JP2022153948A - Information processing apparatus, information processing method, and information processing program - Google Patents

Abstract

To provide an information processing apparatus configured to enable required withdrawal while suppressing damage due to illegal use of an account, an information processing method, and an information processing program.SOLUTION: In a transfer system which is configured by connecting a connection server and a management server over an internal network and connecting the connection server to a plurality of receiving institution servers over an external network, the connection server includes storage means for storing a corresponding relationship for associating a withdrawal request source and the amount limit, and control means for accessing the storage means. The control means executes: processing to receive a withdrawal request including information on a withdrawal request source, the amount to be withdrawn, and a budget account; processing to determine whether the amount to be withdrawn is equal to or lower than the amount limit associated with the withdrawal request source included in the withdrawal request; and processing to request the management server of a financial institution to withdraw the amount to be withdrawn from the budget account in accordance with the withdrawal request when a result of the determination processing is affirmative.SELECTED DRAWING: Figure 6

Description

The present invention relates to an information processing device, an information processing method, and an information processing program.

Financial institutions and the like are making efforts to protect customers' assets from unauthorized use. For example, Patent Literature 1 proposes a card processing device that can set various usage restrictions for each card to be issued. Patent Literature 2 proposes an automated teller machine that performs payment transactions even when the payment amount exceeds a predetermined amount when the receiving institution is determined to be a public interest corporation.

JP-A-9-231415 JP 2008-299560 A

In order to curb the damage caused by unauthorized use of accounts, it is conceivable not only to take measures for cards and automated teller machines, but also to set credit limits on accounts. However, if a credit limit is set for the account, the credit limit will be applied even to withdrawals of utility bills, credit cards, and the like. Therefore, even if the balance of the account is not insufficient, the withdrawal may not be possible.

One aspect of the technology disclosed herein aims to provide an information processing device, an information processing method, and an information processing program capable of performing necessary withdrawals while suppressing damage due to unauthorized use of an account.

One aspect of the technology disclosed is exemplified by the following information processing device. The information processing apparatus includes storage means for storing a correspondence relationship between a withdrawal request source and a limit amount, and control means for accessing the storage means. The control means performs a process of receiving a withdrawal request including information indicating a withdrawal requester, a withdrawal amount, and a withdrawal source account, and refers to the correspondence relationship to send the withdrawal requester whose withdrawal amount is included in the withdrawal request. a process of determining whether or not the amount is equal to or less than the associated limit amount; and a request to the management server of the institution.

In the above information processing device, the withdrawal requester and the limit amount are associated with each other. Then, when the withdrawal amount is equal to or less than the limit associated with the withdrawal request source, the management server is requested to execute the withdrawal. Here, the limit amount may be appropriately determined according to the withdrawal amount required for normal withdrawal. According to this information processing device, it is possible to suppress the withdrawal of an amount larger than usual. On the other hand, the information processing apparatus requests the management server to execute the withdrawal within the normally requested range. Therefore, according to the present information processing device, it is possible to perform necessary withdrawals while suppressing damage caused by unauthorized use of the account. Then, when the determination result of the determination process is negative, the control means may notify the withdrawal request source included in the withdrawal request that withdrawal is impossible.

The correspondence relationship further associates the applicable period with the limit set for each withdrawal request source, and the control means, when receiving the withdrawal request within the applicable period, sets the withdrawal request included in the withdrawal request. Alternatively, the limit associated with the original may be applied. With these features, flexible operation according to the expected withdrawal amount is possible, for example, by setting a higher limit during times when many withdrawals are expected, such as bonus payment periods. It becomes possible.

Further, the correspondence relationship may further associate an upper limit number of times for each withdrawal request source. When the cumulative number of withdrawal requests to the first withdrawal account from the first withdrawal request source within a predetermined period exceeds the upper limit number of times associated with the first withdrawal request source In addition, the first withdrawal request source may be notified of the impossibility of withdrawal. Here, the upper limit number of times may be appropriately determined according to the number of withdrawals normally assumed. By providing such features, the information processing apparatus can suppress the execution of withdrawals more times than is normally assumed.

