JP5177734B2 - Payment access terminal, access method and access program using payment access terminal - Google Patents

Description

The present invention is, payment for the access terminal, the access method according to the settlement for the access terminal, and to a access program, for example, relates to those circulating the electronic money.

In recent years, electronic money systems using electronic money have been widely used.
Electronic money is used in the same manner as a prepaid card by storing electronic data corresponding to a monetary monetary value called value in an IC chip and increasing or decreasing this amount.

As this IC chip (hereinafter referred to as an electronic money IC chip), for example, a non-contact type IC chip is used, and the value amount stored using the function of storing the value and the amount update information input from the outside It is equipped with a function for updating the mobile phone and is used by being embedded in a plastic card or a mobile phone together with a communication antenna.
The electronic money IC chip can be accessed from a dedicated electronic money terminal installed at a store or the like to increase or decrease the value amount.
The process of increasing the value is called charging, and the process of reducing the value is called settlement.

In this way, since the value can be increased or decreased by accessing the electronic money IC chip from the electronic money terminal, it is conceivable that the electronic money terminal is stolen and the value is charged illegally.
Therefore, the following techniques have been proposed as countermeasures against this.
JP 2005-157497 A

  This technology prevents charging by an unauthorized electronic money terminal by activating the charge function after authentication by an electronic money server when the electronic money terminal is activated.

  However, it cannot be said that there is no possibility that a person who has specialized knowledge about the electronic money system can charge an unauthorized value by authenticating with a dummy electronic money server or the like.

  An object of the present invention is to quickly invalidate an electronic money IC chip whose monetary value has been increased by an invalid electronic money terminal.

In order to achieve the above object, according to the present invention, in the invention described in claim 1, the monetary value amount , the charge function for increasing the monetary value amount, and the invalidation indicating the validity / invalidity of the settlement function for decreasing the amount The amount of money to reduce the amount of money value by accessing the money terminal storing electronic information and the terminal ID of the access terminal for charging having the amount increase means for increasing the amount of money value means and from the management server that manages the valid or invalid of the charge for the access terminal with an amount increased means for increase the amount of the monetary value, invalid for receiving an invalid terminal ID is the terminal ID of the charge for the access terminal has become invalid end and the terminal ID receiving means, said amount reduction means before performing the reduction of the amount of the monetary value, the money terminal to access the money terminal stores A terminal ID acquisition means for acquiring the ID from the monetary terminal, wherein the acquired terminal ID, when the disable terminal ID thus received matches, invalidation is updated to a value indicating an invalid invalidation information of the cash management comprising means, and the amount reduced means, the revocation information optionally invalidation information is not stored and the invalidating means for indicating invalidity to the monetary terminal if not updated, and the stored Provided is an access terminal for settlement characterized by reducing the amount of money.
According to a second aspect of the present invention, the money terminal stores a history including a plurality of terminal IDs of charge access terminals having an amount increase means for increasing the amount of the money value, and the terminal ID acquisition means , Obtaining a plurality of terminal IDs included in the history stored in the money terminal by accessing the money terminal from the money terminal, and the invalidating means is at least one of the obtained plurality of terminal IDs; 2. The settlement access terminal according to claim 1, wherein when the received invalid terminal ID matches, the invalidation information of the money terminal is updated to a value indicating invalidity .
In the invention according to claim 3, the history includes a deposit history including a plurality of terminal IDs of charge access terminals having an amount increase means for increasing the amount of the monetary value, and an amount obtained by reducing the amount of the monetary value. A withdrawal history including a plurality of terminal IDs of the settlement access terminal having a reduction means, and the terminal ID acquisition means accesses the money terminal and stores the plurality of payment history included in the money receipt terminal. 3. The settlement access terminal according to claim 2, wherein the terminal ID is acquired from the money terminal .
In the invention of claim 4, wherein the disable terminal ID, the charge for the access terminal is accompanied invalid date when disabled, the charge for the access with the amount increase means is increased the amount of the monetary value The terminal ID of the terminal is accompanied by an increase date and time obtained by increasing the amount of the monetary value, and the invalidation means displays invalidation information of the money terminal when the increase date and time is after the invalid date and time. The settlement access terminal according to any one of claims 1 to 3, wherein the settlement access terminal is updated to a value indicating invalidity .
In the invention according to claim 5, the monetary value amount , the invalidation information indicating the validity / invalidity of the charge function for increasing the monetary value amount and the settlement function for decreasing the monetary amount, and the monetary value amount are increased. An amount reduction step for reducing the amount of the monetary value by accessing the money terminal storing the terminal ID of the charging access terminal having electronic money increase means as electronic data , and an amount increase for increasing the amount of the monetary value An invalid terminal ID receiving step of receiving an invalid terminal ID, which is a terminal ID of the charge access terminal that has become invalid, from the management server that manages validity / invalidity of the charge access terminal having means, and the money in the amount reduction step before performing the reduction of the amount of value, the money terminal using the terminal ID storing the monetary terminal accesses the monetary terminal Includes a terminal ID obtaining step of al acquired, and the acquired terminal ID, when the disable terminal ID thus received matches, and disabling updating to a value indicating an invalid invalidation information of the cash management, the , at the price reduction step, if the invalidation information when revocation information is not stored and the invalidation step indicating invalidity to the monetary terminal is not updated, thereby reduced the amount that the storage An access method using an access terminal for settlement is provided.
In the invention of claim 6, the amount of money value, the invalidation information indicating the validity / invalidity of the charge function for increasing the amount of money value and the settlement function for reducing the amount of money, and the amount of money value are increased. An amount reducing function for reducing the amount of the monetary value by accessing the money terminal storing the terminal ID of the charging access terminal having electronic money increasing function as electronic data , and an amount for increasing the amount of the monetary value The invalid terminal ID receiving function for receiving the invalid terminal ID that is the terminal ID of the charge access terminal that has become invalid from the management server that manages the validity and invalidity of the charge access terminal having the increase function, and the amount reduction function includes the terminal obtained before performing the reduction of the amount of monetary value, the terminal ID storing the monetary terminal accesses the monetary terminal from the monetary terminal And D acquisition function, and the acquired terminal ID, when the disable terminal ID thus received matches, and disabling function for updating a value indicating an invalid invalidation information of the cash management, payment for access terminal It is implemented on a computer to configure the amount reduced function, wherein the revocation information by and the revocation function when revocation information indicating the invalid money terminal is not stored within If not updated, and the stored To provide an access program characterized by reducing the amount of money.

