JP5939842B2 - Electronic money system and terminal device - Google Patents

Description

  The present invention relates to an electronic money system, a terminal device, and a server device.

Electronic money is a settlement means that is electronically performed without using cash, and is becoming widespread due to the ease with which payment can be made by holding a payment medium such as an electronic money card over (closer to) an electronic money reader / writer. In the prepaid type electronic money, for example, an electronic money charging machine configured by combining a POS (Point Of Sales) terminal device and an electronic money reader / writer is charged in advance on a payment medium and used for payment.
When the electronic money charging machine is stolen, such as when the POS terminal device and the electronic money reader / writer are stolen, there is a possibility that the unauthorized electronic money charging is performed semipermanently.

On the other hand, the electronic money charge system described in Patent Document 1 is a system in which an electronic money charge machine is connected to a center server via a network such as the Internet. When the power to the money charging machine is turned on or periodically, authentication with the center server is performed, and the device can be operated on the condition of the authentication.
This prevents illegal writing of electronic money using stolen goods due to theft or the like.

JP 2005-157497 A

  However, in the electronic money charge system described in Patent Document 1, when an electronic money charging machine that has been stolen is connected to the same network as the network that was connected before the theft, unauthorized electronic money charging is semipermanently performed. May be possible.

  The present invention has been made in view of such circumstances, and an object thereof is to provide an electronic money system, a terminal device, and a server device that can further enhance the safety of a terminal device (electronic money charging machine). There is to do.

  The present invention has been made to solve the above-described problems, and an electronic money system according to an aspect of the present invention includes a server device and a first terminal device, and the first terminal device is a prepaid electronic money. Medium data acquisition unit that reads identification information of the second terminal device that has charged the payment medium from the payment medium, and inactive terminal information in which the identification information of the second terminal device indicates the terminal device to be suspended An inactive terminal determination request transmitting unit that transmits an inactive terminal determination request for determining whether or not the request is included in the server apparatus, and a determination for receiving a determination result of the server apparatus for the inactive terminal determination request A result receiving unit, and a use stop processing unit that stops the use of the payment medium when the determination result indicates that the identification information of the second terminal device is included in the inactive terminal information, The server device includes an inactive terminal information storage unit for storing the inactive terminal information, an inactive terminal determination request receiving unit for receiving the inactive terminal determination request, and the inactive terminal determination request transmitting unit. An inactive terminal determination unit that determines whether or not the identification information of the second terminal device is included in the inactive terminal information, and a determination result transmission unit that transmits a determination result in response to a request from It is characterized by doing.

  An electronic money system according to an aspect of the present invention is the above-described electronic money system, wherein the inactive terminal determination request transmission unit is configured such that the medium data acquisition unit performs a charge performed on the payment medium. The inactive terminal determination request for requesting a determination as to whether or not the identification information of the second terminal device is included in the inactive terminal information when information indicating that the validity check is necessary is read from the settlement medium Is transmitted.

  An electronic money system according to an aspect of the present invention is the above-described electronic money system, wherein the first terminal device has a cumulative upper limit amount charged by the first terminal device within a predetermined period. A cumulative amount determination unit that determines whether or not the payment amount exceeds the predetermined upper limit amount when the cumulative amount determination unit determines that the cumulative amount exceeds the predetermined upper limit amount. The use of the medium is stopped.

  An electronic money system according to an aspect of the present invention is the above-described electronic money system, wherein the first terminal device determines whether or not the first terminal device has transmitted the previous charge result. Including a determination unit, and when the previous situation determination unit determines that the first terminal device has not transmitted the previous charge result, the use suspension processing unit stops using the payment medium. Features.

  Moreover, the electronic money system according to an aspect of the present invention is the above-described electronic money system, and the server device determines that the accumulated amount determination unit determines that the accumulated amount exceeds the predetermined upper limit amount. It is characterized by comprising an e-mail transmission unit for transmitting an e-mail indicating that the upper limit has been exceeded to a preset destination.

  An electronic money system according to an aspect of the present invention is the above-described electronic money system, wherein the server device includes the inactive terminal information if the inactive terminal information includes identification information of the second terminal device. When the terminal determination unit determines, an email transmission unit that transmits an e-mail indicating that a charge has been detected by the terminal device to be deactivated to a preset destination is provided.

  Moreover, the electronic money system according to an aspect of the present invention is the above-described electronic money system, and the server device determines that the accumulated amount determination unit determines that the accumulated amount exceeds the predetermined upper limit amount. An inactive terminal information management unit including identification information of the first terminal device in the inactive terminal information is provided.

  An electronic money system according to an aspect of the present invention is the above-described electronic money system, wherein the first terminal device has a predetermined upper limit number of times that the first terminal device has been charged within a predetermined period. The server device includes a number determination unit that determines whether or not the number exceeds a predetermined upper limit number of times that the number determination unit charges the first terminal device within a predetermined period. An inactive terminal information management unit for including identification information of the first terminal device in the inactive terminal information.

  An electronic money system according to an aspect of the present invention is the above-described electronic money system, wherein the server device includes an inactive terminal registration request acquisition unit that acquires a registration request for a terminal device in the inactive terminal information. And an inactive terminal information management unit that includes, in the inactive terminal information, identification information of the terminal device indicated by the registration request acquired by the inactive terminal registration request acquisition unit.

  The electronic money system according to an aspect of the present invention is the above-described electronic money system, wherein the determination result of the server device received by the determination result receiving unit is that the identification information of the second terminal device is inactive. When indicating that the terminal information is not included, the information processing apparatus includes a determination result registration unit that registers, in the payment medium, information indicating that the charge performed on the payment medium is valid.

  The terminal device according to an aspect of the present invention includes a medium data acquisition unit that reads identification information of a terminal device that has charged the payment medium from a payment medium of prepaid electronic money, and the identification information of the terminal device includes: An inactive terminal determination request transmitting unit that transmits to the server device an inactive terminal determination request that requests determination of whether or not the inactive terminal information indicating the terminal device to be deactivated is included, and the inactive terminal determination request A determination result receiving unit that receives a determination result of the server device with respect to, and when the determination result indicates that the identification information of the terminal device is included in the inactive terminal information, the use stop that stops the use of the payment medium And a processing unit.

  Further, the server device according to one aspect of the present invention includes an inactive terminal information storage unit that stores inactive terminal information indicating a terminal device to be suspended, and identification information of a certain terminal device included in the inactive terminal information. An inactive terminal determination request receiving unit for receiving an inactive terminal determination request for requesting whether or not to be determined, and in response to the inactive terminal determination request, identification information of the terminal device is included in the inactive terminal information And an inactive terminal determination unit that determines whether or not to be transmitted, and a determination result transmission unit that transmits a determination result.

  ADVANTAGE OF THE INVENTION According to this invention, the safety | security of a terminal device (electronic money charge machine) can be improved more.

