JP2020135742A - Settlement system, first settlement server, second settlement server, computer program, and settlement method - Google Patents

Abstract

To provide a settlement system, first settlement server, second settlement server, computer program, and settlement method that can simplify settlement and enhance users' convenience.SOLUTION: A first settlement server includes: a first reception unit for receiving authentication information generated by a user terminal device; an identifying unit for identifying a second settlement server which is a transmission destination of the received authentication information; and a first transmission unit for transmitting the received authentication information to the second settlement server identified by the identifying unit. The identified second settlement server includes: a second reception unit for receiving the authentication information transmitted by the first settlement server; a second storage unit for storing the received authentication information: an acquisition unit for acquiring authentication information included in a reading code obtained by reading, by a predetermined reading device, the reading code generated by the user terminal device from the reading device; and a determination unit for determining based on the acquired authentication information and the stored authentication information whether settlement based on the reading code is permitted.SELECTED DRAWING: Figure 1

Description

The present invention relates to a payment system, a first payment server, a second payment server, a computer program and a payment method.

Credit cards are used to settle purchases of goods and services. Patent Document 1 discloses a shopping system for making payments by inputting credit card name, card number, authentication number, payment method, and other credit information used for payment of purchase price of goods on the screen. There is.

Japanese Unexamined Patent Publication No. 2006-302311

However, in a shopping system such as Patent Document 1, a user who purchases a product or the like needs to input cragit information, which is troublesome and inconvenient for the user.

The present invention has been made in view of such circumstances, and provides a payment system, a first payment server, a second payment server, a computer program, and a payment method that can simplify payment and improve user convenience. The purpose is to provide.

The payment system according to the embodiment of the present invention includes a first payment server and a second payment server, and is a payment system that determines whether or not payment is possible based on a reading code including authentication information generated by a user terminal device. The first payment server includes a first receiving unit that receives authentication information generated by a user terminal device, a specific unit that specifies a second payment server to which the authentication information received by the first receiving unit is transmitted, and the above. The first payment server includes a first transmission unit that transmits the authentication information received by the first reception unit to the second payment server specified by the specific unit, and the second payment server specified by the specific unit is the first payment server. Obtained by reading a second receiving unit that receives the transmitted authentication information, a second storage unit that stores the authentication information received by the second receiving unit, and a reading code generated by the user terminal device with a predetermined reading device. Whether or not payment based on the reading code is possible based on the acquisition unit that acquires the authentication information included in the reading code from the reading device, the authentication information acquired by the acquisition unit, and the authentication information stored in the second storage unit. It is provided with a determination unit for determining.

The first payment server according to the embodiment of the present invention includes a first receiving unit that receives the authentication information generated by the user terminal device and a second payment server to which the authentication information received by the first receiving unit is transmitted. It includes a specific unit to be specified and a first transmission unit that transmits the authentication information received by the first reception unit to the second payment server specified by the specific unit.

The second payment server according to the embodiment of the present invention is a second payment server that determines whether or not payment is possible based on a reading code including authentication information generated by the user terminal device, and is an authentication transmitted by the first payment server. A second receiving unit that receives information, a second storage unit that stores authentication information received by the second receiving unit, and a reading code obtained by reading a reading code generated by a user terminal device with a predetermined reading device. Based on the acquisition unit that acquires the authentication information included in the reading device from the reading device, the authentication information acquired by the acquisition unit, and the authentication information stored in the second storage unit, it is determined whether or not payment is possible based on the reading code. It is equipped with a determination unit.

The computer program according to the embodiment of the present invention is a computer program that causes a computer to determine whether or not payment is possible based on a reading code including authentication information generated by a user terminal device, and is transmitted to the computer by the first payment server. The processing for receiving the received authentication information, the processing for storing the received authentication information in the storage unit, and the authentication information included in the reading code obtained by reading the reading code generated by the user terminal device with a predetermined reading device are described above. The process of acquiring from the reading device and the processing of determining whether or not the payment is possible based on the reading code is executed based on the acquired authentication information and the authentication information stored in the storage unit.

The computer program according to the embodiment of the present invention is a computer program that enables a computer to realize a user terminal device, and can be used only once when the computer receives a predetermined operation and the operation is received. A process of generating one-time information, a process of generating a reading code including the generated one-time information, a process of transmitting the generated one-time information to a predetermined payment server, and a process of reading the generated reading code with a predetermined reading device. If so, the process of displaying the availability of payment is executed.

The payment method according to the embodiment of the present invention is a payment method for determining whether or not payment is possible based on a reading code including authentication information generated by the user terminal device, and the first payment server is generated by the user terminal device. The authentication information is received, the second payment server to which the received authentication information is sent is specified, the received authentication information is transmitted to the specified second payment server, and the specified second payment server is the first payment. The authentication information transmitted by the server is received, the received authentication information is stored in the storage unit, the reading code generated by the user terminal device is read by a predetermined reading device, and the authentication information included in the obtained reading code is read. Based on the authentication information acquired from the device and the acquired authentication information and the authentication information stored in the storage unit, it is determined whether or not the payment can be made based on the reading code.

According to the present invention, payment can be simplified and user convenience can be improved.

It is a block diagram which shows an example of the structure of the payment system of this embodiment. It is explanatory drawing which shows the 1st example of the process of the payment system of this embodiment. It is a schematic diagram which shows an example of the correspondence relation information between a 2nd settlement server and a store apparatus. It is a schematic diagram which shows an example of the settlement determination by the 2nd settlement server. It is a schematic diagram which shows the 1st display example displayed on the display screen of a user terminal apparatus. It is explanatory drawing which shows the 2nd example of the process of the payment system of this embodiment. It is explanatory drawing which shows the 3rd example of the process of the payment system of this embodiment. It is a schematic diagram which shows the 2nd display example displayed on the display screen of a user terminal apparatus. It is a flowchart which shows an example of the processing procedure in a user terminal apparatus. It is a flowchart which shows an example of the processing procedure in a user terminal apparatus. It is a flowchart which shows an example of the processing procedure in the 2nd settlement server. It is a flowchart which shows an example of the processing procedure in the 2nd settlement server.

Hereinafter, embodiments of the present invention will be described with reference to the drawings. FIG. 1 is a block diagram showing an example of the configuration of the payment system of the present embodiment. The payment system includes a first payment server 30 and a second payment server 50. In the figure, one second payment server 50 is shown, but there may be a plurality of second payment servers. The second payment server may be provided for each member store, or may be shared by a plurality of member stores. The first payment server 30 and the second payment server 50 are connected to each other via the communication network 1. The second payment server 50 is connected to the store device 20 as a reading device managed by itself via a communication network. The store device 20 is installed in the store and is provided with a scanner function (reading function) for reading a two-dimensional code such as a QR code (registered trademark) as a reading code described later, a POS (Point of Sale) system function, and the like. Can be done. The user terminal device 10 is carried by the user, can be connected to the first payment server 30 via a communication network, and is connected to the store device 20 via short-range communication (for example, Bluetooth: registered trademark). You can also. In the example of FIG. 1, for convenience, only one user terminal device 10 is shown, but the user terminal device 10 is not limited to one. In the following, a two-dimensional code will be used as an example of the reading code, but the reading code is not limited to the two-dimensional code.

The user terminal device 10 includes, for example, a smartphone (mobile phone), a notebook personal computer, a tablet, and the like. The user terminal device 10 includes a control unit 11, a first communication unit 12, a second communication unit 13, a storage unit 14, a display screen 15, an operation unit 16, GPS 17, and map information 18 that control the entire device.