  According to the present invention, an electronic money IC chip whose monetary value has been increased by an invalid electronic money terminal can be quickly invalidated by referring to the history of the electronic money IC chip.

(1) Outline of Embodiment When the electronic money terminal 8 is lost due to theft or the like from a member store, the member store submits a loss report to the electronic money center.
When the electronic money center (FIG. 1) receives the loss notification of the electronic money terminal 8 from the member store, the electronic money center 8 registers the terminal ID of the lost electronic money terminal 8 and the date and time of loss in the electronic money server 2.
When the electronic money server 2 registers the lost electronic money terminal 8, the electronic money server 2 generates an invalid terminal list that lists all the lost electronic money terminals 8, and transmits it to the electronic money terminal 8 of each member store.
In the invalid terminal list, the terminal ID of the lost electronic money terminal 8 and the invalid date / time (adopted as the date / time when the lost date / time is invalidated) are recorded.

On the other hand, the electronic money card 6 stores the terminal ID of the electronic money terminal 8 and the charging date and time as a deposit history, regardless of which electronic money terminal 8 is charged.
When the electronic money terminal 8 of the member store accesses the electronic money card 6, it obtains a payment history from the electronic money card 6, compares it with the invalid terminal list, and the electronic money card 6 is lost. It is confirmed whether or not the electronic money terminal 8 is charged after the invalid date and time.
When the electronic money card 6 is charged after the invalid date and time on the lost electronic money terminal 8, the electronic money terminal 8 displays the validity flag of the electronic money card 6 (a flag for setting validity / invalidity of the electronic money card 6). Is disabled, and the electronic money card 6 is disabled.

(2) Details of Embodiment FIG. 1 is a diagram showing a network configuration of an electronic money system 1.
The electronic money system 1 includes a mobile phone 7, an electronic money server 2, the Internet 4, a base station 5, an electronic money card 6, a user terminal 9 composed of a personal computer, an electronic money terminal 8 installed in a member store, and the like. It is configured.

The electronic money card 6 includes an electronic money IC chip and an antenna for communicating with the electronic money terminal 8.
The electronic money card 6 can receive an access using short-range wireless communication from the electronic money terminal 8 and can increase (charge) and decrease (settlement) the value stored in the electronic money IC chip. . Electric power for driving the electronic money IC chip is supplied from the electronic money terminal 8 by radio.
The operator of the electronic money system 1 collects money (currency) of the amount corresponding to the value from the user at the time of charging, and distributes the money according to the amount of payment to the member store that has settled with the value. In this way, the correspondence between value and currency is taken.

The value is a concept corresponding to money in the electronic money system 1, and is money information that represents the amount of money value as electronic data.
The electronic money card 6 can accept access from the electronic money server 2 via the user terminal 9, and can also charge and settle via the Internet 4.
In the present embodiment, the electronic money IC chip is a non-contact type (one that accepts access wirelessly), but a contact type (one that accepts access by electrode contact) may be used.
As described above, the electronic money IC chip built in the electronic money card 6 is a terminal that communicates with the electronic money terminal 8, the electronic money server 2, etc., and functions as a money terminal that stores the monetary value as electronic data. doing.

The mobile phone 7 has a function of connecting to the Internet 4 and also includes an antenna for communicating with the electronic money IC chip and the electronic money terminal 8.
Similarly to the electronic money card 6, the mobile phone 7 can accept access from the electronic money terminal 8 to perform charging and settlement, and accept access from the electronic money server 2 via the base station 5 and the Internet 4. In addition, charging and settlement can be performed via the Internet 4.

The user terminal 9 has a function of connecting to the Internet 4 and a function of accessing the electronic money card 6 by a device called a reader / writer.
When the electronic money card 6 (which may be a mobile phone 7) is installed in a reader / writer and the user terminal 9 is connected to the electronic money server 2, the electronic money card 6 and the electronic money server 2 can communicate with each other. The money card 6 can be accessed.

The electronic money center is an operating entity of the electronic money system 1 and manages the entire electronic money system 1.
The electronic money center has a department that manages the validity of the electronic money terminal 8, and a person in charge of the department accepts a notification of loss of the electronic money terminal 8 from a member store, and uses the electronic money terminal 8 as an invalid electronic money terminal. The money terminal 8 is registered in the electronic money server 2.