It is a schematic block diagram which shows the apparatus structure of the electronic money system in one Embodiment of this invention. It is a schematic block diagram which shows the function structure of the electronic money system in the embodiment. In the embodiment, it is a sequence diagram showing an example of the operation of the electronic money system when the member store terminal device performs the first charge of the day. FIG. 6 is a sequence diagram showing an example of the operation of the electronic money system when the member store terminal device succeeds by performing the second and subsequent charges in one day in the embodiment. FIG. 11 is a sequence diagram illustrating an example of an operation of the electronic money system when the member store terminal device fails to charge when exceeding the upper limit amount of the accumulated charge amount in the embodiment. In the same embodiment, an example of the operation of the electronic money system when payment processing is performed for a settlement medium that has received a temporary charge by a member store terminal device registered in inactive terminal information in the previous transaction is shown. It is a sequence diagram. 4 is an explanatory diagram illustrating an example of data handled by the electronic money system 1 in the embodiment. FIG. 4 is an explanatory diagram illustrating an example of data handled by the electronic money system 1 in the embodiment. FIG. 5 is a flowchart illustrating a procedure of processing performed by a member store terminal device (OCX processing unit) when charging a payment medium in the embodiment. 4 is a flowchart illustrating a procedure of processing performed by a server device that has received a terminal authentication request by charging a payment medium in the embodiment. 4 is a flowchart illustrating a procedure of processing performed by a server device that has received a charge result notification file by charging a settlement medium in the embodiment. 4 is a flowchart illustrating a procedure of processing performed by a member store terminal device (OCX processing unit) when performing electronic money payment processing in the embodiment.

Embodiments of the present invention will be described below with reference to the drawings.
FIG. 1 is a schematic configuration diagram showing a device configuration of an electronic money system according to an embodiment of the present invention. In FIG. 1, an electronic money system 1 includes a server device 100, a POS (Point Of Sales) terminal device 200, and an electronic money reader / writer (medium data acquisition unit, determination result registration unit in the present invention) 300. . The electronic money reader / writer 300 is connected to the POS terminal device 200. The server device 100 and the POS terminal device 200 are connected to the network 910. The server device 100 is connected to a network 920, and a terminal device or a server device (hereinafter referred to as “provider terminal device”) 800 owned by a business operator is connected to the network 920.

The electronic money system 1 is a prepaid electronic money system, and performs electronic money charging (electronic money charging) and payment processing (settlement) of electronic money to a payment medium.
Here, the payment medium is a medium that stores various kinds of information for card payment (such as card identification information and remaining charge information) and receives charge and payment processing by the electronic money system 1. For example, the payment medium may be an electronic money card or a mobile phone terminal (mobile phone or smartphone) having an electronic money function.

Network 910 and 920 are both communication networks. The network 910 is a secure network such as a VPN (Virtual Private Network), for example, and mediates communication between the server device 100 and the POS terminal device 200. The network 920 is a communication network dedicated to the electronic money system 1, for example, and mediates communication between the server device 100 and the operator terminal device 800.
However, the present invention does not depend on the form of the networks 910 and 920. Therefore, various communication networks can be used as the networks 910 and 920.

  Both the POS terminal device 200 and the electronic money reader / writer 300 are provided in stores of electronic money member stores (hereinafter simply referred to as “member stores”). The member store terminal apparatus 400 is comprised by this. The member store terminal device 400 corresponds to an example of the terminal device, the first terminal device, and the second terminal device in the present invention.

  The electronic money reader / writer 300 communicates with a payment medium close to (held over) the electronic money reader / writer 300 to read data from the payment medium and write data to the payment medium. Make a mistake. In particular, the electronic money reader / writer 300 reads the identification information (more specifically, the identification information of the electronic money reader / writer 300) of the member store terminal device 400 that charged the payment medium from the payment medium. As will be described later, the identification information of the member store terminal device 400 is used for authentication of the member store terminal device 400.

  Here, the authentication of the member store terminal device 400 is a process for determining whether or not the member store terminal device 400 to be authenticated is registered as a terminal device to be suspended. For example, a member store terminal device 400 that may be illegally used, such as a member store terminal device 400 that has been stolen, is registered as a terminal device to be suspended. In the authentication of the member store terminal device 400, the server device 100 (the inactive terminal determination unit 121) determines whether or not the member store terminal device 400 to be authenticated is registered as a terminal device to be disabled. .

Hereinafter, the terminal device whose use is to be stopped is referred to as an “inactive terminal”. The authentication of the member store terminal device 400 is referred to as “terminal authentication” or “inactive terminal determination”, and the authentication request is referred to as “terminal authentication request” or “inactive terminal determination request”.
In the following, a payment medium approaching the electronic money reader / writer 300 is referred to as a “processing target payment medium”.

  Further, the electronic money reader / writer 300 indicates that the inactive terminal information does not include the identification information of the member store terminal device 400 that has charged the payment medium to be processed as a result of the inactive terminal determination in the server device 100. In the case of indicating, the information indicating that the charge performed on the settlement medium is valid (regular charge) is registered in the settlement medium. Here, there are a temporary charge and a regular charge for the payment to the settlement medium, and the temporarily charged electronic money cannot be used for payment unless it is updated to the regular charge. Based on the determination result from the server device 100, the electronic money reader / writer 300 performs data rewriting for updating the electronic money of the temporary charge to the regular charge. A specific example of the update process will be described later.

  The POS terminal device 200 controls the electronic money reader / writer 300 to perform charging and payment processing for the payment medium. More specifically, when receiving (detecting) a user operation instructing charging of electronic money, the POS terminal apparatus 200 performs a charging process for increasing the available balance stored in the settlement medium to be processed. In addition, when receiving a user operation for instructing payment of electronic money, the POS terminal device 200 performs a payment process for reducing the available balance stored in the settlement medium to be processed.

  During this charging process or payment process, the POS terminal device 200 charged the server device 100 with a terminal authentication request of the member store terminal device 400 that the POS terminal device 200 itself constitutes, or a payment medium to be processed. A request for terminal authentication of the member store terminal device 400 is made, and whether or not charge processing or payment processing is possible is determined based on the authentication result.

  The server device 100 is, for example, a computer provided in a relay center that relays a member store and an electronic money business operator. The server device 100 authenticates the member store terminal device 400 in response to a request from the member store terminal device 400 provided in the member store. In addition, the server device 100 aggregates detailed information such as charge processing and payment processing performed by the member store terminal device 400 and transmits it to a business entity terminal device 800 provided on the electronic money business side.

  The business entity terminal device 800 is, for example, a terminal device or a server device owned by an electronic money business operator. The business entity terminal device 800 performs totaling of detailed information such as charge processing and payment processing performed by the member store terminal device 400 transmitted from the server device 100 and settlement processing with each member store. Further, upon receiving a user operation requesting the use stop setting of a certain member store terminal device 400, the business entity terminal device 800 registers the member store terminal device 400 as a terminal device whose use is to be stopped with respect to the server device 100. Request to do. The server device 100 performs registration in response to the request, and handles the member store terminal device 400 as a terminal device whose use is to be suspended during subsequent authentication of the member store terminal device 400.

