JP2020201987A - Receipt server, electronic receipt system, and program - Google Patents

Abstract

To provide electronic receipt data which can be also used as a certificate document.SOLUTION: A receipt server comprises acquisition means and association means. The acquisition means acquires a time stamp token issued from a time stamping authority for a hash value of electronic receipt data. The association means associates the time stamp token acquired by the acquisition means with the electronic receipt data.SELECTED DRAWING: Figure 1

Description

Embodiments of the present invention relate to receipt servers, electronic receipt systems and programs.

There is known an electronic receipt service that digitizes receipts so that service users can view them on mobile terminals and the like. However, the electronic receipt data provided by the conventional electronic receipt service has not been taken measures to prevent falsification. Therefore, the electronic receipt data cannot be used as proofs for tax payment proof. Under these circumstances, it is desired that electronic receipt data can be used as certificates.

Japanese Unexamined Patent Publication No. 2014-164353

An object to be solved by an embodiment of the present invention is to provide a receipt server, an electronic receipt system, and a program of a receipt server that provide electronic receipt data that can also be used as certificates.

The receipt server of the embodiment includes acquisition means and association means. The acquisition means acquires a time stamp token issued by the time stamp station with respect to the hash value of the electronic receipt data. The association means associates the time stamp token acquired by the acquisition means with the electronic receipt data.

The block diagram which shows the main part circuit composition of the electronic receipt system which concerns on embodiment. The flowchart of the control processing by the CPU of the sales data processing apparatus in FIG. The flowchart of the control process by the CPU of the receipt server in FIG. The flowchart of the control process by the CPU of the information terminal in FIG.

Hereinafter, the electronic receipt system according to the embodiment will be described with reference to the drawings.
FIG. 1 is a block diagram showing a main circuit configuration of the electronic receipt system 1 according to the embodiment. In the electronic receipt system 1, the sales data processing device 10, the receipt server 20, the time stamp server 30, and the information terminal 40 are connected to the network 50.

The sales data processing device 10 is installed in a store such as a supermarket for operations such as purchase registration and settlement of products to be settled, and is operated by a store clerk. The sales data processing device 10 is, for example, a POS (point of sales) terminal or an electronic cash register. The sales data processing device 10 may be a self-operated system operated by a shopper. Further, a semi-self method may be adopted in which the registration unit that performs registration processing and the settlement unit that performs payment processing are separated, the registration unit is operated by a clerk, and the payment unit is operated by a shopper.
The sales data processing device 10 includes a CPU 11, a main memory 12, an auxiliary storage device 13, a touch panel 14, a customer-side touch panel 15, a scanner 16, a printer 17, a network I / F (interface) 18, and a bus 19.

The CPU 11 corresponds to a central part of a computer that performs processing and control necessary for the operation of the sales data processing device 10. The CPU 11 controls each part in order to realize various functions of the sales data processing device 10 based on a program such as an operating system and application software stored in the main memory 12.
The main memory 12 corresponds to the main memory portion of the computer. The main memory 12 stores programs such as the operating system and application software. Further, the main memory 12 stores data referred to when the CPU 11 performs various processes. Further, the main memory 12 is used as a so-called work area for storing data temporarily used by the CPU 11 for performing various processes. Further, the main memory 12 stores the flag F.
The auxiliary storage device 13 corresponds to the auxiliary storage portion of the computer. The auxiliary storage device 13 is, for example, an EEPROM (electric erasable programmable read-only memory), an HDD (hard disk drive), an SSD (solid state drive), or the like. The auxiliary storage device 13 stores data used by the CPU 11 to perform various processes, data generated by the process of the CPU 11, and the like. The auxiliary storage device 13 may store a program such as the above operating system or application.
The main memory 12 or the auxiliary storage device 13 also stores a product list, which is a list of products registered as purchased products.
The program stored in the main memory 12 or the auxiliary storage device 13 includes a control program described for the control process described later. As an example, the sales data processing device 10 is transferred to the user in a state where the control program is stored in the main memory 12 or the auxiliary storage device 13. However, the sales data processing device 10 may be transferred to the user in a state where the control program is not stored in the main memory 12 or the auxiliary storage device 13. Then, the control program separately transferred to the user may be written to the main memory 12 or the auxiliary storage device 13 under the operation of the user, the serviceman, or the like. The transfer of the control program at this time can be realized by recording on a removable recording medium such as a magnetic disk, a magneto-optical disk, an optical disk, or a semiconductor memory, or by downloading via a network.

The touch panel 14 functions as a display device that displays a screen for notifying the operator of various information. Further, the touch panel 14 functions as an input device that accepts a touch operation by the operator.
The customer-side touch panel 15 functions as a display device that displays a screen for notifying shoppers of various information. In addition, the customer-side touch panel 15 functions as an input device that accepts touch operations by the shopper.
The scanner 16 reads the barcode displayed on the product and outputs the product code represented by the barcode. The scanner 16 may be a type that is used by holding it by hand or a type that is fixed to a cash register or the like.
The printer 17 prints a receipt or the like. As the printer 17, various methods such as a dot impact printer, an inkjet printer, a thermal printer, a laser printer, or another printer can be used.
The network I / F 18 interfaces for the sales data processing device 10 to communicate via the network 50.
The bus 19 includes an address bus, a data bus, and the like, and transmits signals sent and received by each part of the sales data processing device 10.

