JP2021152690A - Information processing system - Google Patents

Abstract

To provide an information processing system capable of preventing fraudulent commercial transactions from being performed by anyone other than an authorized owner of a terminal device.SOLUTION: An information processing system allows a customer device, which is a terminal device owned by a customer, to perform registration and settlement of goods to be sold, working with an information processing device that manages sales data processing. The information processing system further includes an authentication device installed in a store that can exchange information with the customer terminal and the information processing device. The customer terminal stores a customer ID for identifying the customer. The information processing device includes a storage unit that stores customer information in which the customer ID is associated with a first biometric authentication information. The first biometric authentication information associated with the customer ID acquired by the authentication device from the customer terminal is compared with a second biometric authentication information acquired from the customer. If the comparison shows a match, the customer terminal is allowed to perform the registration and the settlement of the goods.SELECTED DRAWING: Figure 8

Description

An embodiment of the present invention relates to an information processing system.

In sales data processing, there is a system in which sales registration and settlement of products are conventionally performed by a terminal device such as a smartphone owned by a customer. In this system, credit card information is associated with a terminal device, and payment of purchased products is completed without cash.

In such a conventional system, if a customer loses a terminal device, a third party who holds the terminal device may improperly settle the product by pretending to be the owner of the terminal device. .. A technique for preventing unauthorized use (for example, Patent Document 1) has been proposed, but there is room for improvement depending on the operation of the store in which the system is used.

An object to be solved by the present invention is to provide an information processing system capable of preventing fraudulent commercial transactions from being carried out by anyone other than the authorized owner of the terminal device.

In the information processing system of the embodiment, the customer terminal, which is a terminal device owned by the customer, registers and setstles the goods to be sold in cooperation with the information processing device that manages the sales data processing. Information can be exchanged with the customer terminal and the information processing device, and an authentication device installed in the store is further provided. The customer terminal stores a customer ID for identifying a customer, and the information processing device stores the customer ID. The first storage unit is provided with a storage unit that stores customer information in which an ID and a first biometric authentication information are associated with each other, and is associated with the customer ID acquired by the authentication device from the customer terminal in the storage unit. The biometric authentication information of the above is compared with the second biometric authentication information acquired from the customer, and if they match, the article can be registered and settled at the customer terminal.

FIG. 1 is a block diagram showing a configuration example of the information processing system of the embodiment. FIG. 2 is a block diagram showing a configuration example of the server 100. FIG. 3 is a block diagram showing a functional unit realized by the control unit 110. FIG. 4 is a block diagram showing a configuration example of the customer terminal 300. FIG. 5 is a block diagram showing a functional unit realized by the control unit 310. FIG. 6 is a block diagram showing a configuration example of the gate 500. FIG. 7 is a block diagram showing a functional unit realized by the control unit 510. FIG. 8 is a diagram schematically showing an example of the flow of processing performed by the information processing system. FIG. 9 is a diagram showing a screen display example of the customer terminal 300. FIG. 10 is a diagram schematically showing another example of the flow of processing performed by the information processing system.

(First Embodiment)
The embodiment will be described with reference to the drawings. FIG. 1 is a block diagram showing a configuration example of the information processing system of the present embodiment. The information processing system of the present embodiment includes a server 100, a customer terminal 300, a gate 500, and the like.

The server 100 provides the customer terminal 300 with a service for registering products and making payments. The service is provided via an application program running on the customer terminal 300. The customer terminal 300 is a terminal device owned by the customer, and is a portable terminal device such as a smartphone, for example. The gate 500 (an example of an authentication device) is a gate installed at the entrance / exit of a store (an example of an area where goods to be sold are displayed) and is provided with a simple door. The door is opened / closed to allow / prohibit the customer from passing through the gate, and is opened / closed according to the transmission / reception of information to / from the customer terminal 300 and the server 100.

FIG. 2 is a block diagram showing a configuration example of the server 100. The server 100 includes a control unit 110, a storage unit 120, and a communication I / F (Interface) 130. The communication I / F 130 connects to a network and communicates with other devices (customer terminal 300, gate 500, etc.) via the network.

The control unit 110 is composed of, for example, a CPU (Central Processing Unit), a ROM (Read Only Memory), and a RAM (Random Access Memory). The CPU is a processor that executes programs. The ROM is a program memory and stores various programs and control data. RAM is a working memory and is used for expanding various data. The control unit 110 controls each unit in an integrated manner by the CPU reading the program stored in the ROM into the RAM and executing the program.

