JP2023024133A - Relay device, data relay method, and program - Google Patents

Abstract

To provide a relay device, a data relay method, and a program capable of improving convenience while ensuring security in settlement processing.SOLUTION: A repeater 3 relays a command and a response transmitted and received in a mutual authentication process performed between a settlement terminal 1 and an electronic device 2 after short-range wireless communication is started between the settlement terminal 1 and the electronic device 2, and relays a command and a response transmitted and received in a settlement process performed between the settlement terminal 1 and the electronic device 2 after mutual authentication between the settlement terminal 1 and the electronic device 2 is completed.SELECTED DRAWING: Figure 7

Description

The present invention relates to a technical field such as a method for performing payment processing using an electronic device of a user on board a vehicle.

2. Description of the Related Art Conventionally, there has been known a system for starting a vehicle engine and unlocking a door using a key from an electronic device such as a user's contactless IC card or smart phone. For example, U.S. Pat. No. 6,200,000 discloses that a digital key for accessing the vehicle is stored in the vehicle, and communication based on the digital key occurs when a proximity condition between the mobile computing device and the vehicle is met. there is

Japanese Patent Publication No. 2017-509171

However, in payment processing at drive-thru, parking lots, gas stations, etc., the user on board the vehicle must use his/her own electronic device to directly interact with the store clerk or payment terminal. In this case, there is a problem in convenience because the user has to get out of the vehicle once to perform the operations necessary for payment processing, or reach out through the window of the vehicle and perform the operations necessary for payment processing. In addition, there was a problem that there was concern about infectious diseases due to contact with others during payment processing.

SUMMARY OF THE INVENTION Therefore, the present invention has been made in view of the above problems, and an object of the present invention is to provide a relay device, a data relay method, and a program capable of improving convenience while ensuring security in payment processing. and

In order to solve the above problems, the invention according to claim 1 is a relay device installed in a mobile body, capable of short-range wireless communication with a payment terminal installed outside the mobile body, and a relay device capable of short-range wireless communication with an electronic device of a user on board the mobile body, wherein the settlement terminal and the wireless communication means for performing short-range wireless communication with an electronic device; and after the short-range wireless communication is started between each of the payment terminal and the electronic device, relaying commands and responses sent and received in mutual authentication processing performed between the payment terminal and the electronic device after mutual authentication between the payment terminal and the electronic device is completed; and relay means for relaying commands and responses that are transmitted and received in the payment processing that is performed.

The invention according to claim 2 is the relay device according to claim 1, wherein the short-range wireless communication protocol between the relay device and the settlement terminal and the protocol between the relay device and the electronic device The protocol is different from the short-range wireless communication protocol, and the relay means converts one protocol to the other protocol when relaying the command and response.

The invention according to claim 3 is the relay device according to claim 1 or 2, wherein the relay device is configured to operate within the short distance from the electronic device in the payment processing performed between the payment terminal and the electronic device. It is characterized by further comprising display control means for displaying information including a price related to settlement acquired by wireless communication on a display in the moving body.

According to a fourth aspect of the present invention, in the relay device according to the third aspect, the display control means causes the display to display a selection button for allowing the user to select whether or not to permit payment. do.

The invention according to claim 5 is a relay device installed in a mobile body, capable of short-range wireless communication with a payment terminal installed outside the mobile body, and A data relay method executed by a relay device capable of short-range wireless communication between an electronic device of a user who is in a remote location, wherein the settlement terminal and the electronic performing short-range wireless communication with each of the payment terminal and the electronic device after the short-range wireless communication is initiated between the payment terminal and the electronic device, respectively; Relay commands and responses sent and received in mutual authentication processing performed between the payment terminal and the electronic device, and are performed between the payment terminal and the electronic device after mutual authentication between the payment terminal and the electronic device is completed. and a step of relaying commands and responses transmitted and received in payment processing.

The invention according to claim 6 is a relay device installed in a mobile body, capable of short-distance wireless communication with a payment terminal installed outside the mobile body, and A computer included in a relay device capable of short-distance wireless communication with an electronic device of a user who is in contact with each of the payment terminal and the electronic device within a short-distance wireless communication range with the relay device wireless communication means for performing short-range wireless communication between the payment terminal and the electronic device after the short-range wireless communication is started between each of the payment terminal and the electronic device In payment processing performed between the payment terminal and the electronic device after mutual authentication between the payment terminal and the electronic device is completed, relaying commands and responses sent and received in mutual authentication processing performed by It is characterized by functioning as relay means for relaying commands and responses that are transmitted and received.