The receipt server 20 includes a CPU 21, a main memory 22, an auxiliary storage device 23, a network I / F 24, and a bus 25.

The CPU 21 corresponds to the central part of the computer. The CPU 21 controls each part in order to realize various functions of the receipt server 20 based on a program such as an operating system and application software stored in the main memory 22.
The main memory 22 corresponds to the main memory portion of the computer. The main memory 22 stores programs such as an operating system and application software. The program stored in the main memory 22 includes a control program that controls the receipt server 20. Further, the main memory 22 stores data to be referred to when the CPU 21 performs various processes. Further, the main memory 22 is used as a so-called work area for storing data temporarily used by the CPU 21 for performing various processes.
The auxiliary storage device 23 corresponds to the auxiliary storage portion of the computer. The auxiliary storage device 23 is, for example, an EEPROM, an HDD, an SSD, or the like. The auxiliary storage device 23 stores data used by the CPU 21 for performing various processes, data generated by the process of the CPU 21, and the like. The auxiliary storage device 23 may store a program such as the above operating system or application. The auxiliary storage device 23 stores electronic receipt data and a PDF (Portable Document Format) file described later in association with an individual user ID (identifier) assigned to each user of the electronic receipt service. In addition, an individual receipt ID is assigned to each of the electronic receipt data and the PDF file described later. The receipt ID consists of a receipt key assigned to each electronic receipt and a type key. The type key distinguishes between the electronic receipt data and the PDF file, and further distinguishes the type of the electronic receipt data. Details of the type key will be described later. Further, the auxiliary storage device 23 stores the user information of the electronic receipt service in association with the user ID. The user information includes information indicating whether or not the user is using the digital evidence service. The digital evidence service is a service that makes it possible to prove the integrity of electronic receipt data. Users of the digital evidence service can preset the conditions for applying the digital evidence service. The condition is, for example, "the settlement amount is a certain amount or more" or "the purchased product includes a specific product or a product of a specific category". If a condition is set, the user information also includes information representing the condition.
The program stored in the main memory 22 or the auxiliary storage device 23 includes a control program described for the control process described later. As an example, the receipt server 20 is transferred to the user in a state where the control program is stored in the main memory 22 or the auxiliary storage device 23. However, the receipt server 20 may be transferred to the user in a state where the control program is not stored in the main memory 22 or the auxiliary storage device 23. Then, the control program separately transferred to the user may be written to the main memory 22 or the auxiliary storage device 23 under the operation of the user, the serviceman, or the like. The transfer of the control program at this time can be realized by recording on a removable recording medium such as a magnetic disk, a magneto-optical disk, an optical disk, or a semiconductor memory, or by downloading via a network.

The network I / F 24 interfaces for the receipt server 20 to communicate over the network 50.
The bus 25 includes an address bus, a data bus, and the like, and transmits signals sent and received by each part of the receipt server 20.

The time stamp server 30 issues a TST in response to a request for issuing a time stamp token (hereinafter referred to as "TST (time stamp token)"). The time stamp server 30 is, for example, a server provided by the time stamp authority (TSA: time-stamping authority) for issuing TST.

The information terminal 40 is a device having a communication function, and is, for example, a mobile information terminal such as a smartphone, a mobile phone, or a tablet PC (personal computer). The information terminal 40 may be a stationary computer such as a desktop PC or a notebook PC.
The information terminal 40 can output the user ID. The output of the user ID is performed by a method such as displaying a barcode including the user ID on the screen, printing the barcode including the user ID, or transmitting the user ID to another device.
The user of the electronic receipt service can acquire the electronic receipt data from the receipt server 20 by using the information terminal 40.
The information terminal 40 includes a CPU 41, a main memory 42, an auxiliary storage device 43, a touch panel 44, a network I / F 45, and a bus 46.

The CPU 41 corresponds to the central part of the computer. The CPU 41 controls each part in order to realize various functions of the information terminal 40 based on a program such as an operating system and application software stored in the main memory 42.
The main memory 42 corresponds to the main memory portion of the computer. The main memory 42 stores programs such as an operating system and application software. The program stored in the main memory 42 includes a control program that controls the information terminal 40. Further, the main memory 42 stores data to be referred to when the CPU 41 performs various processes. Further, the main memory 42 is used as a so-called work area for storing data temporarily used by the CPU 41 for performing various processes.
The auxiliary storage device 43 corresponds to the auxiliary storage portion of the computer. The auxiliary storage device 43 is, for example, an EEPROM, an HDD, an SSD, or the like. The auxiliary storage device 43 stores data used by the CPU 41 to perform various processes, data generated by the process of the CPU 41, and the like. The auxiliary storage device 43 may store a program such as the above operating system or application software.
The program stored in the main memory 42 or the auxiliary storage device 43 includes application software (hereinafter referred to as “browsing application”) described for control processing described later for viewing an electronic receipt or the like. As an example, the information terminal 40 is transferred to the user in a state where the browsing application is not stored in the main memory 42 or the auxiliary storage device 43. Then, the browsing application separately transferred to the user is written to the main memory 42 or the auxiliary storage device 43 under the operation of the user, the serviceman, or the like. However, the information terminal 40 may be transferred to the user with the browsing application stored in the main memory 42 or the auxiliary storage device 43. The transfer of the above-mentioned browsing application can be realized by recording on a removable recording medium such as a magnetic disk, a magneto-optical disk, an optical disk, or a semiconductor memory, or by downloading via a network.

