JP2020042610A - Settlement system - Google Patents

Abstract

To provide a settlement system capable of reducing a workload of a person in charge of a store.SOLUTION: An issuer system for settlement using a code includes: a settlement identification information generation processing section which generates settlement identification information on the basis of a request for issuing a code received from a user terminal used by a user; a security data generation processing section which generates security data on the basis of the issuance request; and a code generation processing section which generates a code using the settlement identification information and the security data and displays it on the user terminal. An information processing center system has a telegram processing section which generates a telegram of a message layout used in a credit card settlement including the settlement identification information and the security data on the basis of information obtained by reading the code displayed on the user terminal.SELECTED DRAWING: Figure 2

Description

  The present invention relates to a payment system. More specifically, the present invention relates to a settlement system using a code such as a one-dimensional code or a two-dimensional code.

  In recent years, a payment method using a one-dimensional code or a two-dimensional code has attracted attention as a new payment method replacing cash, credit cards, and debit cards. As an example of such a settlement method, there are the following non-patent documents 1 and 2.

  According to the settlement method using these one-dimensional codes and two-dimensional codes, settlement can be performed by displaying a one-dimensional code or two-dimensional code on a smartphone and reading it with a code reader at a store.

LINE Corporation, "LINE Pay", [online], Internet <URL: https://line.me/ja/pay> Rakuten, Inc., “Acquire points! Use Rakuten!”, [Online], Internet <URL: https://checkout.rakuten.co.jp/>

  The payment method using a one-dimensional code or a two-dimensional code as described in Non-Patent Document 1 and Non-Patent Document 2 is advantageous for the user in that the payment method can be performed only with a smartphone and is easy.

  On the other hand, the settlement method using the one-dimensional code or the two-dimensional code may be provided by each service provider independently, and the store reads data read by a code reader into data determined by each service provider. After conversion into the format, the settlement data is sent to a predetermined server. Therefore, in a POS terminal or the like installed at a store side, various setting operations are required, such as a need to introduce a program for converting to a data format provided by each service provider. For this reason, there is a problem that the burden on the store side for introducing the equipment increases. In addition, when actually performing payment, the store clerk checks which service provider code is used when reading the code displayed on the smartphone screen presented by the user. It is necessary to perform an operation such as pressing a button indicating that payment is to be performed using the code of the service provider.

  The present inventor has invented the settlement system of the present invention in view of the above problems.

  A first invention is a payment system for payment using a code, wherein the payment system generates payment identification information based on a code issuance request received from a user terminal used by a user. An information generation processing unit, a security data generation processing unit that generates security data based on the issuance request, and a code that generates a code using the payment identification information and the security data and displays the code on the user terminal A generation processing unit, and a message processing unit that generates a message of a message layout used for credit card payment, including the payment identification information and the security data, based on information obtained by reading a code displayed on the user terminal. Payment system.

  According to the present invention, based on information obtained by reading a code displayed on a user terminal, a message of a message layout used for credit card payment including payment identification information and security data included in the code is generated. The store clerk can perform the settlement process without performing any operation such as selecting which service provider code is used. Therefore, the burden on the store staff can be reduced. In addition, since the payment using the code can be performed by utilizing the credit card payment network that is widely used in Japan, the capital investment associated with the code payment can be suppressed for the store.

  In the above invention, the message processing unit determines whether the information obtained by reading the code displayed on the user terminal includes predetermined brand identification information, and includes the predetermined brand identification information. If it is determined that such is the case, it can be configured as a payment system that generates a message including the payment identification information and the security data in a message layout for a magnetic stripe used for credit card payment.

  In credit card settlement, EMV compliance has recently been required from the viewpoint of security. Therefore, as a message used for credit card settlement, both a message using an IC chip compliant with EMV and a conventional message for a magnetic stripe are used. However, many merchant systems that perform credit card payments, especially those that use POS to perform processing, do not have the function of processing electronic messages using IC chips. Only messages can be processed. For this reason, if settlement using a code, particularly a two-dimensional code, is performed, information equivalent to a message using an IC chip is required. As a result, a POS that cannot process a message for the IC chip can be obtained. It will not be available at the participating franchisees. On the other hand, with regard to telegrams for magnetic stripes, since magnetic stripes for credit cards have been widely used in the past, almost all member store systems can handle them.

  Therefore, by generating a message using a message layout for a magnetic stripe used in credit card settlement as in the present invention, a settlement network for a credit card can be widely applied even for settlement by code.

  In the above invention, the payment identification information generation processing unit may generate a 16-digit payment identification information, and the security data generation processing unit may generate a three-digit security data, such as a payment system. it can.

  According to the present invention, by using a combination of 16-digit settlement identification information and 3-digit security data, a system on the member store side using POS can identify a data format such as “JIS1-TRACK2” or “JIS2”. Such a message layout for credit card magnetic stripes can be used.

