JP4579618B2 - Payment server and payment request server - Google Patents

Description

The present invention relates to the settlement server and the settlement request server, for example, at the request of the payment request server, in which settlement electronic money settlement at the settlement execution terminal server performs.

In recent years, payment systems using electronic money have been widely used.
Electronic money is used in the same manner as a prepaid card by storing electronic information having a monetary value similar to money called value in an IC chip and increasing or decreasing this amount.

  As this IC chip (hereinafter referred to as an electronic money IC chip), for example, a non-contact type IC chip is used, and the value amount stored using the function of storing the value and the amount update information input from the outside It is equipped with a function for updating the mobile phone and is used by being embedded in a mobile phone or a plastic card together with a communication antenna.

  The electronic money IC chip uses a dedicated terminal device installed at a store or the like to increase or decrease the amount of value, as well as money amount update information transmitted from an electronic money server operated by an electronic money business operator via the Internet You can also increase or decrease the amount of value.

  By using this, a server on the Internet (for example, a game content sales server) requests the electronic money server to pay for goods or services sold to the user, and the electronic money server uses the user's electronic money IC chip. A service to reduce the value of the price has been proposed.

By using this service, the user can make payment with the value stored in the electronic money IC chip.
In addition, a business that requests an electronic money server to perform payment in this way is registered in advance with the electronic money business, and is called a member store, and a server device for the member store to sell products and services is It is called a member store server.

  As a technique in which the electronic money server performs payment in response to the request from the member store server, there is the following unpublished document by the applicant of the present application.

Japanese Patent Application No. 2003-60522

The outline of the technique proposed in this document will be described with reference to the flowchart of FIG.
It is assumed that the mobile phone described below can be connected to the Internet and has a built-in electronic money IC chip so that the electronic money server and the electronic money IC chip can communicate via the Internet.

First, a user accesses a sales site of a member store server from a mobile phone. At the sales site, for example, game content download sales, book mail order sales, and the like are performed.
When the user selects a product to purchase and confirms payment, the mobile phone transmits the e-mail address of the mobile phone to the member store server (step 105).

The member store server receives the e-mail address from the mobile phone, and transmits it to the electronic money server together with transaction information including the member store code, the payment amount, the order number, etc., and applies for the payment agent (step 110).
The electronic money server receives the transaction information and the e-mail address, and generates (issues) a transaction number for the transaction information (step 115).
Then, the transaction details (transaction information, transaction number, e-mail address, etc.) are stored in the database (step 120).

After saving the transaction contents in this way, the electronic money server generates a settlement start mail and transmits it to the mobile phone using the electronic mail address received from the member store server (step 125).
The settlement start mail is an e-mail for performing settlement with the value stored in the mobile phone, and the transaction number is embedded in a form that cannot be recognized by the user by encryption or the like.

When the user receives the payment start mail on the mobile phone, the user activates a mailer (an application for sending and receiving e-mails), displays the payment start mail on the display of the mobile phone, and confirms the contents (step 130).
On the display, for example, information for a user to confirm a transaction to be settled, a settlement start button for starting settlement, and the like are displayed.

When the user selects the settlement start button, the mobile phone connects to the electronic money server and transmits the transaction number attached to the settlement start mail (step 135).
The electronic money server accepts a connection from a mobile phone and receives a transaction number. And this is collated with the transaction content previously stored in the database, and thereby the settlement amount is specified.
Here, the reason that the transaction number associated with the payment amount is transmitted without transmitting the payment amount to the mobile phone is to prevent the payment amount from being tampered with the mobile phone.

  Next, the electronic money server communicates with an electronic money IC chip built in the mobile phone (the mobile phone contains an application that allows the electronic money server and the electronic money IC chip to communicate). The amount update information for reducing the value by the settlement amount is transmitted.

The electronic money IC chip receives the amount update information from the electronic money server, updates the stored value balance to a value reduced by the settlement amount, and sends a completion notification notifying the completion of the update to the electronic money. Send to server. Then, the electronic money server confirms that the settlement has been completed by this completion notification.
As described above, the electronic money server and the electronic money IC chip perform settlement processing while performing communication (step 150).

When the electronic money server confirms that the payment has been completed, the electronic money server transmits a payment completion mail to the mobile phone (step 155).
The settlement completion email is an email notifying that the settlement relating to the transaction has been completed. The mobile phone receives this and displays it on the display, which is confirmed by the user (step 160).
Further, the electronic money server notifies the member store server of the settlement result for each transaction, and the member store server confirms this (step 170).

  In the undisclosed method described above, the electronic money server issues a transaction number for each transaction, holds the transaction contents, and sends a completion notification to the member store server. There is a problem that the load of the electronic money server becomes large.

  Therefore, in order to construct a system that can be stably operated even when payments are concentrated at one time such as when a concert ticket is released, it is necessary to increase the processing capability of the electronic money server. Moreover, the increased processing capability is not necessary in normal times, and the cost of the system increases.

  In addition, in a mobile phone, a mailer must be activated each time a payment is made. For example, when a payment start mail is received while the user is playing a game, the user needs to interrupt play of the game. It was. Therefore, a mechanism that is more convenient for the user has been demanded.

  SUMMARY OF THE INVENTION Accordingly, an object of the present invention is to reduce the load on an electronic money server and improve user convenience in settlement using electronic money.