  FIG. 2 is a schematic block diagram showing a functional configuration of the electronic money system 1. In FIG. 1, an electronic money system 1 includes a server device 100, a POS terminal device 200, and an electronic money reader / writer (medium data acquisition unit, determination result registration unit in the present invention) 300. The server device 100 includes a communication unit (inactive terminal determination request reception unit, determination result transmission unit, mail transmission unit in the present invention) 110, a control unit 120, and a database unit 130. The control unit 120 includes an inactive terminal determination unit 121. The database unit 130 includes a charge result notification DB (Database) 131, an inactive terminal information DB (inactive terminal information storage unit, inactive terminal information management unit in the present invention) 132, an electronic money charge specification DB 133, It comprises. The POS terminal device 200 includes a POS application processing unit 210, an OCX (OLE (Object Linking And Embedding) Custom Control) processing unit 220, and a storage unit 230. The OCX processing unit 220 includes a communication processing unit (inactive terminal determination request transmission unit and determination result reception unit in the present invention) 221, a main control unit (use stop processing unit in the present invention) 222, and an accumulated amount determination unit 224. A number determination unit 225 and a previous situation determination unit 226.

The electronic money reader / writer 300 is connected to the POS terminal device 200. The server device 100 and the POS terminal device 200 are connected to the network 910. The server device 100 is connected to a network 920, and a business entity terminal device 800 is connected to the network 920.
In the figure, the same reference numerals (1, 100, 200, 300, 800, 910, 920) are assigned to the same parts as those in FIG.

In the server device 100, the communication unit 110 communicates with the POS terminal device 200 by connecting to the network 910.
The communication unit 110 is an example of an inactive terminal determination request receiving unit in the present invention, and receives an inactive terminal determination request (terminal authentication request) from the POS terminal device 200 and outputs it to the inactive terminal determination unit 121. . Moreover, the communication part 110 is an example of the determination result transmission part in this invention, and transmits the determination result (authentication result) of the inactive terminal determination part 121 with respect to an inactive terminal determination request.

  The communication unit 110 is an example of a mail transmission unit according to the present invention, and detects that the member store terminal device 400 exceeds the upper limit amount (the accumulated amount charged within a predetermined period exceeds the predetermined upper limit amount). Then, when a notification of exceeding the upper limit amount is transmitted to the server apparatus 100, an e-mail (warning mail) indicating that the upper limit amount has been detected is transmitted to a preset destination. For example, the communication unit 110 transmits the email to the email address of the electronic money business operator.

  Here, the upper limit of the accumulated charge of the member store terminal device 400 is set to an amount that does not exceed the normal charge at the store, and if the upper limit is exceeded, the possibility of unauthorized charge is high. Therefore, when the upper limit amount is exceeded, the communication unit 110 can send an e-mail to alert a person concerned with the electronic money system 1.

  In addition, when the inactive terminal determination unit 121 determines that the identification information of the member store terminal device 400 that has charged the payment medium to be processed is included in the inactive terminal information, the communication unit 110 determines that the use is to be suspended. An e-mail indicating that charging by the terminal device has been detected is transmitted to a preset destination.

Here, the inactive terminal information is information indicating a terminal device that is the subject of suspension of use. Specifically, the inactive terminal information includes a list of identification information of terminal devices that are subject to suspension of use.
The charge by the terminal device subject to the suspension of use is considered to be an unauthorized charge. Therefore, when the inactive terminal determination unit 121 detects that charging is being performed by the terminal device that is the target of suspension of use in terminal authentication (inactive terminal determination) before charging, communication is performed. When the unit 110 transmits an e-mail, it is possible to call attention to a person concerned with the electronic money system 1.

  The communication unit 110 is an example of an inactive terminal registration request acquisition unit in the present invention, and a registration request of the member store terminal device 400 to the inactive terminal information (hereinafter referred to as “inactive terminal registration request”). Obtain and output to the inactive terminal information DB 132. The registration of the member store terminal device 400 in the inactive terminal information is to include the identification information of the member store terminal device 400, that is, the identification information of the electronic money reader / writer 300, in the inactive terminal information.

The control unit 120 is realized by a CPU (Central Processing Unit) included in the server apparatus 100 reading out and executing a program from a storage device included in the server apparatus 100 to control each unit of the server apparatus 100. Various processes are executed.
The inactive terminal determination unit 121 performs terminal authentication for the member store terminal device 400 to be authenticated in response to a terminal authentication request from the POS terminal device 200 (communication processing unit 221) (that is, the member store terminal device 400 has the terminal authentication request). It is determined whether or not the identification information is included in the inactive terminal information).

The database unit 130 stores and manages a charge result notification from the member store terminal device 400, inactive terminal information, electronic money charge details, and the like. The database here is a system that stores (stores) and manages (for example, searches, reads, and deletes) data.
The database unit 130 is realized, for example, when the CPU included in the server apparatus 100 reads and executes database software from a storage device included in the server apparatus 100. Then, the database unit 130 stores and manages data using the storage area of the storage device.
However, the present invention does not depend on the implementation form of the database unit 130. For example, the database unit 130 may be realized by an external database machine (a separate housing from the control unit 120).

The charge result notification DB 131 stores and manages a charge result notification transmitted when the member store terminal device 400 charges electronic money. This charge result notification includes an error code, and the inactive terminal information DB 132 updates the inactive terminal information based on the error code.
The electronic money charge details DB 133 stores and manages the electronic money charge details transmitted when the member store terminal device 400 performs the closing process. The electronic money charge details stored in the electronic money charge details DB 133 are converted into a format designated by the electronic money business operator and transmitted to the business operator terminal device 800.

  The inactive terminal information DB 132 stores and manages inactive terminal information. In particular, the inactive terminal information DB 132 is based on the charge result notification from the member store terminal device 400 or the inactive terminal registration request acquired (received) by the communication unit 110, and the member store terminal device corresponding to the inactive terminal information. 400 registrations are performed.

  Specifically, first, the inactive terminal information DB 132 detects that the member store terminal device 400 has exceeded the upper limit amount (the accumulated amount of charges charged within a predetermined period has exceeded the predetermined upper limit amount), and the server device When the notification of exceeding the upper limit amount is transmitted to 100, the identification information of the member store terminal device 400 is included in the inactive terminal information (that is, the member store terminal device 400 is registered in the inactive terminal information). As described above, when the accumulated charge amount exceeds the upper limit amount, the possibility of unauthorized charge is high. Therefore, when the upper limit amount is exceeded, the inactive terminal information DB 132 registers the member store terminal device 400 in the inactive terminal information (that is, is subject to suspension of use), and the subsequent unauthorized charge, which will be described later. As described above, the use of electronic money that is illegally charged can be prevented.