  A fourth invention is a settlement system for settlement using a code, wherein the settlement system generates 16-digit settlement identification information based on a code issuance request received from a user terminal used by a user. A payment identification information generation processing unit, a security data generation processing unit that generates three-digit security data based on the issuance request, a code using the payment identification information and the security data, And a code generation processing unit for displaying the code on a user terminal.

  As in the present invention, the code generated using the 16-digit settlement identification information and the 3-digit security data is displayed on the user terminal, thereby utilizing the credit card settlement network that is widely used in Japan. Thus, payment using the code can be performed. As a result, the store clerk can perform the settlement process without performing any operation such as selecting the code of the service provider, and can reduce the burden.

  In addition, by using a combination of 16-digit payment identification information and 3-digit security data, the system of the member store using POS can use a credit card such as “JIS1-TRACK2” or “JIS2” that can identify the data format. Since the layout of the message for the magnetic stripe of the card can be used, the payment network of the credit card can be widely applied even in the case of payment by code.

  In the above invention, the code generation processing unit can be configured as a payment system that generates a one-dimensional code and a two-dimensional code based on the payment identification information and the security data.

  From the viewpoint of security, it is preferable to use a message layout for an EMV-compliant IC chip. In that case, it is necessary to display the two-dimensional code on the user terminal. On the other hand, as described above, there are many member store side systems that use POS that does not support electronic messages for IC chips. Therefore, in the short term, it is also required to use a message layout for a magnetic stripe. Therefore, as in the present invention, by generating and displaying the one-dimensional code and the two-dimensional code, it is possible to correspond to the layout of the message for the magnetic stripe in a short term, but to generate the message for the IC chip in the future. The layout can be used, and it is possible to respond to future specification changes.

  In the above invention, the payment identification information generation processing unit generates payment identification information for a one-dimensional code and payment identification information for a two-dimensional code, and the code generation processing unit generates the payment identification information for the one-dimensional code. The payment system can be configured as a payment system that generates a one-dimensional code using the payment identification information and generates a two-dimensional code using the payment identification information for the two-dimensional code.

  By using different settlement identification information between the one-dimensional code and the two-dimensional code as in the present invention, the issuer can determine whether the one-dimensional code or the two-dimensional code has been read.

  In the above-described invention, the code generation processing unit includes a certificate based on positional information of the user terminal received when the code issuance request is received from the user terminal, the payment identification information, and the security It can be configured like a payment system that generates the code using data.

  By using the position information of the user terminal as in the present invention, it can be used to determine whether there has been an unauthorized payment process.

  In the above invention, the code generation processing unit generates a hash value based on the generated code, encrypts at least the generated code with a key stored in advance, sends the encrypted code to the user terminal, The terminal decrypts at least the encrypted code using a key stored in advance, calculates a hash value based on the decrypted code, and calculates the hash value and the hash value generated by the code generation processing unit. Are compared with each other, and if they match, the decrypted code is displayed.

  At the time of code issuance, there is a possibility that a malicious third party alters the code on the network, or an unauthorized attack on the user terminal alters the code. Therefore, by executing the processing as in the present invention, the validity of the code can be ensured.

  A ninth invention is a settlement system for settlement using a code, wherein the settlement system generates settlement identification information based on a code issuance request received from a user terminal used by a user. An information generation processing unit, a security data generation processing unit that generates security data based on the issuance request, and a code using the position information of the user terminal, the payment identification information, and the security data, And a code generation processing unit for displaying the code on the user terminal. The member ID terminal reads the code displayed on the user terminal. Position information and information indicating the position of the member store terminal are received, and the position information of the user terminal and the information indicating the position of the member store terminal are received. Comparing the result of the comparison, if the fulfill the condition relating to the position information, executes processing using the security data and the payment identification information is settlement system.

  The code used for settlement is usually generated just before settlement. Therefore, the user terminal that intends to make a payment and the member store terminal that reads the code are located close to each other. Therefore, a code including the location information of the user terminal is generated, the code is read by the affiliated store terminal, and the read location information of the user terminal is compared with the location information of the affiliated store terminal. The processing can be prevented.

  The first invention can be realized by causing a computer to read and execute the program of the present invention. That is, a payment identification information generation processing unit that generates payment identification information based on a code issuance request received from a user terminal used by a user, and a security data generation unit that generates security data based on the issuance request. A data generation processing unit, a code generation processing unit for generating a code using the payment identification information and the security data, and displaying the code on the user terminal, based on information obtained by reading the code displayed on the user terminal; , A program that functions as a message processing unit that generates a message of a message layout used for credit card payment, including the payment identification information and the security data.

  The fourth invention can be realized by causing a computer to read and execute the program of the present invention. That is, a payment identification information generation processing unit that generates a 16-digit payment identification information based on a code issuance request received from a user terminal used by a user, and a three-digit payment identification unit based on the issuance request. A program that functions as a security data generation processing unit that generates security data, and a code generation processing unit that generates a code using the payment identification information and the security data.