The control unit 11 can be configured by a CPU, a ROM, a RAM, and the like, and can execute a payment application for exchanging information between the first payment server 30 and the store device 20. The control unit 11 can generate a two-dimensional code including the authentication information by executing the payment application. Details of the authentication information will be described later.

The first communication unit 12 has a communication function with the first payment server 30 and can transmit and receive required information. The first communication unit 12 can transmit the authentication information included in the generated two-dimensional code to the first payment server 30.

The second communication unit 13 has a short-range communication function with the store device 20 and can transmit and receive required information.

The storage unit 14 is composed of a hard disk, a flash memory, or the like, stores predetermined information, and holds a payment application.

The display screen 15 can be composed of a liquid crystal panel, an organic EL (Electro Luminescence) display, or the like. The operation unit 16 can be configured by, for example, a touch panel incorporated in the display screen 15, and can accept a predetermined operation performed by the user on the display screen 15. Further, the operation unit 16 can accept the operation on the keyboard displayed on the display screen 15. The operation unit 16 may be a hardware keyboard, a mouse, or the like.

The GPS 17 has a GPS (Global Positioning System) function and can detect the position information of the user terminal device 10. The control unit 11 can display its own position on the map displayed on the display screen 15 by using the position information detected by the GPS 17 and the map information 18. The map information 18 includes the location information of the store device 20 and the location information of the store (also referred to as a member store) in which the store device 20 is installed. The location information of the store device 20 and the location information of the store where the store device 20 is installed may be acquired from the first payment server 30 through the payment application.

The store device 20 includes a control unit 21, a first communication unit 22, a second communication unit 23, a display unit 24, a reading unit 25, and a storage unit 26 that control the entire device. The control unit 21 can be composed of a CPU, a ROM, a RAM, and the like.

The reading unit 25 can read the two-dimensional code by bringing the two-dimensional code displayed on the display screen 15 of the user terminal device 10 close to the reading unit 25.

The first communication unit 22 has a communication function with the second payment server 50, and can send and receive required information. The first communication unit 22 can transmit the authentication information included in the two-dimensional code read by the reading unit 25 to the second payment server 50.

The second communication unit 23 has a short-range communication function with the user terminal device 10 and can transmit and receive required information.

The display unit 24 can be composed of a liquid crystal panel, an organic EL (Electro Luminescence) display, or the like. The display unit 24 can display the result of the settlement approval / disapproval determination.

The storage unit 26 is composed of a hard disk, a flash memory, or the like, and can store predetermined information.

The first settlement server 30 includes a control unit 31, a first communication unit 32, a second communication unit 33, a storage unit 34, a specific unit 35, an invalid unit 36, and an update unit 37 that control the entire server. The control unit 31 can be composed of a CPU, a ROM, a RAM, and the like.

The first communication unit 32 has a communication function with the user terminal device 10 and can transmit and receive required information. The first communication unit 32 has a function as a first reception unit, and can receive the authentication information generated by the user terminal device 10.

The storage unit 34 is composed of a hard disk, a flash memory, or the like, and can store predetermined information.

The identification unit 35 identifies the second payment server to which the authentication information received by the first communication unit 32 is transmitted from among the plurality of second payment servers 50.

The second communication unit 33 has a communication function with the second payment server 50, and can send and receive required information. The second communication unit 33 has a function as a first transmission unit, and transmits the authentication information received by the first communication unit 32 to the second payment server 50 specified by the specific unit 35. The authentication information can be information for determining whether or not payment is possible when the user purchases a product at a store or the like. The identification unit 35 can specify the second payment server 50 that requires the authentication information for the user's payment from among the plurality of second payment servers 50. Details of the invalid part 36 and the update part 37 will be described later.

The second settlement server 50 includes a control unit 51 that controls the entire server, a first communication unit 52, a second communication unit 53, a storage unit 54, a determination unit 55, and a deletion unit 56. The control unit 51 can be composed of a CPU, a ROM, a RAM, and the like.

The second communication unit 53 has a communication function with the first payment server 30 and can transmit and receive necessary information. The second communication unit 53 has a function as a second reception unit, and can receive the authentication information transmitted by the first payment server 30. The storage unit 54 has a function as a second storage unit, and can store the authentication information received by the second communication unit 53.

The first communication unit 52 has a communication function with the store device 20 and can transmit and receive required information. The first communication unit 52 has a function as an acquisition unit, and receives authentication information included in the two-dimensional code obtained by reading the two-dimensional code generated by the user terminal device 10 by the store device 20 from the store device 20. get.

The determination unit 55 determines whether or not payment is possible based on the two-dimensional code, based on the authentication information acquired by the first communication unit 52 and the authentication information stored in the storage unit 54. For example, if the authentication information included in the two-dimensional code read by the store device 20 matches the authentication information received from the first payment server 30, it can be determined that payment is possible and included in the two-dimensional code read by the store device 20. If the authentication information received does not match the authentication information received from the first payment server 30, it can be determined that payment is not possible. The determination result of whether or not the payment is possible by the determination unit 55 can be output to the store device 20. As a result, the store clerk can confirm whether or not the user can purchase the product. Further, the determination result of the settlement possibility by the determination unit 55 may be transmitted to the user terminal device 10.

With the above configuration, when the user wants to purchase a product at a desired store or the like, the user terminal device 10 simply generates a two-dimensional code, and the store device 20 reads the generated two-dimensional code to settle the user's payment. It is possible to judge whether or not it is possible. As a result, it is not necessary to wait for authentication when purchasing a product or the like, and payment can be made immediately, which simplifies payment and improves user convenience.

FIG. 2 is an explanatory diagram showing a first example of the process of the payment system of the present embodiment. Hereinafter, processes P1 to P15 will be described.

In process P1, when a user purchases a product at a store or the like, the user activates an application (payment application) on the user terminal device 10.

In process P2, the user terminal device 10 generates a two-dimensional code. More specifically, the payment application generates a two-dimensional code. The two-dimensional code includes a one-time code (for example, a nonce, which can be a disposable random value at a time), a device ID, and a position information (generation point) detected by GPS17 as authentication information. Information) can be included. The two-dimensional code may include the user ID and the time information (generation time information) at which the two-dimensional code was generated. Further, the location information and the time information may be encrypted by using a common key. The generated two-dimensional code and the user's usage limit can be displayed on the display screen 15 of the user terminal device 10.

In the process P3, the user terminal device 10 transmits the one-time code, the device ID, and the location information included in the two-dimensional code to the first payment server 30.

In the process P4, the first payment server 30 searches for the store device 20 close to the user's position (the position when the user terminal device 10 generates the two-dimensional code) based on the received position information, and the searched store. The second payment server 50 that manages the device 20 is specified.

FIG. 3 is a schematic diagram showing an example of correspondence information between the second payment server 50 and the store device 20. The storage unit 34 of the first payment server 30 stores the correspondence information between the second payment server 50 and the location information of the store device 20 from which the second payment server 50 can acquire the authentication information included in the two-dimensional code. To do. That is, the storage unit 34 stores information in which the location information of the store device 20 managed by the second payment server 50 is associated with each second payment server 50. Here, the store device 20 to be managed means, for example, the store device 20 that the second payment server 50 targets to determine whether or not payment is possible. In addition to the location information, the identification information (identification ID) of the store device 20 can also be associated.

In the example of FIG. 3, the second payment server A manages the store device aa1 of the member store A1, the store device aa2 of the member store A2, and so on, and the position information of the store device aa1 is aa1xxxxxx, and the position of the store device aa2. The information is aa2xxxxxx. Further, the second payment server B manages the store device bb1 of the member store B1, the store device bb2 of the member store B2, ..., The position information of the store device bb1 is bb1xxxxxx, and the position information of the store device bb2 is bb2xxxxxx. Is.