The electronic money server 2 is composed of a single server device or a plurality of server device groups, and is installed in an electronic money center.
The electronic money server 2 is connected to the electronic money terminals 8, 8, 8,... Via a communication line, and receives access from the electronic money terminal 8 and communicates with the electronic money terminal 8.
In the present embodiment, the electronic money server 2 is configured to accept a connection request from the electronic money terminal 8 and connect to the electronic money terminal 8, but the electronic money server 2 requests the connection to the electronic money terminal 8. Then, the electronic money terminal 8 may be connected.
When the electronic money server 2 communicates with the electronic money terminal 8, the electronic money server 2 collects transaction information related to value charging and settlement from the electronic money terminal 8 and lists invalid terminal lists of invalid electronic money terminals 8. Is transmitted to the electronic money terminal 8.

Further, when the electronic money server 2 is connected to the electronic money card 6 or the mobile phone 7 via the Internet 4, the money change information is transmitted to the electronic money card 6 or the mobile phone 7 to perform charging or settlement. It is confirmed whether or not they are charged, and if these are charged by the invalid electronic money terminal 8, these validity flags (described later) can be set to invalid to invalidate them.
The invalidation is sometimes referred to as negative, and the invalidated electronic money terminal 8 and electronic money card 6 are sometimes referred to as negative terminal and negative card, respectively.

Member stores are stores (convenience stores, department stores, restaurants, other retail stores, business vehicles, etc.) that can be settled and charged with value using the electronic money card 6 or the mobile phone 7, and there are one or a plurality of accounting locations. The electronic money terminal 8 is provided.
Note that the electronic money terminal 8 includes a charge-only device and a payment-only device, and is sometimes incorporated into a vending machine and used for payment at the vending machine.

The electronic money terminal 8 is an access terminal that accesses the electronic money card 6 or the mobile phone 7. For example, the electronic money terminal 8 is installed alone or is installed in an accounting apparatus (register).
The electronic money terminal 8 can transmit the amount change information to the electronic money card 6 or the mobile phone 7 to perform charging or settlement.

The electronic money terminal 8 stores transaction information in which processing contents with the electronic money card 6 and the mobile phone 7 are recorded. For example, the electronic money terminal 8 accesses the electronic money server 2 by batch processing and transmits it once a day. To do.
This transaction information is analyzed by the electronic money server 2 and used, for example, to achieve consistency between value and money.

In addition, the electronic money terminal 8 receives and stores an invalid terminal list in which the invalid electronic money terminal 8 is registered from the electronic money system 1, and these are invalid when accessing the electronic money card 6 or the mobile phone 7. It is confirmed whether or not the electronic money terminal 8 is charged.
If the electronic money card 6 or the mobile phone 7 is charged with an invalid electronic money terminal 8, the electronic money terminal 8 sets the validity flag of the electronic money card 6 or the mobile phone 7 to invalid. , Disable these.

  As described above, the electronic money system 1 includes a money terminal (electronic money IC chip of the electronic money card 6 or the mobile phone 7) that stores the monetary value as electronic data, and accesses and stores the money terminal. It functions as an electronic money system configured by using an access terminal (electronic money terminal 8) that increases or decreases the amount of money stored and a management server (electronic money server 2) that manages the validity of the access terminal. .

FIG. 2A is a block diagram showing an example of the hardware configuration of the electronic money card 6.
The electronic money card 6 has a CPU (Central Processing Unit) 21, a high frequency circuit 22, an antenna 26, a ROM (Read Only Memory) 23, a RAM (Random Access Memory) 24, an EEPROM (Electronically Erasable and Programmable) 25, and the like. ing.
These elements are formed on an electronic money IC chip. However, the antenna 26 is configured by an aerial line extending around an elliptical curve around the outer edge of the electronic money card 6 or on the diagonal line of the electronic money card 6, and the end is connected to the electronic money IC chip. ing.

The CPU 21 is a central processing unit that performs information processing according to various programs stored in the ROM 23 and the EEPROM 25.
Further, the CPU 21 can perform short-range wireless communication with the electronic money terminal 8 via the antenna 26 and the high-frequency circuit 22.

The antenna 26 is an antenna for performing short-distance wireless communication with an antenna built in the reader / writer.
The antenna 26 generates electric power for driving the electronic money card 6 by radio waves from the reader / writer.

  The high frequency circuit 22 converts the high frequency transmitted from the reader / writer to the antenna 26 into a digital signal and outputs it to the CPU 21. Conversely, the high frequency circuit 22 converts the digital signal output from the CPU 21 into a high frequency and sends it out from the antenna 26 to the reader / writer. To do.

The RAM 24 is a readable / writable memory that provides a working memory when the CPU 21 performs information processing.
The RAM 24 can hold the stored content while power is being supplied to the electronic money card 6, but the stored content is lost when the supply of power is stopped.
The ROM 23 is a read-only memory that stores basic programs, parameters, data, and the like for causing the electronic money card 6 to function.

The EEPROM 25 is a ROM capable of writing and erasing information. Information stored in the EEPROM 25 is maintained even when power is not supplied to the electronic money card 6.
Various programs and data are stored in the EEPROM 25.
As the program, for example, there is a value processing program for processing value, and by executing this program, the CPU 21 performs a communication function with the electronic money terminal 8, a charge function and a settlement function based on money amount change information, and the electronic money card 6. Various functions such as invalidation function to invalidate.
Examples of data include current value balances, usage log data relating to past transactions, validity flags, and an electronic money function unit ID that is unique ID information for the electronic money server 2 to identify the electronic money card 6. .

FIG. 2B is a block diagram schematically showing the functional configuration of the electronic money card 6.
The value processing unit 28 is configured by the CPU 21 executing a value processing program.
The storage unit 29 is formed in the EEPROM 25 and stores a value balance, an electronic money function unit ID, usage log data, a validity flag, and the like.
The terminal communication unit 27 is formed by using the antenna 26 or the like, and receives amount change information, a deposit history request command, an invalidation command, etc. from the reader / writer unit 8 a of the electronic money terminal 8 and inputs them to the value processing unit 28. To do.