  By using the settlement system of the present invention, the processing of the settlement method using the one-dimensional code or the two-dimensional code on the store side can be unified, so that the burden on the store staff can be reduced. . In addition, since the processing can be unified, the store does not need to repair the POS terminal for each service provider, and only needs to perform the repair work that can use the settlement system of the present invention. The burden of renovation work can be reduced.

It is an image figure showing an example of the whole system composition of the settlement system of the present invention. It is a block diagram which shows an example of the processing function in the settlement system of this invention typically. FIG. 3 is a block diagram illustrating an example of a hardware configuration of a computer used in the settlement system of the present invention. It is a sequence diagram showing an example of a processing process of the settlement system of the present invention. It is a sequence diagram showing an example of a processing process of the settlement system of the present invention. It is a flowchart which shows an example of the processing process of the message edit processing in the settlement system of this invention. It is a figure showing an example of a display screen of a code. FIG. 7 is a diagram illustrating an example of mapping of a credit card to a magnetic stripe message when a one-dimensional code is read. FIG. 9 is a diagram illustrating an example of mapping of credit cards to magnetic stripe messages when a two-dimensional code is read. It is a figure showing an example of settlement identification information. FIG. 3 is a diagram illustrating an example of payload data of a two-dimensional code.

  FIG. 1 shows an example of the entire system configuration of the settlement system 1 of the present invention. FIG. 2 is a block diagram schematically illustrating an example of a processing function in the settlement system 1 of the present invention. The settlement system 1 of the present invention includes a member store system 3 used by a member store, an information processing center system 4, an issuer system 5 used by an issuer, and a user terminal 2 used by a user. Preferably, it is a credit card member store, an information processing center, and an issuer, but is not limited thereto.

  Each system or server in the present invention is realized by at least one computer. FIG. 3 shows an example of the hardware configuration of a computer. The computer includes an arithmetic device 70 such as a CPU that executes arithmetic processing of a program, a storage device 71 such as a RAM or a hard disk that stores information, a display device 72 such as a display, a keyboard and a pointing device (such as a mouse and a numeric keypad). And the like, and a communication device 74 for transmitting and receiving processing results of the arithmetic device 70 and information stored in the storage device 71 via a network such as the Internet or a LAN. When a touch panel is used as the display device 72, it has both the function of the display device 72 and the function of the input device 73.

  Although FIGS. 1 and 2 show a case where each system and server are realized by one computer, the functions may be distributed and arranged in a plurality of computers and computer systems. In the member store system 3, the management server 3a may or may not be provided.

  Each means in the present invention is only logically distinguished in its function, and may physically or virtually have the same area.

  The user terminal 2 is a portable communication terminal used by a user such as a smartphone or a tablet computer. An application program for enabling the payment system 1 for realizing a payment method using a one-dimensional code such as a barcode or a two-dimensional code such as a QR code (registered trademark) is installed in the user terminal 2. Have been.

  The user terminal 2 has an authentication processing unit 20, a code request processing unit 21, and a code display processing unit 22.

  The authentication processing unit 20 executes an authentication process for starting an application program in the user terminal 2. As the authentication process, various authentication processes such as an authentication process using biological information such as a face, an iris, and a fingerprint can be used in addition to an authentication process using a preset password.

  The code request processing unit 21 sends a request for issuing a code for performing settlement in the settlement system 1 of the present invention to the issuer-side system 5.

  The code display processing unit 22 receives a code corresponding to the code issuance request sent from the code request processing unit 21 from the issuer-side system 5 and causes the display device 72 of the user terminal 2 to display the received code. FIG. 7 shows an example of a code display screen displayed on the user terminal 2. In FIG. 7, the one-dimensional code and the two-dimensional code are displayed on the same screen. This is because there are many member store terminals 3b that can only read one-dimensional codes.

  The member store system 3 is a computer system used in a member store where the settlement system 1 using the code of the present invention can be used. For example, a member store of a credit card corresponds thereto.

  The member store side system 3 has a management server 3a, a member store terminal 3b, and a code reader 3c.

  The management server 3a is a server for managing a member store terminal 3b such as a POS system installed in a member store. Information from one or a plurality of member store terminals 3b is received and sent to the information processing center system 4 via a predetermined network, for example, a credit card settlement network. Note that the management server 3a may not be provided. In that case, the member store terminal 3b transmits and receives information to and from the information processing center system 4.

  The member store terminal 3b is a terminal installed at the member store, reads a code displayed on the user terminal 2, and edits a credit card message based on the read code. The member store terminal 3b is connected to a code reader 3c that reads one or more of a one-dimensional code and a two-dimensional code displayed on the user terminal 2, and is communicable. The member store terminal 3b has a code reading processing unit 30, a message processing unit 31, and an authorization processing unit 32.