According to the present invention, it is possible to improve convenience while ensuring security in payment processing.

It is a figure showing an example of outline composition of payment processing system S concerning this embodiment. 1 is a diagram showing a schematic configuration example of a settlement terminal 1; FIG. 2 is a diagram showing a schematic configuration example of an electronic device 2; FIG. 3 is a diagram showing an example of a schematic configuration of a repeater 3; FIG. FIG. 4 is a diagram showing an example representing protocol conversion when command APDUs are sent and received; FIG. 2 is a conceptual diagram showing the positional relationship between a wireless communication unit 11 embedded in the ground of a pay-by-the-hour parking lot and a vehicle C; 4 is a sequence diagram showing an example of a transaction performed before starting a secure session in payment processing system S; FIG. FIG. 10 is a sequence diagram showing an example of a transaction executed after a secure session is started in payment processing system S;

BEST MODE FOR CARRYING OUT THE INVENTION Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. In the embodiments described below, the present invention is applied to a payment processing system in which payment processing is performed between a payment terminal installed outside a vehicle and an electronic device of a user on board the vehicle. It is an embodiment of the case. A vehicle is an example of a mobile object, such as a two-wheeled vehicle, a four-wheeled vehicle, or a bicycle.

[1. Outline configuration of payment processing system S]
First, a schematic configuration of a payment processing system S according to the present embodiment will be described with reference to FIG. 1 and the like. FIG. 1 is a diagram showing a schematic configuration example of a payment processing system S according to this embodiment. As shown in FIG. 1, the payment processing system S includes a payment terminal 1, a user's electronic device 2, and a repeater 3 (an example of a repeater). The repeater 3 is capable of short-range wireless communication with the payment terminal 1 and is also capable of short-range wireless communication with the electronic device 2 . For short-range wireless communication, for example, NFC (Near Field Communication), Bluetooth (registered trademark), or UWB (Ultra Wide Band) technology is used. Here, the user is a passenger of the vehicle C (for example, the owner of the vehicle C) and owns the electronic device 2 . When the user boards the vehicle C, the user places the electronic device 2 on or near the repeater 3 installed on the console in the vehicle C, for example.

The settlement terminal 1 is installed in places such as stores, parking lots, and gas stations that have drive-through facilities, for example. It is a terminal used between Such places are outside the vehicle C and are vehicle visited places that the vehicle C can travel to. Payment methods used in payment processing include electronic money payment, credit card payment, and the like, but are not particularly limited. If the payment method is credit card payment, the payment terminal 1 may access a management server that manages credit card information via a network (not shown) to make a credit inquiry.

FIG. 2 is a diagram showing a schematic configuration example of the payment terminal 1. As shown in FIG. As shown in FIG. 2, the payment terminal 1 includes a wireless communication unit 11, a storage unit 12, a control unit 13, and the like. The wireless communication unit 11 has an antenna and performs short-range wireless communication with the repeater 3 within a short-range wireless communication range. The protocol for short-range wireless communication between the payment terminal 1 and the repeater 3 may be, for example, the UWB protocol. In this case, the wireless communication unit 11 periodically checks (position check) whether or not the repeater 3, which is the communication partner, exists within a preset distance range. Short-range wireless communication is performed with the repeater 3 . Note that the wireless communication unit 11 may be embedded in the ground through which the vehicle C passes, for example, outside the housing in which the storage unit 12 and the control unit 13 of the payment terminal 1 are mounted.

The storage unit 12 stores an operating system (OS) and applications. Applications include mutual authentication processing programs and payment processing programs. Furthermore, the storage unit 12 stores authentication data used for mutual authentication processing for establishing a secure session with the electronic device 2 . Such authentication data is, for example, a key set including a secure channel encryption key, a secure channel MAC (Message Authentication Code) key, and a data encryption key.

The control unit 13 includes a CPU (Central Processing Unit), a RAM (Random Access Memory), a ROM (Read Only Memory), and the like. The control unit 13 executes mutual authentication processing for establishing a secure session with the electronic device 2 according to the mutual authentication processing program. Further, after the mutual authentication between the payment terminal 1 and the electronic device 2 is completed and the secure session is established with the electronic device 2, the control unit 13 generates in the mutual authentication process according to the payment process program. A GET DATA command encrypted with the session key shared with the payment terminal 1 is transmitted to the electronic device 2 via the intermediary device 3 . Then, when a response to the GET DATA command is received from the electronic device 2 via the repeater 3, the control unit 13 executes settlement for payment.