  In addition, the inactive terminal information DB 132 determines that the member store terminal device 400 (the number determination unit 225) determines that the number of times the member store terminal device 400 has charged within a predetermined period exceeds a predetermined upper limit number of times. The identification information of the member store terminal device 400 is included in the inactive terminal information.

  Here, the upper limit number of charges of the member store terminal device 400 is set to a number that does not exceed the normal charge in the store, and if the upper limit number of times is exceeded, the possibility of unauthorized charge is high. Therefore, when the upper limit number of times is exceeded, the inactive terminal information DB 132 registers the member store terminal device 400 in the inactive terminal information (that is, the use is suspended), so that the subsequent unauthorized charge, which will be described later. As described above, the use of electronic money that is illegally charged can be prevented.

  Further, the inactive terminal information DB 132 includes the identification information of the member store terminal device 400 indicated by the inactive terminal registration request acquired by the communication unit 110 in the inactive terminal information. For example, when a member store is stolen by the member store terminal device 400 (the POS terminal device 200 and the electronic money reader / writer 300), the member store contacts the electronic money company and receives an operation from the electronic money company. The business entity terminal device 800 transmits an inactive terminal registration request. Then, the inactive terminal information DB 132 registers the member store terminal device 400 in the inactive terminal information based on the registration request. When the inactive terminal information DB 132 performs the registration, the use of the member store terminal device 400 can be stopped when there is an access from the member store terminal device 400 that has been stolen.

In the POS terminal device 200, the POS application processing unit 210 executes various functions as a POS terminal. In particular, the POS terminal device 200 calculates a payment amount (price or charge) as a cash register and accepts a selection of a payment method. When electronic money is selected as the payment method, the POS terminal device 200 outputs the amount of payment to the OCX processing unit 220 to perform payment (settlement) processing with electronic money.
Further, the POS terminal device 200 accepts an input of a charge amount as an electronic money charging machine. Then, the POS terminal device 200 outputs the input payment amount to the OCX processing unit 220 to perform the charging process.

  The OCX processing unit 220 communicates with the server device 100 as a communication driver of the POS terminal device 200, and executes electronic money charging processing and payment processing. The OCX processing unit 220 is realized, for example, when the CPU included in the POS terminal device 200 executes embedded software. In particular, the identification information of the POS terminal device 200, the upper limit amount of the accumulated charge amount, and the upper limit number of the charge, which are stored in the OCX processing unit 220, are incorporated in an unchangeable manner.

The communication processing unit 221 communicates with the server device 100 via the network 910. In particular, the communication processing unit 221 is an example of an inactive terminal determination request transmission unit in the present invention, and transmits an inactive terminal determination request to the server device 100. For example, the communication processing unit 221 sends information indicating that the electronic money reader / writer 300 needs to confirm the validity of the charge performed on the payment medium held over the electronic money reader / writer 300 from the payment medium. When read, it is necessary to determine whether or not the identification information of the member store terminal device 400 that has charged the payment medium is included in the inactive terminal information (that is, terminal authentication of the member store terminal device 400). An active terminal determination request (terminal authentication request) is transmitted.
The communication processing unit 221 is an example of a determination result receiving unit in the present invention, and receives a determination result of the server device 100 in response to an inactive terminal determination request.

  The main control unit 222 controls each unit of the OCX processing unit 220 to execute various functions. In particular, the main control unit 222 generates data such as various notifications and various requests, and causes the communication processing unit 221 to transmit the data to the server device 100. For example, the main control unit 222 generates a charge result notification file when the charge process is completed, stores the file in the storage unit 230 (write), and causes the communication processing unit 221 to transmit the file to the server device 100.

The main control unit 222 is an example of a use stop processing unit according to the present invention, and stops the use of the settlement medium to be processed when a predetermined event (event considered to be an unauthorized charge) is detected.
For example, when the member store terminal device 400 that has charged the processing target payment medium is registered in the inactive terminal information, the main control unit 222 stops the use of the processing target payment medium. That is, when the main controller 222 determines that the determination result of the server device 100 in response to the inactive terminal determination request for the settlement medium to be processed indicates that the identification information of the member store terminal device 400 is included in the inactive terminal information, Stop using the payment medium to be processed.

In addition, the main control unit 222 determines that the member store terminal device 400 (cumulative) when the accumulated amount charged by the member store terminal device 400 including the main control unit 222 within a predetermined period exceeds a predetermined upper limit amount. When the amount determination unit 224) determines, the use of the settlement medium to be processed is stopped.
Further, when the previous situation determination unit 226 determines that the member store terminal device 400 provided with the main control unit 222 itself has not transmitted the previous charge result, the main control unit 222 stops using the settlement medium to be processed. Let Specifically, the main control unit 222 stops (fails) the charge process or the payment process being executed for the payment medium.

The accumulated amount determination unit 224 determines whether or not the accumulated amount charged by the member store terminal device 400 including the accumulated amount determination unit 224 itself within a predetermined period exceeds a predetermined upper limit amount.
The number determination unit 225 determines whether or not the number of times that the member store terminal device 400 including the number determination unit 225 has charged within a predetermined period exceeds a predetermined upper limit number.

  The previous situation determination unit 226 determines whether or not the member store terminal device 400 including the previous situation determination unit 226 itself has transmitted the previous charge result. As described above, when the previous situation determination unit 226 determines that the member store terminal device 400 has not transmitted the previous charge result, the use suspension processing unit 223 stops the use of the settlement medium to be processed. Specifically, the previous situation determination unit 226 determines whether the storage unit 230 stores a charge result notification file. This charge result notification file is a file that is generated by the main control unit 222 and temporarily stored in the storage unit 230 every time the charging process is completed, and is transmitted to the server device 100 by the communication processing unit 221. If the communication processing unit 221 fails to transmit to the server device 100, such as when communication between the communication processing unit 221 and the communication unit 110 is disconnected, the file remains in the storage unit 230. Therefore, the previous situation determination unit 226 determines whether the storage unit 230 stores the file.

  Here, in order to prevent unauthorized processing, the member store terminal device 400 is set to always operate online (in a state where communication with the server device 100 is possible). On the other hand, when the member store terminal device 400 has not transmitted the previous charge result, there is a possibility that the communication is cut off during the processing in order to prevent the server device 100 from detecting the unauthorized processing. is there. Therefore, the use suspension processing unit 223 stops the processing until the member store terminal device 400 transmits the previous charge result, so that the offline continuous processing can be prevented. When the member store terminal device 400 operates online, the server device 100 can check the member store terminal device 400 such as terminal authentication of the member store terminal device 400.

  The storage unit 230 is realized by a storage device included in the POS terminal device 200 and stores various data. In particular, the storage unit 230 stores (stores) a charge amount accumulation file described later, and temporarily stores a charge result notification file generated by the main control unit 222.