In order to achieve the above object, the present invention increases or decreases the monetary value stored as electronic information using the amount update information, and the settlement is performed from the settlement execution terminal storing the monetary terminal ID and the balance of the monetary value. A predetermined value information including a predetermined value provided as a different value for each of the payment request servers and predetermined value identification information for identifying the predetermined value , which is a payment server for reducing the monetary value of the payment amount requested by the request server. When a predetermined value information storing means for storing in association with each other, and settlement request server corresponding to the predetermined value identification information, the settlement request to the server, the predetermined value and the predetermined value associated with the settlement request server and the predetermined value information transmitting means for transmitting identification information, from the payment execution terminal comprises a transaction amount and at least the settlement request server, to identify the transaction with the payment request server And arguments specifying information, and the predetermined value identification information acquired from the settlement request server, the calculation result of performing the predetermined operation on the settlement request server said transaction specific information, and transaction information receiving means for receiving, the Among those received by the transaction information receiving means, at least the transaction specifying information and the predetermined value identification information are used to perform the same calculation as the predetermined calculation, and the calculation result and the transaction information receiving means are received. When the identity is confirmed by the computation result confirmation means and the computation result confirmation means, the transaction identification information received by the transaction information reception means is not falsified , and amount confirmation means for confirming that the transaction amount is included in the transaction identification information is not tampered, after confirmation by the amount confirming means, currency of the payment execution terminal Get the balance of the terminal ID and monetary value, the transaction amount transaction information receiving unit is included in the transaction specifying information received is, if the it is obtained a monetary value balance above, the monetary value of the transaction amount of money There is provided a payment server comprising: money amount update information transmitting means for transmitting amount update information to be reduced to the payment execution terminal.
In the invention according to claim 2, before Symbol calculation result confirmation unit obtains the predetermined value which is specified by the predetermined value identification information from the predetermined value information storing means, the predetermined calculation using the predetermined value The settlement server according to claim 1, wherein the same calculation is performed.
According to a third aspect of the present invention, the predetermined value transmitted by the predetermined value transmitting means has an expiration date, and the expiration date is secretly managed. Provide the settlement server described.
In the invention of claim 4, the settlement is performed with respect to the settlement execution terminal storing the currency terminal ID and the balance of the currency value, which increases or decreases the monetary value stored as electronic information using the amount update information. A settlement request server that requests a settlement server to reduce the monetary value of the settlement amount included in transaction identification information that identifies a transaction with an execution terminal, and is different from the settlement server for each settlement request server and the predetermined value information receiving means for receiving a predetermined value information including a predetermined value identification information for identifying the predetermined value and the predetermined value is provided as the value, the transaction specific to the predetermined value information in which the predetermined value information received by the receiving means calculating means for performing a predetermined calculation using the information, and the transaction identification information, and the predetermined value identification information, said determined via the payment execution terminal operation result, a by the calculating means The settlement server and the settlement are obtained by subtracting the monetary value stored in the settlement execution terminal by the amount of settlement using the settlement information transmission unit to be transmitted to the server and the information transmitted by the settlement information transmission unit. There is provided a settlement request server comprising settlement completion confirmation means for confirming by notification from at least one of execution terminals.
In the invention according to claim 5, the predetermined value received by the predetermined value information receiving means has an expiration date, and the calculating means uses the predetermined value within the expiration date received by the predetermined value information receiving means. The settlement request server according to claim 4, wherein the settlement request server is provided.
The invention according to claim 6 provides the settlement request server according to claim 4 or 5 , wherein the expiration date of the predetermined value is secretly managed by the settlement server. .

  According to the present invention, in payment using electronic money, it is possible to reduce the load on the electronic money server and improve user convenience.

(1) Basic configuration of this embodiment In this embodiment, the function of generating a transaction number is transferred from an electronic money server to a member store server, and the member number is generated by the member store server.
Then, the transaction number is calculated using transaction rules that are concealed by a third party so that the transaction number corresponds to the transaction information, and the transaction number is used to determine whether the transaction information has been tampered with. Can be detected.

  In addition, when generating a transaction number, a seed value (seed), which is confidential information with an expiration date that is concealed by a third party, is input to the calculation rule together with the transaction information, and used to calculate the transaction number, thereby increasing the security level. Improve more.

FIG. 1 is a block diagram for explaining the basic configuration of the present embodiment.
First, the electronic money server 2 passes a calculation rule 32 for calculating a transaction number to the member store server 3 and a seed value 31 that is a predetermined value used for calculating the transaction number. The seed value is kept secret from a third party.

  Desirably, the contents of the calculation rule 32 are also kept secret from the member store server 3. For example, when a one-way function such as a hash function is used as the calculation rule 32, it is difficult to reversely calculate transaction information as an input value from a transaction number as a calculation result, which is particularly effective.

  An expiration date is set for the seed value 31, and the seed value 31 is provided from the electronic money server 2 to the member store server 3 periodically (may be irregular) such as once a day. As described above, the electronic money server 2 includes a predetermined value (seed value) transmitting unit, and the member store server 3 includes a predetermined value receiving unit.

The seed value 31 includes a seed value version that is information for identifying the version of the seed value 31, and a value (numerical value or the like) that is the main body of the seed value 31.
Different seed values 31 are provided for each member store server 3 (only one is shown in FIG. 1 but there can be a plurality of them) to improve the security level.

As described above, when the user applies a transaction (purchase of goods or services) from the mobile phone 7 to the member store server 3 provided with the seed value 31 and the calculation rule 32 from the electronic money server 2, the member store server 3. Inputs the transaction information 33 (member store code, order number, settlement amount, etc.) and seed value 31 to the calculation rule 32, and generates a transaction number 35.
Then, the member store server 3 transmits the seed value version 36 of the seed value 31, the transaction number 35, and the transaction information 33 to the mobile phone 7.

When receiving the information from the member store server 3, the mobile phone 7 connects to the electronic money server 2 and transmits the information to the electronic money server 2.
The electronic money server 2 receives these pieces of information from the mobile phone 7, specifies the seed value 31 from the member store code and the seed value version included in the transaction information, and obtains this from the seed value database storing the seed value. To do.
As will be described later, the electronic money server 2 stores the combination of the member store code and the seed value version and the seed value in the seed value database in association with each other.

The electronic money server 2 stores the calculation rule 32 provided to the member store server 3, and inputs the specified seed value 31 and the transaction information 33 received from the mobile phone 7 into the calculation rule 32, and sets the transaction number 35a. calculate.
Then, the electronic money server 2 confirms the identity of the transaction number 35 a and the transaction number 35 received from the mobile phone 7.