The identification unit 35 identifies the second payment server corresponding to the store device 20 existing within a predetermined distance range including the position received from the user terminal device 10. That is, the identification unit 35 can specify the second payment server 50 that manages the store device 20 that exists near the user's position when the user generates the two-dimensional code. For example, when the position information aa1xxxxxx and aa2xxxxx are included in the predetermined distance range from the user's position when the user generates the two-dimensional code, the specific unit 35 manages the store device IDs aa1 and aa2. Identify the payment server A.

As a result, the store device 20 that can use (read) the two-dimensional code generated by the user terminal device 10 can be limited to the vicinity of the user's position, and the time from the generation of the two-dimensional code to the use. And physical distance can be limited to prevent unauthorized 2D code from being used without inconvenience to the user.

In process P5, the first payment server 30 transmits the received one-time code, device ID, and user usage limit to the specified second payment server 50.

In the process P6, the user purchases a desired product and brings the two-dimensional code displayed on the user terminal device 10 closer to the reading unit 25 of the store device 20.

In the process P7, the store device 20 reads the two-dimensional code by the reading unit 25, and acquires the user's usage amount (purchase price of the product) using the POS system function.

In the process P8, the store device 20 transmits the read two-dimensional code and the acquired usage amount to the second payment server 50.

In process P9, the second payment server 50 determines whether or not payment is possible based on the one-time code, device ID, and usage amount.

FIG. 4 is a schematic diagram showing an example of payment determination by the second payment server 50. In the example of FIG. 4, one-time code, device ID, usage amount, location information, and time information are exemplified as determination items. Hereinafter, they will be described in order.

The determination unit 55 is based on a two-dimensional code based on the one-time code acquired from the user terminal device 10 via the store device 20 and the one-time code acquired from the first payment server 30 and stored in the storage unit 54. Judge whether payment is possible or not. If the one-time codes match, it can be determined that payment is possible, and if the one-time codes do not match, it can be determined that payment is not possible. As a result, it is possible to confirm that the user who has normally generated the two-dimensional code on the user terminal device 10 is using the two-dimensional code, and it is possible to improve the security required for payment.

The determination unit 55 makes a payment based on the two-dimensional code based on the device ID acquired from the user terminal device 10 via the store device 20 and the device ID acquired from the first payment server 30 and stored in the storage unit 54. Judge whether it is possible or not. If the device IDs match, it can be determined that payment is possible, and if the device IDs do not match, it can be determined that payment is not possible. As a result, it is possible to confirm that the user who has normally generated the two-dimensional code on the user terminal device 10 is using the two-dimensional code, and it is possible to improve the security required for payment.

The determination unit 55 is based on information on the user's usage amount acquired from the user terminal device 10 via the store device 20 and the user's usage limit amount acquired from the first payment server 30 and stored in the storage unit 54. , Judge whether payment is possible based on the two-dimensional code. For example, the determination unit 55 can determine that settlement is possible when the usage amount is within the usage limit, and can determine that settlement is not possible when the usage amount exceeds the usage limit. As a result, it is possible to make a payment at an appropriate usage amount of the user.

When the generation point of the two-dimensional code acquired from the user terminal device 10 via the store device 20 and the position of the store device 20 are within a predetermined distance range, the determination unit 55 makes a payment based on the two-dimensional code. Judge as possible. As a result, the distance from the generation point where the user generated the two-dimensional code to the point where the two-dimensional code is actually used (the position of the store device 20) can be limited, without causing inconvenience to the user. Only the user who legitimately generated the two-dimensional code can make a payment, and it is possible to prevent the unauthorized two-dimensional code from being used.

The determination unit 55 is based on the two-dimensional code when the time when the two-dimensional code acquired from the user terminal device 10 via the store device 20 is generated and the time when the two-dimensional code is read are within a predetermined time range. Judge that payment is possible. As a result, the time from the time when the user generated the two-dimensional code to the time when the reading code is actually used can be limited, and the two-dimensional code is normally generated without causing inconvenience to the user. Only the user can make a payment, and it is possible to prevent the use of an invalid two-dimensional code.

In addition, all the judgment items of the one-time code, the device ID, the usage amount, the location information, and the time information may be used, or a part of them may be used for the judgment of the possibility of payment. By increasing the number of judgment items, the security of immediate payment can be improved.

In the process P10, the second settlement server 50 notifies the store device 20 of the settlement result (determination result of whether or not the settlement is possible). The store clerk can confirm the payment result displayed on the display unit 24 of the store device 20. The user can also confirm the payment result displayed on the display unit 24 of the store device 20.

In the process P11, the store device 20 notifies the user terminal device 10 of the payment result. The process P11 may be omitted.

In the process P12, when the second payment server 50 determines that payment is possible, the second payment server 50 transmits the payment information to the first payment server 30.

The payment information includes, for example, a product purchased by a settled user, a quantity, a usage amount, user identification information, and a predetermined password. The predetermined password can be, for example, TOTP (Time based One Time Password), and can be updated periodically (for example, every time one minute elapses) using the time information. For example, the user terminal device 10 can update the password using the time information, and the first payment server 30, which is the authentication server, can also update the password using the synchronized time information.

In process P13, the first payment server 30 performs payment processing. That is, the first payment server 30 receives the payment information and stores the received payment information in the storage unit 34. The control unit 31 has a function as an authentication unit and authenticates the password (TOTP) included in the received payment information.

In the process P14, the first settlement server 30 (specifically, the control unit 31 as an invalid unit) invalidates the one-time code and invalidates the re-reading of the two-dimensional code. The invalidation process may include any process as long as it prohibits the reuse of the two-dimensional code. The first payment server 30 (specifically, the second communication unit 33 as the notification unit) determines that the two-dimensional code has been invalidated, and another second payment including the second payment server that determines whether or not the payment is possible. Notify the server.

That is, when a plurality of second payment servers 50 to which the authentication information is transmitted are specified by the specific unit 35, and the second payment server 50 of one of the plurality of specified second payment servers 50 determines whether or not payment is possible. , Not only the first second payment server 50 but also the other second payment server 50 is notified that the two-dimensional code has been invalidated.

In the process P15, the second payment server 50 can invalidate (used) the rereading of the QR based on the notification. As a result, the two-dimensional code once used cannot be used again, so that the reliability of the two-dimensional code can be improved and unauthorized use can be prevented without causing inconvenience to the user.

Further, in the above-mentioned process P14, when the update unit 37 of the first payment server 30 authenticates the password by the control unit 31, the update unit 37 uses the user by subtracting the user's usage amount from the usage limit of the user stored in the storage unit 34. The limit amount is updated, and the updated usage limit amount is notified to the second payment server 50.

As a result, when the second payment server 50 determines that payment is possible, the first payment server 30 authenticates whether the password generated by the user terminal device 10 and the password held by the user terminal device 10 match, and the password is set. If they match, the user's usage limit is updated based on the payment information, so the user can settle the purchase of the product within the updated usage limit even after purchasing the product and making a payment. You can continue.

The deletion unit 56 of the second payment server 50 can delete the authentication information stored in the storage unit 54 after storing it for a predetermined time. By limiting the time during which the authentication information can be used, it is possible to improve the security regarding the determination of whether or not payment is possible based on the authentication information.

FIG. 5 is a schematic view showing a first display example displayed on the display screen 15 of the user terminal device 10. FIG. 5A shows an example in which the “payment application start” icon 102 is displayed on the payment application start screen 101. When the user operates the "payment application activation" icon 102 (for example, touch or click), the payment application is activated.