  The code reading processing unit 30 receives information obtained by reading the one-dimensional code or the two-dimensional code displayed on the user terminal 2 with the code reading device 3c and decodes the code. As will be described later, when a one-dimensional code or a two-dimensional code is read, at least payment identification information (payment ID) and security data are received.

  The message processing unit 31 executes a process related to a message (authorization message) based on the payment identification information and the security data received by the code reading unit 30. This message is preferably in the same format as the message used for credit card settlement. This message contains information necessary for settlement, such as settlement amount, in addition to settlement identification information and security data.

  When the code reading device 3c is reading the one-dimensional code, the settlement identification information and the security data are assigned (mapped) to a predetermined data area in the credit card settlement message format. This is schematically shown in FIG.

  FIG. 8A shows payment identification information and security data read from a one-dimensional code, and FIG. 8B shows a message for a magnetic stripe of a credit card. The settlement identification information read from the one-dimensional code may be substituted into the number of digits corresponding to the member number in the magnetic stripe message, and the security data from the one-dimensional code may be substituted into the number of digits corresponding to the service code in the magnetic stripe message. . Note that the number of digits of the magnetic stripe message to which the settlement identification information and the security data read from the one-dimensional code are substituted is merely an example, and the present invention is not limited to this.

  When the code reader 3c is reading a two-dimensional code, the following processing is executed. That is, it is determined whether there is scheme identification information (scheme identifier) in a predetermined number of digits, for example, the first seven digits of the information read from the two-dimensional code. The scheme identification information is information indicating whether or not the processing is processing using the settlement system 1 of the present invention. It is determined whether the scheme identification information is identification information (hQVDUFY) indicating that the scheme is EMV specification for credit card settlement. If the scheme identification information is not included, the processing in the individual payment application is executed. If the scheme identification information is included, the read data is verified to be in a predetermined data format. I do. As this verification, it is verified whether the data is encoded in a predetermined standard, for example, Base64, or whether the resulting binary data is encoded in a BER-TLV structure following Base64 decoding. As a result of the verification, if it is determined that the information is not normal, the processing is terminated as it is, and if it is determined that the information is normal, the predetermined number of digits of the information read from the two-dimensional code is replaced with predetermined identification information, For example, it is determined whether there is an ADF Name (Application Definition File Name). Note that the ADF Name is identification information (brand identifier) indicating the name of a brand such as a credit card. If there is predetermined identification information, a message for the magnetic stripe of the credit card is generated, and if there is no predetermined identification information, processing for each individual brand according to the ADF Name, for example, an IC chip of the credit card Generate a message for

  FIG. 9A shows settlement identification information and security data read from a two-dimensional code, and FIG. 9B shows a message for a magnetic stripe of a credit card. In the case of a two-dimensional code, a larger amount of information can be included than in a one-dimensional code. Therefore, when the two-dimensional code is read by the code reading device 3c, the code reading processing unit 30 can read more information than the one-dimensional code as shown in FIG. 9A. Therefore, the message processing unit 31 changes the symbol of the item of the separator in the information received by the code reading processing unit 30 and uses the message as it is for the magnetic stripe except for deleting the item of END, so that the message of the credit card can be obtained. A message for a magnetic stripe can be generated. That is, the two-dimensional code may include information similar to a magnetic stripe message, settlement identification information, and security data in the corresponding digits as they are.

  The authorization processing unit 32 uses the credit card magnetic stripe message or the IC chip message generated by the message processing unit 31 to perform an authorization process (authorization) on the issuer-side system 5 via the information processing center system 4. )I do. Further, a response to the authorization process is received from the issuer side system 5 via the information processing center system 4.

  The information processing center system 4 is a computer system used in a management center that manages a payment authorization process using codes such as a one-dimensional code and a two-dimensional code and a sales data file. The information processing center system 4 includes a message destination processing unit 40 for performing an authorization process and a sales data processing unit 41 for managing sales data.

  The message destination processing unit 40 receives the message for the magnetic stripe of the credit card sent from the member store side system 3 and, based on the IIN (Issuer Identification Number) of the payment identification information in the message, issues the issuer corresponding to the IIN. An online server that redirects the message to the issuer-side system 5. In addition, a response to the authorization process based on the message received from the issuer system 5 is sent to the member store system 3 (member store terminal 3b). The IIN is information for identifying an issuer used for credit card settlement specified by ISO.

  The sales data processing unit 41 creates a sales data file based on the authorization processing by a magnetic stripe message of the credit card sent from the member store system 3 and the answer, and the issuer system 5, the acquirer, etc. It is a server that sends it to the computer system used. Note that the sales data processing unit 41 is preferably a batch server that performs batch processing of sales data, but may be real-time processing.

  The issuer-side system 5 is a computer system used by the issuer, and includes a payment information registration processing unit 50, a payment identification information generation processing unit 51, a security data generation processing unit 52, a code generation processing unit 53, an authorization determination processing unit 54, Having.