The touch panel 44 functions as a display device that displays a screen for notifying the operator of the information terminal 40 of various information. Further, the touch panel 44 functions as an input device that accepts a touch operation by the operator.
The network I / F 45 interfaces for the information terminal 40 to communicate via the network 50.
The bus 46 includes an address bus, a data bus, and the like, and transmits signals sent and received by each part of the information terminal 40.

The network 50 is a communication network including a mobile phone network such as 3G (3rd generation) or LTE (long term evolution), the Internet, a LAN (local area network), a dedicated line, or another communication line.

Hereinafter, the operations of the sales data processing device 10, the receipt server 20, and the information terminal 40 will be described with reference to the drawings. The content of the process described below is an example, and various processes capable of obtaining similar results can be appropriately used.

The operation of the sales data processing device 10 and the receipt server 20 when the shopper purchases the product will be described with reference to FIGS. 2 and 3. FIG. 2 is a flowchart of control processing by the CPU 11. The CPU 11 executes this control process based on the control program stored in the main memory 12 or the auxiliary storage device 13. FIG. 3 is a flowchart of the control process by the CPU 21. The CPU 21 executes this control process based on the control program stored in the main memory 22 or the auxiliary storage device 23.

In Act1, the CPU 11 confirms whether or not the user ID has been read. That is, the CPU 11 confirms whether or not the barcode including the user ID has been read by the scanner 16. If the user ID is not read, the CPU 11 determines No in Act1 and proceeds to Act2.

In Act2, the CPU 11 confirms whether or not the product code has been read. That is, the CPU 11 confirms whether or not the barcode attached to the product has been read by the scanner 16. If the product code is not read, the CPU 11 determines No in Act2 and proceeds to Act3.

In Act3, the CPU 11 confirms whether or not the operation for instructing the completion of registration has been performed. That is, the CPU 11 confirms whether or not a predetermined operation for instructing the completion of registration such as pressing the subtotal button has been performed. It should be noted that the operation rule for instructing the completion of registration is to perform the operation after registering one or more products. The operation of the CPU 11 when an operation for instructing the completion of registration is performed in a state where the product is not registered may be determined by the designer of the control program of the CPU 11. For example, the CPU 11 ignores the operation of instructing the completion of registration. Alternatively, the CPU 11 may not be able to perform the operation itself for instructing the completion of registration when the product is not registered. If the operation for instructing the completion of registration is not performed, the CPU 11 determines No in Act3 and returns to Act1. Thus, the CPU 11 repeats Act1 to Act3 until the user ID is read, the product code is read, or the operation for instructing the completion of registration is performed. If the user ID is read in the standby state of Act1 to Act3, the CPU 11 determines Yes in Act1 and proceeds to Act4.

In Act 4, the CPU 11 stores the read user ID in the main memory 12 or the auxiliary storage device 13. The operation when the user ID is read twice or more may be determined by the designer of the control program of the CPU 11. For example, the CPU 11 erases the stored user ID and stores the newly read user ID in the main memory 12 or the auxiliary storage device 13. The CPU 11 returns to Act1 after the processing of Act4. If the product code is read in the standby state of Act1 to Act3, the CPU 11 determines Yes in Act2 and proceeds to Act5.

In Act5, the CPU 21 registers the read product code in the product list. That is, the CPU 21 instructs the main memory 12 or the auxiliary storage device 23 to add the read product code to the product list. The CPU 11 returns to Act1 after the processing of Act5. If an operation for instructing the completion of registration is performed in the standby state of Act1 to Act3 with one or more products registered in the product list, the CPU 11 determines Yes in Act3 and proceeds to Act6.

In Act6, the CPU 11 performs payment processing based on the product list. As the payment process, a well-known process can be used as it is, so the description of this process will be omitted.
In Act 7, the CPU 11 confirms whether or not the user ID of the electronic receipt service is stored in the main memory 12 or the auxiliary storage device 13. When the user ID of the electronic receipt service is not stored, the CPU 21 determines No in Act7 and proceeds to Act8.

In Act 8, the CPU 11 issues a paper receipt. That is, the CPU 11 controls the printer 17 to print the receipt. The CPU 11 returns to Act1 after the processing of Act8. At this time, the CPU 11 resets the product list, although the illustration is omitted. When the user ID of the electronic receipt service is stored, the CPU 21 determines Yes in Act7 and proceeds to Act9.