The value processing unit 28 is an information processing unit that executes an input command.
The commands include amount change information (consisting of an overwrite command, an addition command, a subtraction command, etc. described later), a balance reference command, a deposit history request command, an invalidation command, and other commands.
The amount change information is configured by a command that causes the value processing unit 28 to charge or settle, and when the amount change information is input, only the amount specified by the amount change information is stored in the storage unit 29. Increase or decrease the balance of the current value, and record the processing history in the usage log data.

The amount change information includes an addition command and a subtraction command. The addition command and the subtraction command are accompanied by an amount as a parameter, and the value processing unit 28 increases or decreases the value by this amount.
For example, when the value balance stored in the storage unit 29 is 5000 yen and the settlement amount is 1000 yen, the electronic money terminal 8 generates a subtraction command for reducing 1000 yen and transmits it to the terminal communication unit 27. Then, the value processing unit 28 executes this subtraction command to update the value balance stored in the storage unit 29 to 5000 yen-1000 yen = 4000 yen.

It is also possible to configure the amount change information with an overwrite command.
In this case, the electronic money terminal 8 calculates the value balance after addition / subtraction, and overwrites the value balance in the storage unit 29 with this amount.
For example, consider a case where the value balance stored in the storage unit 29 is 5000 yen and the settlement amount is 1000 yen.
The electronic money terminal 8 reads the current value balance of 5000 yen from the electronic money card 6 and calculates a balance of 5000 yen-1000 yen = 4000 yen after settlement. Then, the electronic money terminal 8 generates an overwrite command for overwriting the value balance to 4000 yen and transmits it to the terminal communication unit 27. Then, the value processing unit 28 executes this overwrite command, and updates the balance of the value stored in the storage unit 29 to 4000 yen.

As described above, the case where the amount change information is configured by the addition / subtraction command and the case where the amount change information is configured by the overwrite command has been described, but these may be combined.
For example, an addition command can be used for charging, an overwrite command can be used for settlement, or an overwrite command can be used for charging, and a subtraction command can be used for settlement.

The deposit history request command is a command for reading a deposit history of usage log data (consisting of a deposit history and a withdrawal history as will be described later).
When the deposit history request command is input, the value processing unit 28 reads the deposit history of the usage log data and outputs it to the electronic money terminal 8.

The invalidation command is a command that causes the value processing unit 28 to set the validity flag of the electronic money card 6 to invalid.
The validity flag is flag information for the electronic money terminal 8 to identify whether the electronic money card 6 is valid or invalid. For example, the validity flag is set to “0” when valid or “1” when invalid. The
When the electronic money card 6 is shipped from the factory, the validity flag is set to valid. Once the electronic money card 6 is set to invalid, the charge function and the settlement function of the electronic money card 6 can no longer be used.

FIG. 3 is a diagram illustrating an example of a logical configuration of usage log data.
The usage log data is composed of a deposit history and a withdrawal history.
The deposit history includes items such as “terminal ID”, “date of deposit”, “payment amount”, and the like.
“Terminal ID” is the terminal ID of the electronic money terminal 8 that has been charged. When the electronic money server 2 is charged, the ID of the electronic money server 2 is recorded.
The “payment date” is the date when the charge was made, and is recorded, for example, in units of seconds.
The “deposit amount” is a charged amount.
The N payment records can be recorded, and the N + 1 and subsequent records are erased and overwritten. N is a natural number such as 1, 2, 3,...

The withdrawal history includes items such as “terminal ID”, “withdrawal date / time”, and “withdrawal amount”.
“Terminal ID” is the terminal ID of the electronic money terminal 8 that made the payment. When payment is made by the electronic money server 2, the ID of the electronic money server 2 is recorded.
The “withdrawal date” is the date when the settlement was made, and is recorded, for example, in units of seconds.
The “withdrawal amount” is a settled amount.
With regard to the withdrawal history, M records can be recorded, and after the M + 1th record, the oldest withdrawal history is erased and overwritten. M is a natural number such as 1, 2, 3,... And is set in advance, for example, 30 cases.
The number of deposit histories and withdrawal histories may be the same or different. This is a design matter.

FIG. 4 is a conceptual diagram showing an example of a functional configuration of the mobile phone 7.
The telephone function unit 10 has a call mode for making a call and an application mode for providing various application functions, and can be switched by a user operation.
The telephone function unit 10 includes a CPU and a storage unit that stores various application programs, and can execute various application functions by executing these application programs on the CPU.

The electronic money application unit 15 is formed by executing an electronic money application program by the CPU of the telephone function unit 10.
The electronic money application unit 15 can access both the electronic money server 2 and the electronic money function unit 12, and can mediate communication between the electronic money server 2 and the electronic money function unit 12.
For this reason, money amount change information and various commands are received from the electronic money server 2 and input to the electronic money function unit 12, and the electronic money function unit 12 performs various functions such as charging, settlement, reading of payment information, and invalidation. Can be made.

  The electronic money application unit 15 displays the balance of the value stored in the electronic money function unit 12 on the display of the mobile phone 7 or an electronic money function that is ID information unique to the electronic money function unit 12 Various functions for the user such as reading the part ID from the electronic money function part 12 and displaying it on the display can be exhibited.