  The payment information registration processing unit 50 accepts registration of user attribute information and payment information when the user uses the payment system 1 using the code of the present invention. As the attribute information, information on the attribute of the individual or corporation such as the user's name, address, telephone number, and e-mail address is applicable. The payment information includes payment means for performing payment using a code, for example, information on credit card payment, information on a bank account, information on an electronic money account, and the like. The information regarding the credit card settlement includes a credit card number, an expiration date, a security code, and the like. The information on the bank account includes a bank name, a branch name, an account type (normal, current, etc.), an account number, and the like. The information related to the electronic money account includes account identification information. A payment process for performing payment using a code is performed using the payment information. When information on credit card payment is registered, payment by credit card is performed, and when information on bank account is registered, payment by debit from the bank account is performed. When information on an electronic money account is registered, settlement by electronic money is performed. Note that attribute information and payment information are managed in association with user identification information for identifying the user.

  Upon receiving a code issuance request from the user terminal 2, the payment identification information generation processing unit 51 executes a process of generating payment identification information. The payment identification information generation processing unit 51 generates a predetermined number of digits, for example, 16 digits of payment identification information. The payment identification information preferably includes IIN that is information for identifying the issuer, information of a predetermined number of digits that is a variable value, and a check digit. FIG. 10 shows an example of the payment identification information. FIG. 10 shows a case where the settlement identification information is 16 digits, of which 8 digits are IIN, 7 digits are a variable value, and 1 digit is a check digit. IIN is a fixed value for each issuer, and each payment is identified by a variable value of 7 digits. Therefore, a 7-digit variable value generates a different number each time an issuance request is issued. Although variable values are reused, the reissuing cycle needs to have a sufficient period from the viewpoint of security. The generated payment identification information is stored in association with the user identification information.

  Further, when receiving the code issuance request from the user terminal 2, the payment identification information generation processing unit 51 generates different numbers as the payment identification information for the one-dimensional code and the payment identification information for the two-dimensional code. good. This allows the issuer to determine whether the one-dimensional code or the two-dimensional code has been read. For example, the payment identification information for the one-dimensional code is issued by setting the ninth digit of the payment identification information to an odd number, and the payment identification information for the two-dimensional code is issued by setting the ninth digit to an even number. The payment identification information for the two-dimensional code can be generated as a different number.

  The security data generation processing unit 52 generates security data of a predetermined number of digits, which is assigned by the issuer to one set of payment identification information, and is generated by an arbitrary method. For example, a random value can be used as security data, or a value generated by a specific algorithm using payment identification information, user identification information, date and time information, and the like can be used. When a random value is used, it is preferable to store payment identification information assigned in the past, in addition to the random function, so that the same security data is not assigned to the same payment identification information. That is, when the same security data is assigned to the same payment identification information, a random value may be generated again using a random function. The generated security data is stored in association with the user identification information and the payment identification information.

  Note that the settlement identification information is not limited to 16 digits and the security data is not limited to 3 digits. However, by using 16 digits and 3 digits, a message such as “JIS1-TRACK2” or “JIS2” for a magnetic stripe of a credit card can be used. The data layout can be used as it is.

  The code generation processing unit 53 generates a one-dimensional code and a two-dimensional code using the payment identification information generated by the payment identification information generation processing unit 51 and the security data generated by the security data generation processing unit 52. If the payment identification information for the one-dimensional code is different from the payment identification information for the two-dimensional code, a code is generated using the corresponding payment identification information. The generated one-dimensional code and two-dimensional code are sent to the user terminal 2 and displayed.

  When generating the two-dimensional code, the code generation processing unit 53 includes, in addition to the settlement identification information and the security data, various information including identification information (hQVDUFY) indicating the EMV specification and ADF Name. , Base64 or the like. FIG. 11 shows an example of the payload data of the two-dimensional code.

  Based on the credit card magnetic stripe message and the IC chip message received via the information processing center system 4, the authorization determination processing unit 54 sets the payment identification information, security data, payment amount, and the like in the message. , An authorization determination process is performed. That is, the user is specified based on the payment identification information and the security data, and it is determined whether the user can make payment. Then, the answer is sent to the member store side system 3 via the information processing center system 4.

  Next, an example of a processing process using the settlement system 1 of the present invention will be described with reference to the sequence diagrams of FIGS. 4 and 5 and the flowchart of FIG.

  First, before using the settlement system 1 of the present invention, a user downloads and installs an application program used in the settlement system 1 of the present invention by a predetermined method in advance. Then, the application program is started (S100), and the authentication processing unit 20 receives an input of authentication information of a predetermined ID or password. When the authentication process is normally performed (S110), the user performs predetermined operations in the application program to input attribute information and payment information. The attribute information and the settlement information are sent (S120).