The storage unit 120 is a storage device including a rewritable non-volatile storage medium such as an HDD (Hard Disk Drive), an SSD (Solid State Memory), or a flash memory. The storage unit 120 stores various programs and various data related to the operation of the server 100.

The storage unit 120 stores customer information 121, payment information 122, and the like. The customer information 121 is information that identifies a customer, and includes, for example, a customer ID, a name, an address, an e-mail address, an age, a gender, and biometric authentication information. The customer ID is ID information for identifying the customer, for example, a number unique to the customer who uses the affiliated store. The biometric authentication information is information indicating the characteristics of the fingerprint (or face, etc.), and is registered at the service counter of the store when the system is used for the first time or before, and is registered from the fingerprint sensor (or face authentication camera, etc.). It is used as a comparison target with the input information.

FIG. 3 is a block diagram showing a functional unit realized by the control unit 110. The control unit 110 functions as various functional units such as the payment processing unit 111 and the biometric authentication unit 112 when the CPU executes the program.

The payment processing unit 111 performs payment processing related to the product for which registration has been accepted from the customer terminal 300. The payment processing method by the payment processing unit 111 is cashless payment such as credit card payment.

The biometric authentication unit 112 authenticates the customer by comparing the biometric authentication information included in the customer information 121 with the biometric authentication information input from the gate 500.

FIG. 4 is a block diagram showing a configuration example of the customer terminal 300. The customer terminal 300 is a terminal device owned by the customer. The customer terminal 300 is a portable terminal device such as a smartphone or a tablet. The customer terminal 300 includes a control unit 310, a storage unit 320, a communication I / F 330, a short-range wireless communication unit 340, a display unit 350, an operation unit 360, a camera 370, and the like.

The communication I / F 330 connects to a network and communicates with another device (server 100, etc.) via the network. The short-range wireless communication unit 340 is an example of a communication module for performing short-range wireless communication with an external device, and performs communication using a technique such as NFC (Near field communication), for example. The short-range wireless communication unit 340 exchanges information by transmitting and receiving radio waves to and from the communication target. The communication target of the short-range wireless communication unit 340 is the gate 500.

The display unit 350 is a display device such as a liquid crystal display, and indicates information directed to a customer (user) who is an operator of the customer terminal 300 in characters or images. The operation unit 360 is, for example, a touch panel arranged so as to be superimposed on the display unit 350, and receives an operation of the content according to the display content of the display unit 350. The camera 370 can capture a symbol image such as a barcode attached to a product, and is, for example, an image sensor.

The control unit 310 is composed of, for example, a CPU, a ROM, and a RAM. The CPU is a processor that executes programs. The ROM is a program memory and stores various programs and control data. RAM is a working memory and is used for expanding various data. The control unit 310 controls each unit in an integrated manner by the CPU reading the program stored in the ROM into the RAM and executing the program.

The storage unit 320 is a storage device including a rewritable non-volatile storage medium such as a flash memory. The storage unit 320 stores various data (for example, customer ID 321) and various programs 322 related to the operation of the customer terminal 300.

FIG. 5 is a block diagram showing a functional unit realized by the control unit 310. The control unit 310 functions as the POS function unit 311 when the CPU executes the program 322. The POS function unit 311 enables product registration processing and payment processing by communicating with the server 100, and realizes a so-called limited POS (Point of sale system) with narrowed functions. The product registration process is a process of reading product information such as a product code from a symbol image such as a barcode included in an image captured by the camera 370 and registering the product information as information of a product to be purchased. The payment process is a process of paying the price of the product indicated by the information registered by the product registration process by cashless payment such as credit card payment.

FIG. 6 is a block diagram showing a configuration example of the gate 500. The gate 500 includes a control unit 510, a storage unit 520, a communication I / F 530, a short-range wireless communication unit 540, an authentication information acquisition unit 550, and the like.

The communication I / F 530 connects to a network and communicates with another device (server 100, etc.) via the network. The short-range wireless communication unit 540 is an example of a communication module for performing short-range wireless communication with an external device, and performs communication using, for example, a technology such as NFC. The short-range wireless communication unit 540 exchanges information by transmitting and receiving radio waves to and from the communication target. The communication target of the short-range wireless communication unit 540 is the customer terminal 300.