In FIG. 5B, the two-dimensional code 112 is displayed on the two-dimensional code display screen 111, and the user's usage limit is displayed in the usage limit column 113.

When the two-dimensional code 112 is read by the reading unit 25 of the store device 20, it is immediately determined whether or not the payment is possible, and the payment result is displayed on the payment screen 121. In the example of FIG. 5C, it is determined that payment is possible, and a character such as "Payment processing is completed" is displayed together with the payment completion mark 122. In addition, the updated usage limit is displayed in the usage limit column 123.

As described above, the payment application is activated when the operation for starting the payment application is received, generates a one-time code that can be used only once, and performs a process of generating a two-dimensional code including the generated one-time code. The one-time code is, for example, a nonce, which can be a disposable random value each time.

The payment application transmits the generated one-time code to a predetermined payment server (first payment server 30), and when the generated two-dimensional code is read by the reading unit 25 of the store device 20, it displays whether or not payment is possible. Perform processing. That is, when the user wants to purchase a product at a desired store or the like, the user terminal device 10 generates a two-dimensional code, and the store device 20 simply reads the generated two-dimensional code to enable payment for the purchase of the product. Can be confirmed. As a result, it is not necessary to wait for authentication when purchasing a product or the like, and payment can be made immediately, which simplifies payment and improves user convenience.

The payment application is activated when it receives an operation to start the payment application, encrypts at least one of the information of the position detected by GPS 17 or the current time, and performs a process of generating a two-dimensional code including the encrypted information. it can. Encryption can be performed, for example, by using a common key with the second payment server 50, which is the server on the authentication side that performs decryption.

When the generated two-dimensional code is read by the store device 20, the payment application performs a process of displaying whether or not payment is possible. As a result, while enhancing the security of the two-dimensional code, it is possible to make an immediate payment without having to wait for authentication when purchasing a product, etc., and it is possible to simplify the payment and improve the convenience of the user. ..

The payment application performs a process of updating a predetermined password included in the two-dimensional code at a predetermined cycle (for example, 1 minute). The predetermined password can be, for example, TOTP (Time based One Time Password), and can be updated periodically using the time information. For example, the user terminal device 10 can update the password using the time information, and the first payment server 30, which is the authentication server, can also update the password using the synchronized time information.

When the two-dimensional code generated together with the updated password is read by the store device 20, the payment application performs a process of displaying the updated usage limit. When the payment is completed and the usage limit is updated, as shown in FIG. 5C, the updated usage limit is displayed, so that the user can update the product even after purchasing the product and making the payment. You can continue to settle the purchase of the product within the usage limit.

FIG. 6 is an explanatory diagram showing a second example of the process of the payment system of the present embodiment. Hereinafter, processes P21 to P36 will be described.

In process P21, when a user purchases a product at a store or the like, the user activates an application (payment application) on the user terminal device 10.

In process P22, the user terminal device 10 generates a two-dimensional code. More specifically, the payment application generates a two-dimensional code. The two-dimensional code can include a one-time code (for example, a nonce, which can be a disposable random value each time) and a device ID as authentication information. The two-dimensional code may include the user ID and the time information (generation time information) at which the two-dimensional code was generated. Further, the time information may be encrypted using a common key. The generated two-dimensional code and the user's usage limit can be displayed on the display screen 15 of the user terminal device 10. The difference from the process P2 of the first example is that it is not necessary to include the position information in the two-dimensional code.

In the process P23, the user terminal device 10 searches for the store device 20 existing near the user terminal device 10 by using the short-range communication function.

In the process P24, the user terminal device 10 transmits the one-time code included in the two-dimensional code, the device ID, and the list of the searched store devices 20 to the first payment server 30. The list of the store device 20 can include, for example, an identification ID of the store device, location information, and the like.

In process P25, the first payment server 30 identifies a second payment server 50 that manages the listed store devices.

The identification unit 35 can specify the second payment server 50 corresponding to the identification ID of the store device received by the first communication unit 32. That is, the identification unit 35 can specify the second payment server 50 that manages the store device 20 that exists near the user's position when the user generates the two-dimensional code. As a result, the store device 20 that can use (read) the two-dimensional code generated by the user terminal device 10 can be limited to the vicinity of the user's position, and the time from the generation of the two-dimensional code to the use. And physical distance can be limited to prevent unauthorized 2D code from being used without inconvenience to the user.

Since the processes 26 to 36 are the same as the processes P5 to P15 of the first example, the description thereof will be omitted.

FIG. 7 is an explanatory diagram showing a third example of the process of the payment system of the present embodiment. Hereinafter, processes P41 to P56 will be described.

In process P41, when a user purchases a product at a store or the like, the user activates an application (payment application) on the user terminal device 10.

In process P42, the user terminal device 10 generates a two-dimensional code. The process P42 is the same as the process P22 of the second example.

In the process P43, the user terminal device 10 searches for the store device 20 existing near the user terminal device 10 by using the short-range communication function.

In the process P44, the user terminal device 10 displays the list of the searched store devices 20 and accepts the user's selection operation of the store devices 20.

FIG. 8 is a schematic view showing a second display example displayed on the display screen 15 of the user terminal device 10. FIG. 8A is a member store list screen 131 displayed after the payment application is started. On the member store list screen 131, a member store list 132 in which the store device 20 capable of short-range communication with the user terminal device 10 is installed is displayed. In the example of FIG. 8A, member stores A1, A2, B1, B2 and the like are displayed. By operating the detail icon 133, detailed information of the desired member store can be displayed. The detailed information of the member store includes, for example, the address, telephone number, product or brand name of the member store, a map showing the location of the member store, and the like.

As shown in FIG. 8B, for example, when the user operates the member store B1, the display mode of the member store B1 is changed (indicated by the reference numeral 131a in FIG. 8B), and by operating the selection icon 134, the member store B1 (shown by reference numeral 131a in FIG. 8B) In the example of FIG. 3, the store device ID can be selected as bb1). Note that FIG. 8 is an example, and the present invention is not limited to this. For example, a map near the user terminal device 10 may be displayed to display the locations of a plurality of member stores on the map.

In the process P45, the user terminal device 10 transmits the one-time code included in the two-dimensional code, the device ID, and the information (store device ID) of the store device 20 selected by the user to the first payment server 30.

In process P46, the first payment server 30 identifies the second payment server 50 that manages the selected store device 20.

The identification unit 35 can specify the second payment server 50 corresponding to the identification ID of the store device received by the first communication unit 32. That is, the identification unit 35 can specify the second payment server 50 that manages the store device 20 that exists near the user's position when the user generates the two-dimensional code. As a result, the store device 20 that can use (read) the two-dimensional code generated by the user terminal device 10 can be limited to the vicinity of the user's position, and the time from the generation of the two-dimensional code to the use. And physical distance can be limited to prevent unauthorized 2D code from being used without inconvenience to the user.

Since the processes 47 to 56 are the same as the processes P5 to P15 of the first example, the description thereof will be omitted. However, in the third example, the process corresponding to the process P14 of the first example is unnecessary when the second payment server 50 manages only the store device 20 selected by the user.

9 and 10 are flowcharts showing an example of the processing procedure in the user terminal device 10. Hereinafter, for convenience, the subject of processing will be described as the control unit 11. The control unit 11 determines whether or not there is a start operation of the payment application (S11), and if there is no start operation (NO in S11), the process of step S11 is continued. When there is an activation operation (YES in S11), the control unit 11 activates the payment application (S12) and generates a one-time code and TOTP (S13).