Further, the correspondence relationship further associates a cumulative limit amount with each withdrawal request source, and the control means determines the cumulative amount of withdrawals from the second withdrawal request source to the second withdrawal source account within a predetermined period. exceeds the cumulative limit associated with the second withdrawal requester, the second withdrawal requester may be notified that withdrawal is not possible. Here, the cumulative limit amount may be appropriately determined according to the expected cumulative withdrawal amount. By providing such a feature, the information processing apparatus can suppress the execution of withdrawal of a cumulative amount that is higher than normally assumed.

The technology disclosed can also be understood from the aspect of an information processing method and an information processing program.

According to the disclosed technique, necessary withdrawals can be executed while suppressing damage caused by unauthorized use of the account.

FIG. 1 is a diagram illustrating an example of a transfer system according to an embodiment. FIG. 2 is a diagram illustrating an example of a hardware configuration of a connection server according to the embodiment; FIG. 3 is a diagram illustrating an example of processing blocks of a connection server according to the embodiment; FIG. 4 is a diagram showing an example of a withdrawal requester management table stored in the management database. FIG. 5 is a diagram showing an example of a withdrawal source account management table stored in the management database. 6 is a diagram illustrating an example of a processing flow of a connection server according to the embodiment; FIG. FIG. 7 is a diagram illustrating an example of a processing flow for determining whether withdrawal is possible by the control unit.

<Embodiment>
The configuration of the embodiment shown below is an example, and the disclosed technology is not limited to the configuration of the embodiment. FIG. 1 is a diagram showing an example of a transfer system 1 according to an embodiment. The transfer system 1 includes a connection server 100 and a management server 200 . The connection server 100 and the management server 200 are connected by an internal network N1. The collection agency server 300 is connected to the connection server 100 via the external network N2. The internal network N1 and the external network N2 are computer networks that interconnect computers.

The collection agency server 300 is, for example, an information processing device managed by a credit card company. The collection agency server 300 is not limited to a single server, and may be a group of servers managed by the same credit card company. The collection agency server 300 is located at, for example, a credit card company. Although three collection agency servers 300 are shown in FIG. 1, the number of collection agency servers 300 is not limited. In the collection agency server 300, for example, information indicating the usage amount of each credit card user is accumulated on a monthly basis. The collection agency server 300 then transmits a withdrawal request to the connection server 100 requesting withdrawal of the monthly usage amount of each credit card user. The withdrawal request includes, for example, information indicating the collection institution server 300 that sent the withdrawal request, the requested amount, and information indicating the account from which the requested amount is withdrawn. Hereinafter, in this specification, the collection institution server 300 that has sent the withdrawal request is also referred to as the requesting collection institution server 300 . The collection agency server 300 is an example of a "withdrawal request source." The "account from which the requested withdrawal amount is withdrawn" is an example of the "first account from which withdrawal is made" and the "second account from which withdrawal is made".

The connection server 100 is an information processing device that relays between the management server 200 and the collection agency server 300 . When the connection server 100 receives a withdrawal request from the collection institution server 300, the connection server 100 checks the limit amount set for each withdrawal request source and determines whether or not the withdrawal is possible. The connection server 100 that determines that the withdrawal is permitted transfers the received withdrawal request to the management server 200 .

The management server 200 is an information processing device that manages accounts held by customers in financial institutions. The management server 200 executes withdrawal from the customer's account according to the withdrawal request transferred from the connection server 100 . For example, the management server 200 transfers the amount debited from the customer's account to the account of the company managing the receiving institution server 300 according to the withdrawal request.

FIG. 2 is a diagram illustrating an example of the hardware configuration of the connection server 100 according to the embodiment. The connection server 100 includes a Central Processing Unit (CPU) 101, a main storage section 102, an auxiliary storage section 103, a communication section 104 and a connection bus B1. The CPU 101, main storage unit 102, auxiliary storage unit 103, and communication unit 104 are interconnected by a connection bus B1. The management server 200 and the receiving institution server 300 also have the same hardware configuration as the connection server 100. FIG.