The number of member store terminal devices 400 included in the electronic money system 1 is not limited to two as shown in FIG. 2, and may be one or three or more. For example, the number of member stores may be three or more, and a plurality of member store terminal devices 400 may be installed in one member store.
Further, the number of business entity terminal devices 800 included in the electronic money system 1 is not limited to one shown in FIG. 2 and may be two or more. For example, the number of electronic money operators may be two or more, and one electronic money operator may include a plurality of operator terminal devices 800.

Next, operations of the electronic money system 1 and examples of communication messages will be described with reference to FIGS.
FIG. 3 is a sequence diagram showing an example of the operation of the electronic money system 1 when the member store terminal device 400 performs the first charge in one day. In the example of the figure, the member store terminal device 400 installed in the store A is charging.

  In the example shown in the figure, first, the POS application processing unit 210 receives a user operation (for example, a cashier operation or a customer deposit operation) instructing an electronic money charge of 15,000 yen to 15 An electronic money charge instruction of 1,000 yen is output to the OCX processing unit 220 (sequence S101).

  In the OCX processing unit 220 that has received the instruction, the previous state determination unit 226 determines whether or not the member store terminal device 400 has transmitted the previous charge result (sequence S102). In the example of FIG. 3, the storage unit 230 does not store the charge result notification file, and the previous situation determination unit 226 determines that the member store terminal device 400 has transmitted the previous charge result.

Next, the main control unit 222 reads, from the payment medium to be processed, information on a transaction (charge or payment) that was previously performed on the payment medium to the electronic money reader / writer 300 via the communication processing unit 221. Request (sequence S103).
Then, the electronic money reader / writer 300 reads out the information from the settlement medium to be processed and transmits it to the POS terminal device 200, and the communication processing unit 221 receives the information and outputs it to the main control unit 222 (sequence S104). .

Next, the main control unit 222 generates a terminal authentication request and outputs the request to the communication processing unit 221, and the communication processing unit 221 transmits the terminal authentication request to the server device 100 (sequence S105).
7 and 8 are explanatory diagrams showing examples of data handled by the electronic money system 1. FIG. 7A shows an example of a terminal authentication request transmitted by the POS terminal device 200 (communication processing unit 221). In FIG. 9A, the terminal authentication request includes a message type field, a terminal year / month / day / hour / minute / second field, a terminal local ID (Identifier) field, a previous charge information as a temporary charge flag field, It has a year / month / day / hour / minute / second field, a terminal local ID field, a card number field, and a charge amount field.

The message type column is a column for storing information indicating the type of communication data. In the example of FIG. 7A, a value “23010001” indicating terminal authentication (terminal authentication request and notification of a result thereof) is stored. Yes.
The terminal year / month / day / hour / minute / second column stores the transmission date / time information of the data (the information of the date and time when the main control unit 222 generated the data). In the example of FIG. A value indicating 22: 16: 23: 59 is stored.

The terminal local ID column is a column for storing identification information of the member store terminal device 400 that has transmitted the data (currently, the member store terminal device 400 that is going to carry out a transaction with the settlement medium to be processed). In the example of (A), identification information (identification number) “05208018” of the electronic money reader / writer 300 installed in the store A is stored.
In each column of the previous transaction information, information read by the member store terminal device 400 (electronic money reader / writer 300) from the settlement medium to be processed is stored.
Here, the previous transaction information is information related to a transaction that was performed last time using the processing target payment medium, and the member store terminal device 400 that performed the previous transaction writes the information to the processing target payment medium. It is information included in transaction history information.

  The temporary charge flag column in the previous transaction information is a column for storing a temporary charge flag indicating whether or not the processing medium that has been processed last time is a temporary charge. The value “1” of the temporary charge flag indicates that it is a temporary charge, and the value “0” indicates that it is not a temporary charge (the charge performed on the settlement medium is a regular charge). .

  Here, the temporary charge is a charge that needs to be updated to a regular charge in response to a regular charge determination (validity confirmation of charge) of the server device 100 in order to use the charged electronic money for payment. In this embodiment, the member store terminal device 400 always charges with a temporary charge, and receives the regular charge determination of the server device 100 during the payment process. The server device 100 performs terminal authentication of the member store terminal device 400 that has performed the temporary charge as the regular charge determination.

In this way, the member store terminal device 400 performs a temporary charge and receives a regular charge determination at the time of payment, so even if an unauthorized charge is made, the use is stopped at the payment stage to prevent damage. obtain.
Note that the present invention does not depend on the format of information indicating whether or not provisional charging is performed. Therefore, various types of information that can distinguish between the temporary charge and the regular charge can be used instead of the temporary charge flag.

The use date / time / minute / second column is a column for storing date / time information when the previous transaction (provisional charge in the example of FIG. 7A) was performed. In the example of FIG. A value indicating 21:56:22 on the 15th is stored.
The terminal local ID column (of the previous transaction information) is a column for storing identification information of the member store terminal device 400 that performed the previous transaction process. In the example of FIG. The identification information (identification number) “0520802” of the money reader / writer 300 is stored.

The card number column is a column for storing a card number that is identification information of a settlement medium to be processed. In the example of FIG. 7A, the card number “4568561232161122” is stored.
The charge amount column is a column for storing the amount charged in the previous transaction process. In the example of FIG. 7A, the amount “15000” (yen) is stored.

  In particular, the member store terminal device 400 includes its own identification information included in the terminal authentication request, so that the server device 100 performs terminal authentication of the member store terminal device 400 (the member store terminal device 400 is subject to suspension of use). Whether the terminal device is registered in the inactive terminal information). In addition, the member store terminal device 400 transmits the identification information of the member store terminal device 400 that has made the temporary charge in the terminal authentication request, so that the server device 100 performs the member store terminal device 400 that has made the temporary charge. Terminal authentication can be performed.

  In the example of FIG. 3, the communication unit 110 receives a terminal authentication request and outputs the request to the inactive terminal determination unit 121. The inactive terminal determination unit 121 receives the request from the requesting member store terminal device 400 from the terminal authentication request. The identification information and the identification information of the member store terminal device 400 that has performed the temporary charge are read and output to the inactive terminal information DB 132. Then, the inactive terminal information DB 132 performs a data search to determine whether each piece of identification information is included in the inactive terminal information, and outputs the search result to the inactive terminal determination unit 121.

  FIG. 7B shows an example of inactive terminal information stored in the inactive terminal information DB 132. In FIG. 5B, the inactive terminal information includes a center registration year / month / day / hour / minute / second field, a terminal local ID field, an electronic money terminal ID field, and a registration reason field. Each row of inactive terminal information indicates information about one member store terminal device 400.

  The center registration date / time / minute / second column is a column for storing information indicating the registration date / time for the inactive terminal information. For example, the inactive terminal information DB 132 writes the reception date / time information of the inactive terminal registration request in the center registration year / month / day / hour / minute / second column. Alternatively, the inactive terminal information DB 132 may write information other than the reception date / time information, such as writing the transmission date / time information included in the inactive terminal registration request in the center registration year / month / day / hour / minute / second column.