The control unit 11 encrypts the position information and the current time information detected by the GPS 17 using a common key (S14), the device ID (may include the user ID), the generated one-time code and TOTP, and the control unit 11. A two-dimensional code including encrypted position information and time information is generated (S15). The control unit 11 displays the generated two-dimensional code and the user's usage limit on the display screen 15 (S16).

The control unit 11 transmits the one-time code, device ID, and location information to the first payment server 30 (S17), updates the TOTP at a predetermined cycle (for example, 1 minute), and updates the two-dimensional code (S18). .. The one-time code will not be updated.

The control unit 11 determines whether or not there is a reading operation of the two-dimensional code (S19), and if there is no reading operation (NO in S19), the process of step S19 is continued. When there is a reading operation (YES in S19), the control unit 11 receives the settlement result (S20). The payment result can be received from the store device 20 that has performed the reading operation.

The control unit 11 displays the payment result on the display screen 15 (S21), updates the usage limit amount when payment is possible (S22), and ends the process. The update of the usage limit can be received from, for example, the first payment server 30.

11 and 12 are flowcharts showing an example of the processing procedure on the second payment server 50. Hereinafter, for convenience, the subject of processing will be described as the control unit 51. The control unit 51 receives the one-time code, the device ID, and the user's usage limit from the first payment server 30 (S31). Here, the one-time code and the device ID are those received by the first payment server 30 from the user terminal device 10. The control unit 51 determines whether or not the information included in the two-dimensional code (for example, one-time code, device ID, location information, time information, etc.) and the usage amount of the user's product purchase have been acquired from the store device 20. (S32) If it has not been acquired (NO in S32), the process of step S32 is continued.

When the information included in the two-dimensional code and the usage amount are acquired (YES in S32), does the control unit 51 match the one-time code acquired from the store device 20 with the one-time code received from the first payment server 30? It is determined whether or not (S33), and if the one-time codes match (YES in S33), it is determined whether or not the device ID acquired from the store device 20 matches the device ID received from the first payment server 30. (S34).

When the device IDs match (YES in S34), the control unit 51 determines whether or not the user's usage amount is equal to or less than the usage limit amount (S35). When the usage amount of the user is equal to or less than the usage limit (YES in S35), the control unit 51 decodes the position information acquired from the store device 20 with the common key, and the position at the time of generating the two-dimensional code and the store device 20. It is determined whether or not the position is within a predetermined distance range (S36).

When the position at the time of generating the two-dimensional code and the position of the store device 20 are within a predetermined distance range (YES in S36), the control unit 51 decodes the time information acquired from the store device 20 with the common key and two-dimensionally. It is determined whether or not the time at the time of code generation and the time at the time of reading the two-dimensional code are within a predetermined time (S37).

When the time at the time of generating the two-dimensional code and the time at the time of reading the two-dimensional code are within a predetermined time (YES in S37), the control unit 51 determines that payment is possible (S38), and performs the process of step S40 described later. Do. If the one-time codes do not match (NO in S33), if the device IDs do not match (NO in S34), or if the usage amount is not less than the usage limit (NO in S35), the position when the two-dimensional code is generated and the store device When the position of 20 is not within the predetermined distance range (NO in S36), or when the time when the two-dimensional code is generated and the time when the two-dimensional code is read are not within the predetermined time (NO in S37), the control unit 51 Determines that payment is not possible (S39).

The control unit 51 updates the state of the two-dimensional code to used (S40). As a result, the two-dimensional code cannot be used again. When the settlement is possible, the control unit 51 transmits the settlement information to the first settlement server 30 (S41), and ends the process. Although only a part of the processes of steps S33 to S37 may be used, the security of payment can be improved by using all the steps.

The second payment server 50 can also be realized by using a computer provided with a CPU (processor), RAM, and the like. A computer program (which can be recorded on a recording medium) having a processing procedure as shown in FIGS. 11 and 12 is loaded into a RAM provided in the computer, and the computer program is executed by a CPU (processor) on the computer. The second payment server 50 can be realized. Further, the first payment server 30 and the second payment server 50 may be integrated into one server.

As described above, according to the present embodiment, it is possible to provide the user with an immediate payment method that does not require waiting for authentication, simplify payment, and improve user convenience. ..

The payment system according to the present embodiment includes a first payment server and a second payment server, and is a payment system that determines whether or not payment is possible based on a reading code including authentication information generated by the user terminal device. The 1 payment server includes a first receiving unit that receives the authentication information generated by the user terminal device, a specific unit that specifies the second payment server to which the authentication information received by the first receiving unit is transmitted, and the first. The second payment server is provided with a first transmission unit that transmits the authentication information received by the reception unit to the second payment server specified by the specific unit, and the second payment server specified by the specific unit is transmitted by the first payment server. A second receiving unit that receives the authentication information, a second storage unit that stores the authentication information received by the second receiving unit, and a reading obtained by reading a reading code generated by the user terminal device with a predetermined reading device. Based on the acquisition unit that acquires the authentication information included in the code from the reading device, the authentication information acquired by the acquisition unit, and the authentication information stored in the second storage unit, it is determined whether or not payment is possible based on the reading code. It is provided with a determination unit for authentication.

The first payment server according to the present embodiment specifies a first receiving unit that receives the authentication information generated by the user terminal device and a second payment server to which the authentication information received by the first receiving unit is transmitted. It includes a specific unit and a first transmission unit that transmits the authentication information received by the first reception unit to the second payment server specified by the specific unit.

The second payment server according to the present embodiment is a second payment server that determines whether or not payment is possible based on a reading code including the authentication information generated by the user terminal device, and receives the authentication information transmitted by the first payment server. It is included in the second receiving unit to be received, the second storage unit for storing the authentication information received by the second receiving unit, and the reading code obtained by reading the reading code generated by the user terminal device with a predetermined reading device. Based on the acquisition unit that acquires the authentication information to be obtained from the reading device, the authentication information acquired by the acquisition unit, and the authentication information stored in the second storage unit, a determination unit that determines whether or not payment is possible based on the reading code. And.

The computer program according to the present embodiment is a computer program that causes a computer to determine whether or not payment is possible based on a reading code including authentication information generated by the user terminal device, and is an authentication transmitted to the computer by the first payment server. The process of receiving information, the process of storing the received authentication information in the storage unit, and the authentication information included in the reading code obtained by reading the reading code generated by the user terminal device with a predetermined reading device are read by the reading device. The process of determining whether or not payment is possible based on the reading code is executed based on the acquired authentication information and the authentication information stored in the storage unit.

The payment method according to the present embodiment is a payment method for determining whether or not payment is possible based on a reading code including the authentication information generated by the user terminal device, and the first payment server is the authentication information generated by the user terminal device. Is received, the second payment server to which the received authentication information is transmitted is specified, the received authentication information is transmitted to the specified second payment server, and the specified second payment server is the first payment server. The transmitted authentication information is received, the received authentication information is stored in the storage unit, the reading code generated by the user terminal device is read by a predetermined reading device, and the authentication information included in the obtained reading code is read from the reading device. Based on the acquired authentication information and the authentication information stored in the storage unit, it is determined whether or not the payment can be made based on the reading code.

The first payment server is a first receiving unit that receives the authentication information generated by the user terminal device, a specific unit that specifies the second payment server to which the authentication information received by the first receiving unit is transmitted, and the first receiving unit. It includes a first transmission unit that transmits the received authentication information to the second payment server specified by the specific unit. The authentication information can be information for determining whether or not the user can make a payment. The specific unit can specify the second payment server that requires the authentication information for the user's payment from among the plurality of second payment servers.