  The payment information registration processing unit 50 of the issuer-side system 5 that has received the attribute information and the payment information from the user terminal 2 assigns the user identification information to the user and associates the attribute information with the user identification information. The payment information is stored (S130). Then, when the registration process is completed normally, the information is sent to the user terminal 2 and the user terminal 2 displays that the registration process is completed.

  When the user performs the settlement process using the code at the store, the application program is activated in the user terminal 2 by a predetermined method (S200). Then, the authentication processing unit 20 receives an input of authentication information of a predetermined ID or password. When the authentication process is normally performed (S210), the user operates a predetermined code issuance request in the application program, and the code request processing unit 21 sends a code issuance request to the issuer-side system 5. (S220).

  When the issuer-side system 5 receives the code issuance request from the user terminal 2, the payment identification information generation processing unit 51 generates the payment identification information, and the security data generation processing unit 52 generates the security data ( S230, S240). The settlement identification information and the security data may be the same for the one-dimensional code and the two-dimensional code, or may be different for each. Then, the code generation processing unit 53 generates a one-dimensional code and a two-dimensional code based on the generated payment identification information and security data, and sends them to the user terminal 2 (S250).

  The code display processing unit 22 of the user terminal 2 receives the one-dimensional code and the two-dimensional code sent from the issuer system 5, and displays them on the code display screen of the user terminal 2 (S260). FIG. 7 shows an example of the code display screen.

  The user presents the one-dimensional code and the two-dimensional code displayed on the user terminal 2 to the store staff (S270). The store clerk reads one of the one-dimensional code and the two-dimensional code displayed on the user terminal 2 with the code reading device 3c (S280), and the code reading processing unit 30 in the member store terminal 3b decodes the code. I do. In addition, the person in charge of the store reads the one-dimensional code and the two-dimensional code by holding the code reader 3c over the user terminal 2, and the user puts the user terminal 2 on the code reader 3c installed in the store. A one-dimensional code or a two-dimensional code may be read by holding it.

  Then, the message processing unit 31 edits the message used for credit card payment based on the read payment identification information and security data in the one-dimensional code or the information such as the payment identification information and security data in the two-dimensional code. (S290).

  That is, when the one-dimensional code displayed on the user terminal 2 is read (S400), the code reading processing unit 30 decodes the one-dimensional code into payment identification information and security data, and sets the payment identification information for the magnetic stripe. By substituting the security data for the number of digits corresponding to the member number in the electronic mail for the service code in the magnetic stripe electronic mail, a magnetic stripe electronic mail for the credit card settlement is generated (S410). .

  On the other hand, when the two-dimensional code displayed on the user terminal 2 is read (S400), the message processing unit 31 determines whether predetermined scheme identification information (scheme identifier) is present in a predetermined number of digits, for example, the first seven digits. A determination is made (S420). For example, in a case where “hQVDUFY” that is the scheme identification information is not included, the merchant terminal 3b determines that the processing is not the target of the processing of the payment system 1 of the present invention and executes the processing in the individual payment application (S470). ).

  On the other hand, if the data includes “hQVDUFY” as the scheme identification information, it is verified whether the read data has a predetermined data format (S430). When it is determined that the two-dimensional code is not normal, the process is terminated. When it is determined that the two-dimensional code is read, the ADF Name having a predetermined number of digits of the information read from the two-dimensional code is added to the predetermined identification information. It is determined whether there is a (brand identifier), for example, “A0 00 00 00 65 03 92 XX” (where XX is a variable value) (S440). If it is determined that there is a predetermined ADF Name, a message for the magnetic stripe of the credit card is generated based on the data corresponding to MS Track2 in the payload data read from the two-dimensional code (S450). That is, in the data of the area corresponding to the MS Track 2 in the payload data of the two-dimensional code as shown in FIG. 11 (FIG. 9A), the separator is changed from "D" to "=", and "END" Delete the item and edit it into a message for the magnetic stripe of the credit card.

  On the other hand, if there is no predetermined identification information in the ADF Name in S440, a process for each individual brand according to the ADF Name, for example, a message for an IC chip of a credit card is generated and the process is executed (S460). ).

  The authorization processing unit 32 performs an authorization process on the issuer side system 5 via the information processing center system 4 using the credit card magnetic stripe message or the IC chip message generated as described above. . Then, based on the IIN of the payment identification information included in the message, the message destination processing unit 40 of the information processing center system 4 redirects the message to the issuer-side system 5 of the issuer corresponding to the IIN (S300).

  Based on the message transmitted from the member store system 3 via the information processing center system 4, the authorization determination processing unit 54 of the issuer system 5 sets the payment identification information in the message, security data, and the like based on the message. The user is identified based on the settlement amount and the payment is determined (S310). Then, the response is sent to the member store system 3 via the information processing center system 4 (S320).