For example, a user's contactless IC card or smart phone can be applied to the electronic device 2. In this embodiment, the contactless IC card will be described as an example. A contactless IC card is an electronic information storage medium, and includes a secure element such as a highly tamper-resistant UICC (Universal Integrated Circuit Card). FIG. 3 is a diagram showing a schematic configuration example of the electronic device 2. As shown in FIG. As shown in FIG. 3, the electronic device 2 includes an antenna 21, an interface (I/F) section 22, a RAM 23, an NVM (Nonvolatile Memory) 24, a CPU 25, and the like. The interface unit 22 is an interface with the antenna 21 . The CPU 25 performs short-range wireless communication with the repeater 3 within a short-range wireless communication range via the antenna 21 and the interface unit 22 . The protocol for short-range wireless communication between the electronic device 2 and the repeater 3 may be, for example, the NFC protocol (for example, the protocol defined by ISO14443).

NVM 24 stores an operating system and applications. Applications include mutual authentication processing programs and payment processing programs. Also, the NVM 24 stores payment data. The payment data includes information necessary for payment according to the payment method. For example, if the payment method is credit card payment, the payment data includes data such as the credit card number, the name of the holder, and the expiration date necessary for credit card payment. If the payment method is electronic money payment, the payment data includes data such as an electronic money number and electronic value required for electronic money payment. Further, the NVM 24 stores authentication data (for example, a key set including a secure channel encryption key, a secure channel MAC key, and a data encryption key) used for mutual authentication processing for establishing a secure channel with the payment terminal 1. Stored.

CPU 25 executes mutual authentication processing for establishing a secure session with payment terminal 1 according to a mutual authentication processing program. After the mutual authentication between the payment terminal 1 and the electronic device 2 is completed and the secure session is established with the payment terminal 1, the CPU 25 receives the GET DATA command from the payment terminal 1 via the repeater 3. When it is received, according to the payment processing program, the payment data is read from the NVM 24 in response to the GET DATA command, and a response including the read payment data is transmitted to the payment terminal 1 via the repeater 3. . When a GET DATA command is received from the payment terminal 1, the CPU 25 may inquire of the user through the repeater 3 whether or not the payment is permitted. In this case, the CPU 25 may transmit a response including payment data to the payment terminal 1 via the intermediary device 3 only when the user selects to allow payment in response to the inquiry.

The repeater 3 is installed on the console in the vehicle C, for example. FIG. 4 is a diagram showing a schematic configuration example of the repeater 3. As shown in FIG. Note that the console of the vehicle C may be equipped with a multimedia terminal having a display. In this case, the multimedia terminal is preferably connected to the control unit 34 via an interface. As shown in FIG. 4, the repeater 3 includes a wireless communication section 31, a wireless communication section 32, a storage section 33, a control section 34, and the like. The wireless communication unit 31 and the wireless communication unit 32 are examples of wireless communication means. The wireless communication unit 31 has an antenna and performs short-range wireless communication with the settlement terminal 1 within a short-range wireless communication range. That is, the wireless communication unit 31 performs short-range wireless communication with the payment terminal 1 that is within the short-range wireless communication range with the repeater 3 . The wireless communication unit 32 includes an antenna, and performs short-range wireless communication with the electronic device 2 within a short-range wireless communication range. That is, the wireless communication unit 32 performs short-range wireless communication with the electronic device 2 that has entered the short-range wireless communication range with the repeater 3 .

The storage unit 33 stores an operating system and applications. Applications include data relay programs. The control unit 34 includes a CPU, RAM, ROM, and the like. The control unit 34 relays data exchanged between the payment terminal 1 and the electronic device 2 as relay means according to the data relay program. Specifically, the control unit 34 performs mutual authentication processing between the payment terminal 1 and the electronic device 2 after the short-range wireless communication is started between the payment terminal 1 and the electronic device 2. relays the commands and responses sent and received in , and the commands and responses sent and received in the payment processing performed between the payment terminal 1 and the electronic device 2 after mutual authentication between the payment terminal 1 and the electronic device 2 is completed. Relay the response.