The specified second payment server includes a second receiving unit that receives the authentication information transmitted by the first payment server, and a second storage unit that stores the authentication information received by the second receiving unit. The specified second payment server includes an acquisition unit that acquires authentication information included in the reading code obtained by reading the reading code generated by the user terminal device with a predetermined reading device from the reading device. The predetermined reading device can be, for example, a store device installed in a store or the like. The store device can be provided with a reading code reading function, a POS (Point of Sale) system function, and the like. The reading code can be, for example, a two-dimensional code.

The specified second payment server further includes a determination unit that determines whether or not payment is possible based on the reading code, based on the authentication information acquired by the acquisition unit and the authentication information stored in the second storage unit. For example, if the authentication information included in the reading code read by the reading device matches the authentication information received from the first payment server, it can be determined that payment is possible, and the authentication information contained in the reading code read by the reading device is If it does not match the authentication information received from the first payment server, it can be determined that payment is not possible. The determination result of whether or not payment is possible by the determination unit can be output to the reading device. Further, the determination result of whether or not the payment can be made by the determination unit may be transmitted to the user terminal device.

With the above configuration, when the user wants to purchase a product at a desired store or the like, the user simply generates a reading code with the user terminal device and reads the generated reading code with the reading device to determine whether or not the user can make a payment. be able to. As a result, it is not necessary to wait for authentication when purchasing a product or the like, and payment can be made immediately, which simplifies payment and improves user convenience.

In the payment system according to the present embodiment, the first payment server is information on the correspondence between the second payment server and the location information of a reading device capable of acquiring the authentication information included in the reading code by the second payment server. The first storage unit includes a first storage unit that stores the position information of the user terminal device included in the reading code generated by the user terminal device, and the specific unit receives the position information of the user terminal device. The second payment server corresponding to the reading device existing within a predetermined distance range including the above is specified.

The first payment server includes a first storage unit that stores correspondence information between the second payment server and the position information of the reading device from which the second payment server can acquire the authentication information included in the reading code. That is, the first storage unit stores information in which the position information of the reading device managed by the second payment server is associated with each second payment server. Here, the reading device to be managed means, for example, a reading device to be targeted by the second payment server for determining whether or not payment is possible. In addition to the position information, the identification information (identification ID) of the reading device can also be associated.

The first receiving unit receives the position information of the user terminal device included in the reading code generated by the user terminal device. In this case, the user terminal device has a GPS function, can detect its own position information, and can include the detected position information in the generated reading code. The identification unit identifies the second payment server corresponding to the reading device existing within a predetermined distance range including the position of the user terminal device.

That is, the specifying unit can specify the second payment server that manages the reading device that exists near the user's position when the user generates the reading code. As a result, the reading device that can use (read) the reading code generated by the user terminal device can be limited to the vicinity of the user's position, and the time and physical distance from the generation of the reading code to the use. Can be restricted to prevent unauthorized reading code from being used without inconvenience to the user.

In the payment system according to the present embodiment, the first payment server is information on the correspondence between the second payment server and the identification information of the reading device capable of acquiring the authentication information included in the reading code by the second payment server. The first storage unit includes a first storage unit that stores the identification information of at least one reading device that can communicate with the user terminal device in a short distance, which is included in the reading code generated by the user terminal device. The specific unit identifies a second payment server corresponding to the identification information received by the first receiving unit.

The first payment server includes a first storage unit that stores correspondence information between the second payment server and the identification information of the reading device from which the second payment server can acquire the authentication information included in the reading code. That is, the first storage unit stores information in which the position information of the reading device managed by the second payment server is associated with each second payment server. Here, the reading device to be managed means, for example, a reading device to be targeted by the second payment server for determining whether or not payment is possible. In addition to the position information, the identification information (identification ID) of the reading device can also be associated.

The first receiving unit receives the identification information of at least one reading device capable of short-range communication with the user terminal device included in the reading code generated by the user terminal device. In this case, the user terminal device has a short-range communication function, acquires identification information (identification ID) of one or a plurality of reading devices existing near its own position, and generates the acquired identification information. Can be included in the code. The identification information included in the reading code may be the identification information of all the reading devices existing near the user terminal device, or the identification information of the reading device selected by the user from the reading devices existing nearby. .. The specific unit identifies the second payment server corresponding to the identification information received by the first receiving unit.

That is, the specifying unit can specify the second payment server that manages the reading device that exists near the user's position when the user generates the reading code. As a result, the reading device that can use (read) the reading code generated by the user terminal device can be limited to the vicinity of the user's position, and the time and physical distance from the generation of the reading code to the use. Can be restricted to prevent unauthorized reading code from being used without inconvenience to the user.

In the payment system according to the present embodiment, when the first payment server acquires the authentication information included in the reading code by the acquisition unit of the second payment server, the first payment server invalidates the re-reading of the reading code. It is provided with a unit and a notification unit that notifies other second payment servers including the second payment server that the reading code has been invalidated by the invalid unit.

The first payment server includes an invalid unit that invalidates the re-reading of the reading code when the acquisition unit of the second payment server acquires the authentication information included in the reading code. The invalid part may include any process as long as it is a process that prohibits the reuse of the reading code. The first payment server includes a notification unit that notifies other second payment servers including the second payment server that has determined whether or not payment is possible that the reading code has been invalidated by the invalid unit.

That is, when a plurality of second payment servers to which the authentication information is transmitted are specified by the specific unit, and the second payment server of one of the plurality of specified second payment servers determines whether or not payment is possible, the said one. Not only the second payment server but also other second payment servers are notified that the reading code has been invalidated. The second payment server can invalidate the re-reading of the reading code based on the notification. As a result, the read code once used cannot be used again, so that the reliability of the read code can be improved and unauthorized use can be prevented without causing inconvenience to the user.

In the payment system according to the present embodiment, the authentication information is generated when the reading code is generated and includes one-time information that can be used only once, and the determination unit is one acquired by the acquisition unit. Based on the time information and the one-time information stored in the second storage unit, it is determined whether or not the payment can be made based on the reading code.

The authentication information includes one-time information that is generated when the reading code is generated and can be used only once. The one-time information is, for example, a nonce, and can be a disposable random value each time.

The determination unit determines whether or not payment is possible based on the reading code based on the one-time information acquired by the acquisition unit and the one-time information stored in the second storage unit. As a result, it is possible to confirm that the user who has normally generated the reading code on the user terminal device is using the reading code, and it is possible to improve the security required for payment.

In the payment system according to the present embodiment, the authentication information includes user identification information for identifying a user, and the determination unit includes user identification information acquired by the acquisition unit and user identification stored in the second storage unit. Based on the information, it is determined whether or not payment is possible based on the reading code.

The authentication information includes user identification information that identifies the user. The user identification information can be the device ID of the user terminal device used by the user. Further, the user ID may be included in the user identification information.

The determination unit determines whether or not payment is possible based on the reading code based on the user identification information acquired by the acquisition unit and the user identification information stored in the second storage unit. As a result, it is possible to confirm that the user who has normally generated the reading code on the user terminal device is using the reading code, and it is possible to improve the security required for payment.

In the payment system according to the present embodiment, the acquisition unit acquires the generation time when the reading code is generated by the user terminal device, and the determination unit acquires the generation time and the generation time in the acquisition unit. When the acquisition time is within a predetermined time range, it is determined that the settlement based on the reading code is possible.