  The message destination processing unit 40 of the information processing center system 4 redirects the response to the authorization processing based on the message received from the issuer system 5 to the member store system 3 (member store terminal 3b) (S330). As described above, the authorization processing unit 32 of the affiliated store terminal 3b of the affiliated store system 3 receives a response to the authorization process from the issuer system 5 via the information processing center system 4 (S340).

  The sales data processing unit 41 of the information processing center system 4 creates a sales data file based on the authorization message (authorization message) and its response at a predetermined timing, for example, at 0:00 every day, and the issuer side system. 5, Send it to the computer system used by Acquirer et al. (S350).

  By executing the above-described processing, even in the case of payment using a code such as a one-dimensional code or a two-dimensional code, it is possible to standardize the processing on the store side of the payment method. In addition, when a conventional credit card settlement network is used, it is possible to perform only minor repair work of a POS terminal or the like installed at a store, thereby reducing the burden.

  In addition to the above-described first embodiment, the configuration may be such that the position information (location information) of the user terminal 2 is included in the information of the two-dimensional code.

  In this case, when the code request processing unit 21 of the user terminal 2 issues a code issuance request to the issuer-side system 5, the code request processing unit 21 also sends the position information acquired by the GPS device of the user terminal 2 together. The issuer-side system 5 that receives these generates a certificate including the position information. Further, when the code generation processing unit 53 generates the two-dimensional code, in addition to the payment identification information generated by the payment identification information generation processing unit 51 and the security data generated by the security data generation processing unit 52, the generated certificate A two-dimensional code including a certificate is generated and sent to the user terminal 2.

  The user terminal 2 displays the two-dimensional code sent from the issuer-side system 5 and reads the two-dimensional code with the code reader 3c of the member store-side system 3, and the code reading processor 30 decodes the code. Then, the message processing unit 31 includes information indicating the position of the member store terminal 3b in the message (authorization message) in addition to the settlement identification information, security data, and certificate information read by the code reading unit 30. The information is sent to the issuer system 5 via the information processing center system 4. In this case, instead of the network used for credit card payment, a unique payment network using the Internet or the like may be used. The information indicating the position of the member store terminal 3b may be the position information of the member store terminal 3b, or information that can specify the member store, such as the name of the store or company where the member store terminal 3b is installed. You may.

  The issuer system 5 compares the information indicating the position of the member store terminal 3b included in the authorization message received from the member store system 3 with the position information included in the certificate. As a result of this comparison, if a predetermined condition, such as the position information being within a predetermined range, is not satisfied, it can be determined that there has been some kind of illegal processing, and an answer that does not permit settlement can be returned. If the result of the comparison satisfies a predetermined condition, such as that the position information is within a predetermined range, processing related to settlement, such as performing authorization determination processing as it is, is executed.

  In addition to the first and second embodiments described above, when displaying a one-dimensional code or a two-dimensional code on the user terminal 2, a function for preventing the risk of the code itself being falsified may be provided.

  In this case, the key information (public key) of the public key encryption is stored in the application program of the user terminal 2, and the key information (secret key) of the public key encryption is stored in the issuer-side system 5.

  The code request processing unit 21 of the user terminal 2 issues a code issuance request to the issuer system 5. In the issuer-side system 5 that has received this request, the code generation processing unit 53 generates a one-dimensional code and / or a two-dimensional code by the processing of the first or second embodiment. In addition, the issuer-side system 5 generates a hash value for the data of the code generated by the code generation processing unit 53 using a predetermined hash function. Then, the issuer-side system 5 encrypts the code and the hash value using the stored key information (secret key) of the public key encryption, and sends the encrypted code and the hash value to the user terminal 2.

  The code display processing unit 22 of the user terminal 2 decrypts the encrypted code and the hash value received from the issuer-side system 5 using the key information (public key) of the public key encryption. Then, a hash value is generated from the decrypted code by a predetermined hash function (a hash function capable of calculating the same hash value as the issuer-side system 5). Then, the decrypted hash value is compared with the calculated hash value, and if they match, the decrypted code is displayed on the user terminal 2.

  By such processing, the validity of the one-dimensional code and the two-dimensional code can be guaranteed.

  In the above-described setting, the case where the public key is stored in the application program of the user terminal 2 and the secret key is stored in the issuer-side system 5 has been described.

  The issuer-side system 5 encrypts the code and the hash value and sends the encrypted code and the hash value to the user terminal 2, and decrypts the encrypted code and the hash value at the user terminal 2. Encrypts the code, sends the encrypted code and the hash value to the user terminal 2, decrypts the encrypted code at the user terminal 2, and generates a hash value from the decrypted code. Good.

  Although the case of the public key cryptosystem has been described, a common key cryptosystem using a common key between the user terminal 2 and the issuer system 5 may be used.

  In each of the above embodiments, the processing can be appropriately changed without departing from the technical idea of the present invention. For example, the order of the processes may be changed, and some processes may not be executed.