If both are the same, it can be seen that the transaction information received from the mobile phone 7 is legitimate, and if it is not the same, it can be seen that the transaction information is not legitimate (eg, falsified by the mobile phone 7).
After confirming the legitimacy of the transaction information in this way, the electronic money server 2 transmits money amount update information for reducing the value corresponding to the payment amount to the mobile phone 7 and causes the mobile phone 7 to reduce the value.

As described above, in this embodiment, since the transaction number is generated by the member store server 3, the number of communications of the electronic money server 2 can be reduced and the load on the electronic money server 2 can be reduced.
As will be described later, since the report of the settlement result from the electronic money server 2 to the member store server 3 is performed in a batch process, the number of communications of the electronic money server 2 can be further reduced.
Furthermore, since an e-mail is not used for payment, the user does not need to start a mailer with the mobile phone 7 and can smoothly perform processing from transaction confirmation to payment.

(2) Details of Embodiment FIG. 2 is a block diagram schematically showing the configuration of the settlement system of the present embodiment.
In the payment system 1, an electronic money server 2, a member store server 3, a mobile phone 7, and a PC 17 are arranged so as to be connectable via the Internet 4.

The mobile phone 7 performs wireless communication with a base station (not shown) and connects to the Internet 4 via this base station.
The PC 17 further includes a reader / writer 16 as a peripheral device, and can perform short-range wireless communication with the electronic money card 15.

  The mobile phone 7 has a built-in electronic money IC chip, and the user can make a payment with the value stored in the electronic money IC chip. Thus, the mobile phone 7 constitutes a payment execution terminal.

Further, the electronic money card 15 also includes an electronic money IC chip, and payment can be made with the value stored in the electronic money IC chip.
The electronic money card 15 can be accessed from the electronic money server 2 by connecting to the PC 17 via the reader / writer 16. In this case, the PC 17 connected to the electronic money card 15 also constitutes a payment execution terminal.

  In this way, the user can make a payment using either the mobile phone 7 or the electronic money card 15, and hereinafter, when the mobile phone 7 and the PC 17 on which the electronic money card 15 is set are not particularly distinguished, These are called payment execution terminals.

  The member store server 3 operates a sales site that sells products and services to the user, and the user can purchase the products and services by accessing the sales site from the mobile phone 7 or the PC 17.

In FIG. 2, only one member store server 3 is shown. However, a plurality of member store servers 3 can exist, and each member store server 3 is assigned a member store code for identifying them. Yes.
Further, although only one mobile phone 7 and one PC 17 are shown as payment execution terminals, a plurality of these can exist.

The member store server 3 requests the electronic money server 2 to settle the price for the transaction. In response to this request, the electronic money server 2 deducts the value corresponding to the payment amount from the value amount stored in the mobile phone 7 or the electronic money card 15.
As described above, the member store server 3 constitutes a settlement request server that requests settlement, and the electronic money server 2 constitutes a settlement server that executes settlement processing. Further, the mobile phone 7 constitutes a payment execution terminal.

The electronic money business operator who operates the payment system 1 transfers the amount corresponding to the reduced value to the financial account of the member store at a later date.
As a result, the movement of the value is associated with the movement of the actual money, and the member store can collect the sales price.

In addition, the process of increasing the amount of value stored in the mobile phone 7 or the electronic money card 15 is referred to as charging. At the time of charging, the electronic money business operator receives money corresponding to the increased value from the user. Collect.
In this way, by moving actual money corresponding to the value, it is possible to give the value the same exchange value as money and distribute it in the market.

Below, each component which comprises the payment system 1 is demonstrated.
The electronic money server 2 is a server device that receives a request from the member store server 3 and performs payment for the fee.
The electronic money server 2 has a seed value management function, a transaction acceptance function, a settlement function, a settlement result notification function, and the like.

[Seed value management function]
The electronic money server 2 manages the seed value that the member store server 3 uses to generate a transaction number.
FIG. 3 shows an example of a logical configuration of a seed value database for the electronic money server 2 to manage seed values.

The seed value database includes items such as “member store code”, “seed value version”, “expiration date”, and “seed value”.
The “member store code” is a member store code assigned to a member store that operates the member store server 3 and is information for identifying a requesting party (member store) of a settlement agent.

The “seed value version” is a version number of the seed value. The seed value version is set to be larger as the seed value is newer.
As shown in FIG. 3, in the seed value database, a list of seed values provided to the member store server 3 is obtained by the member store code, and the seed value can be specified by using the seed value version. Yes.

In the present embodiment, the seed value can be specified from the combination of the member store code and the seed value version as described above, but the seed value may be identified by other identification information.
For example, when serial numbers are assigned to all seed values, the seed values can be specified by the serial numbers.

The “expiration date” is the expiration date of the seed value. In the present embodiment, the seed value is generated once a day and provided to the member store server 3, and the expiration date is until the end of the issue date.
When the electronic money server 2 confirms the transaction number received from the member store server 3, the electronic money server 2 confirms the expiration date of the seed value used for generating the transaction number, and the seed value used by the member store server 3 is out of the expiration date. If it is, the settlement process is not performed.

  In this way, by providing the member store server 3 with different seed values every day, damage due to omission of the seed value can be limited to a period during which the seed value is valid, and the security level can be increased.

  The “seed value” is a main body of the seed value, and is generated by a random number, for example. If the seed value is generated with a random number, it is difficult for a third party to guess the seed value, and the security level can be improved. The member store server 3 inputs this seed value into the calculation rule and calculates a transaction number.

Also, the electronic money server 2 provides different seed values for each member store and updates the seed value database every day.
When the seed value is issued for each member store in this way, damage can be limited to the member store even if the seed value is leaked from any member store.

[Transaction acceptance function]
The electronic money server 2 accepts a connection from the payment execution terminal, receives transaction information, a transaction number, and a seed value version, and stores them in a transaction information database.
In the present embodiment, when the payment execution terminal applies for a transaction to the member store server 3, transaction information, a transaction number, and a seed value version are transmitted from the payment execution terminal.

These pieces of information are all transmitted from the member store server 3 to the payment execution terminal and transferred to the electronic money server 2 by the mobile phone 7.
The transaction information includes information such as a member store code, an order number, and a settlement amount.