In Act9, the CPU 11 instructs the network I / F18 to send an inquiry command including a user ID to the receipt server 20.

On the other hand, the CPU 21 of the receipt server 20 is executing the control process of FIG. In Act 21 of FIG. 3, the CPU 21 confirms whether or not the inquiry command has been received by the network I / F 24. If the inquiry command is not received, the CPU 21 determines No in Act 21 and proceeds to Act 22.

In Act22, the CPU 21 confirms whether or not the commercial transaction data has been received by the network I / F24. The commercial transaction data will be described later. If the commercial transaction data is not received, the CPU 21 determines No in Act 22 and proceeds to Act 23.

In Act23, the CPU 21 confirms whether or not the list request command has been received by the network I / F24. The list request command will be described later. If the list request command is not received, the CPU 21 determines No in Act 23 and proceeds to Act 24.

In Act24, the CPU 21 confirms whether or not the receipt request command has been received by the network I / F24. The receipt request command will be described later. If the receipt request command is not received, the CPU 21 determines No in Act 24 and proceeds to Act 25.

In Act25, the CPU 21 confirms whether or not the PDF request command has been received by the network I / F24. The PDF request command will be described later. If the PDF request command is not received, the CPU 21 determines No in Act 25 and returns to Act 21. Thus, the CPU 11 repeats Act21 to Act25 until any one of the inquiry command, the commercial transaction data, the list request command, the receipt request command, and the PDF request command is received. If the inquiry command transmitted from the sales data processing device 10 is received in the standby state of Act21 to Act25, the CPU 21 determines Yes in Act21 and proceeds to Act26.

In Act 26, the CPU 21 instructs the network I / F 24 to transmit the user information identified by the user ID included in the inquiry command to the sales data processing device 10. The CPU 21 returns to the Act 21 after the processing of the Act 26.

On the other hand, the CPU 11 of the sales data processing device 10 transmits the inquiry command in Act9 of FIG. 2, and then proceeds to Act10.
In Act 10, the CPU 11 waits for the user information to be received by the network I / F18. When the user information transmitted from the receipt server 20 is received, the CPU 11 determines Yes in Act 10 and proceeds to Act 11.

In Act 11, the CPU 11 refers to the user information and confirms whether or not the user is using the digital evidence service. If the user is using the digital evidence service, the CPU 11 determines Yes in Act 11 and proceeds to Act 12.

In Act 12, the CPU 11 confirms whether or not the conditions included in the user information are satisfied. For example, in the case of the condition that "the settlement amount is 1000 yen or more", it is confirmed whether or not the settlement amount settled in Act6 is 1000 yen or more. If the user information does not include the condition, it is considered that the condition is not satisfied. If the condition is not satisfied, the CPU 11 determines No in Act 12 and proceeds to Act 13.

In Act 13, the CPU 11 generates an image corresponding to a confirmation screen for instructing whether or not to associate TST with the electronic receipt data generated by this shopping, and instructs the customer side touch panel 15 to display this image. .. On the confirmation screen, a first button for the shopper to touch when the TST is associated and a second button for the shopper to touch when the TST is not associated are displayed.

By touching the first button or the second button displayed on the customer side touch panel 15, the shopper instructs whether or not to associate the TST.
In Act 14, the CPU 11 confirms whether or not a predetermined operation for instructing not to associate the TST, such as touching the second button, has been performed. If the operation for instructing not to associate the TST is not performed, the CPU 11 determines No in Act 14 and proceeds to Act 15.

In Act 15, the CPU 11 confirms whether or not a predetermined operation for instructing the association of the TST, such as touching the first button, has been performed. If the operation instructing the TST to be associated is not performed, the CPU 11 determines No in Act15 and returns to Act14. Thus, the CPU 11 repeats Act 14 and Act 15 until an operation instructing not to associate TST or an operation instructing to associate TST is performed. If the operation instructing the association of TST is performed in the standby state of Act 14 and Act 15, the CPU 11 determines Yes in Act 15 and proceeds to Act 16. Further, if the condition included in the user information is satisfied, the CPU 11 determines Yes in Act 12, and proceeds to Act 16 in this case as well.

In Act 16, the CPU 11 rewrites the value of the flag F stored in the main memory 12 to True.

On the other hand, if the CPU 11 performs an operation instructing not to associate the TST in the standby state of the Act 14 and the Act 15, the CPU 11 determines Yes in the Act 14 and proceeds to the Act 17. Further, if the user is not using the digital evidence service, the CPU 11 determines No in Act 11 and proceeds to Act 17.
In Act 17, the CPU 11 rewrites the value of the flag F stored in the main memory 12 to False.

When the CPU 11 finishes setting the value of the flag F in Act 16 or Act 17 as described above, the CPU 11 proceeds to Act 18.
In Act 18, the CPU 11 generates commercial transaction data. The commercial transaction data includes a user ID, electronic receipt data and flag F. The electronic receipt data is a digitized version of the information written on the receipt. The file format of the electronic receipt data is, for example, XML (Extensible Markup Language), HTML (Hypertext Markup Language), JSON (JavaScript (registered trademark) Object Notation), CSV (Comma-Separated Values) or TSV (Tab-Separated Values), etc. Text format.