  The terminal local ID column contains identification information of the member store terminal device 400 registered in the inactive terminal information (that is, identification information of the electronic money reader / writer 300 included in the member store terminal device 400 whose use is suspended). Is a column for storing. In the terminal authentication, the inactive terminal information DB 132 determines whether the identification information of the member store terminal device 400 to be authenticated matches any of the identification information stored in the terminal local ID column.

The electronic money terminal ID column is a column for storing identification information of the member store terminal device 400 (electronic money reader / writer 300) set by the electronic money merchant.
The registration reason column is a column for storing a code indicating the reason why the member store terminal device 400 is registered in the inactive terminal information. The registration reason “E99” indicates registration due to the accumulated charge amount exceeding the upper limit amount. The registration reason “A01” indicates registration based on a registration request from the business entity terminal device 800. Any registration reason corresponds to the reason for suspension of use of the member store terminal device 400, and the inactive terminal information DB 132 is stored in the identification information of the member store terminal device 400 to be authenticated and the terminal local ID column at the time of terminal authentication. When it is detected that any one of the identification information matches, it is determined that the terminal authentication has failed (with registration).

  In the example of FIG. 3, neither the member store terminal device 400 that transmitted the terminal authentication request nor the member store terminal device 400 that performed the temporary charge is registered in the inactive terminal information. Therefore, the inactive terminal determination unit 121 transmits a result notification indicating that the terminal authentication has been successful to the member store terminal device 400 that is the terminal authentication request source (the member store terminal device 400 of the member store A) via the communication unit 110 (answer) (Sequence S106).

FIG. 7C illustrates an example of terminal authentication result notification transmitted by the server apparatus 100 (communication unit 110). In FIG. 6C, the terminal authentication result notification includes a message type field, a center processing year / month / day / hour / minute / second field, a terminal local ID field, and an error code field.
As in the case of the terminal authentication request (FIG. 7A), a value “23010001” indicating terminal authentication is stored in the message type column.

The center processing year / month / day / hour / minute / second column is a column for storing the transmission date / time information of the result notification (information indicating the date and time when the inactive terminal determination unit 121 generates the result notification), and is an example of FIG. Then, a value indicating 16:24:32 on November 22, 2011 is stored.
The terminal local ID column is a column for storing identification information of the member store terminal device 400 that is the transmission source of the terminal authentication request. In the example of FIG. 7C, the identification of the electronic money reader / writer 300 installed in the store A is identified. Information (identification number) “05208018” is stored.

  The error code column is a column for storing a code indicating the result of terminal authentication. In the example of FIG. 7C, a value indicating that the member store terminal device 400 to be authenticated is registered in the inactive terminal information. (Code) “E99” is stored. In the following, a result notification indicating that processing is prohibited for the settlement medium, such as the value “E99”, is referred to as “rejection response”, and a result notification indicating that processing is permitted is referred to as “normal response”. In the error code column of the normal response, a value (for example, “R00”) indicating that the member store terminal device 400 to be authenticated has not been registered in the inactive terminal information is stored.

When the communication processing unit 221 receives the normal response, the main control unit 222 generates a charge amount accumulation file and stores it in the storage unit 230 (sequence S107).
Here, the main control unit 222 generates an empty file as the charge amount accumulation file, and includes the accumulated amount of charge (charge amount in the charge in the case of the first charge) in the file name. Further, in order to prevent forgery of the charge amount cumulative file, the main control unit 222 includes the generation date information of the charge amount cumulative file in the file name and encrypts the file name. Then, the main control unit 222 causes the storage unit 230 to store the empty file with this file name as a charge amount accumulation file.

  However, the present invention does not depend on the format of the charge amount accumulation file, and various types of charge amount accumulation files showing the accumulated amount of charge can be used. For example, the main control unit 222 may include data obtained by encrypting data including the accumulated charge amount and the file generation date in the contents of the accumulated charge amount file.

Next, the main control unit 222 generates a temporary charge execution instruction for increasing the available balance of the payment medium by 15,000 yen of the charge amount, and transmits the instruction to the electronic money reader / writer 300 via the communication processing unit 221. (Sequence S108).
Receiving the instruction, the electronic money reader / writer 300 performs a temporary charge process for increasing the available balance of the settlement medium to be processed by 15,000 yen, and transmits a temporary charge completion notification to the POS terminal device 200 (sequence S109). ). In the temporary charging process, the electronic money reader / writer 300 updates the available balance and writes the transaction history in the settlement medium in accordance with the temporary charge execution instruction from the main control unit 222.

  FIG. 8A shows an example of transaction history information that the electronic money reader / writer 300 writes in a payment medium. In FIG. 6A, transaction history information includes transaction date / time / minute / second field, terminal local ID field, card number field, balance field, usage / charge amount field, transaction type field, and temporary charge. It has a flag field, a slip number field, and a transaction serial number field.

The transaction year / month / day / hour / minute / second field is a field for storing date / time information on the transaction (charge process or payment process). In the example of FIG. 8A, November 15, 2011, 21:56:22. Stores information indicating seconds.
The terminal local ID column is a column for storing identification information of the member store terminal device 400 that has performed the transaction. In the example of FIG. 8A, the identification information “of the electronic money reader / writer 300 installed in the store B” 05208022 "is stored.

The card number column is a column for storing identification information of a settlement medium to be processed. In the example of FIG. 8A, the identification information “456856123216122” is stored.
The balance column is a column for storing the available balance of the settlement medium to be processed at the time of starting the transaction. In the example of FIG. 8A, the balance “550” (yen) is stored.

The use / charge amount column is a column for storing the payment amount or the charge amount in the transaction. In the example of FIG. 8A, the charge amount “15000” (yen) is stored.
The transaction type column is a column for storing a code indicating the type of the transaction. In the example of FIG. 8A, a code “1” indicating a cash charge (charge when paying cash) is stored.

  The temporary charge flag column is a column for storing a temporary charge flag indicating whether or not the transaction is a temporary charge. As in the case of FIG. 7A, the value “1” of the temporary charge flag indicates that it is a temporary charge, and the value “0” indicates that it is not a temporary charge (in this embodiment, it is a payment process). Show. In the example of FIG. 8A, a value “1” indicating temporary charge is stored.

The slip number column is a column for storing a slip number assigned to the transaction (transaction number on the member store terminal device 400). In the example of FIG. 8A, the slip number “23564” is stored. Yes.
The transaction serial number column is a column for storing a transaction serial number on the settlement medium. In the example of FIG. 8A, the serial number “12” is stored.

  Among the transaction history information fields, the values of the transaction date / time / minute / second field, the terminal local ID field, the card number field, the usage / charge amount field, and the temporary charge flag field are the settlement media to be processed. For the next transaction, the last transaction information in the terminal authentication request (FIG. 7A), the usage date / time / minute / second field, the terminal local ID field, the card number field, the charge amount field, Stored in the temporary charge flag column.