The electronic money function unit 12 includes an electronic money IC chip and an antenna having the same configuration as that embedded in the electronic money card 6, and is connected to the electronic money application unit 15 by the interface unit 11.
Similar to the electronic money card 6, the electronic money function unit 12 has a terminal processing unit 16, a value processing unit 17, and a memory stored in the electronic money IC chip by the CPU executing a value processing program stored in the EEPROM. A portion 18 and the like are formed.

The value processing unit 17 receives access from the electronic money terminal 8 via the terminal communication unit 16 and performs the same information processing as the electronic money card 6 (charging / settlement, reading of payment information, invalidation, etc.) The same information processing can be performed by communicating with the money server 2.
The storage unit 18 stores a value balance, an electronic money function unit ID, usage log data, a validity flag, and the like.

FIG. 5 is a diagram illustrating an example of a hardware configuration of the electronic money terminal 8.
The electronic money terminal 8 includes a CPU 31, a ROM 33, a RAM 34, a communication control unit 35, a storage unit 36, an input unit 37, an output unit 38, a reader / writer unit 8 a, and the like connected by a bus line 46.

The CPU 31 performs information processing according to a predetermined program, and controls the entire electronic money terminal 8.
In the present embodiment, in addition to sending the amount change information to charge or settle, processing such as checking the payment history of the electronic money card 6 or the mobile phone 7 and invalidating it if necessary. Do.
The ROM 33 is a read-only memory that stores basic programs and parameters for operating the electronic money terminal 8.
The RAM 34 is a readable / writable memory that provides a working memory for the CPU 31 or loads and stores a program or data stored in the storage unit 36.

The communication control unit 35 is a connection device that connects the electronic money terminal 8 to the electronic money server 2 via a network.
The storage unit 36 includes, for example, a hard disk and other storage media, and a drive device that drives them, and includes a program storage unit 42 that stores various programs, a data storage unit 44 that stores data, and the like. .

The program storage unit 42 accesses the OS, which is a basic program for causing the electronic money terminal 8 to function, the electronic money card 6 and the mobile phone 7 to perform charging and settlement, and the electronic money card 6 and the mobile phone. A program for checking the deposit history of the telephone 7 and invalidating it when necessary is stored.
The data storage unit 44 stores an invalid terminal list received from the electronic money server 2 and transaction information that is a transaction history with the electronic money card 6 and the mobile phone 7.
The transaction information is transmitted to the electronic money server 2 when the electronic money terminal 8 accesses the electronic money server 2.

The input unit 37 is connected to an interface of the accounting device (when incorporated in the accounting device), a user interface, and the like.
The electronic money terminal 8 receives an operation of a member store representative from the input unit 37 and performs various processes such as charging and settlement.
The output unit 38 is connected to an interface of the accounting device (when incorporated in the accounting device), a user interface, and the like.
The electronic money terminal 8 outputs various information such as processing results from the output unit 38, and presents the information to the person in charge of the member store.
The reader / writer unit 8 a performs wireless communication with the electronic money IC chip of the electronic money card 6 and the mobile phone 7.

FIG. 6 is a diagram illustrating an example of a logical configuration of the invalid terminal list.
The invalid terminal list is generated by the electronic money server 2 and transmitted to each of the electronic money terminals 8, 8,.
The invalid terminal list is a list in which all invalid electronic money terminals 8 are registered, and includes items such as “invalid terminal ID” and “invalid date / time”.
“Invalid terminal ID” is the terminal ID of the electronic money terminal 8 that has been invalidated.
The “invalid date / time” is the date / time when the electronic money terminal 8 is invalidated, and is set to a second unit.
From the invalid terminal list, it is possible to specify the terminal ID of the electronic money terminal 8 that has been invalidated and the point at which the electronic money terminal 8 has been invalidated.

FIG. 7 is a diagram illustrating an example of a hardware configuration of the electronic money server 2.
The electronic money server 2 is configured by connecting a CPU 51, a ROM 52, a RAM 54, a communication control unit 53, a storage unit 55, and the like through a bus line.

The CPU 51 is a central processing unit that performs various types of information processing according to a predetermined program. In the present embodiment, for example, an invalid terminal list is generated by accepting an input of the electronic money terminal 8 to be invalidated, and this is transmitted to each electronic money terminal 8 or transaction information collected from the electronic money terminal 8 is analyzed. And so on.
The ROM 52 is a read-only memory, and stores basic programs and parameters for operating the electronic money server 2.
The RAM 54 is a readable / writable memory, and provides a working memory for the CPU 51, loads and stores programs and data stored in the storage unit 55, and the like.
The communication control unit 53 is a control unit for communicating with the electronic money terminal 8 and communicating with the electronic money card 6 and the mobile phone 7 via the Internet 4.

The storage unit 55 is configured by using a large-capacity storage device such as a hard disk, and includes a program storage unit 56 that stores various programs, a data storage unit 57 that stores data, and the like.
The program storage unit 56 includes an OS that is a basic program for causing the electronic money server 2 to function, a program for generating an invalid list and transmitting it to the electronic money terminal 8, and a program for analyzing transaction information Other programs are stored.
The data storage unit 57 stores a member store database storing member store information, an invalid terminal list, a transaction database storing transaction information with the mobile phone 7 and the electronic money card 6, and the like.

FIG. 8 is a diagram showing an example of a logical configuration of the member store database.
The member store database includes “business owner”, “member store ID”, “member store name”, “terminal ID”, “invalid date / time”, and other items (such as the postal code, address, and telephone number of the member store). It is composed of
The name of the business operator (corporate name, natural person name, etc.) that operates the member store is stored in “business operator”. An operator may have a plurality of member stores or a single member store.
In the example of the figure, the operator “Out Burger Co., Ltd.” operates a plurality of member stores such as Shibuya branch and Osaka branch as member stores.
Although not shown, each business operator is provided with a business operator ID for identifying the business operator.