The authentication information acquisition unit 550 acquires biometric characteristics (information read from a fingerprint, face, etc.) of an individual as biometric authentication information used for identifying an individual. For example, a fingerprint sensor or a face authentication camera. And so on. The biometric authentication information acquired by the authentication information acquisition unit 550 is transferred to the server 100 via the communication I / F 530 under the control of the control unit 510.

The control unit 510 is composed of, for example, a CPU, a ROM, and a RAM. The CPU is a processor that executes programs. The ROM is a program memory and stores various programs and control data. RAM is a working memory and is used for expanding various data. The control unit 510 controls each unit in an integrated manner by the CPU reading the program stored in the ROM into the RAM and executing the program.

The storage unit 520 is a storage device including a rewritable non-volatile storage medium such as a flash memory. The storage unit 520 stores various programs and various data related to the operation of the gate 500.

FIG. 7 is a block diagram showing a functional unit realized by the control unit 510. The control unit 510 functions as a lock processing unit 511 when the CPU executes a program. On the application screen (see FIG. 9, which will be described later) displayed on the display unit 350 by the POS function unit 311 of the customer terminal 300, the lock processing unit 511 can and cannot execute product registration and payment. To switch. Specifically, for example, the button displayed on the user interface screen is enabled / disabled.

In such an information processing system, the user performs product registration processing and payment processing by the customer terminal 300. As a preliminary preparation for that, the user installs the application software that realizes the POS function unit 311 on the customer terminal 300 by the first use of this system, completes the user registration, acquires the customer ID, and further, the service of the store. Biometric authentication information (for example, information obtained by reading a fingerprint by a fingerprint sensor or information obtained from a face image by a face recognition camera) is registered at a counter or the like.

FIG. 8 is a diagram schematically showing an example of the flow of processing performed by the information processing system. When the customer terminal 300 activates the application program for product registration and payment in response to the operation of the user (customer), the customer terminal 300 functions as the POS function unit 311 and first performs the authentication process (process F1).

Here, FIG. 9A is an example of the screen 351 displayed on the display unit 350 at the time of starting the POS function unit 311. The screen 351 includes, for example, a button 31 for displaying special sale information, a button 32 for starting sales registration, a button 33 for displaying an electronic receipt of past transactions, and the like. Further, at this point, the button 32 is invalid, and the customer terminal 300 is in a state in which product registration and payment cannot be executed.

In the process F1, the customer terminal 300 transmits the customer ID to the server 100 (step S11). The server 100 that has received the customer ID returns a response to the customer terminal 300 in the initial process (process F2) (step S21). The customer terminal 300 that has received the response guides the user what to do in the authentication process (process F1) by displaying a message on the display unit 350 or the like (step S12). The message to be displayed on the display unit 350 in the guidance is, for example, "Please touch the fingerprint sensor of the gate with your finger and hold the terminal over the reader".

When the authentication information acquisition unit 550 acquires the biometric authentication information (that is, when the fingerprint sensor reads the fingerprint, for example), the gate 500 (process F3) transfers the read information to the server 100 (step S31). When the server 100 receives the biometric authentication information from the gate 500, the server 100 performs the biometric authentication process (process F4). In the process F4, the server 100 refers to the customer information 121, and if the biometric authentication information received in step S31 matches the information associated with the customer ID received in the initial process (process F2), A response is returned to the gate 500 (step S41). The response may be used at the gate 500 to notify the user that the biometric authentication information has been authenticated, for example, by emitting a voice.

Next, when the customer terminal 300 is held over the gate 500 and the short-range wireless communication unit 540 and the short-range wireless communication unit 340 are in a communicable state, the customer terminal 300 transmits a customer ID (step S13). When the short-range wireless communication unit 540 reads the customer ID from the customer terminal 300, the gate 500 (process F5) transfers the customer ID to the server 100 (step S51). The server 100 that receives this performs the terminal authentication process (process F6).

In the process F6, the server 100 refers to the customer information 121, and the customer ID received in step S51 is the customer ID received in the initial process (process F2) and is associated with the customer ID. If the biometric authentication information has been authenticated by the process F4, a response is returned to the gate 500 (step S61). The gate 500 (process F5) transfers the response of step S61 to the customer terminal 300 (step S52). Upon receiving this, the customer terminal 300 finishes the authentication process (process F1).