FIG. 4 is a diagram showing an example of a logical configuration of the transaction information database.
As shown in the figure, the transaction information database includes items such as “member store code”, “order number”, “payment amount”, “transaction number”, and the like.

The “member store code” is a member store code assigned to a member store of the member store server 3.
The “order number” is transaction identification information given by the member store server 3 that is assigned by the member store server 3 to identify a transaction to be settled.

The “settlement amount” is a settlement amount of settlement for which the member store server 3 requests the electronic money server 2 for substitution. The electronic money server 2 generates amount update information for updating the value to a value reduced by the amount of payment, and transmits it to the payment execution terminal.
The “transaction number” is a calculation result obtained when the member store server 3 calculates the transaction information and the seed value according to a calculation rule provided by the electronic money server 2 (electronic money business operator).

Moreover, although not shown in figure, it can also comprise so that the seed value version transmitted from the payment execution terminal may be matched with transaction information in a transaction information database.
Further, flag information for confirming whether or not settlement has been completed in the transaction information database can be set for each transaction. This flag information is set to “unsettled” for transactions before settlement, and “settled” for transactions for which settlement has been completed.
From this flag information, the electronic money server 2 can confirm whether the transaction is unsettled or settled.

Further, the date and time of access from the payment execution terminal, the date and time when payment is completed, and the like can be recorded for each transaction.
As will be described later, the electronic money server 2 receives a date / time range designation from the member store server 3 about once a day, and collectively sends a settlement completion notification within this range to the member store server 3. In addition, it is possible to extract a transaction that is a target of a settlement completion notification from the settlement date and time.

[Payment function]
The electronic money server 2 registers the transaction information, transaction number, seed value version, and the like in the transaction database, and then uses the transaction number, seed value, and predetermined calculation rules as described in FIG. Judge tamperability.
When it is determined that the transaction information has not been falsified, communication with the electronic money IC chip in the payment execution terminal is started, and the value is subtracted by the following payment processing.

First, the electronic money server 2 acquires the money terminal ID stored in the electronic money IC chip and the current value balance from the payment execution terminal.
As will be described later, the electronic money IC chip constitutes a money terminal having a value storage function, a value amount update function, a communication function, and the like. It is identified by the currency terminal ID.

If the value balance is less than the payment amount, an error message is sent to the mobile phone 7 to notify that.
If the payment amount is within the value balance, the electronic money server 2 generates amount update information for updating the value balance to a value reduced by the payment amount, and transmits it to the payment execution terminal.

  When the payment execution terminal completes the reduction of the value balance using the amount update information, the payment execution terminal transmits a completion notification to that effect to the electronic money server 2, so that the electronic money server 2 reduces the value on the mobile phone 7 by this notification. Can be confirmed.

[Payment result notification function]
The electronic money server 2 reports the settlement result based on a request from the member store server 3 periodically (may be irregular) about once a day.
The electronic money server 2 receives the member store ID and date / time range designation from the member store server 3 and transmits the settlement result of the corresponding transaction from the transaction database to the member store server 3.
In this way, the electronic money server 2 does not report the transaction result to the member store server 3 every time it makes a payment, but performs batch processing at a time, thereby reducing the load related to the payment result report. it can.

FIG. 5 is a block diagram illustrating an example of a hardware configuration of the electronic money server 2.
As shown in the figure, the electronic money server 2 includes a CPU (Central Processing Unit) 75, a ROM (Read Only Memory) 76, a RAM (Random Access Memory) 77, a communication control unit 78, a storage unit 79, and the like. Yes.

The CPU 75 is a central processing unit, and performs various types of information processing according to programs stored in the ROM 76, the storage unit 79, and the like.
Information processing performed by the CPU 75 includes the above-described seed value management function, transaction acceptance function, settlement function, settlement result notification function, and the like.

The ROM 76 is a read-only memory that stores basic programs, data, parameters, and the like when the electronic money server 2 operates.
The RAM 77 is a memory that the CPU 75 can read and write. The RAM 77 provides a working area when the CPU 75 performs the above functions.

The storage unit 79 is configured by a large-capacity storage device such as a hard disk, for example, and includes a program storage unit 80 and a data storage unit 81.
In the program storage unit 80, a program for realizing the above-described functions related to settlement agency is stored in the CPU 75, and an OS (Operating System) which is a basic program for operating the electronic money server 2 is stored. Etc. are also remembered.

In the data storage unit 81, a seed value database, a transaction information database, and other databases and data are formed.
Other databases and data include a member store registration database for registering member stores, a user registration database for registering users, and log data recording communication contents of the member store server 3 and the settlement execution terminal.

  The communication control unit 78 is an interface for communicating with the electronic money server 2, the payment execution terminal, and the like via the Internet 4.

Next, the member store server 3 (FIG. 2) will be described.
The member store server 3 is a web server that operates a sales site on the Internet 4.
The member store server 3 has various functions such as a seed value acquisition function, a merchandise sales function, a transaction information generation function, a transaction number generation function, a settlement agency request function, a settlement result confirmation function 1, and a settlement result confirmation function 2.

[Seed value acquisition function]
The member store server 3 receives and stores the seed value from the electronic money server 2 together with the seed value version about once a day. This process is performed when the expiration date of the currently stored seed value expires.
When a new seed value is transmitted from the electronic money server 2, the seed value stored previously is updated to the newly received seed value.
Thus, the member store server 3 can always hold the seed value during the expiration date.

[Product sales function]
The member store server 3 sells products and services at a sales site. The user can access the sales site of the member store server 3 by inputting a predetermined URL (Uniform Resource Locators) from the mobile phone 7 or the PC 17.

In the sales site, for example, game content, movie content, music content, computer programs, etc. that can be downloaded and sold, as well as various items such as books, stationery, etc. Is possible.
A user can access a sales site from a payment execution terminal, browse products and services, and apply for purchase.

