connected to the POS terminal by wire or wireless, and may be incorporated in the POS terminal.

<3. Operation example>
FIG. 6 is a flowchart showing the operation of the card processing terminal. FIG. 7 is a flowchart showing the operation of the point management server. Here, the operation of the card processing terminal 2 at the point service will be described.

  The card processing terminal 2 waits for the card processing unit 23 to read card data recorded in the card used for the transaction (s1). Types of cards used for transactions are, as described above, a magnetic card, a contact IC card, a noncontact IC card, an optical reading card, and the like.

  When the card processing unit 23 reads card data, the card processing terminal 2 learns transaction data (s2). The card data read in s1 includes at least a card number for identifying the card. Further, in s2, the card processing terminal 2 acquires transaction data including at least the transaction amount of the current transaction from the POS terminal which has registered the product or service related to the current transaction. The card processing terminal 2 acquires transaction data from the POS terminal connected to the input / output unit 26. The card processing terminal 2 transmits a point processing request to the point management server 1 in the communication unit 22 (s3).

  The point processing request sent by the card processing terminal 2 to the point management server 1 in s3 includes the identification code of the own terminal, the IP address assigned to the own terminal, the card number read in s1, and the current obtained in s2 The transaction amount of the transaction is included. When the card processing terminal 2 transmits the point processing request to the point management server 1 at s3, the card processing terminal 2 waits to receive the processing result of the point processing request transmitted this time from the point management server 1 (s4).

  If the POS terminal is a system that transmits a point processing request to the point management server 1, the card processing terminal 2 outputs the card data read in s1 to the POS terminal. The POS terminal generates a point processing request including card data input from the card processing terminal 2 and transmits the point processing request to the point management server 1.

  As shown in FIG. 7, the point management server 1 waits to receive a point processing request or a deregistration request transmitted via the network 5 (s11, s12). As described above, the point processing request is transmitted from the card processing terminal 2 (or a spoofing terminal) in this example. In addition, the deregistration request is transmitted from the deregistration terminal.

  When the point management server 1 receives the point processing request in the communication unit 12, the history of the identification code (the identification code included in the point processing request received this time) of the card processing terminal 2 corresponding to the point processing request received this time And stored in the history information storage DB 14 (s13). In addition, the point management server 1 determines whether the identification code included in the point processing request transmitted this time is registered as the processing stop terminal (s14). In step s14, it is determined whether the identification code included in the point processing request sent this time is stored in the processing suspension terminal storage unit 11b. In this example, the process restriction unit 11c executes the process s14.

  The order of the process according to s13 and the process according to s14 may be performed in the reverse order to the above description.

  When the process restriction unit 11c determines that the process is a process stop terminal at s14, the point management server 1 performs a notification process of notifying the card processing terminal 2 that the point process can not be performed at present (s18), and returns to s11. At this time, the process restriction unit 11c prohibits the process execution unit 11d from executing the point process according to the point process request received this time. Therefore, if the process limiting unit 11c determines in s14 that the terminal is the process stop terminal, the point process according to the point process request received this time is not executed. Therefore, points are not awarded according to the current transaction to the card used in the current transaction.

  In addition, when the process restriction unit 11c determines that the process restriction unit 11c is not a process stop terminal at s14, the point management server 1 executes the process stop terminal registration determination process (s15). In the processing stop terminal registration determination processing according to s15, identification of the card processing terminal 2 in which there is a high possibility that an unauthorized operation is being performed, and the card processing terminal 2 in which a spoofing terminal that transmits a point processing request exists The code is a process of registering the code in the process stop terminal storage unit 11b.

  FIG. 8 is a flowchart showing the process-stopped terminal registration determination process according to s15. In this example, the determination unit 11a determines whether or not each of the determination items (1) to (6) described above is applicable to the card processing terminal 2 that is the transmission source of the point processing request received this time. When the point processing request of this time corresponds to any of the determination items (1) to (6) (s32), the determination unit 11a determines that the terminal is a processing stop terminal (s33), and ends this processing. In addition, if the point processing request this time does not correspond to any of the determination items (1) to (6) (s32), the determination unit 11a determines that the terminal is not a processing stop terminal (s34), and performs this processing. finish.