The CPU 101 is also called a microprocessor unit (MPU) or processor. The CPU 101 is not limited to a single processor, and may have a multiprocessor configuration. Also, a single CPU 101 connected with a single socket may have a multi-core configuration. At least part of the processing executed by the CPU 101 is performed by a processor other than the CPU 101, such as a dedicated processor such as a digital signal processor (DSP), a graphics processing unit (GPU), a numerical processor, a vector processor, or an image processor. may At least part of the processing executed by the CPU 101 may be executed by an integrated circuit (IC) or other digital circuits. Also, at least part of the CPU 101 may include an analog circuit. Integrated circuits include Large Scale Integrated Circuits (LSIs), Application Specific Integrated Circuits (ASICs), and Programmable Logic Devices (PLDs). PLDs include, for example, Field-Programmable Gate Arrays (FPGAs). CPU 101 may be a combination of a processor and an integrated circuit. A combination is called, for example, a microcontroller unit (MCU), a system-on-a-chip (SoC), a system LSI, a chipset, or the like. In the connection server 100, the CPU 101 expands the program stored in the auxiliary storage unit 103 into the work area of the main storage unit 102, and controls the peripheral device through execution of the program. As a result, the connection server 100 can execute processing that meets a predetermined purpose. The main storage unit 102 and the auxiliary storage unit 103 are recording media readable by the connection server 100 .

The main storage unit 102 is exemplified as a storage unit directly accessed from the CPU 101 . The main storage unit 102 includes Random Access Memory (RAM) and Read Only Memory (ROM).

The auxiliary storage unit 103 stores various programs and various data in a readable and writable recording medium. The auxiliary storage unit 103 is also called an external storage device. The auxiliary storage unit 103 stores an operating system (OS), various programs, various tables, and the like. The OS includes a communication interface program for exchanging data with an external device or the like connected via the communication unit 104 . External devices and the like include, for example, other information processing devices and external storage devices connected via a computer network or the like. Note that the auxiliary storage unit 103 may be part of a cloud system, which is a group of computers on a network, for example.

The auxiliary storage unit 103 is, for example, an erasable programmable ROM (EPROM), a solid state drive (SSD), a hard disk drive (HDD), or the like. Further, the auxiliary storage unit 103 is, for example, a Compact Disc (CD) drive device, a Digital Versatile Disc (DVD) drive device, a Blu-ray (registered trademark) Disc (BD) drive device, or the like. Also, the auxiliary storage unit 103 may be provided by Network Attached Storage (NAS) or Storage Area Network (SAN).

The communication unit 104 is, for example, an interface with the internal network N1 and the external network N2. The communication unit 104 communicates with external devices via the internal network N1 and the external network N2.

The connection server 100 may further include, for example, an input unit that receives an operation instruction or the like from a user or the like. Examples of such input units include input devices such as keyboards, pointing devices, touch panels, acceleration sensors, and voice input devices.

The connection server 100 may include, for example, an output unit that outputs data processed by the CPU 101 and data stored in the main storage unit 102 . Examples of such an output unit include output devices such as a cathode ray tube (CRT) display, a liquid crystal display (LCD), a plasma display panel (PDP), an electroluminescence (EL) panel, an organic EL panel, or a printer.

<Processing Block of Connection Server 100>
FIG. 3 is a diagram illustrating an example of processing blocks of the connection server 100 according to the embodiment. The connection server 100 includes a control unit 11 and a management database (denoted as “management DB” in the drawing) 12 . The CPU 101 of the connection server 100 executes a computer program developed in the main storage unit 102 so as to execute the processing of each unit such as the control unit 11 and the management database 12 of the connection server 100 .

The management database 12 is a database for managing sources of withdrawal requests. Figure 4 shows
4 is a diagram showing an example of a withdrawal requester management table 121 stored in the management database 12. FIG. The withdrawal requester management table 121 is a management table that associates the withdrawal requester with the maximum withdrawal amount. The withdrawal requestor management table 121 includes items of "withdrawal requestor", "account", "limit amount" and "applicable period".

The "withdrawal request source" stores information specifying the source of the withdrawal request. The information specifying the source of the withdrawal request can include the IP address of the collection institution server 300, the host name of the collection institution server 300, the name of the company that manages the collection institution server 300, and the like. The "withdrawal request source" stores an identification code that uniquely identifies the withdrawal request source. The name of the company that manages 300, the name of the withdrawal requester, etc. may be managed.