The acquisition unit acquires the generation time when the reading code is generated by the user terminal device. The determination unit determines that settlement based on the reading code is possible when the acquired generation time and the acquisition time when the acquisition time is acquired by the acquisition unit are within a predetermined time range. This makes it possible to limit the time from the time when the user generates the reading code to the time when the reading code is actually used, and only the user who normally generates the reading code without causing inconvenience to the user. Can make payments and prevent unauthorized reading codes from being used.

In the payment system according to the present embodiment, the acquisition unit acquires the generation point at which the reading code is generated by the user terminal device, and the determination unit acquires the generation point at the generation point and the acquisition unit. When the acquisition point is within a predetermined distance range, it is determined that the settlement based on the reading code is possible.

The acquisition unit acquires the generation point at which the reading code is generated by the user terminal device. When the acquired generation point and the acquisition point acquired by the acquisition unit are within a predetermined distance range, the determination unit determines that the settlement based on the reading code is possible. This makes it possible to limit the distance from the generation point where the user generated the reading code to the point where the reading code is actually used, and only the user who normally generated the reading code without causing inconvenience to the user. Can settle and prevent unauthorized reading code from being used.

In the payment system according to the present embodiment, the first transmitting unit transmits information regarding the user's usage limit to the second payment server, and the second receiving unit transmits information regarding the user's usage limit. Upon receiving, the second storage unit stores information regarding the usage limit of the user, the acquisition unit acquires the usage amount of the user related to the reading code read by the reading device, and the determination unit receives the information. Based on the information regarding the usage amount of the user acquired by the acquisition unit and the usage limit amount of the user stored in the second storage unit, it is determined whether or not the payment can be made based on the reading code.

The first transmitting unit of the first payment server transmits information on the usage limit of the user to the second payment server, the second receiving unit receives the information on the usage limit of the user, and the second storage unit , Memorize the information about the usage limit of the received user.

The acquisition unit of the second payment server acquires the usage amount of the user related to the reading code read by the reading device. The user's usage amount related to the reading code means the usage amount of the product purchase when the user makes a payment using the reading code. The determination unit determines whether or not to make a payment based on the reading code based on the information regarding the usage amount of the user acquired by the acquisition unit and the usage limit amount of the user stored in the second storage unit. For example, the determination unit can determine that payment is possible when the usage amount is within the usage limit, and can determine that payment is not possible when the usage amount exceeds the usage limit. As a result, it is possible to make a payment at an appropriate usage amount of the user.

In the payment system according to the present embodiment, the second payment server includes a deletion unit that stores the authentication information stored in the second storage unit for a predetermined time and then deletes the authentication information.

The second payment server includes a deletion unit that deletes the authentication information stored in the second storage unit after storing it for a predetermined time. By limiting the time during which the authentication information can be used, it is possible to improve the security regarding the determination of whether or not payment is possible based on the authentication information.

In the payment system according to the present embodiment, when the determination unit determines that payment is possible, the second payment server provides payment information related to the reading code generated by the user terminal device, and the user who has already settled the payment. The first payment server includes a second transmission unit that transmits payment information including purchased products, quantity, usage amount, user identification information, and a predetermined password to the first payment server, and the first payment server uses the usage limit of the user. A first storage unit that stores information about the payment information, a first receiving unit that receives the payment information, an authentication unit that authenticates a password included in the payment information received by the first receiving unit, and a password in the authentication unit. When authenticated, it includes an update unit that updates information about the usage limit of the user stored in the first storage unit.

When the determination unit determines that payment is possible, the second transmission unit of the second payment server is payment information related to the reading code generated by the user terminal device, and is the product, quantity, and use of the product purchased by the user who has already settled. The payment information including the amount, the user identification information, and the predetermined password is transmitted to the first payment server. The predetermined password can be, for example, TOTP (Time based One Time Password), and can be updated periodically using the time information. For example, the user terminal device can update the password using the time information, and the first payment server, which is the authentication server, can also update the password using the synchronized time information.

The first payment server includes a first storage unit that stores information regarding a user's usage limit. The first payment server stores the first receiving unit that receives the payment information, the authentication unit that authenticates the password included in the payment information received by the first receiving unit, and the first storage unit when the password is authenticated by the authentication unit. It is provided with an update unit that updates information on the usage limit of the user.

As a result, when the first payment server determines that the payment is possible on the second payment server, it authenticates whether the password generated by the user terminal device and the password held by the user terminal device match, and when the passwords match. , Since the user's usage limit is updated based on the payment information, the user can continue to settle the purchase of the product within the updated usage limit even after purchasing the product and making the payment. it can.

The computer program according to the present embodiment is a computer program that realizes a user terminal device on a computer, and is a process of accepting a predetermined operation on the computer and a one-time operation that can be used only once when the operation is accepted. The process of generating information and generating a reading code including the generated one-time information, the process of transmitting the generated one-time information to a predetermined payment server, and the generated reading code were read by a predetermined reading device. In that case, the process of displaying the possibility of settlement is executed.

When a predetermined operation is received, the computer program generates one-time information that can be used only once, and also generates a reading code including the generated one-time information. The predetermined operation can be an operation for generating a reading code, and includes, for example, an operation for starting an application. The one-time information (also referred to as a one-time code) is, for example, a nonce, and can be a disposable random value each time.

The computer program transmits the generated one-time information to a predetermined payment server (first payment server), and when the generated reading code is read by a predetermined reading device, performs a process of displaying whether or not payment is possible. That is, when the user wants to purchase a product at a desired store or the like, the user simply generates a reading code with the user terminal device and reads the generated reading code with the reading device to confirm whether or not payment for the purchase of the product is possible. Can be done. As a result, it is not necessary to wait for authentication when purchasing a product or the like, and payment can be made immediately, which simplifies payment and improves user convenience.

When the computer receives the operation, the computer program according to the present embodiment encrypts at least one of the information of its own position or the current time, and generates a reading code including the encrypted information. When the generated reading code is read by a predetermined reading device, the processing and the processing of displaying whether or not the payment is possible are executed.

When the computer program accepts a predetermined operation, it encrypts at least one of the information of its own position or the current time, and executes a process of generating a reading code including the encrypted information. Encryption can be performed, for example, by using a common key with a second payment server, which is a server on the authentication side that performs decryption.

When the generated reading code is read by a predetermined reading device, the computer program executes a process of displaying whether or not payment is possible. As a result, while enhancing the security of the reading code, it is possible to make an immediate payment without having to wait for authentication at the time of purchasing a product or the like, and it is possible to simplify the payment and improve the convenience of the user.

The computer program according to the present embodiment is a process in which a computer updates a predetermined password included in the reading code at a predetermined cycle, and a reading code generated together with the updated password is read by a predetermined reading device. , Execute the process of displaying the updated usage limit.

The computer program performs a process of updating a predetermined password included in the reading code at a predetermined cycle. The predetermined password can be, for example, TOTP (Time based One Time Password), and can be updated periodically using the time information. For example, the user terminal device can update the password using the time information, and the first payment server, which is the authentication server, can also update the password using the synchronized time information.

The computer program performs a process of displaying the updated usage limit when the reading code generated together with the updated password is read by a predetermined reading device. When the payment is completed and the usage limit is updated, the updated usage limit is displayed, so the user can stay within the updated usage limit even after purchasing the product and making the payment. You can continue to settle the purchase of goods at.