  Referring back to FIG. 7, when the point management server 1 determines that the processing is a processing stop terminal in the processing stop terminal registration determination process according to s15, the point management server 1 stops processing the identification code of the card processing terminal 2 included in the point process request A registration process to be stored in the terminal storage unit 11b is performed (s16, s17). In s17, the card processing terminal 2 of the identification code registered as the processing stop terminal is notified by e-mail addressed to the registered notification destination address that the card processing terminal 2 has been registered in the processing stop terminal. Do. Furthermore, the point management server 1 performs notification processing to notify the card processing terminal 2 that the point processing can not be performed at the present time in s18, and returns to s11.

  If the point management server 1 determines that the terminal is not a processing stop terminal in the processing stop terminal registration determination processing according to s15, the point management server 1 executes point processing for the point processing request transmitted this time (s16, s19). In s19, the processing execution unit 11d calculates the number of points to be granted in the current transaction, and stores the number of held points of the corresponding card (card used in the current transaction) stored in the point management information storage DB 15 Update to the value obtained by adding the number of points calculated this time to the number of possessed points of.

  The point management server 1 outputs the processing result of the point processing in s19 to the card processing terminal 2 (s20), and returns to s11.

  Further, when it is determined that the deregistration request has been received in s12, the point management server 1 executes a deregistration determination process (s21), and returns to s11. FIG. 9 is a flowchart showing the registration cancellation determination process.

  As described above, in the registration processing in s17, the point management server 1 notifies that the card processing terminal 2 has been registered as the processing stop terminal by an electronic mail with the notification destination address as the transmission destination. That is, the manager of the store recognizes that the card processing terminal 2 is set as the processing stop terminal by the electronic mail transmitted from the point management server 1. When the store manager confirms that an unauthorized operation has not been performed by the store clerk, the store manager operates a predetermined deregistration terminal to transmit a deregistration request to the point management server 1. The deregistration request includes the identification code of the card processing terminal 2 that requests deregistration of the processing stop terminal, the identification code of the deregistration terminal, and the personal identification number.

  The manager of the store referred to here may be the manager of the store or a person in charge of a company operating a point card system.

  The point management server 1 determines whether or not the identification code of the card processing terminal 2 that requests the deregistration of the process stop terminal, which is included in the received deregistration request, is stored in the process stop terminal storage unit 11b. (S41). That is, in s41, it is determined whether the deregistration request received this time is for the card processing terminal 2 of the identification code registered as the processing suspension terminal at that time. The point management server 1 ends the present process if the deregistration request received this time is for the card processing terminal 2 of the identification code not registered as the processing stop terminal at that time.

  The point management server 1 also determines whether the deregistration terminal that has transmitted the deregistration request received this time is appropriate (s42). In s42, it is determined whether or not it is a deregistration terminal associated with the card processing terminal 2 for which deregistration of the processing stop terminal is requested. As shown in FIG. 3, in the terminal management information, the identification code of the card processing terminal 2 and the identification code of the deregistration terminal are associated. When the point management server 1 determines that the deregistration terminal that has transmitted the deregistration request received this time is not appropriate, the process ends.

  When the point management server 1 determines that the deregistration terminal that has transmitted the deregistration request received this time is appropriate, it determines whether the personal identification number is appropriate (s43). In s43, it is determined whether or not it is a proper deregistration request by the store manager. As shown in FIG. 3, the identification code of the card processing terminal 2 and the personal identification number are associated with the terminal management information. If the point management server 1 determines that the personal identification number is not appropriate (the registration cancellation request received this time is not a proper registration cancellation request by the store manager), the process ends.