In Act 19, the CPU 11 instructs the network I / F 18 to transmit the generated commercial transaction data to the receipt server 20. The CPU 11 returns to Act1 after the processing of Act19. At this time, the CPU 11 resets the product list, although the illustration is omitted.

By the way, if the CPU 21 of the receipt server 20 receives the commercial transaction data transmitted from the sales data processing device 10 in the standby state of Act 21 to Act 25 of FIG. 3, it determines Yes in Act 22 and proceeds to Act 27. ..
In Act 27, the CPU 21 confirms whether or not the value of the flag F transmitted from the sales data processing device 10 is True. If the value of the flag F is False, the CPU 21 determines No in Act 27 and proceeds to Act 28.

In Act 28, the CPU 21 instructs the auxiliary storage device 23 to store the electronic receipt data included in the received commercial transaction data. At this time, the CPU 21 assigns a receipt key to the electronic receipt data. Further, the CPU 21 sets a type key having a value of 0 in the electronic receipt data. The type key having a value of 0 means that the PDF file described later does not exist for the electronic receipt data. By this process, a receipt ID including a receipt key and a type key is assigned to the electronic receipt data. Then, the CPU 21 returns to the Act 21 after the processing of the Act 28.

If the value of the flag F is True, the CPU 21 determines Yes in Act 27 and proceeds to Act 29.
In Act 29, the CPU 21 instructs the auxiliary storage device 23 to store the electronic receipt data included in the received commercial transaction data. At this time, the CPU 21 assigns a receipt key to the electronic receipt data. Further, the CPU 21 sets a type key having a value of 1 in the electronic receipt data. The type key having a value of 1 means that the PDF file described later exists for the electronic receipt data. By this process, a receipt ID including a receipt key and a type key is assigned to the electronic receipt data.

In Act30, the CPU 21 generates a PDF file. The PDF file is an electronic receipt file in PDF format. The PDF file stores electronic receipt data converted into a format suitable for the PDF file. The electronic receipt data stored in the auxiliary storage device 23 in Act 29 is stored in the auxiliary storage device 23 as data for the user to view.

In Act 31, the CPU 21 calculates the hash value of the electronic receipt data included in the PDF file. A well-known method can be used to calculate the hash value.
In Act 32, the CPU 21 instructs the network I / F 24 to send a stamp request command to the time stamp server 30. The stamp request command includes the hash value calculated by Act31.

The time stamp server 30 that has received the stamp request command creates the TST. That is, the time stamp server 30 acquires time information indicating the current date and time for creating the TST. Then, the time stamp server 30 creates a TST using the hash value included in the stamp request command and the time information. The TST and the method for creating the TST in the above description are examples, and a well-known method can be used for creating the TST. Then, the time stamp server 30 transmits the created TST to the receipt server 20 that has transmitted the stamp request command.

After transmitting the stamp request command, the CPU 21 of the receipt server 20 proceeds to Act33.
In Act33, the CPU 21 waits for the TST to be received by the network I / F24. In Act 33, the computer having the CPU 21 as the central part operates as the acquisition control means and controls the network I / F 24 so as to receive the TST. The network I / F24 receives the TST under the control of the computer. In this process, the computer and the network I / F24 operate as acquisition means. Further, the network I / F 24 operates as a communication device. If the TST is received, the CPU 21 determines Yes in the Act 33 and proceeds to the Act 34.

In Act34, the CPU 21 adds TST to the PDF file. By this process, the TST is associated with the electronic receipt data. Thus, in Act 34, the computer with the CPU 21 as the central part operates as an association means.
In Act 35, the CPU 21 instructs the auxiliary storage device 23 to save the PDF file in which the TST is stored. At this time, the CPU 21 assigns a receipt ID to the PDF file. However, for the receipt ID, it is assumed that the value of the type key constituting the receipt ID assigned to the electronic receipt data in Act29 is changed to 2. Thus, a type key with a value of 2 means that it is a PDF file. The CPU 21 returns to the Act 21 after the processing of the Act 35.
As shown in the processes of Act27 to Act35, whether or not to associate TST is determined according to the value of the flag F. The value of the flag F becomes True when the operation instructing to associate the TST is performed on the confirmation screen. Thus, the computer centered on the CPU 21 in the processing of the Act 27 operates as a determination means for determining the execution of the association related to the payment in response to the instruction for each payment by the user of the electronic receipt service. When the conditions included in the user information are satisfied, the CPU 21 considers that the user has instructed to execute the association and determines the execution of the association, and determines according to the user's instruction. It is nothing but doing.

Next, the operation of the receipt server 20 and the information terminal 40 when the user of the electronic receipt service acquires the electronic receipt data will be described with reference to FIGS. 3 and 4. FIG. 4 is a flowchart of the control process by the CPU 41. The CPU 41 executes this control process based on the browsing application stored in the main memory 42 or the auxiliary storage device 43.
A user who wants to acquire electronic receipt data operates an information terminal 40 to instruct execution of a browsing application. In response to this instruction, the CPU 41 starts the control process shown in FIG. 4 based on the browsing application.
In Act 41, the CPU 41 instructs the network I / F 45 to send a list request command including a user ID to the receipt server 20.