Here, the gate 500 executes unlocking as the lock processing unit 511 by transferring the response in step S52. That is, the customer terminal 300 is switched from a state in which product registration and payment can be executed to a state in which it is possible.

FIG. 9B is an example of the screen 352 displayed on the display unit 350 of the customer terminal 300 that has completed the authentication process. On the screen 352, the button 32 for starting the sales registration is effective. That is, at this point, the customer terminal 300 is in a state where product registration and payment can be executed.

When the button 32 is operated via the operation unit 360, the customer terminal 300 shifts to the registration settlement process (process F7). In the process F7, when the camera 370 captures a symbol image such as a barcode attached to the product, the customer terminal 300 transmits the product code obtained by decoding the symbol image to the server 100 (step S71). In the registration settlement process (process F8), the server 100 registers the product code received from the customer terminal 300 as information on the product purchased by the user, and returns a response indicating the registration to the customer terminal 300 (step S81). ). Steps S71 to S81 are repeated for the number of products to be purchased.

After completing the registration of the product to be purchased (capturing the symbol image by the camera 370), the user performs an operation of instructing the customer terminal 300 to shift to the payment process via the operation unit 360. Upon receiving the instruction operation, the customer terminal 300 notifies the server 100 of the shift to the payment process (step S72). Upon receiving this, the server 100 calculates the total amount and instructs the customer terminal 300 to pay the price of the product (step S82).

The user who has completed the payment process returns to the gate 500 and performs an authentication process (process F9) for leaving the store. In the process F9, when the customer terminal 300 is held over the gate 500 and the short-range wireless communication unit 540 and the short-range wireless communication unit 340 are in a communicable state, the customer terminal 300 transmits a customer ID (step S91).

When the short-range wireless communication unit 540 reads the customer ID from the customer terminal 300, the gate 500 (process F10) transfers the customer ID to the server 100 (step S101). The server 100 that receives this performs the terminal authentication process (process F11). In process F11, the server 100 returns a response to the gate 500 (step S111). The gate 500 (process F10) transfers the response of step S111 to the customer terminal 300 (step S102). Upon receiving this, the customer terminal 300 finishes the authentication process (process F9).

Here, the gate 500 executes the lock as the lock processing unit 511 by transferring the response in step S102. That is, the customer terminal 300 is switched from a state in which product registration and payment can be executed to a state in which it is not possible. More specifically, the button 32 is switched from a valid state to an invalid state.

As described above, according to the first embodiment, the product is registered on the application screen (FIG. 9) provided by the POS function unit 311 only when both the identity verification by the biometric authentication and the terminal authentication by the customer ID are passed. Since the payment is switched to a state in which the payment can be executed, it is possible to provide an information processing system capable of preventing an unauthorized commercial transaction from being performed by a person other than the authorized owner of the customer terminal 300.

(Modified example of the first embodiment)
In the first embodiment, the biometric authentication is performed only when entering the store, but in carrying out the biometric authentication, the biometric authentication may be performed also when leaving the store. According to this, it is possible to prevent another person who illegally used the customer terminal 300 lost in the store by a legitimate user from leaving the store as it is, and it is possible to prevent unauthorized use.

In this case, it is preferable to control the gate 500 so that the door is not opened and is kept closed when the biometric authentication is not passed (it is not confirmed that the user is a legitimate user).

(Second Embodiment)
FIG. 10 is a diagram schematically showing another example of the flow of processing performed by the information processing system. In the present embodiment, the same reference numerals are used for the same parts as those in the first embodiment, and detailed description thereof will be omitted. In the present embodiment, the fingerprint sensor provided in the customer terminal 300 is used as an authentication information acquisition unit for performing biometric authentication.

In the authentication process (process F21), the customer terminal 300 performs the biometric authentication process (process F22) after receiving the response (step S21) from the server 100. In the process F22, the customer terminal 300 reads the fingerprint by the fingerprint sensor and transfers the information (biometric authentication information) obtained by the fingerprint sensor to the server 100 (step S221). Here, in step S221, the biometric authentication information and the time stamp information indicating the time of reading by the fingerprint sensor are also transmitted to the server 100.

When the server 100 receives the biometric authentication information from the customer terminal 300, the server 100 performs the biometric authentication process (process F23). In the process F23, the server 100 refers to the customer information 121, and if the biometric authentication information received in step S221 matches the information associated with the customer ID received in the initial process (process F2), A response is returned to the gate 500 (step S231).