[Transaction information generation function]
When the user selects a product or service to be purchased on the sales site and applies for purchase, the member store server 3 generates transaction information relating to this transaction.
The transaction information is composed of information necessary for the electronic money server 2 to perform payment, such as a member store code, a payment amount, and an order number, and is transmitted to the electronic money server 2 via a payment execution terminal as will be described later. The

The member store server 3 stores the transaction information in the sales database. At this time, the user ID (the user is registered in advance and the user ID is issued by the member store server 3), the purchase application date and time. Etc., and other auxiliary information.
The member store server 3 stores and manages information related to commercial transactions at the sales site in the sales database.

[Transaction number generation function]
The member store server 3 is preliminarily assigned a calculation rule by the electronic money business operator and stores it.
This calculation rule is an arithmetic expression or algorithm for calculating a transaction number using transaction information and a seed value as input values.
When the member store server 3 generates the transaction information, the member store server 3 inputs this and the seed value into the calculation rule to calculate the transaction number.

[Settlement proxy request function]
After generating the transaction information and the transaction number, the member store server 3 transmits them together with the seed value version to the settlement execution terminal.
These pieces of information are automatically transferred to the electronic money server 2 by the payment execution terminal, whereby a payment proxy request is made to the electronic money server 2.

[Settlement result confirmation function 1]
When payment by value is performed between the electronic money server 2 and the payment execution terminal, the member store server 3 receives a payment completion notification indicating that payment has been completed from the payment execution terminal.
In this way, the payment execution terminal transmits a payment completion notification to the member store server 3 every time payment by value is completed, and the member store server 3 confirms that the processing on the payment terminal side related to the transaction has been completed. Can be confirmed. Then, the member store server records in the sales database that the processing on the settlement terminal side has been completed.

[Settlement result confirmation function 2]
The member store server 3 transmits the member store ID and date / time range designation to the electronic money server 2 about once a day, and requests transmission of a settlement result.
Then, the member store server 3 compares the settlement result transmitted by the electronic money server 2 with the information recorded in the sales database, and confirms whether it matches the settlement completion notification received from the settlement execution terminal.

The hardware configuration of the member store server 3 is basically the same as that of the electronic money server 2 shown in FIG.
In the program storage unit 80, the member store server 3 causes the CPU 75 to send a seed value acquisition function, a product sales function, a transaction information generation function, a transaction number generation function, a settlement agency request function, a settlement result confirmation function 1, a settlement result confirmation function 2, and the like. A program that demonstrates each function is stored.
The data storage unit 81 stores seed values, calculation rules, sales databases, and the like.

Next, the mobile phone 7 will be described.
FIG. 6 is a block diagram showing a functional configuration of the mobile phone 7. As shown in FIG. 6, the mobile phone 7 includes a telephone function unit 10 that exhibits a function as a mobile phone that can be connected to the Internet, and an electronic money function unit 12 that includes an electronic money IC chip and exhibits an electronic money processing function. , And an interface unit 11 for connecting the two.

The mobile phone 7 constitutes a payment execution terminal, and among these, the electronic money function unit 12 constitutes a money terminal. It is also possible to configure the electronic money function unit 12 to be detachable from the mobile phone 7.
The mobile phone 7 is provided with a display for displaying a screen provided by a sales site, etc., and is also provided with a character key, a numeric key, an operation key, and the like. Payment confirmation).

  The telephone function unit 10 can wirelessly communicate with the base station and is connected to the telephone line network (when making a call) or the Internet 4 (when accessing the electronic money server 2 and the member store server 3) via the base station. can do.

  The telephone function unit 10 incorporates a member store application 25 for accessing the sales site of the member store server 3 and an electronic money application 26 for accessing the electronic money function unit 12.

The member store application 25 is an application for purchasing goods and services at a sales site. When the user applies for purchase of a product or service, the member store server 3 transmits transaction information, a transaction number, and a seed value version in response thereto, and the member store application 25 receives these information. The transaction information is transferred to the electronic money application 26 as an argument.
The transaction information passed as an argument is used by the electronic money application 26 to transmit a payment completion notification to the member store server 3 after the payment is completed.

  The electronic money application 26 is an application that can communicate with the electronic money server 2 and operate the electronic money function unit 12, and includes a relay unit 27 that accesses the electronic money function unit 12 via the interface unit 11. Yes.

When receiving the transaction information from the member store application 25 as an argument, the electronic money application 26 temporarily stores it and connects to the electronic money server 2.
Then, the electronic money application 26 reads information stored in the electronic money function unit 12 such as money terminal ID and value balance stored in the electronic money function unit 12 and transmits the information to the electronic money server 2.
Further, the money amount update information transmitted from the electronic money server 2 with respect to the transmitted information is received and input to the electronic money function unit 12.

  The electronic money function unit 12 is formed using an electronic money IC chip in which elements such as a CPU, ROM, RAM, storage unit, and terminal communication unit (not shown) are formed, and by executing a value processing program on the CPU. The value processing unit 28 shown in FIG. 6 is formed.

The value processing unit 28 receives the input of the amount update information, and updates the amount of value stored in the storage unit 29 to the amount specified by the amount update information.
More specifically, the amount update information can be, for example, an addition command for adding the amount of value by a specified amount or a subtraction command for subtraction.

In this case, the value processing unit 28 executes these commands and adds or subtracts the value amount by the specified amount.
When performing the payment process, the electronic money server 2 generates a subtraction command for subtracting the value corresponding to the payment amount, and inputs this to the value processing unit 28 via the electronic money application 26 to settle the value balance. It can be reduced by the amount of money.

As another example, the amount update information may be the amount after update, and the value processing unit 28 may be configured to rewrite the value balance to the amount specified by the amount update information.
In this case, the electronic money server 2 generates amount update information that specifies an amount obtained by subtracting the payment amount from the value balance stored in the storage unit 29, and sends it to the value processing unit 28 via the electronic money application 26. input.
The value processing unit 28 rewrites the value specified by the value balance and amount update information stored in the storage unit 29.