By the way, when the CPU 21 of the receipt server 20 receives the list request command transmitted from the information terminal 40 in the standby state of Act 21 to Act 25 of FIG. 3, it determines Yes in Act 23 and proceeds to Act 36.
In Act36, the CPU 21 creates list data indicating a list of electronic receipts that are allowed to be viewed by the user identified by the user ID included in the list request command. That is, the CPU 21 creates list data showing a list of electronic receipt data in which the type key is 0 or 1 among the electronic receipt data stored in association with the user ID.
In Act 37, the CPU 21 instructs the network I / F 24 to transmit the list data to the information terminal 40. The CPU 21 returns to the Act 21 after the processing of the Act 37.

On the other hand, the CPU 41 of the information terminal 40 transmits the list request command in Act 41 of FIG. 4, and then proceeds to Act 42.
In Act 42, the CPU 41 waits for the list data to be received by the network I / F 45. When the list data transmitted from the receipt server 20 is received, the CPU 41 determines Yes in Act 42 and proceeds to Act 43.

In Act 43, the CPU 41 generates an image corresponding to a list screen showing a list of viewable electronic receipts based on the list data, and instructs the touch panel 44 to display this image. As an example, the list screen shows the receipt ID, the date and time of purchase, the store of purchase, and the like included in each electronic receipt data.

The user performs an operation on the touch panel 44 to specify an electronic receipt to be viewed on the list screen. Specifically, the user touch-operates the touch panel 44 to touch the area where the receipt ID, the date and time of purchase, the store of purchase, etc. of the electronic receipt to be viewed are displayed.
In Act44, the CPU 41 waits for the above touch operation to be performed. If the corresponding touch operation is performed, the CPU 41 determines Yes in Act44 and proceeds to Act45.

In Act 45, the CPU 41 instructs the network I / F 45 to send a receipt request command to the receipt server 20. The receipt request command includes a receipt ID assigned to the electronic receipt data corresponding to the area touched on the list screen.

By the way, when the receipt request command transmitted from the information terminal 40 is received in the standby state of Act21 to Act25 of FIG. 3, the CPU 21 of the receipt server 20 determines Yes in Act24 and proceeds to Act38.
In Act 38, the CPU 21 instructs the network I / F 24 to read the electronic receipt data specified by the receipt ID included in the receipt request command from the auxiliary storage device 23 and transmit the electronic receipt data to the information terminal 40. The CPU 21 returns to the Act 21 after the processing of the Act 38.

On the other hand, the CPU 41 of the information terminal 40 proceeds to the Act 46 after transmitting the receipt request command in the Act 45 of FIG.
In Act46, the CPU 41 waits for the electronic receipt data to be received by the network I / F45. When the electronic receipt data transmitted from the receipt server 20 is received, the CPU 41 determines Yes in Act46 and proceeds to Act47.

In Act47, the CPU 41 confirms whether or not the PDF file exists, that is, whether or not the value of the type key constituting the receipt ID included in the receipt request command is 1. If the value of the type key is 0, the CPU 41 determines No in Act 47 and proceeds to Act 48.

In Act 48, the CPU 41 generates an image corresponding to the receipt screen and instructs the touch panel 44 to display this image. On the receipt screen, an electronic receipt generated based on the received electronic receipt data and a close button for the operator to touch when the display of the receipt screen is finished are displayed.

In Act 49, the CPU 41 waits for an operation instructing the end of the receipt screen display to be performed. That is, the CPU 41 confirms whether or not a predetermined operation for instructing the end of the display of the receipt screen, such as touching the close button displayed on the touch panel 44, has been performed. If the operation for instructing the end of the display of the receipt screen is performed, the CPU 41 determines Yes in Act49 and proceeds to Act50.

In Act 50, the CPU 41 instructs the touch panel 44 to end the display of the receipt screen. The CPU 41 returns to the Act 41 after the processing of the Act 50. If the value of the type key is 1, the CPU 41 determines Yes in Act 47 and proceeds to Act 51.

In Act 51, the CPU 41 generates an image corresponding to the receipt screen in the same manner as in Act 48, and instructs the touch panel 44 to display this image. However, on the receipt screen in Act51, an acquisition button for the operator to touch when acquiring the PDF file is also displayed.

In Act 52, the CPU 41 confirms whether or not an operation for instructing the end of the receipt screen display has been performed. That is, the CPU 41 confirms whether or not a predetermined operation for instructing the end of the display of the receipt screen, such as touching the close button displayed on the touch panel 44, has been performed. If the operation for instructing the end of the display of the receipt screen is not performed, the CPU 41 determines No in Act 52 and proceeds to Act 53.