Here, the relayed command is composed of an APDU (Application Protocol Data Unit) including at least a header. Such a header consists of CLA (instruction class), INS (instruction code), P1 and P2 (parameters). Additionally, commands may include a body with data and the like in addition to the header described above. A response to a command (response APDU) consists of at least SW (status word) indicating the processing result, and may contain data. A header according to the protocol is added to the command and response. For example, when the protocol of short-range wireless communication is the UWB protocol, a UWB header is added to the command and response. On the other hand, when the protocol of short-range wireless communication is the NFC protocol, an NFC header (for example, a header defined by ISO14443) is added to the command and response.

Further, when the short-range wireless communication protocol between the repeater 3 and the payment terminal 1 and the short-range wireless communication protocol between the repeater 3 and the electronic device 2 are different from each other, the control unit 34 outputs the command and convert from one protocol to the other when relaying the response. FIG. 5 is a diagram showing an example representing protocol conversion when command APDUs are sent and received. In the example of FIG. 5, the header added to the command APDU is replaced by protocol conversion (for example, the UWB Header is replaced with the ISO14443 Header). In addition, the control unit 34 (an example of a display control unit) receives information including a price related to payment acquired from the electronic device 2 through short-range wireless communication in the payment processing performed between the payment terminal 1 and the electronic device 2. You may make it display on the said display. Furthermore, the control unit 34 may cause the display to display a selection button that allows the user to select whether or not to permit payment.

[2. Operation of payment processing system S]
Next, the operation of the payment processing system S will be described with reference to FIGS. 6 to 8. FIG. FIG. 6 is a conceptual diagram showing the positional relationship between the wireless communication unit 11 embedded in the ground of the hourly parking lot and the vehicle C. As shown in FIG. FIG. 7 is a sequence diagram showing an example of a transaction performed before starting a secure session in the payment processing system S. As shown in FIG. FIG. 8 is a sequence diagram showing an example of a transaction executed after a secure session is started in payment processing system S. As shown in FIG.

First, when the user gets on the vehicle C and puts his/her own electronic device 2 on or near the repeater 3 installed on the console in the vehicle C, the electronic device 2 and the repeater 3 Near field communication is started. After that, the vehicle C runs toward, for example, a parking lot. As shown in FIG. 6A, the wireless communication unit 11 of the payment terminal 1 actively emits (for example, polls) radio waves D to determine whether or not a communication partner exists within a preset distance range H. Check at regular intervals. In the example of FIG. 6A, since the vehicle C is not within the distance range H, it is not confirmed (detected) that the communication partner exists within the distance range H (standby state).

On the other hand, in the example of FIG. 6B, when the vehicle C enters the distance range H, it is confirmed that the repeater 3 exists within the distance range H (communication start). In the example of FIG. 6B, the case where the vehicle C is parked is taken as an example, but even when the vehicle C passes a predetermined position like ETC (Electronic Toll Collection System), the repeater 3 is present in the distance range H. It is confirmed to do so, and communication may be initiated as a result. The wireless communication unit 31 of the repeater 3 mounted on the vehicle C actively emits radio waves, and periodically checks whether or not the communication partner (that is, the payment terminal 1) exists within a preset distance range. You can check.

7, when the controller 13 of the payment terminal 1 confirms that the repeater 3 exists within the distance range H (step S1), it starts short-range wireless communication with the repeater 3 (step S2). , a SELECT command for selecting an application (mutual authentication processing program) for performing mutual authentication processing is transmitted to the repeater 3 via the wireless communication unit 11 (step S3). Next, upon receiving the SELECT command from the payment terminal 1 via the wireless communication unit 31, the control unit 34 of the repeater 3 performs protocol conversion as described above, and transmits the SELECT command via the wireless communication unit 32. to the electronic device 2 (step S4).

Next, when the CPU 25 of the electronic device 2 receives the SELECT command from the repeater 3 via the antenna 21 and the interface unit 22, in response to the SELECT command (that is, by interpreting the command), an application (mutual authentication processing program) (step S5), and transmits a response to the SELECT command to the repeater 3 via the interface section 22 and the antenna 21 (step S6). Such a response includes, for example, SW "9000" and TLV format FCI (File Control Information). Next, upon receiving the response from the electronic device 2 via the wireless communication unit 32, the control unit 34 of the repeater 3 performs the protocol conversion as described above, and transfers the response to the wireless communication unit 31 for payment. It is transmitted to the terminal 1 (step S7).