  The point management server 1 deletes the identification code of the card processing terminal 2 requested to cancel the registration of the processing-stop terminal, which is stored in the processing-stop terminal storage unit 11b, when determining that the personal identification number is appropriate in s43. To do (s44). Thereby, the card processing terminal 2 cancels the registration of the processing stop terminal.

  In addition, the order of the process concerning s41, s42, and s43 mentioned above may be performed not only in the above-mentioned order but in what kind of order.

  Returning to FIG. 6, when receiving the processing result from the point management server 1 at s4, the card processing terminal 2 outputs the processing result (s5), and returns to s1. In s5, the POS terminal is notified that the point processing has been stopped and can not be performed, or the number of owned points added with the points granted in the current transaction is notified.

  As described above, in the point management server 1 according to this example, there is a high possibility that a shop clerk or the like is likely to perform an unauthorized operation, or that an impersonation terminal has sent an unauthorized point processing request. In this case, the card processing terminal 2 is registered as a processing stop terminal. Also, the point management server 1 does not perform point processing on the point processing request from the card processing terminal 2 (including the terminal impersonating this card processing terminal 2) registered as the processing stop terminal. Therefore, it is possible to prevent the point from being illegally obtained, and to improve the security of the point service.

  In addition, the registration cancellation terminal can cancel the registration of the processing suspension terminal.

<4. Modified example>
In the above example, the point management server 1 is configured to register the card processing terminal 2 that is determined to have a high possibility of transmitting a point processing request by an unauthorized operation as a processing stop terminal. The point management server 1 according to this modification classifies and manages the card processing terminals 2 into groups, and determines that there is a card processing terminal 2 that is determined to have a high possibility of transmitting a point processing request by an unauthorized operation. The other card processing terminals 2 of the group to which the card processing terminal 2 belongs are also registered as processing stop terminals.

  The group into which the card processing terminal 2 is classified may be, for example, an installed store. For example, in the terminal management information shown in FIG. 3, the card processing terminal 2 whose identification code is AA00123 and the card processing terminal 2 whose identification code is AA00124 are the same store (a store whose store code is XX1234) It is registered that it is installed. If one of the card processing terminal 2 having an identification code of AA00123 or the card processing terminal 2 having an identification code of AA00124 is determined that the determination unit 11a has a high possibility that an illegal operation is being performed by a store clerk or the like, The card processing terminal 2 whose identification code is AA00123 and the card processing terminal 2 whose identification code is AA00124 are registered as processing stop terminals.

  Therefore, point processing for the point processing request transmitted from the card processing terminal 2 is performed for all the card processing terminals 2 installed in the shop where there is a high possibility that the clerk etc. operates the card processing terminal 2 illegally. Can limit the execution of As a result, it is possible to further improve the security of the transaction against an unauthorized operation on the card processing terminal 2 which reads card data of a card used in the transaction.

  In this modification, the terminal management information storage DB 13 corresponds to a group management unit in the present invention.

  In the above example, not only the card processing terminal 2 that is determined to have a high possibility of unauthorized operation, but also the card processing terminal 2 that is determined to have a high possibility of impersonation Although it has been described that registration is performed as a stop terminal, the card processing terminal 2 determined as having a high possibility of the presence of a spoofing terminal may not be registered as a processing stop terminal. With this configuration, the impersonation can suppress the influence on the transaction processing in the store. However, in this case, when it is determined that the possibility of the point processing request from the spoofing terminal is high, the point processing according to the point processing request may be prohibited. This does not reduce the security for the spoof terminal.

  Further, the present invention is not limited to the point system for providing the point service described above, but also a credit transaction processing system for processing a credit transaction using a credit card at the time of transaction, a debit transaction processing system using a debit card at a transaction, etc. Applicable to card processing systems that use cards at times.

  The present invention is not limited directly to the above-described embodiment. In practice, the structural elements can be modified without departing from the spirit of the invention. In addition, various inventions can be formed by appropriate combinations of a plurality of components disclosed in the above embodiments. For example, some components may be deleted from all the components shown in the embodiment. Furthermore, components in different embodiments may be combined as appropriate.