In Act53, the CPU 41 confirms whether or not an operation instructing the acquisition of the PDF file has been performed. That is, the CPU 41 confirms whether or not a predetermined operation for instructing the acquisition of the PDF file, such as touching the acquisition button displayed on the touch panel 44, has been performed. If the operation for instructing the acquisition of the PDF file is not performed, the CPU 41 returns to Act51. Thus, the CPU 41 repeats Act 52 and Act 53 until an operation instructing the end of the display of the receipt screen is performed or an operation instructing the acquisition of the PDF file is performed. If the operation for instructing the end of the display of the receipt screen is performed, the CPU 41 determines Yes in Act 52 and proceeds to Act 50. Then, the CPU 41 returns to the Act 41 after finishing the display of the receipt screen in the same manner as described above. On the other hand, if the operation for instructing the acquisition of the PDF file is performed, the CPU 41 determines Yes in Act53 and proceeds to Act54.

In Act 54, the CPU 41 instructs the network I / F 45 to send a PDF request command to the receipt server 20. The PDF request command includes the receipt ID assigned to the PDF file. The receipt ID can be obtained by changing the value of the type key that constitutes the receipt ID included in the receipt request command to 2.

If the PDF request command transmitted from the information terminal 40 is received in the standby state of Act21 to Act25 of FIG. 3, the CPU 21 of the receipt server 20 determines Yes in Act25 and proceeds to Act39.
In Act 39, the CPU 21 reads the PDF file identified by the receipt ID included in the PDF request command from the auxiliary storage device 23, and instructs the network I / F 24 to transmit the PDF file to the information terminal 40. The CPU 21 returns to the Act 21 after the processing of the Act 39.

On the other hand, the CPU 41 of the information terminal 40 transmits the PDF request command in Act 54 of FIG. 4, and then proceeds to Act 55.
In Act55, the CPU 41 waits for the PDF file to be received by the network I / F45. When the PDF file transmitted from the receipt server 20 is received, the CPU 41 determines Yes in Act55 and proceeds to Act56.

In Act 56, the CPU 41 instructs the auxiliary storage device 43 to save the acquired PDF file. The CPU 41 returns to the Act 52 after the processing of the Act 56.

The PDF file transmitted from the receipt server 20 in this way is stored in the auxiliary storage device 43. In the PDF file, TST is associated with the electronic receipt data. Therefore, when at least one of the electronic receipt data and the TST is modified, the hash value calculated from the electronic receipt data and the hash value extracted from the TST are different. In other words, it can be proved that the PDF file has not been modified by matching the hash value calculated from the electronic receipt data with the hash value extracted from the TST. In addition, it can be proved that the electronic receipt data included in the same PDF file existed at the date and time indicated by the time information extracted from the TST. The modification referred to here is not limited to an artificial modification, but also includes a case where the data is rewritten due to a malfunction of the computer or the like.

In addition, the receipt server 20 allows the user to instruct whether or not to associate the TST for each payment. Therefore, the TST is not unnecessarily associated with the electronic receipt data that the user does not need to associate with the TST. As a result, the amount of processing and the amount of data stored in the receipt server 20 are not unnecessarily increased. Further, if the time stamp server 30 provides a pay-as-you-go service that charges according to the number of TSTs issued, it is possible to prevent an increase in the cost of issuing the TSTs.

Further, the receipt server 20 determines that the TST is associated with the electronic receipt data without receiving the instruction from the user when the condition preset by the user is satisfied. Therefore, for electronic receipt data for which it is clear that the user needs a TST association based on preset conditions by the user, the user does not have to perform an operation to specify whether or not to associate. .. As a result, it is possible to prevent the burden of operation by the user from being unnecessarily increased.

The above embodiment can be modified as follows.
The electronic receipt file is not limited to the PDF format, and may be any file format that can store the electronic receipt data and the TST.
In the above embodiment, an example of associating the electronic receipt data and the TST by storing them in one file has been described. However, the electronic receipt data and the TST are saved as separate files, and these files are stored as separate management data. It may be associated with such as.

In the above embodiment, the sales data processing device 10 transmits the flag F to the receipt server 20 for the electronic receipt data. Then, the CPU 21 of the receipt server 20 that received the flag F decides to associate the TST with the electronic receipt data based on the value of the flag F. However, the flag F may be interpreted as data instructing the receipt server 20 whether or not to execute the association.
In this case, in the process of Act 17, the computer having the CPU 11 as a central portion operates as a determination means for determining the execution of the association. Further, in the processing of Act 19 when the value of the flag F is True, the CPU 11 and the network I / F 18 operate as an instruction means for instructing the receipt server 20 to associate the TST with the electronic receipt data.

A screen for instructing the user whether to associate the TST may be displayed on the touch panel 14. In this case, the operator asks whether or not to associate the TST with the shopper, and the operator operates the touch panel 14 according to the answer of the shopper.

The receipt server 20 may determine whether or not the conditions included in the user information are satisfied. In this case, for example, the processing is performed as follows. The sales data processing device 10 transmits the payment amount, the product list, and the like to the receipt server 20 together with the inquiry command. The CPU 21 of the receipt server 20 that has received the inquiry command determines whether or not the condition is satisfied based on the content transmitted from the sales data processing device 10. Then, the CPU 21 transmits the determination result together with the user information to the sales data processing device 10. The CPU 11 of the sales data processing device 10 that has received the user information and the determination result may perform the determination of Act 12 based on the received determination result.