Next, upon receiving the response from the repeater 3 via the wireless communication unit 11, the control unit 13 of the settlement terminal 1 starts mutual authentication processing with the electronic device 2 (step S8). When the mutual authentication process is started, the control unit 13 of the payment terminal 1 transmits an INITALIZE UPDATE command to the repeater 3 via the wireless communication unit 11 (step S9). Here, the INITALIZE UPDATE command is a command for notifying the electronic device 2 of the start of mutual authentication processing for establishing a secure channel between the payment terminal 1 and the electronic device 2 . The INITALIZE UPDATE command contains a random number and a Key Version Number. The Key Version Number is data used to identify authentication data that is the basis of cryptographic computation. Next, when the control unit 34 of the repeater 3 receives the INITALIZE UPDATE command from the payment terminal 1 via the wireless communication unit 31, it performs protocol conversion as described above, and transmits the INITALIZE UPDATE command to the wireless communication unit 32. to the electronic device 2 (step S10).

Next, when the CPU 25 of the electronic device 2 receives the INITALIZE UPDATE command from the repeater 3 via the antenna 21 and the interface section 22, it generates a random number, a session key, and a ciphertext A (Card Cryptogram) (step S11 ). Here, the session key is an encryption key used in a secure channel, and is generated based on, for example, the random number included in the INITALIZE UPDATE command, the random number generated in step S11, the authentication data stored in the NVM 24, and the like. be. Next, the CPU 25 of the electronic device 2 transmits a response including the random number generated in step S11 and the ciphertext A (card cryptogram) to the repeater 3 via the interface section 22 and the antenna 21 (step S12). Next, upon receiving the response from the electronic device 2 via the wireless communication unit 32, the control unit 34 of the repeater 3 performs the protocol conversion as described above, and transfers the response to the wireless communication unit 31 for payment. It is transmitted to the terminal 1 (step S13).

Next, when the control unit 13 of the payment terminal 1 receives the response from the repeater 3 via the wireless communication unit 11, the session key and the ciphertext A (Card Cryptogram) is generated (step S14). Next, the control unit 13 of the payment terminal 1 compares the ciphertext A (card cryptogram) included in the response received from the repeater 3 with the ciphertext A (card cryptogram) generated in step S14. The validity of the electronic device 2 is verified (step S15).

Next, when the control unit 13 of the payment terminal 1 successfully verifies the validity of the electronic device 2 (that is, succeeds in authentication), it generates a ciphertext B (Host Cryptogram) (step S16). Next, the control unit 13 of the payment terminal 1 transmits an EXTERNAL AUTHENTICATE command including the ciphertext B (Host Cryptogram) generated in step S16 to the repeater 3 via the wireless communication unit 11 (step S17). If the validity verification fails (that is, authentication fails), error processing is performed. Next, upon receiving the EXTERNAL AUTHENTICATE command from the payment terminal 1 via the wireless communication unit 31, the control unit 34 of the repeater 3 performs protocol conversion as described above, and transmits the EXTERNAL AUTHENTICATE command to the wireless communication unit 32. to the electronic device 2 (step S18).

Next, when the CPU 25 of the electronic device 2 receives the EXTERNAL AUTHENTICATE command from the intermediary device 3 via the antenna 21 and the interface unit 22, the ciphertext B (Host Cryptogram ) is generated (step S19). Next, the CPU 25 of the electronic device 2 confirms the legitimacy of the payment terminal 1 by comparing the ciphertext B (Host Cryptogram) included in the EXTERNAL AUTHENTICATE command with the ciphertext B (Host Cryptogram) generated in step S19. is verified (step S20).

Next, when the CPU 25 of the electronic device 2 successfully verifies the validity of the payment terminal 1 (that is, succeeds in authentication), it transmits a response indicating authentication success to the repeater 3 via the interface unit 22 and the antenna 21 (step S21). If the validity verification fails (that is, authentication fails), error processing is performed. Next, upon receiving the response from the electronic device 2 via the wireless communication unit 32, the control unit 34 of the repeater 3 performs the protocol conversion as described above, and transfers the response to the wireless communication unit 31 for payment. It is transmitted to the terminal 1 (step S22). Next, when the control unit 13 of the payment terminal 1 receives the response from the repeater 3 via the wireless communication unit 11, it ends the mutual authentication process with the electronic device 2 (step S23). This establishes a secure channel between the payment terminal 1 and the electronic device 2 .