"Account" stores the account number of the account held by the company that manages the collection agency server 300 that is the source of the withdrawal request. In other words, the account number of the account to which the debited amount is transferred when the debit is executed is stored. The "limit amount" stores the limit amount for one withdrawal. The "applicable period" stores information indicating the period during which the "limit amount" is applied. By setting the "applicable period", it becomes possible to switch the "limit amount" according to the period so that, for example, during the bonus season, the maximum amount is set to be a little higher.

FIG. 5 is a diagram showing an example of the withdrawal source account management table 122 stored in the management database 12. As shown in FIG. The withdrawal source account management table 122 includes items of "withdrawal source account", "withdrawal requester", "accumulated amount", "cumulative limit amount", "number of times", and "maximum number of times". The "withdrawal source account" stores the account number of the account from which the amount is withdrawn. Since the information stored in the "withdrawal requester" is the same as the "withdrawal requester" of the withdrawal requester management table 121, the description is omitted. The "accumulated amount" stores the accumulated amount withdrawn during a predetermined period (for example, one day or one month). The "cumulative limit amount" stores the limit amount for the accumulated withdrawal amount for the predetermined period. The "number of times" stores the number of withdrawals performed during the predetermined period. The "upper limit number of times" stores the upper limit of the number of withdrawals that can be executed in the predetermined period. The management database 12 is an example of "storage means".

Returning to FIG. 3, the control unit 11 refers to the withdrawal requester management table 121 and the withdrawal source account management table 122 of the management database 12, and determines whether or not the withdrawal is permitted according to the withdrawal request received from the receiving institution server 300. . When the control unit 11 determines that the withdrawal is possible, the control unit 11 transfers the withdrawal request received from the receiving institution server 300 to the management server 200 and updates the withdrawal source account management table 122 . Further, when the control unit 11 determines that withdrawal is not possible, it notifies the receiving institution server 300 that withdrawal is not possible. The control unit 11 is an example of "control means".

FIG. 6 is a diagram illustrating an example of the processing flow of the connection server 100 according to the embodiment. An example of the processing flow of the connection server 100 will be described below with reference to FIG.

At T<b>1 , the control unit 11 receives a withdrawal request from the receiving institution server 300 . At T2, the control unit 11 determines whether or not the withdrawal is possible according to the withdrawal request received at T1. If withdrawal is possible (YES in T2), the process proceeds to T3. If withdrawal is not possible (NO at T2), the process proceeds to T6. Details of the processing of T2 will be described later with reference to FIG.

At T3, the control unit 11 transfers the withdrawal request received at T1 to the management server 200. FIG. The management server 200, for example, executes withdrawal processing according to the transferred withdrawal request. The management server 200 that has completed the withdrawal process reports the completion to the connection server 100 .
At T4, the control unit 11 of the connection server 100, which has received the completion report from the management server 200, transmits to the requesting receiving institution server 300 a completion notice of completion of the withdrawal.

At T5, the control unit 11 updates each item associated with the requesting collection institution server 300 in the withdrawal source account management table 122 . That is, the control unit 11 adds the withdrawal request amount indicated by the withdrawal request received at T1 to the item “accumulated amount” associated with the requesting receiving institution server 300 in the withdrawal source account management table 122 . Further, the control unit 11 adds “1” to the item “number of times” associated with the requesting receiving institution server 300 in the withdrawal source account management table 122 .

At T6, the control unit 11 transmits to the requesting receiving institution server 300 a notice that withdrawal is not possible.

FIG. 7 is a diagram showing an example of a processing flow for determining whether or not withdrawal is possible by the control unit 11. As shown in FIG. FIG. 7 is a diagram showing a detailed processing flow of the processing of T2 in FIG. An example of a processing flow for determining whether or not withdrawal is possible by the control unit 11 will be described below with reference to FIG. 7 .

At T21, the control unit 11 acquires the conditions used for judging whether or not the withdrawal is possible from the withdrawal requester management table 121 and the withdrawal source account management table 122 according to the requester and the date of receipt of the withdrawal request received at T1. For example, the control unit 11 acquires the amount limit associated with the requester of the withdrawal request in the withdrawal requester management table 121 . In addition, the control unit 11 selects the cumulative limit amount and the upper limit number of times associated with the requester of the withdrawal request in the withdrawal source account management table 122, Get the maximum number of times.