The memory | storage part 29 is comprised by EEPROM etc., for example, and has memorize | stored money terminal ID, value balance, log data, etc.
The value processing unit 28 can increase or decrease the value balance stored in the storage unit 29 using the amount update information, and can output the value balance and the money terminal ID to the electronic money application 26.

  In this embodiment, the electronic money function unit 12 is built in the mobile phone 7 to configure the payment execution terminal. However, other mobile devices that can be connected to the Internet 4 such as PDA (Personal Digital Assistant) and portable game machines, for example. A payment execution terminal can be configured by embedding the electronic money function unit 12 in a terminal device.

  Next, the PC 17 will be described with reference to FIG. The PC 17 can be configured using, for example, a personal computer that can be connected to the Internet 4. Further, in addition to the personal computer, it may be configured using other terminal devices such as a set top box and a game machine.

  As shown in FIG. 7, in the PC 17, the CPU 140, ROM 142, RAM 141, input unit 144, output unit 146, communication control unit 148, storage unit 150, reader / writer 155, storage medium drive unit 154, etc. are connected by the bus line 160. Has been configured.

The CPU 140 is a central processing unit, and performs various types of information processing according to programs stored in the ROM 142, the storage unit 150, and the like.
Information processing performed by the CPU 140 accesses the member store server 3 and uses services provided at the sales site, or accesses the electronic money card 15 via the reader / writer 155 and electronic money as will be described later. There is a function of accessing the server 2 and mediating communication between the electronic money server 2 and the electronic money card 15.

The ROM 142 is a read-only memory that stores basic programs, data, parameters, and the like when the electronic money server 2 operates.
The RAM 141 is a memory that the CPU 140 can read and write. The RAM 141 provides a working area when the CPU 140 performs the above functions.

The storage unit 150 is configured by a large-capacity storage device such as a hard disk, for example, and a program storage unit 156 and a data storage unit 158 are formed.
In the program storage unit 156, the CPU 140 performs processing of value between the member store application program which is a program for exercising the function of using the service provided by the sales site, and between the electronic money server 2 and the electronic money card 15. An electronic money application program to be executed is stored.

When these programs are executed by the CPU 140, a member store application and an electronic money application similar to the member store application 25 and the electronic money application 26 of the mobile phone 7 are realized.
In addition, the program storage unit 156 stores an OS (Operating System) that is a basic program for operating the PC 17.
The data storage unit 158 stores data such as communication log data.

The input unit 144 includes input devices such as a keyboard and a mouse, for example, and the user can input various data by operating them.
By operating these input devices, the user can select products and services at the sales site and apply for payment.

The output unit 146 includes an output device such as a display or a printer.
On the display, a screen for providing a service by the sales site is displayed, and the user inputs information from the input unit 144 while referring to the content displayed on the screen, and uses the service provided by the sales site. .

  The communication control unit 148 is an interface for communicating with the electronic money server 2, the member store server 3, etc. via the Internet 4.

The storage medium drive unit 154 drives, for example, a removable storage medium such as a magnetic disk, a magneto-optical disk, or a semiconductor storage device, reads information stored in the storage medium, and the storage medium supports writing If so, information is written to these storage media.
When an electronic money application program, a member store application, and other programs are stored and provided in these storage media, these programs can be read from the storage medium driving unit 154 and installed in the storage unit 150.

The reader / writer 155 is a relay device that mediates communication between the CPU 140 and the electronic money card 15.
As will be described later, the electronic money IC chip built in the electronic money card 15 is a non-contact type IC chip and performs short-range wireless communication.

The reader / writer 155 has a built-in antenna for performing wireless communication with the electronic money card 15, and transmits and receives signals to and from the electronic money card 15 using this antenna.
Electric power for driving the electronic money card 15 is also supplied wirelessly from the reader / writer 155.

  Next, the configuration of the electronic money card 15 will be described with reference to FIG. The electronic money card 15 is a money terminal that stores a value and increases or decreases the amount by using the amount update information. As shown in FIG. 8, an electronic money IC chip 112 and an antenna 135 connected thereto are embedded. It is made of card-shaped synthetic resin.

The antenna 135 has a function of generating electric power using radio waves radiated from the reader / writer 155 and supplying electric power to the electronic money IC chip 112 and a function of performing short-range wireless communication between the reader / writer 155 (FIG. 7). .

The electronic money IC chip 112 is composed of a non-contact type IC chip, and a CPU 132, a ROM 133, a RAM 134, a storage unit 136, a terminal communication unit 131, and the like are formed on the chip.
Note that an IC chip similar to the electronic money IC chip 112 is also embedded in the mobile phone 7, and constitutes the electronic money function unit 12.

The CPU 132 is a central processing unit that executes the value processing program stored in the storage unit 136 and causes the electronic money card 15 to exhibit the electronic money processing function.
Thereby, the CPU 132 can update the stored amount of value using the amount update information received from the electronic money server 2.

  The storage unit 136 is a readable / writable memory that stores various programs and data. The information stored in the storage unit 136 is held even when power is not supplied to the electronic money IC chip 112, and is configured by, for example, an EEPROM (Electrically Erasable and Programmable ROM).

Examples of the program stored in the storage unit 136 include a value processing program and an OS (Operating System) that is a basic program for causing the electronic money IC chip 112 to function.
The data stored in the storage unit 136 includes a currency terminal ID, a current value balance, and communication log data.

The ROM 133 is a read-only memory in which basic programs and data for causing the electronic money IC chip 112 to function are stored.
The RAM 134 is a readable / writable memory that provides a working memory when the CPU 132 performs the value processing function.
The terminal communication unit 131 is connected to the antenna 135 and is an interface for communicating with the reader / writer 155 and the like.

  In the payment system 1 configured as described above, a procedure in which the electronic money server 2 performs payment for the payment requested by the member store server 3 will be described with reference to the flowchart of FIG.

  In the operation of the settlement execution terminal described below, each step from Step 5 to Step 25 and Step 55 are performed by the member store application, and Step 40 and Step 45 are performed by the electronic money application. is there.