In the “member store ID”, ID information for identifying each member store is stored. The member store ID is used to identify the member store when managing various information about the member store.
The “member store name” stores the name of the member store.
The “terminal ID” stores the terminal ID of the electronic money terminal 8 installed in each member store.
The “invalid date and time” is the date and time specified by the electronic money center as an invalid electronic money terminal by the electronic money center, and can be set in units of seconds.
“Invalid date and time” is blank for a valid electronic money terminal 8.

FIG. 9 is a flowchart for explaining a procedure in which the electronic money server 2 transmits the invalid terminal list to the electronic money terminal 8.
First, when the electronic money terminal 8 is lost due to theft or the like, the member store quickly reports to the electronic money center using, for example, a telephone or a fax.
The person in charge of the electronic money center specifies the terminal ID of the lost electronic money terminal 8 based on the report from the member store, and obtains the estimated time when the electronic money terminal 8 is lost.
When the lost time is over a certain time zone, for example, from 2:00 am to 6:00 am, the person in charge identifies the earliest time in this time zone as the lost time.
The specification of the lost time is an operation item prescribed by the electronic money center, and other methods may be adopted.

When the person in charge obtains the terminal ID and lost time of the lost electronic money terminal 8, the person in charge accesses the electronic money server 2 using an in-house terminal or the like, and requests to register the electronic money terminal 8 as an invalid electronic money terminal 8. To do.
The registration request can be made by inputting a terminal ID and a lost time from an invalid terminal registration screen prepared in advance.

Then, the electronic money server 2 acquires the input content from the invalid terminal registration screen, thereby accepting the invalid terminal registration (step 5).
Next, the electronic money server 2 searches the member store database for the terminal ID. Then, the lost time is registered in the “invalid date / time” corresponding to the terminal ID, and the member store database is updated (step 10).
As described above, the electronic money server 2 includes invalid terminal ID storage means for receiving and storing an invalid terminal ID of an access terminal to be invalidated.

When the electronic money terminal 8 is registered in the electronic money server 2 as the electronic money terminal 8 to be invalidated, the electronic money server 2 is set as the electronic money terminal 8 to be invalidated in the member store database. Are searched and an invalid terminal list is generated and stored (step 15).
Then, the electronic money server 2 replaces the previously generated invalid terminal list with the invalid terminal list generated this time.

As a result, the electronic money terminal 8 for which the invalidation is canceled between the time when the invalid terminal list is generated and the time when the invalid terminal list is generated is deleted from the invalid terminal list generated this time.
For example, when the invalidation is canceled, it is found that the lost electronic money terminal 8 is found and not illegally used and returned to the electronic money system 1, or the lost electronic money terminal 8 There are cases where it is confirmed by some method (such a mechanism is incorporated in the electronic money terminal 8) that charging is impossible.

  The electronic money server 2 waits for access from the electronic money terminal 8 after generating the invalid terminal list. Here, the electronic money terminals 8 for which the invalid terminal list is to be transmitted are all the electronic money terminals 8 operating normally in the electronic money system 1.

The electronic money terminal 8 operating normally in the electronic money system 1 accesses the electronic money server 2 by batch processing or the like, and transmits transaction information (step 20).
When receiving the access from the electronic money terminal 8, the electronic money server 2 transmits the stored invalid terminal list to the electronic money terminal 8 (step 25).
The electronic money server 2 receives access from the electronic money terminals 8, 8, 8,... One after another, but transmits an invalid terminal list each time.
As described above, the electronic money server 2 includes invalid terminal ID transmission means for transmitting the stored invalid terminal ID (invalid terminal list) to the access terminal (electronic money terminal 8).

The electronic money terminal 8 receives and stores the invalid terminal list from the electronic money server 2 (step 30).
In this way, the access terminal (electronic money terminal 8) receives from the management server (electronic money server 2) the invalid terminal ID that receives the invalid terminal ID that is the terminal ID of the invalid access terminal (electronic money terminal 8). In addition to receiving means, it also includes invalid terminal ID storage means for storing the received invalid terminal ID.

At this time, the electronic money terminal 8 overwrites the invalid terminal list received from the electronic money server 2 last time with the invalid terminal list received this time. That is, the electronic money terminal 8 erases the previously received invalid terminal list and stores the invalid terminal list received this time.
In this way, the invalid terminal list stored in the electronic money terminal 8 is updated every time the electronic money server 2 is accessed.

In this way, the electronic money terminal 8 receives the invalid terminal ID from the list in which all invalid terminal IDs are registered, erases the invalid terminal ID already stored, and is registered in the received list. The terminal ID is stored.
In the present embodiment, the electronic money server 2 transmits the invalid terminal list after waiting for access from the electronic money terminal 8. However, in the case where the electronic money server 2 can be connected to the electronic money terminal 8, The money server 2 can be configured to distribute the invalid terminal list to all the electronic money terminals 8.

FIG. 10 is a flowchart for explaining a procedure for the electronic money terminal 8 to invalidate the electronic money card 6 and the mobile phone 7.
In the following description, the electronic money card 6 will be described as an example, but the cellular phone 7 can be invalidated in the same manner.

At the member store, for example, the electronic money card 6 is set in the reader / writer unit 8a of the electronic money terminal 8 for charging, settlement, balance confirmation, and the like.
The person in charge at the member store operates the electronic money terminal 8 to cause the electronic money terminal 8 to access the electronic money card 6.