Furthermore, the correspondence between the configuration according to the present invention and the configuration according to the above-described embodiment can be described as the following supplementary notes.
<Supplementary Note>
A communication unit (12) for receiving a processing request including card data of a card used in the transaction read by the terminal (2);
A processing execution unit (11d) that executes processing according to the processing request received by the communication unit (12);
A determination unit (11a) that determines whether the processing request including card data read by the terminal (2) for the terminal (2) is highly likely to be illegal;
The terminal (2) reads the terminal (2) that is determined to have a high possibility of the processing request being incorrect by the determination unit (11a) with respect to the processing execution unit (11d) A terminal control device (1) comprising: a processing restriction unit (11c) for restricting execution of processing according to the processing request including card data.

DESCRIPTION OF SYMBOLS 1 ... Point management server 2 ... Card processing terminal 5 ... Network 11 ... Control unit 11a ... Determination part 11b ... Processing stop terminal storage part 11c ... Processing restriction part 11 d ... Processing execution part 12 ... Communications part 13 ... Terminal management information storage database ( Terminal management information storage DB)
14 ... History information storage database (History information storage DB)
15: Point management information storage database (point management information storage DB)

Claims (9)

A communication unit for receiving a processing request including card data of a card used in a transaction read by the terminal;
A process execution unit that executes a process according to the process request received by the communication unit;
A determination unit that determines whether the processing request including card data read by the terminal is highly likely to be illegal for the terminal;
Processing of the processing execution unit according to the processing request including card data read by the terminal, for the terminal determined by the determination unit to have a high possibility of the processing request being illegal A terminal management apparatus comprising: a processing restriction unit that restricts execution. A history information storage unit for storing a history of the processing request received by the communication unit;
The determination unit uses the history stored in the history information storage unit as to whether or not the processing request including card data read by the terminal is highly likely to be illegal for the terminal. The terminal management device according to claim 1, which determines.   The determination unit registers the terminal determined to have a high possibility of the processing request being an unauthorized one as a processing stop terminal, and the terminal having received a registration cancellation request that satisfies a predetermined cancellation condition is The terminal management device according to claim 1, wherein if the terminal is registered as the process stop terminal, the registration is canceled. A group management unit that classifies and manages the terminals into groups;
The process restriction unit is configured to, for the process execution unit, the terminal determined by the determination unit to have a high possibility of the process request being incorrect, and the other terminal belonging to the same group as the terminal The terminal management apparatus according to any one of claims 1 to 3, wherein execution of the process according to the process request including card data read by the terminal is restricted.   The determination unit determines that the processing request for transactions using the same card exceeds the first set number of times during the set time, the possibility that the processing request is incorrect is high. The terminal management apparatus according to any one of claims 1 to 4.   The determination unit determines that the terminal whose processing request related to a transaction using the same card continues more than a second set number of times is highly likely that the processing request is illegal. The terminal management device according to any one of Items 1 to 5.   The terminal management apparatus according to any one of claims 1 to 6, wherein the process execution unit executes a process related to a point service. A process execution step of executing a process according to a process request including card data of a card to be used in a transaction read by the terminal, received by the communication unit;
A determination step of determining whether the processing request including card data read by the terminal is highly likely to be illegal for the terminal;
For the terminal determined to have a high possibility of the processing request being illegal in the determination step, the processing execution unit performs processing according to the processing request including card data read by the terminal A terminal control method in which a computer executes a process restriction step of restricting execution in the process execution step. A process execution step of executing a process according to a process request including card data of a card to be used in a transaction read by the terminal, received by the communication unit;
A determination step of determining whether the processing request including card data read by the terminal is highly likely to be illegal for the terminal;
For the terminal determined to have a high possibility of the processing request being illegal in the determination step, the processing execution unit performs processing according to the processing request including card data read by the terminal A terminal management program which causes a computer to execute a process restriction step of restricting execution in the process execution step.

Images