  Note that the settlement medium may store a plurality of transaction history information, or may store only one latest transaction history information. In any case, when generating the terminal authentication request, the main control unit 222 reads data from the latest transaction history information and includes it in the terminal authentication request.

  Here, when the previous transaction in the settlement medium for processing is a charge, the value “1” is stored in the temporary charge flag column of the transaction history information. For this reason, the settlement medium is treated as a temporary charge and cannot be used for payment (payment processing) until the regular charge determination (terminal authentication) of the server apparatus 100 is received.

  On the other hand, when the previous transaction is payment, since the previous transaction is not a temporary charge, the value “0” is stored in the temporary charge flag column of the transaction history information. For this reason, the settlement medium is treated as a regular charge and can be used for payment. That is, in the payment process of the previous transaction, the charge of the settlement medium is updated to the regular charge by receiving the regular charge determination of the server device 100 (terminal authentication with respect to the member store terminal device 400 that performed the temporary charge). Yes.

In the POS terminal device 200 that has received the temporary charge completion notification, the main control unit 222 generates a charge result notification file (sequence S110) and transmits it to the server device 100 via the communication processing unit 221 (sequence S111).
FIG. 8B shows an example of a charge result notification file transmitted by the POS terminal device 200 (communication processing unit 221) when the temporary charge is normally performed. In FIG. 5B, the charge result notification file includes a message type field, a center processing year / month / day / hour / minute / second field, a terminal local ID field, an electronic money terminal ID field, a card number field, and a charge amount field. , A charge accumulated amount column and an error code column.

As described in FIG. 7A, the message type column is a column for storing information indicating the type of communication data. In the example of FIG. 8B, “23050050” indicating a charge result notification is stored. ing.
The center processing year / month / day / hour / minute / second column is a column for storing the transmission date / time information of the charge result notification file (information indicating the date and time when the main control unit 222 generated the charge result notification file). In the example, a value indicating November 22, 2011, 16:46:59 is stored.

The terminal local ID column is a column for storing identification information of the member store terminal device 400 that transmits the charge result notification file. In the example of FIG. 8B, the electronic money reader / writer 300 installed in the store A is stored. The identification information “05208018” is stored.
Similarly to the case of FIG. 7B, the electronic money terminal ID column is a column for storing the identification information of the member store terminal device 400 set by the electronic money merchant. In the example of FIG. The identification information “2304533876002” of the electronic money reader / writer 300 installed in the store A is stored.

The card number column is a column for storing identification information (identification number) of a settlement medium to be processed (that is, a settlement medium that has been temporarily charged). In the example of FIG. 8B, the identification information “4568561232161122” is stored. Is stored.
The charge amount column is a column for storing the amount charged in the current temporary charge. In the example of FIG. 8B, a charge amount of 20,000 yen is stored.

The accumulated charge amount column is a column for storing the accumulated amount that the charge result notification file has been charged in one day. In the example of FIG. 8B, the accumulated amount is 99,9999 yen. .
The error code column is a column for storing a code indicating a charge result, and in the example of FIG. 8B, a value “0” indicating normal termination is stored.

On the other hand, FIG. 8C shows an example of a charge result notification file transmitted by the POS terminal device 200 (communication processing unit 221) when it is detected that the accumulated amount exceeds the upper limit amount during temporary charging.
In the example of FIG. 5C, the accumulated charge amount is 99,999,999 yen at the start of the provisional charge process, and when the charge amount of 15,000 yen is charged, the upper limit amount is exceeded. For this reason, the member store terminal device 400 fails in the temporary charge, and the main control unit 222 generates a charge result notification file in which the error code “−120000” indicating that the accumulated amount exceeds the upper limit amount is stored in the error code column. . The server device 100 that has received the charge result notification file registers the member store terminal device 400 in the inactive terminal information.

  In the example of FIG. 3, the member store terminal device 400 has succeeded in temporary charge, and the member store terminal device 400 transmits a charge result notification file when the temporary charge is normally performed to the server device 100. In the server device 100, the charge result notification DB 131 stores the charge result notification file.

Further, the OCX processing unit 220 (main control unit 222) outputs information indicating the completion of temporary charging to the POS application processing unit 210 (sequence S112). The POS application processing unit 210 displays a temporary charge completion notification on the display screen of the POS terminal device 200 based on the information.
As described above, the electronic money system 1 succeeds in the temporary charge and ends the temporary charge process.

FIG. 4 is a sequence diagram showing an example of the operation of the electronic money system 1 when the member store terminal device 400 succeeds by charging the second and subsequent times in one day.
Sequences S131 to S136 in the figure are the same as sequences S101 to S106 in FIG.

  In sequence S137, the main control unit 222 renames the charge amount accumulation file stored in the storage unit 230 instead of newly generating the charge amount accumulation file. Specifically, the main control unit 222 first calculates the accumulated amount of charge when the current charge is successful. Next, the main control unit 222 encrypts the character string indicating the date of today (the day on which the main control unit 222 performs the process) and the calculated accumulated amount as in the case of the sequence S107. The file name is generated, and the file name of the charge amount accumulation file is changed to the generated file name.

The sequences S138 to S142 are the same as the sequences S108 to S112 in FIG.
Thus, in the second and subsequent charges, the member store terminal device 400 (main control unit 222) updates the accumulated amount of charges.

FIG. 5 is a sequence diagram showing an example of the operation of the electronic money system 1 when the member store terminal device 400 fails to charge when exceeding the upper limit of the accumulated charge amount.
Sequences S161 to S166 in the figure are the same as sequences S101 to S106 in FIG.

  In sequence S167, as described in sequence S137 (FIG. 4), the main control unit 222 calculates the accumulated amount of charge when the current charge is successful. In the example of FIG. 5, the accumulated amount calculated by the main control unit 222 exceeds a preset upper limit amount, and the accumulated amount determination unit 224 calculates the accumulated amount calculated by the communication processing unit 221, the upper limit amount, And the excess of the upper limit is detected.

  Next, the main control unit 222 generates a charge result notification file indicating that the upper limit has been exceeded (sequence S170), and transmits the file to the server device 100 via the communication processing unit 221 (sequence S171).

  In the server apparatus 100 that has received the charge result file, the charge result notification DB 131 stores the charge result file, and the control unit 120 detects an error with reference to the error code column of the charge result file, and the inactive terminal. In the information DB 132, the merchant terminal device 400 that has made a transaction (failed to charge) is registered in the inactive terminal information.

Further, the OCX processing unit 220 (main control unit 222) outputs information indicating an error (transaction not possible) to the POS application processing unit 210 (sequence S172). Based on the information, the POS application processing unit 210 displays a notification (error display) indicating that the transaction cannot be performed on the display screen of the POS terminal device 200.
As described above, the electronic money system 1 fails in the temporary charge and ends the temporary charge process.