When accessing the electronic money card 6, the electronic money terminal 8 requests the validity flag value from the electronic money card 6 (step 50).
On the other hand, the electronic money card 6 transmits the value of the validity flag to the electronic money terminal 8 (step 55).

The electronic money terminal 8 receives the value of the validity flag from the electronic money card 6 and uses this to determine whether the electronic money card 6 is a valid electronic money card 6 or an invalid electronic money card 6. Judgment is made (step 60).
When it is determined that the electronic money card 6 is invalid (step 60; N), the electronic money terminal 8 notifies the person in charge that the electronic money card 6 is invalid by terminating the process and issuing an alarm. (Step 90).

When it is determined that the electronic money card 6 is valid (step 60; Y), the electronic money terminal 8 transmits a payment history request command to the electronic money card 6 to request a payment history (step 65).
When receiving the deposit history request command from the electronic money terminal 8, the electronic money card 6 transmits the deposit history to the electronic money terminal 8 (step 70).

The electronic money terminal 8 receives the payment history from the electronic money card 6, searches the invalid terminal list for the terminal ID recorded in the payment history, and whether or not the electronic money card 6 is charged by the invalid electronic money terminal 8. (Step 75).
As described above, when the electronic money terminal 8 accesses the money terminal (electronic money IC chip), the electronic money terminal 8 has increased (charged) the amount of money stored in the money terminal by accessing the money terminal in the past. Terminal ID acquisition means for acquiring the terminal ID from the money terminal according to the payment history is provided.

In addition, the electronic money terminal 8 matches the terminal ID acquired by the deposit history with the invalid terminal ID received from the electronic money server 2 and stores the received terminal ID and the received invalid terminal ID. Judging whether to do.
When the electronic money card 6 is not charged with the invalid electronic money terminal 8, that is, when the terminal ID registered in the deposit history is not in the invalid terminal list (step 75; N), the electronic money terminal 8 Normal processing is performed on the electronic money card 6 (step 95).

  On the other hand, when the electronic money card 6 is charged with an invalid electronic money terminal 8, that is, when the terminal ID registered in the deposit history is in the invalid terminal list (step 75; Y), the electronic money card 6 Compares the payment date of the electronic money terminal 8 recorded in the payment history with the invalid date of the electronic money terminal 8 in the invalid terminal list (step 85).

If the deposit date is before the invalid date (step 85; N), the electronic money card 6 was charged while the electronic money terminal 8 was operating normally. The terminal 8 performs normal processing (step 95).
On the other hand, when the deposit date is after the invalid date (step 85; Y), the electronic money card 6 is charged with the invalid electronic money terminal 8, and therefore the electronic money terminal 8 An invalidation command is transmitted to the card 6 and the electronic money card 6 is requested to be invalidated (step 100).

The electronic money card 6 receives and executes the invalidation command from the electronic money terminal 8 and sets the value of the validity flag to invalid (step 105).
As a result, the electronic money card 6 is invalidated and the value charged by the invalid electronic money terminal 8 cannot be used.
In the present embodiment, the electronic money card 6 is invalidated on the condition that the terminal ID matches and the deposit date is before the invalid date. The electronic money card 6 can also be configured to be invalidated by the match.
In this case, there is a possibility that the electronic money card 6 charged before the electronic money terminal 8 becomes invalid may be invalidated, but how much accuracy is required is determined by a request required for the electronic money system 1.

As described above, when the terminal ID acquired from the money terminal and the invalid terminal ID received from the electronic money server 2 match, the electronic money terminal 8 provides invalidation information for invalidating the money terminal to the money terminal. An invalidating means for inputting is provided.
Further, the invalid terminal ID is accompanied by an invalid date and time (invalid date and time) when the access terminal is invalid, and the terminal ID of the access terminal that has increased the amount has increased the amount. When the increase date and time (payment date) is attached, and the invalidation means inputs invalidation information to the money terminal when the increase date and time is after the invalid date and time.

Although the case where the electronic money card 6 is invalidated by the electronic money terminal 8 has been described above, the same applies to the case where the mobile phone 7 is invalidated by the electronic money terminal 8.
That is, if the validity flag of the electronic money IC chip of the mobile phone 7 is valid, the electronic money terminal 8 is charged by the electronic money terminal 8 that has been invalidated by acquiring the payment history from the mobile phone 7. If the electronic money terminal 8 is charged, the electronic money IC chip of the mobile phone 7 is invalidated.

Similarly to the electronic money terminal 8, the electronic money server 2 invalidates the electronic money card 6 and the mobile phone 7 charged by the invalid electronic money terminal 8.
That is, when the electronic money server 2 accesses the electronic money card 6 or the mobile phone 7 via the Internet 4, the electronic money server 2 acquires the payment history from the electronic money card 6 or the mobile phone 7 and compares it with the invalid terminal list. If the electronic money server 2 is charged by the invalid electronic money terminal 8, the electronic money server 2 transmits an invalidation command to the electronic money card 6 or the mobile phone 7 to invalidate them.

Although the present embodiment has been described above, the following effects can be obtained.
(1) The electronic money IC chip (electronic money card 6 or mobile phone 7) charged by the invalidated electronic money terminal 8 can be identified and invalidated.
(2) When the electronic money functional unit ID of the electronic money IC chip to be invalidated is distributed to each electronic money terminal 8, a large amount of electronic money functional unit ID must be distributed, but a very small number of invalidated electronic By distributing the terminal ID of the money terminal 8, many electronic money IC chips can be invalidated.
(3) When the electronic money terminal 8 overwrites the invalid terminal list, the electronic money terminal 8 can store the latest invalid terminal list.