At T22, the control unit 11 determines whether or not the withdrawal request amount indicated by the withdrawal request received at T1 in FIG. If the amount is equal to or less than the limit amount (YES in T22), the process proceeds to T23. If the amount is not equal to or less than the limit amount (NO in T22), the process proceeds to T26.

At T23, the control unit 11 calculates a provisional accumulated amount by adding the withdrawal request amount indicated by the withdrawal request received at T1 in FIG. 6 to the accumulated amount under the conditions acquired at T21. The control unit 11 determines whether or not the provisional accumulated amount is equal to or less than the accumulated limit under the conditions acquired in T21. If it is equal to or less than the cumulative limit (YES in T23), the process proceeds to T24. If it is not equal to or less than the cumulative limit (NO in T23), the process proceeds to T26.

At T24, the control unit 11 calculates a provisional number of times by adding 1 to the number of times under the conditions acquired at T21. The control unit 11 determines whether or not the provisional number of times is within the upper limit number of times in the conditions acquired in T21. If it is within the upper limit number of times (YES in T24), the process proceeds to T25. If the number of times is greater than the upper limit (NO in T24), the process proceeds to T26.

At T25, the control unit 11 determines that the withdrawal request received at T1 in FIG. 6 can be withdrawn. At T26, the control unit 11 determines that the withdrawal request received at T1 in FIG. 6 cannot be withdrawn.

<Action and effect of the embodiment>
In the embodiment, the condition for permitting withdrawal is associated with the withdrawal request source. Therefore, even if the withdrawal amount becomes unexpectedly high due to unauthorized use of the credit card, etc., the risk of the withdrawal being executed from the customer's account can be reduced. Further, in this embodiment, unlike the case where a credit limit is set for an account, even if a customer makes a remittance from his/her own account or withdraws from his/her own account, the withdrawal request from the receiving institution server 300 is not accepted. has no effect. Therefore, according to the present embodiment, necessary withdrawals can be executed while suppressing damage caused by unauthorized use of the account.

In this embodiment, the withdrawal request source management table 121 has an item of "limit amount", and the withdrawal source account management table 122 has an item of "cumulative amount limit". Therefore, the connection server 100 can determine whether or not the withdrawal request from the receiving institution server 300 can be withdrawn from the viewpoint of both the amount of withdrawal per transaction and the accumulated amount accumulated within a predetermined period. .

In addition, in the present embodiment, the "number of times" of the withdrawal source account management table 122 stores the executable number of withdrawals within a predetermined period. Therefore, the connection server 100 can refuse the requested withdrawals in response to withdrawal requests from the collection institution server 300 more than normally expected.

In the present embodiment, the "maximum amount", the "cumulative limit amount", and the "maximum number of times" are used to determine whether or not a withdrawal can be made. Alternatively, a plurality of them may be selected and appropriately combined to be used for determination of whether or not withdrawal is possible. The items of the withdrawal requester management table 121 can be appropriately increased or decreased according to the conditions used to determine whether the withdrawal is possible or not. Also, although the "applicable period" is set in the withdrawal requestor management table 121, the "applicable period" may be omitted. In addition, by setting the "applicable period" in the withdrawal source account management table 122, the applicable period that is commonly applied to the "accumulated amount", "accumulated limit amount", "number of times", and "maximum number of times" is set. may be Furthermore, the application period applied to the “cumulative amount” and the “accumulated limit amount” and the applicable period applied to the “number of times” and the “maximum number of times” may be set in the withdrawal source account management table 122, respectively. It should be noted that the applicable period set in the "accumulated amount", "accumulated limit amount", "number of times", and "upper limit number of times" may be different from the applicable period set in the withdrawal request source management table 121. good. Also, the application period may be changed as appropriate.

In this embodiment, the withdrawal requester management table 121 and the withdrawal source account management table 122 are stored in the connection server 100 . However, at least one of the withdrawal requester management table 121 and the withdrawal source account management table 122 may be stored in the management server 200 . In such a case, the connection server 100 may access the management server 200 to acquire information used for processing.