First, a user uses a service provided by a sales site from a payment execution terminal to apply for purchase of a product or service.
When the user applies for purchase, the member store server 3 presents the payment amount at the payment execution terminal, and requests confirmation that the payment amount is paid with value.

When the user confirms that the payment amount is paid by value (step 5), the member store server 3 generates transaction information, and generates a transaction number by substituting the transaction information and the seed value into the calculation rule (step 10). ).
This is due to the calculation means provided in the member store server 3.

Next, the member store server 3 transmits the transaction information, the generated transaction number, and the seed value version of the seed value used for generating the transaction number to the settlement execution terminal (step 15).
Here, the transaction information, the generated transaction number, and the seed value version of the seed value used to generate the transaction number constitute the payment information used for the electronic money server 2 to perform payment, and the transaction information is The transaction specifying information for specifying the transaction is configured. And the member store server 3 is provided with the payment information transmission means which transmits this payment information.
In addition, when a transaction can be specified by a transaction number, it can be interpreted as transaction specifying information using the transaction number.

When receiving the information from the member store server 3, the payment execution terminal displays a payment acceptance screen on the display of the payment execution terminal (step 20).
On the settlement acceptance screen, transaction information (member store code, order number, settlement amount, etc.) and other confirmation items are displayed, and the user confirms the settlement details again before executing settlement.
When the payment execution terminal is the PC 17, the user can confirm whether the payment execution terminal can communicate with the electronic money card 15, such as “Please set an electronic money card in the reader / writer”. .

When the user confirms payment by value, the payment execution terminal connects to the electronic money server 2 and transmits the transaction information, transaction number, and seed value version received from the member store server 3 to the electronic money server 2 (step) 25).
This is due to the payment information transmitting means provided in the payment execution terminal.
At this time, the member store application passes the transaction information as an argument to the electronic money application.

The electronic money server 2 receives the transaction information, transaction number, and seed value version from the settlement execution terminal (transaction information receiving means), records them in the transaction information database (FIG. 4), and examines the transaction number ( Step 30).
In more detail, this examination is performed as follows. First, the electronic money server 2 collates the combination of the seed value version and the member store ID included in the transaction information with the seed value database (FIG. 3), and uses the seed value used by the member store server 3 to generate the transaction number. Identify.

Then, after confirming that the specified seed value is within the expiration date, the seed value and the transaction information received from the member store server 3 are calculated according to the same calculation rule as the member store server 3. Then, it is determined whether or not the calculation result and the transaction number are the same, and it is confirmed that the transaction information has not been tampered with because they are the same.
Since the transaction information is not falsified, the electronic money server 2 can confirm that the amount included therein has not been falsified (amount confirmation means).

After confirming that the transaction information is correct by examining the transaction number, the electronic money server 2 communicates with the settlement execution terminal and performs settlement processing (step 40).
This is due to the amount update information transmission means provided in the electronic money server 2.
And this payment process is performed as follows, for example.
First, the settlement execution terminal transmits the terminal ID and the value balance stored in the electronic money IC chip to the electronic money server 2.

The electronic money server 2 compares the value balance with the settlement amount. If the value balance is smaller than the settlement amount, the electronic money server 2 transmits an error message to the settlement execution terminal and ends the settlement process.
If the value balance is equal to or greater than the payment amount, money amount update information for reducing the value corresponding to the payment amount is generated and transmitted to the payment execution terminal.

In the payment execution terminal, this amount update information is received (amount update information receiving means) and input to the electronic money IC chip (amount update information input means), and the amount of stored value is reduced by the amount of payment Update to
Then, a completion notification indicating that the amount has been updated is transmitted to the electronic money server 2.
The electronic money server 2 confirms that the payment processing is completed by this completion notification, and stores the log data with the terminal ID.

After completing the payment process, the payment execution terminal connects to the member store server 3 and transmits a payment completion notice (step 45).
This settlement completion notification includes the transaction information received from the member store application as an argument, so that the member store server 3 can identify the transaction for which the settlement was made.

The member store server 3 receives the payment completion notification from the transaction execution terminal, confirms that the payment is completed, and transmits the transaction result to the payment execution terminal (step 50).
The settlement execution terminal receives the transaction result from the member store server 3, and uses it to display a transaction completion screen on the display (step 55).

Further, the member store server 3 communicates with the electronic money server 2 periodically (or irregularly) and confirms the settlement result (step 60).
At this time, the member store server 3 transmits the member store ID and the date / time range specification to the electronic money server 2, and the electronic money server 2 transmits a settlement result corresponding to this to the member store server 3.
The member store server 3 compares this with the payment completion notice received from the payment execution terminal, and finally confirms that the payment result is correct.

As described above, the transaction number is generated by the member store server 3 and the settlement result is transmitted from the electronic money server 2 to the member store server 3 to perform the connection count to the electronic money server 2 and information processing. The amount can be reduced, and the load on the electronic money server 2 can be reduced.
Further, there is no need to activate a mailer at the payment execution terminal, and the user can smoothly perform processing from purchase application for goods and services to payment.

The calculation rule used by the member store server 3 may be different for each member store server 3, or the same calculation rule may be used by different member store servers 3 in duplicate.
If different calculation rules are adopted for each member store server 3, the security level is improved as compared with the case where the calculation rules are used redundantly.

  When different calculation rules are used for each member store server 3, the electronic money server 2 associates the member store ID with the calculation rule so that the calculation rule to be used can be specified from the member store ID.

  Further, in the present embodiment, the notification of the settlement result from the electronic money server 2 to the member store server 3 is performed by batch processing, but if the member store desires, the notification is sequentially performed every time the settlement is performed. It can also be configured to.

  Furthermore, it is possible to use a signature by a public key cryptosystem using a public digital certificate instead of the transaction number.

(Modification)
Next, a modified example of the payment system 1 will be described. In this modification, the transaction number is generated by a payment execution terminal (mobile phone 7 or PC 17).
Thus, the generation of the transaction number at the settlement execution terminal is suitable for providing products and services that do not require inventory management at the member store, such as download sales of contents.