Next, in FIG. 8, when a secure session is started (step S31), the control unit 13 of the payment terminal 1 sends a SELECT command for selecting an application (payment processing program) for performing payment processing to the session key. and transmits the encrypted SELECT command (hereinafter referred to as "encrypted SELECT command") to the repeater 3 via the wireless communication unit 11 (step S32). Next, when the control unit 34 of the repeater 3 receives the encrypted SELECT command from the payment terminal 1 via the wireless communication unit 31, the protocol conversion is performed as described above, and the encrypted SELECT command is transferred to the wireless communication unit. It is transmitted to the electronic device 2 via the unit 32 (step S33).

Next, when the CPU 25 of the electronic device 2 receives the encrypted SELECT command from the repeater 3 via the antenna 21 and the interface unit 22, it decrypts the encrypted SELECT command with the session key. Next, the CPU 25 of the electronic device 2 selects an application (payment processing program) according to the decrypted SELECT command (step S34), encrypts the response to the SELECT command with the session key, and converts the encrypted response ( hereinafter referred to as "encrypted response") is transmitted to the repeater 3 via the interface unit 22 and the antenna 21 (step S35). Next, upon receiving the encrypted response from the electronic device 2 via the wireless communication unit 32, the control unit 34 of the repeater 3 performs protocol conversion as described above, and transmits the encrypted response to the wireless communication unit 31. to the settlement terminal 1 (step S36).

Next, when the control unit 13 of the payment terminal 1 receives the encrypted response from the repeater 3 via the wireless communication unit 11, it decrypts the encrypted response and issues a GET DATA command indicating a request to acquire payment data. is encrypted with the session key, and the encrypted GET DATA command (hereinafter referred to as "encrypted GET DATA command") is transmitted to the repeater 3 via the wireless communication section 11 (step S37). Note that the GET DATA command may include information including the price related to settlement. Next, when the control unit 34 of the repeater 3 receives the encrypted GET DATA command from the payment terminal 1 via the wireless communication unit 31, the protocol conversion is performed as described above, and the encrypted GET DATA command is converted into It is transmitted to the electronic device 2 via the wireless communication unit 32 (step S38).

Next, when the CPU 25 of the electronic device 2 receives the encrypted GET DATA command from the repeater 3 via the antenna 21 and the interface section 22, it decrypts the encrypted GET DATA command with the session key. Next, the CPU 25 of the electronic device 2 transmits information (non-encrypted) including the price related to the payment to the repeater 3 via the interface unit 22 and the antenna 21 in response to the decrypted GET DATA command (step S39). Here, the information including the price related to payment may include a request for the user to select whether or not to permit the payment.

Next, when the control unit 34 of the repeater 3 receives the information including the price related to the payment from the electronic device 2 via the wireless communication unit 32, it transmits the information including the price related to the payment to the multimedia terminal. (Step S40). As a result, the price related to the settlement and the selection button for allowing the user to select whether or not to permit the settlement are displayed on the display of the vehicle C. FIG. When the selection button is designated by the user, the control unit 34 of the repeater 3 receives information indicating permission for payment from the multimedia terminal, and transmits the information indicating permission for payment via the wireless communication unit 32. It is transmitted to the electronic device 2 (step S41).

Next, when the CPU 25 of the electronic device 2 receives the information indicating permission for payment from the repeater 3 via the antenna 21 and the interface unit 22, the application (payment processing program) selected in step S34 outputs payment data. Read from NVM 33 (step S42). Next, the CPU 25 of the electronic device 2 encrypts the response including the settlement data read in step S42 with the session key, and transmits the encrypted response to the repeater 3 via the interface section 22 and the antenna 21. (Step S43). Next, upon receiving the encrypted response from the electronic device 2 via the wireless communication unit 32, the control unit 34 of the repeater 3 performs protocol conversion as described above, and transmits the encrypted response to the wireless communication unit 31. to the settlement terminal 1 (step S44).