In the above embodiment, only when the condition included in the user information is not satisfied, whether or not to associate the TST is determined according to the instruction operation by the operator. However, the CPU 11 or the CPU 21 may determine whether or not to associate the TST according to the instruction operation only when the conditions included in the user information are satisfied. Further, the CPU 11 or the CPU 21 may decide to associate the TST with the electronic receipt data when the conditions included in the user information are satisfied. Alternatively, the CPU 11 or the CPU 21 may decide to associate the TST with the electronic receipt data when the conditions included in the user information are not satisfied. For example, in the case of the condition that "the settlement amount is 1000 yen or less", it is decided to associate the TST when the settlement amount in Act6 is not 1000 yen or less. Further, the CPU 11 or the CPU 21 may determine whether or not to associate the TST only with the instruction operation by the operator.

Although some embodiments of the present invention have been described, these embodiments are presented as examples and are not intended to limit the scope of the invention. These novel embodiments can be implemented in various other embodiments, and various omissions, replacements, and changes can be made without departing from the gist of the invention. These embodiments and modifications thereof are included in the scope and gist of the invention, and are also included in the scope of the invention described in the claims and the equivalent scope thereof.

1 ... Electronic receipt system, 10 ... Sales data processing device, 11,21,41 ... CPU, 12,22,42 ... Main memory, 13,23,43 ... Auxiliary storage device, 15 ... Customer side touch panel, 18,24, 45 ... Network I / F, 20 ... Receipt server, 30 ... Time stamp server, 40 ... Information terminal.

Although some embodiments of the present invention have been described, these embodiments are presented as examples and are not intended to limit the scope of the invention. These novel embodiments can be implemented in various other embodiments, and various omissions, replacements, and changes can be made without departing from the gist of the invention. These embodiments and modifications thereof are included in the scope and gist of the invention, and are also included in the scope of the invention described in the claims and the equivalent scope thereof.
The inventions described in the original claims of the original application of the present application are described below.
[1]
An acquisition method for acquiring the time stamp token issued by the time stamp station regarding the hash value of the electronic receipt data,
A receipt server comprising an association means for associating the time stamp token acquired by the acquisition means with the electronic receipt data.
[2]
Further provided with a decision-making means for determining the execution of the association related to the payment in response to the instruction of each payment by the user of the electronic receipt service.
The receipt server according to Appendix [1], wherein the acquisition means acquires the time stamp token when the execution of the association is determined by the determination means.
[3]
The acquisition means acquires the time stamp token when the electronic receipt data meets a predetermined condition.
The receipt server described in Appendix [1].
[4]
In an electronic receipt system including a sales data processing device and a receipt server, the sales data processing device is
In response to instructions from the user of the electronic receipt service for each payment, a decision-making means for determining the execution of the association related to the payment
The receipt server includes an instruction means for instructing the receipt server to execute the association with respect to the electronic receipt data related to the settlement for which the execution of the association is determined by the determination means.
The acquisition means for acquiring the time stamp token issued by the time stamp station with respect to the hash value of the electronic receipt data instructed to execute the association by the instruction means, and the time stamp token acquired by the acquisition means are electronically obtained. An electronic receipt system comprising an association means associated with receipt data.
[5]
A computer that controls a receipt server equipped with a communication device,
An acquisition control means that controls a communication device to acquire a time stamp token issued by a time stamp station with respect to a hash value of electronic receipt data.
A program for making the time stamp token acquired by the acquisition control means function as an association means associated with the electronic receipt data.

Claims (5)

An acquisition method for acquiring the time stamp token issued by the time stamp station regarding the hash value of the electronic receipt data,
A receipt server comprising an association means for associating the time stamp token acquired by the acquisition means with the electronic receipt data. Further provided with a decision-making means for determining the execution of the association related to the payment in response to the instruction of each payment by the user of the electronic receipt service.
The receipt server according to claim 1, wherein the acquisition means acquires the time stamp token when the execution of the association is determined by the determination means. The acquisition means acquires the time stamp token when the electronic receipt data meets a predetermined condition.
The receipt server according to claim 1. In an electronic receipt system equipped with a sales data processing device and a receipt server
The sales data processing device is
A decision-making means for deciding to execute an association related to the payment in response to an instruction for each payment by the user of the electronic receipt service.
The receipt server is provided with an instruction means for instructing the receipt server to execute the association with respect to the electronic receipt data related to the settlement for which the execution of the association is determined by the determination means.
The receipt server
An acquisition means for acquiring a time stamp token issued by a time stamp station with respect to a hash value of electronic receipt data instructed to execute an association by the instruction means.
An electronic receipt system comprising an association means for associating the time stamp token acquired by the acquisition means with the electronic receipt data. A computer that controls a receipt server equipped with a communication device,
An acquisition control means that controls a communication device to acquire a time stamp token issued by a time stamp station with respect to a hash value of electronic receipt data.
A program for making the time stamp token acquired by the acquisition control means function as an association means associated with the electronic receipt data.