In this embodiment, the withdrawal requester management table 121 and the withdrawal source account management table 122 manage conditions for permitting withdrawal. The conditions for permitting withdrawal may be managed by a single table that integrates the items of

The embodiments disclosed above can be variously modified within the scope of their objectives.

<<Computer-readable recording medium>>
An information processing program that causes a computer or other machine or device (hereinafter referred to as a computer or the like) to implement any of the functions described above can be recorded in a computer-readable recording medium. By causing a computer or the like to read and execute the program of this recording medium, the function can be provided.

Here, a computer-readable recording medium is a recording medium that stores information such as data and programs by electrical, magnetic, optical, mechanical, or chemical action and can be read by a computer, etc. Say. Examples of such recording media that can be removed from a computer or the like include flexible discs, magneto-optical discs, Compact Disc Read Only Memory (CD-ROM), Compact Disc-Recordable (CD-R), and Compact Disc-ReWritable. (CD-RW), Digital Versatile Disc (DVD), Blu-ray Disc (BD), Digital Audio Tape (DAT), 8 mm tape, and memory cards such as flash memory. In addition, there are a hard disk, a ROM, and the like as recording media fixed to a computer or the like.

1... Transfer system 100... Connection server 101... CPU
102 Main storage unit 103 Auxiliary storage unit 104 Communication unit 11 Control unit 12 Management database 121 Withdrawal request source management table 122 Withdrawal source account management table 200 Management server 300・Receiving organization server N1... Internal network N2... External network B1... Connection bus

Claims (7)

a storage means for storing a correspondence relationship between a withdrawal requestor and a limit amount;
a control means for accessing said storage means;
The control means is
a process of receiving a debit request including information indicating the debit requester, debit amount, and debit account;
a process of determining whether or not the withdrawal amount is equal to or less than the limit associated with the withdrawal requester included in the withdrawal request, by referring to the correspondence relationship;
and executing a process of requesting a management server of a financial institution to withdraw the withdrawal amount from the withdrawal source account in accordance with the withdrawal request when the judgment result of the judgment process is affirmative judgment.
Information processing equipment. When the judgment result of the judgment process is negative, the control means notifies the withdrawal request source included in the withdrawal request that the withdrawal is impossible.
The information processing device according to claim 1 . The correspondence relationship further associates an applicable period with the limit amount set for each of the withdrawal request sources,
When the control means receives the withdrawal request within the application period, the control means applies the limit amount associated with the withdrawal requester included in the withdrawal request.
The information processing apparatus according to claim 1 or 2. The correspondence relationship further associates an upper limit number of times for each withdrawal request source,
When the cumulative number of withdrawal requests received from the first withdrawal requester for the first withdrawal account within a predetermined period exceeds the upper limit number of times associated with the first withdrawal requester, Notifying the first withdrawal request source of the impossibility of withdrawal;
The information processing apparatus according to any one of claims 1 to 3. The correspondence relationship further associates a cumulative limit amount for each withdrawal request source,
When the cumulative amount of withdrawals from the second withdrawal requester to the second withdrawal account within a predetermined period exceeds the cumulative limit associated with the second withdrawal requester, Notifying the second withdrawal request source of the impossibility of withdrawal;
The information processing apparatus according to any one of claims 1 to 4. a process of receiving a debit request including information indicating the debit requester, debit amount, and debit account;
Determining whether or not the withdrawal amount is equal to or less than the limit associated with the withdrawal requester included in the withdrawal request by referring to the correspondence relationship between the withdrawal requester and the limit amount stored in the storage means and
an information processing method in which a computer executes a process of requesting a management server of a financial institution to withdraw the withdrawal amount from the withdrawal source account in accordance with the withdrawal request when the judgment result of the judgment process is affirmative judgment; . a process of receiving a debit request including information indicating the debit requester, debit amount, and debit account;
Determining whether or not the withdrawal amount is equal to or less than the limit associated with the withdrawal requester included in the withdrawal request by referring to the correspondence relationship between the withdrawal requester and the limit amount stored in the storage means and
An information processing program for causing a computer to execute a process of requesting a management server of a financial institution to withdraw the withdrawal amount from the withdrawal source account according to the withdrawal request when the judgment result of the judgment process is affirmative judgment. .

Images