Next, upon receiving the encrypted response from the repeater 3 via the wireless communication unit 11, the control unit 13 of the payment terminal 1 decrypts the encrypted response, and sets the payment data included in the decrypted response. Based on (step S45), settlement for fee payment is executed. For example, the control unit 13 of the payment terminal 1 executes a process of charging (for example, withdrawing) the parking fee to the user according to the payment method specified by the payment data.

As described above, according to the above-described embodiment, the repeater 3 connects the settlement terminal 1 and the electronic device 2 after the short-range wireless communication is started between the settlement terminal 1 and the electronic device 2, respectively. Relay commands and responses sent and received in mutual authentication processing between the payment terminal 1 and the electronic device 2 (protocol conversion if necessary), Since it is configured to relay commands and responses that are transmitted and received in payment processing performed with the device 2, it is possible to improve convenience while ensuring security in payment processing.

In particular, even if the communication range of the near field communication of the electronic device 2 is narrow (for example, in the case of the NFC protocol), the communication range is substantially widened by intervening the repeater 3 (in other words, amplifies the radio wave), and the user's convenience can be improved. Further, the intermediary device 3 receives information including a price related to payment acquired from the electronic device 2 by short-range wireless communication in the payment processing performed between the payment terminal 1 and the electronic device 2, and permits the user to make payment. Since a selection button for selecting whether or not is displayed on the display, the user's convenience can be further improved.

In the above embodiment, the electronic device 2 is a non-contact IC card, but the electronic device 2 may be a mobile terminal such as a smart phone. In this case, for example, a control unit mounted on the smartphone or a SIM (Subscriber Identity Module) mounted on the smartphone functions as the CPU 25 described above.

1 payment terminal 2 electronic device 3 repeater 11 wireless communication unit 12 storage unit 13 control unit 21 antenna 22 interface unit 23 RAM
24 NVM
25 CPUs
31, 32 wireless communication unit 33 storage unit 34 control unit

Claims (6)

A relay device installed in a mobile body, capable of short-range wireless communication with a payment terminal installed outside the mobile body, and with an electronic device of a user on board the mobile body A relay device capable of short-range wireless communication,
wireless communication means for performing short-range wireless communication between each of the payment terminal and the electronic device that are within a short-range wireless communication range with the relay device;
Relaying commands and responses sent and received in mutual authentication processing performed between the payment terminal and the electronic device after the short-range wireless communication is started between the payment terminal and the electronic device. a relay means for relaying commands and responses transmitted and received in payment processing performed between the payment terminal and the electronic device after mutual authentication between the payment terminal and the electronic device is completed;
A relay device comprising: the short-range wireless communication protocol between the relay device and the payment terminal and the short-range wireless communication protocol between the relay device and the electronic device are different from each other,
2. The relay device according to claim 1, wherein the relay means converts one of the protocols into the other protocol when relaying the command and response. The relay device causes a display in the moving body to display information including a price related to payment obtained from the electronic device through the short-range wireless communication in payment processing performed between the payment terminal and the electronic device. 3. The relay device according to claim 1, further comprising display control means. 4. The relay device according to claim 3, wherein said display control means causes said display to display a selection button for allowing said user to select whether or not to permit payment. A relay device installed in a mobile body, capable of short-range wireless communication with a payment terminal installed outside the mobile body, and with an electronic device of a user on board the mobile body A data relay method executed by a relay device capable of short-range wireless communication,
a step of performing short-range wireless communication between each of the payment terminal and the electronic device that are within a short-range wireless communication range with the relay device;
Relaying commands and responses sent and received in mutual authentication processing performed between the payment terminal and the electronic device after the short-range wireless communication is started between the payment terminal and the electronic device. and relaying commands and responses sent and received in payment processing performed between the payment terminal and the electronic device after mutual authentication between the payment terminal and the electronic device is completed;
A data relay method comprising: A relay device installed in a mobile body, capable of short-range wireless communication with a payment terminal installed outside the mobile body, and with an electronic device of a user on board the mobile body A computer included in a relay device capable of short-range wireless communication,
wireless communication means for performing short-range wireless communication between each of the payment terminal and the electronic device that are within a short-range wireless communication range with the relay device;
Relaying commands and responses sent and received in mutual authentication processing performed between the payment terminal and the electronic device after the short-range wireless communication is started between the payment terminal and the electronic device. and functions as a relay means for relaying commands and responses transmitted and received in payment processing performed between the payment terminal and the electronic device after mutual authentication between the payment terminal and the electronic device is completed. A program characterized by

Images