In the process F23, when a predetermined time (for example, 3 minutes) has elapsed from the time indicated by the time stamp information, the biometric authentication information received in step S221 is discarded. This eliminates entry to the store after a long time has passed after biometric authentication. This prevents unauthorized use by a third party when the user loses the customer terminal 300 after biometric authentication before entering the store.

According to the information processing system of the second embodiment, the same effect as that of the information processing system of the first embodiment can be obtained.

As described above, according to the first and second embodiments, the customer's biometric authentication and terminal authentication are performed immediately before entering the store, so that a third party illegally uses the customer terminal 300 lost by a legitimate user. It is possible to prevent the acquisition of products.

In the above-described embodiment, the terminal authentication (processing F6) is performed by collating the customer ID by short-range wireless communication, but in the implementation, the terminal authentication is performed by using, for example, a two-dimensional code and a code reader. It may be configured to be performed by exchanging information. Specifically, for example, under the control of the POS function unit 311, the gate 500 displays a two-dimensional code including the customer ID as information on the display unit 350 of the customer terminal 300, and the gate 500 reads the two-dimensional code. You may have it.

Although some embodiments of the present invention have been described, these embodiments are presented as examples and are not intended to limit the scope of the invention. These novel embodiments can be implemented in various other embodiments, and various omissions, replacements, and changes can be made without departing from the gist of the invention. These embodiments and modifications thereof are included in the scope and gist of the invention, and are also included in the scope of the invention described in the claims and the equivalent scope thereof.

100 ... Server (an example of information processing device)
110 ... Control unit, 111 ... Payment processing unit, 112 ... Biometric authentication unit 120 ... Storage unit, 121 ... Customer information, 122 ... Payment information 130 ... Communication I / F
300 ... Customer terminal 310 ... Control unit 311 ... POS function unit 320 ... Storage unit, 321 ... Customer ID, 322 ... Program 330 ... Communication I / F
340 ... Short-range wireless communication unit 350 ... Display unit, 351, 352 ... Screen, 31-33 ... Button 360 ... Operation unit 370 ... Camera 500 ... Gate (example of authentication device)
510 ... Control unit 511 ... Lock processing unit 520 ... Storage unit 530 ... Communication I / F
540 ... Short-range wireless communication unit 550 ... Authentication information acquisition unit

JP-A-2019-53753

Claims (6)

A customer terminal, which is a terminal device owned by a customer, is an information processing system that registers and setstles goods to be sold in cooperation with an information processing device that manages sales data processing.
Information can be exchanged with the customer terminal and the information processing device, and an authentication device installed in the store is further provided.
The customer terminal stores a customer ID for identifying a customer, and stores the customer ID.
The information processing device includes a storage unit that stores customer information in which the customer ID and the first biometric authentication information are associated with each other, and the customer ID acquired by the authentication device from the customer terminal is stored in the storage unit. The first biometric information associated with the information is compared with the second biometric information obtained from the customer, and if they match, the article can be registered and settled at the customer terminal. Information processing system. The information processing system according to claim 1, wherein the second biometric authentication information is acquired by an authentication information acquisition unit provided in the authentication device and transferred to the information processing device. The second biometric authentication information is acquired by the authentication information acquisition unit provided in the customer terminal, and is transferred to the information processing device together with the time stamp information at the time of acquisition.
The information processing device claims that the second biometric authentication information is destroyed when a predetermined time elapses from the time indicated by the time stamp information before the authentication device acquires the customer ID from the customer terminal. The information processing system according to 1. The information processing device claims that when the authentication device acquires the customer ID from the customer terminal capable of registering and paying for the article, the information processing device makes it impossible to register and settle the article at the customer terminal. The information processing system according to any one of 1 to 3. The authentication device includes a door that opens and closes an entrance to the store when the registration and settlement of the goods on the customer terminal can be switched from one of the impossible state and the possible state to the other.
The information processing device closes the door when the second biometric authentication information and the customer ID acquired by the authentication device from the customer terminal do not match those associated with the customer information. The information processing system according to any one of claims 1 to 4, which is kept in a state. The information processing system according to any one of claims 1 to 5, wherein the authentication device and the customer terminal exchange information by short-range wireless communication.

Images