1 Communication network 10 User terminal equipment 11 Control unit 12 1st communication unit 13 2nd communication unit 14 Storage unit 15 Display screen 16 Operation unit 17 GPS
18 Map information 20 Store equipment 21 Control unit 22 1st communication unit 23 2nd communication unit 24 Display unit 25 Reading unit 26 Storage unit 30 1st payment server 31 Control unit 32 1st communication unit 33 2nd communication unit 34 Storage unit 35 Specific unit 36 Invalid unit 37 Update unit 50 Second payment server 51 Control unit 52 First communication unit 53 Second communication unit 54 Storage unit 55 Judgment unit 56 Delete unit

Claims (18)

It is a payment system that includes a first payment server and a second payment server, and determines whether or not payment is possible based on a reading code including authentication information generated by a user terminal device.
The first payment server is
The first receiver that receives the authentication information generated by the user terminal device,
A specific unit that identifies the second payment server to which the authentication information received by the first receiving unit is transmitted, and
It includes a first transmitting unit that transmits the authentication information received by the first receiving unit to the second payment server specified by the specific unit.
The second payment server specified in the specific unit is
A second receiving unit that receives the authentication information transmitted by the first payment server, and
A second storage unit that stores the authentication information received by the second receiving unit, and
An acquisition unit that acquires authentication information included in the reading code obtained by reading the reading code generated by the user terminal device with a predetermined reading device from the reading device, and
A payment system including a determination unit that determines whether or not payment is possible based on the reading code based on the authentication information acquired by the acquisition unit and the authentication information stored in the second storage unit. The first payment server is
The second payment server is provided with a first storage unit that stores correspondence information between the second payment server and the position information of the reading device capable of acquiring the authentication information included in the reading code.
The first receiver is
Upon receiving the position information of the user terminal device included in the reading code generated by the user terminal device,
The specific part is
The payment system according to claim 1, wherein a second payment server corresponding to a reading device existing within a predetermined distance range including the position of the user terminal device is specified. The first payment server is
The second payment server is provided with a first storage unit for storing correspondence information between the second payment server and the identification information of the reading device capable of acquiring the authentication information included in the reading code.
The first receiver is
Upon receiving the identification information of at least one reading device capable of short-range communication with the user terminal device included in the reading code generated by the user terminal device,
The specific part is
The payment system according to claim 1, wherein the second payment server corresponding to the identification information received by the first receiving unit is specified. The first payment server is
When the authentication information included in the reading code is acquired by the acquisition unit of the second payment server, the invalid unit that invalidates the re-reading of the reading code and the invalid unit.
The invention according to any one of claims 1 to 3, further comprising a notification unit for notifying another second payment server including the second payment server that the reading code has been invalidated by the invalidation unit. Payment system. The authentication information is
Contains one-time information that is generated when the reading code is generated and can be used only once.
The determination unit
The present invention according to any one of claims 1 to 4, which determines whether or not payment is possible based on the reading code based on the one-time information acquired by the acquisition unit and the one-time information stored in the second storage unit. Payment system. The authentication information is
Contains user identification information that identifies the user
The determination unit
The item according to any one of claims 1 to 5, which determines whether or not payment is possible based on the reading code based on the user identification information acquired by the acquisition unit and the user identification information stored in the second storage unit. Payment system. The acquisition unit
Acquires the generation time when the reading code was generated by the user terminal device,
The determination unit
Any one of claims 1 to 6 for determining that payment based on the reading code is possible when the generation time and the acquisition time when the generation time is acquired by the acquisition unit are within a predetermined time range. The payment system described in. The acquisition unit
Acquire the generation point where the reading code was generated by the user terminal device,
The determination unit
Any one of claims 1 to 7, which determines that payment based on the reading code is possible when the generation point and the acquisition point where the generation point was acquired by the acquisition unit are within a predetermined distance range. The payment system described in. The first transmitter is
Information about the user's usage limit is sent to the second payment server,
The second receiver is
Receive information about the user's usage limit
The second storage unit is
Memorize information about the user's usage limit and
The acquisition unit
Acquire the user's usage amount related to the reading code read by the reading device, and
The determination unit
Claims 1 to 8 for determining whether or not payment is possible based on the reading code based on the information regarding the usage amount of the user acquired by the acquisition unit and the usage limit amount of the user stored in the second storage unit. The payment system described in any one of the above. The second payment server is
The payment system according to any one of claims 1 to 9, further comprising a deletion unit that stores the authentication information stored in the second storage unit for a predetermined time and then deletes the authentication information. The second payment server is
When the determination unit determines that payment is possible, the payment information related to the reading code generated by the user terminal device, which is the product purchased by the user who has already settled, the number of items, the usage amount, the user identification information, and the predetermined password. A second transmission unit that transmits payment information including the above to the first payment server is provided.
The first payment server is
A first storage unit that stores information about the user's usage limit,
The first receiving unit that receives the payment information and
An authentication unit that authenticates the password included in the payment information received by the first receiving unit, and
The settlement according to any one of claims 1 to 10, wherein when the password is authenticated by the authentication unit, the payment unit includes an update unit that updates the information about the usage limit of the user stored in the first storage unit. system. The first receiver that receives the authentication information generated by the user terminal device,
A specific unit that identifies the second payment server to which the authentication information received by the first receiving unit is transmitted, and
A first payment server including a first transmission unit that transmits authentication information received by the first reception unit to a second payment server specified by the specific unit. A second payment server that determines whether or not payment is possible based on a reading code that includes authentication information generated by the user terminal device.
The second receiver that receives the authentication information sent by the first payment server, and
A second storage unit that stores the authentication information received by the second receiving unit, and
An acquisition unit that acquires authentication information included in the reading code obtained by reading the reading code generated by the user terminal device with a predetermined reading device from the reading device, and
A second payment server including a determination unit that determines whether or not payment is possible based on the reading code based on the authentication information acquired by the acquisition unit and the authentication information stored in the second storage unit. A computer program that causes a computer to determine whether or not to make a payment based on a reading code that includes authentication information generated by a user terminal device.
On the computer
The process of receiving the authentication information sent by the first payment server,
The process of storing the received authentication information in the storage unit,
A process of acquiring the authentication information included in the reading code obtained by reading the reading code generated by the user terminal device with a predetermined reading device from the reading device, and
A computer program that executes a process of determining whether or not payment is possible based on the reading code based on the acquired authentication information and the authentication information stored in the storage unit. A computer program that enables a computer to realize a user terminal device.
On the computer
Processing that accepts a predetermined operation and
When the above operation is accepted, the one-time information that can be used only once is generated, and the reading code including the generated one-time information is generated.
The process of sending the generated one-time information to the specified payment server, and
A computer program that executes a process of displaying whether or not payment is possible when the generated reading code is read by a predetermined reading device. On the computer
When the above operation is accepted, the process of encrypting at least one of the information of its own position or the current time, and
The process of generating a reading code containing encrypted information,
The computer program according to claim 15, wherein when the generated reading code is read by a predetermined reading device, a process of displaying whether or not payment is possible is executed. On the computer
A process of updating a predetermined password included in the reading code at a predetermined cycle, and
The computer program according to claim 15 or 16, wherein when the reading code generated together with the updated password is read by a predetermined reading device, a process of displaying the updated usage limit is executed. It is a payment method that determines whether or not payment is possible based on a reading code that includes authentication information generated by the user terminal device.
The first payment server is
Receives the authentication information generated by the user terminal device and
Identify the second payment server to which the received authentication information is sent,
Send the received authentication information to the specified second payment server,
The identified second payment server is
Upon receiving the authentication information transmitted by the first payment server,
The received authentication information is stored in the storage unit,
The reading code generated by the user terminal device is read by a predetermined reading device, and the authentication information included in the obtained reading code is acquired from the reading device.
A payment method for determining whether or not payment is possible based on the reading code based on the acquired authentication information and the authentication information stored in the storage unit.

Images