That is, when selling a product that requires inventory management, a transaction number is generated so that the number of transactions is within the range of the stock quantity because the transaction is performed within the range of the stock quantity.
However, since there is no limit on the number of sales for content download sales and the like, there is no need to manage the number of stocks. In this case, the generation of the transaction number is transferred to the payment execution terminal, thereby reducing the load on the member store server 3. Can be reduced.

  In this modification, the seed value and the calculation rule are stored in the payment execution terminal, and the seed value within the expiration date is periodically sent from the electronic money server 2 to the payment execution terminal (when it is irregular or necessary. But good) provide. Alternatively, the member store server 3 may have a seed value, and when the payment execution terminal and the member store server 3 conduct a transaction, the member store server 3 may be configured to transmit from the member store server 3 to the payment execution terminal.

Hereinafter, the settlement procedure according to this modification will be described with reference to the flowchart of FIG.
In addition, the same step number is attached | subjected about the same step as FIG. 9, and description shall be simplified or abbreviate | omitted.

First, when the user confirms payment at the payment execution terminal (step 5), the member store server 3 generates transaction information and transmits it to the payment execution terminal (step 7).
The settlement execution terminal displays the settlement acceptance screen and confirms the user's intention (step 20).

The settlement execution terminal receives the transaction information and the calculation rule from the member store server 3, and generates a transaction number using these (step 23).
The transaction information includes an order number and a settlement amount, and the member store server 3 includes a transaction amount receiving means.
Further, the electronic money server 2 includes a calculation unit that calculates a transaction number based on a seed value and a calculation rule.
The subsequent processing is the same as that in the flowchart of FIG.

  Thus, in this modification, since the transaction number is generated at the payment execution terminal, the load on the member store server 3 can be reduced.

It is a block diagram for demonstrating the basic composition of this Embodiment. It is a block diagram showing typically the composition of the settlement system of this embodiment. It is the figure which showed the logical structure of the seed value database. It is the figure which showed the logical structure of the transaction information database. It is the block diagram which showed the hardware structure of the electronic money server. It is the block diagram which showed the functional structure of the mobile telephone. It is the block diagram which showed the hardware constitutions of PC. It is the block diagram which showed the hardware structure of the electronic money card. It is a flowchart for demonstrating the procedure which performs a payment process. It is a flowchart for demonstrating the procedure which performs the payment process which concerns on a modification. It is a flowchart for demonstrating an unpublished prior art example.

Explanation of symbols

1 Payment System 2 Electronic Money Server 3 Merchant Server 4 Internet 7 Mobile Phone 15 Electronic Money Card 16 Reader / Writer 17 PC

Claims (6)

The monetary value stored as electronic information is increased / decreased using the amount update information, and the monetary value corresponding to the settlement amount requested by the settlement request server is calculated from the settlement execution terminal storing the monetary terminal ID and the balance of the monetary value. A payment server to reduce
Predetermined value provided as different values for each settlement request server and predetermined value information including predetermined value identification information for identifying the predetermined value and a settlement request server corresponding to the predetermined value identification information are stored in association with each other. Predetermined value information storage means for performing,
Predetermined value information transmitting means for transmitting the predetermined value and the predetermined value identification information associated with the payment request server to the payment request server;
From the payment execution terminal,
Transaction identification information that includes at least a transaction amount with the settlement request server, and identifies a transaction with the settlement request server;
The predetermined value identification information acquired from the settlement request server ;
A calculation result obtained by the payment request server performing a predetermined calculation on the transaction specifying information;
Transaction information receiving means for receiving
Among those received by the transaction information receiving means, at least the transaction specifying information and the predetermined value identification information are used to perform the same calculation as the predetermined calculation, and the calculation result and the transaction information receiving means receive A calculation result confirmation means for confirming the identity of the calculated result,
If the identity is confirmed by the calculation result confirmation section, verify that the transaction information transaction specific information received by the receiving means is with that it has not been tampered with, not the been tampered transaction amount contained in the transaction identification information A means for confirming the amount of money,
After confirmation by the amount confirmation means, the money terminal ID and the money value balance of the settlement execution terminal are acquired, and the transaction amount included in the transaction specifying information received by the transaction information receiving means is the value of the acquired money value. An amount update information transmitting means for transmitting amount update information for reducing the monetary value of the transaction amount to the settlement execution terminal when the balance is equal to or greater than the balance ;
A settlement server comprising:   The calculation result confirmation unit acquires a predetermined value specified by the predetermined value identification information from the predetermined value information storage unit, and performs the same calculation as the predetermined calculation using the predetermined value. The settlement server according to claim 1.   The settlement server according to claim 1 or 2, wherein the predetermined value transmitted by the predetermined value information transmitting means has an expiration date, and the expiration date is secretly managed. Transactions that specify transactions with the payment execution terminal with respect to a payment execution terminal that stores the money terminal ID and the balance of the monetary value, which increases or decreases the monetary value stored as electronic information using the amount update information A payment request server that requests a payment server to reduce the monetary value of the payment amount included in the specific information;
Predetermined value information receiving means for receiving predetermined value information including a predetermined value provided as a different value for each payment request server and predetermined value identification information for identifying the predetermined value from the payment server;
Calculating means for performing a predetermined calculation using the predetermined value information in which the predetermined value information received by the receiving means and said transaction specific information,
Payment information transmission means for transmitting the transaction identification information, the predetermined value identification information, and a calculation result by the calculation means to the payment server via the payment execution terminal;
Notification from at least one of the payment server and the payment execution terminal that the money value stored in the payment execution terminal is subtracted by the payment amount using the information transmitted by the payment information transmission means. Payment completion confirmation means to confirm by,
A settlement request server characterized by comprising: The predetermined value received by the predetermined value information receiving means has an expiration date,
The settlement request server according to claim 4, wherein the calculation unit performs a calculation using a predetermined value within an expiration date received by the predetermined value information receiving unit. Expiration the predetermined value has the settlement request server according to claim 4 or claim 5 wherein the payment server, characterized in that managed secretly.

Images