It is the figure which showed the network structure of the electronic money system. It is a figure for demonstrating the structure of an electronic money card. It is the figure which showed an example of the logical structure of utilization log data. It is a figure for demonstrating the structure of a mobile telephone. It is a figure for demonstrating the structure of an electronic money terminal. It is the figure which showed an example of the logical structure of an invalid terminal list. It is a figure for demonstrating the structure of an electronic money server. It is the figure which showed an example of the logical structure of a member store database. It is a flowchart for demonstrating the procedure in which an electronic money server transmits an invalid terminal list to an electronic money terminal. It is a flowchart for demonstrating the procedure in which an electronic money terminal invalidates an electronic money card.

Explanation of symbols

1 Electronic Money System 2 Electronic Money Server 4 Internet 5 Base Station 6 Electronic Money Card 7 Mobile Phone 8 Electronic Money Terminal 9 User Terminal

Claims (6)

For charge having a monetary value amount, invalidation information indicating validity / invalidity of a charge function for increasing the monetary value amount and a settlement function for decrementing the monetary amount, and an amount increasing means for increasing the monetary value amount An amount reducing means for accessing the money terminal storing the terminal ID of the access terminal as electronic data and reducing the amount of the money value ;
Invalid terminal ID reception for receiving an invalid terminal ID, which is a terminal ID of a charge access terminal that has become invalid, from a management server that manages validity / invalidity of the charge access terminal having an amount increase means for increasing the monetary value Means,
Before the amount deducted means performs reduction of the amount of the monetary value, and the terminal ID acquisition means for acquiring the terminal ID storing the monetary terminal accesses the monetary terminal from the monetary terminal,
Invalidation means for updating invalidation information of the money terminal to a value indicating invalidity when the acquired terminal ID matches the invalid terminal ID received;
Comprising
The amount reduction means, wherein the invalidation information optionally invalidation information is not stored and the invalidating means for indicating invalidity to the monetary terminal if not updated, thereby reduced the amount that the storage,
An access terminal for payment characterized by this. The money terminal stores a history including a plurality of terminal IDs of charge access terminals having an amount increase means for increasing the amount of the money value,
The terminal ID acquisition means acquires a plurality of terminal IDs included in the history stored in the money terminal by accessing the money terminal from the money terminal,
The invalidation means updates the invalidation information of the money terminal to a value indicating invalidity when the received invalid terminal ID matches at least one of the acquired plurality of terminal IDs.
The access terminal for payment according to claim 1, wherein: The history includes a deposit history including a plurality of terminal IDs of a charge access terminal having an amount increase means for increasing the amount of money value, and an access terminal for settlement having an amount reduction means for reducing the amount of money value. Withdrawal history including a plurality of terminal IDs,
The terminal ID obtaining means obtains a plurality of terminal IDs included in the deposit history stored in the money terminal by accessing the money terminal from the money terminal;
The settlement access terminal according to claim 2, wherein The invalid terminal ID is accompanied by an invalid date and time when the charging access terminal is invalid,
The terminal ID of the charge for the access terminal with the amount increase means is increased the amount of the monetary value, increased time was increased the amount of the monetary value are accompanied,
Said disabling means, when the increase time is the invalid date later claim 1, characterized in that updating the value indicating an invalid invalidation information of the cash management to claim 3 The payment access terminal according to Item 1 . For charge having a monetary value amount, invalidation information indicating validity / invalidity of a charge function for increasing the monetary value amount and a settlement function for decrementing the monetary amount, and an amount increasing means for increasing the monetary value amount An amount reduction step of accessing the money terminal storing the terminal ID of the access terminal as electronic data and reducing the amount of the money value ;
Invalid terminal ID reception for receiving an invalid terminal ID, which is a terminal ID of a charge access terminal that has become invalid, from a management server that manages validity / invalidity of the charge access terminal having an amount increase means for increasing the monetary value Steps,
Before performing the reduction of the amount of the monetary value in the amount reduced step, a terminal ID acquisition step of acquiring the terminal ID to which the money terminal stores from the monetary terminal by accessing the money terminal,
When the acquired terminal ID matches the received invalid terminal ID, the invalidation step of updating the invalidation information of the money terminal to a value indicating invalidity ;
Including
At the amount reduction step, the revocation information when revocation information is not stored and the invalidation step indicating invalidity to the monetary terminal if not updated, thereby reduced the amount that the storage,
An access method using an access terminal for settlement . For charge having a monetary value, invalidation information indicating validity / invalidity of a charge function for increasing the monetary value and a settlement function for decrementing the monetary value, and an amount increasing function for increasing the monetary value An amount reduction function for accessing the money terminal storing the terminal ID of the access terminal as electronic data and reducing the amount of the money value ;
Invalid terminal ID reception for receiving an invalid terminal ID, which is a terminal ID of a charge access terminal that has become invalid, from a management server that manages validity / invalidity of the charge access terminal having an amount increase function for increasing the monetary value Function and
Before the amount reduced function performs reduction of the amount of the monetary value, and the terminal ID obtaining function for obtaining a terminal ID storing the monetary terminal accesses the monetary terminal from the monetary terminal,
An invalidation function that updates invalidation information of the money terminal to a value indicating invalidity when the acquired terminal ID and the received invalid terminal ID match;
To the computer that constitutes the payment access terminal,
The amount reduced function, when the invalidation information optionally invalidation information is not stored and the revocation function indicating invalidity in the monetary terminal is not updated, thereby reduced the amount that the storage,
An access program characterized by that .

Images