  By using the settlement system 1 of the present invention, the processing of the settlement method using the one-dimensional code or the two-dimensional code on the store side can be unified, so that the burden on the person in charge of the store can be reduced. it can. In addition, since the processing can be unified, the store does not need to perform the repair work of the POS terminal for each service provider, and it is sufficient to perform only the repair work that can use the settlement system 1 of the present invention. Thus, the burden of renovation work can be reduced.

1: Payment system 2: User terminal 3: Member store system 3a: Management server 3b: Member store terminal 3c: Code reader 4: Information processing center system 5: Issuer system 20: Authentication processing unit 21: Code request processing Unit 22: Code display processing unit 30: Code reading processing unit 31: Message processing unit 32: Authorization processing unit 40: Message destination processing unit 41: Sales data processing unit 50: Payment information registration processing unit 51: Payment identification information generation processing unit 52: security data generation processing unit 53: code generation processing unit 54: authorization determination processing unit 70: arithmetic unit 71: storage device 72: display device 73: input device 74: communication device

Claims (11)

A settlement system for settlement using a code,
The settlement system,
A payment identification information generation processing unit that generates payment identification information based on a code issuance request received from a user terminal used by the user;
A security data generation processing unit that generates security data based on the issuance request;
A code generation processing unit that generates a code using the payment identification information and the security data and displays the code on the user terminal;
A message processing unit that generates a message of a message layout used for credit card payment, including the payment identification information and the security data, based on the information obtained by reading the code displayed on the user terminal;
Payment system characterized by having. The message processing unit,
Determining whether the information obtained by reading the code displayed on the user terminal includes predetermined brand identification information,
If it is determined that the predetermined brand identification information is included, a message including the payment identification information and security data is generated in a message layout for a magnetic stripe used for credit card payment.
The settlement system according to claim 1, wherein: The payment identification information generation processing unit generates payment identification information of 16 digits,
The security data generation processing unit generates three-digit security data;
The settlement system according to claim 1 or 2, wherein: A settlement system for settlement using a code,
The settlement system,
A payment identification information generation processing unit that generates 16-digit payment identification information based on a code issuance request received from a user terminal used by the user;
A security data generation processing unit that generates three-digit security data based on the issuance request;
A code generation processing unit that generates a code using the payment identification information and the security data and displays the code on the user terminal;
Payment system characterized by having. The code generation processing unit includes:
Generating a one-dimensional code and a two-dimensional code based on the payment identification information and the security data;
The settlement system according to any one of claims 1 to 4, wherein: The payment identification information generation processing unit includes:
Generating payment identification information for a one-dimensional code and payment identification information for a two-dimensional code;
The code generation processing unit includes:
Generating a one-dimensional code using the one-dimensional code settlement identification information;
Generating a two-dimensional code using the payment identification information for the two-dimensional code;
The settlement system according to claim 5, wherein: The code generation processing unit includes:
Generating the code by using a certificate based on the position information of the user terminal received when the request for issuing the code is received from the user terminal, the payment identification information, and the security data;
The settlement system according to any one of claims 1 to 6, wherein: The code generation processing unit includes:
Generating a hash value based on the generated code, encrypting at least the generated code with a key stored in advance, and sending the encrypted code to the user terminal;
The user terminal,
Decrypting at least the encrypted code with a key stored in advance,
Calculating a hash value based on the decrypted code,
Comparing the calculated hash value with the hash value generated by the code generation processing unit, and displaying the decrypted code if they match,
The settlement system according to any one of claims 1 to 7, wherein: A settlement system for settlement using a code,
The settlement system,
A payment identification information generation processing unit that generates payment identification information based on a code issuance request received from a user terminal used by the user;
A security data generation processing unit that generates security data based on the issuance request;
A code generation processing unit that generates a code using the position information of the user terminal, the payment identification information, and the security data, and displays the code on the user terminal;
Receiving, from the member store terminal reading the code displayed on the user terminal, the payment identification information, the security data, the position information of the user terminal, and the information indicating the position of the member store terminal;
Comparing the location information of the user terminal with information indicating the location of the member store terminal,
As a result of the comparison, if the condition regarding the position information is satisfied, the processing using the payment identification information and the security data is executed.
A payment system characterized by the following. Computer
A payment identification information generation processing unit that generates payment identification information based on a code issuance request received from a user terminal used by the user;
A security data generation processing unit that generates security data based on the issuance request;
A code generation processing unit that generates a code using the payment identification information and the security data and displays the code on the user terminal;
A message processing unit that generates a message of a message layout used for credit card payment, including the payment identification information and the security data, based on the information obtained by reading the code displayed on the user terminal;
A program characterized by functioning as: Computer
A payment identification information generation processing unit that generates 16-digit payment identification information based on a code issuance request received from a user terminal used by the user;
A security data generation processing unit that generates three-digit security data based on the issuance request;
A code generation processing unit that generates a code using the payment identification information and the security data;
A program characterized by functioning as:

Images