  In this way, when an illegal temporary charge is performed, the settlement medium temporarily charged by the member store terminal device 400 by registering the member store terminal device 400 that has performed the temporary charge in the inactive terminal information. Can be stopped. This point will be described with reference to FIG.

FIG. 6 shows an example of the operation of the electronic money system 1 when payment processing is performed for a settlement medium that has received a temporary charge by the member store terminal device 400 registered in the inactive terminal information in the previous transaction. FIG.
The settlement medium to be processed in the example of the figure is illegally charged in the member store terminal device 400 installed in the store A. In addition, the member store terminal device 400 that has been charged is registered in the inactive terminal information so that the accumulated amount of charge to the payment medium exceeds the upper limit amount. In the example of FIG. 6, this illegally charged payment medium is used for payment processing at the member store terminal device 400 installed in the store B.

  In the example shown in the figure, first, the POS application processing unit 210 receives a user operation for selecting payment with electronic money (for example, a selection button pressed by a customer) and issues a payment (settlement) instruction of 18,000 yen. Is output to the OCX processing unit 220 (sequence S201).

  Sequences S202 to S205 are the same as sequences S102 to S105 in FIG. In particular, in sequence S204, the main control unit 222 adds the value “1” of the temporary charge flag to the previous transaction information and the membership set in the store A as the identification information of the member store terminal device 400 that performed the charge. The identification information of the shop terminal device 400 is included and acquired. In sequence S <b> 205, the main control unit 222 transmits a terminal authentication request including these values to the server apparatus 100 via the communication processing unit 221.

  In the server device 100 that has received the terminal authentication request, the inactive terminal information DB 132 stores the identification information of the member store terminal device 400 (member store terminal device 400 set in the store A) that has been charged last time as an inactive terminal. Detect that it is registered in the information. In response to the detection result, the control unit 120 generates a rejection response as a response to the terminal authentication request, and the member store terminal device 400 installed in the store B that is the terminal authentication request source via the communication unit 110. Is transmitted (answered) (sequence S206).

  In response to the rejection response, the member store terminal device 400 (main control unit 222) stops the transaction (payment) and outputs information indicating an error (transaction impossible) to the POS application processing unit 210 (sequence S207). Based on the information, the POS application processing unit 210 displays a notification (error display) indicating that the transaction cannot be performed on the display screen of the POS terminal device 200.

  Thus, the payment medium in which the temporary charge from the member store terminal device 400 registered in the inactive terminal information is the previous transaction cannot receive the payment process. Similarly, the settlement medium cannot be charged. Therefore, the payment medium cannot be changed from the temporary charge to the regular charge and cannot be used until the registration to the inactive terminal information of the member store terminal device 400 that has made the temporary charge is canceled (deleted). It becomes the state of.

Next, operations of the member store terminal device 400 and the server device 100 will be described with reference to FIGS.
FIG. 9 is a flowchart showing a procedure of processing performed by the member store terminal device 400 (OCX processing unit 220) when charging the payment medium. When the OCX processing unit 220 receives a charge instruction from the POS application processing unit 210, the OCX processing unit 220 starts the processing of FIG.

In the process of FIG. 5, first, the previous situation determination unit 226 refers to the storage unit 230 (step S301), and determines whether or not the previous charge result notification file exists (step S302). If it is determined that it exists (step S302: YES), the OCX processing unit 220 (main control unit 222) performs charge execution stop processing such as displaying a message to stop charging on the display screen of the POS terminal device 200. (Step S321).
Thereafter, the process of FIG.
The charge suspension due to the existence of the previous charge result notification file is canceled when the charge result notification file is transmitted to the server device 100 and no longer exists in the storage unit 230.

On the other hand, when it is determined in step S302 that the previous charge result notification file does not exist (step S302: NO), the main control unit 222 reads the previous transaction information (FIG. 8 (FIG. 8) from the payment medium via the electronic money reader / writer 300. A) (information included in the transaction history information of A) is acquired (step S303).
Then, the main control unit 222 generates a terminal authentication request (see FIG. 7A) based on the previous transaction information, transmits the request to the server device 100 via the communication processing unit 221, and the result from the server device 100. A notification (see FIG. 7C) is awaited (step S304).

Next, the main control unit 222 determines whether there is a communication abnormality with the server device 100 and whether the member store terminal device 400 is registered in the inactive terminal information (step S305). Specifically, the main control unit 222 first determines whether there is an abnormality in communication with the server apparatus 100, such as failure to obtain a communication result from the server apparatus 100. If it is determined that there is no communication abnormality, the main control unit 222 uses the result of terminal authentication from the server device 100 as the last time the merchant terminal device 400 including the main control unit 222 itself or the settlement medium to be processed. It is determined whether or not at least one of the member store terminal devices 400 charged by the transaction is registered in the inactive terminal information.
When it is determined that there is a communication abnormality or that there is registration in inactive terminal information (step S305: YES), the process proceeds to step S321.

On the other hand, when it is determined in step S305 that there is no communication abnormality and there is no registration in the inactive terminal information (step S305: NO), the main control unit 222 refers to the storage unit 230 (step S306) and charges. The presence / absence of a money amount accumulation file is determined (step S307).
When it is determined that the charge amount accumulation file exists (step S307: YES), the main control unit 222 generates the file generation date and the current date (shown by the system clock included in the POS terminal device 200). 9 is compared (step S308), and it is determined whether or not they match (step S309).

  When it is determined that the two values match (step S309: YES), the accumulated amount determination unit 224 reads the accumulated amount of charge from the charge amount accumulation file and compares it with the upper limit amount (step S310). It is determined (whether the accumulated amount does not exceed the upper limit amount) (step S311).

If it is determined that the value is within the allowable range (step S311: YES), the main control unit 222 updates the accumulated amount indicated by the charge amount accumulated file (step S341).
Specifically, the main control unit 222 decodes the file name of the charge amount accumulation file, reads the accumulated amount of charge, adds the current charge amount to the read accumulated amount, and calculates the accumulated amount after charging. . Then, the main control unit 222 encrypts the character string based on the calculated accumulated amount and today's date, and updates the file name of the charge amount accumulated file to the file name obtained by the encryption.

  Then, the main control unit 222 instructs the electronic money reader / writer 300 to execute temporary charging, and the electronic money reader / writer 300 performs temporary charging to the settlement medium (step S342). That is, the electronic money reader / writer 300 updates the available balance of the payment medium and writes a transaction history.

Next, the main control unit 222 generates a charge result notification (see FIGS. 8B and 8C) and transmits it to the server device 100 via the communication processing unit 221 (step S361).
Thereafter, the process of FIG.

  On the other hand, if it is determined in step S307 that the charge amount accumulation file does not exist (step S307: NO), or if it is determined in step S309 that the two do not match (step S309: NO), the main control unit 222 A charge amount accumulation file is generated (step S331), and the accumulation amount indicated by the charge amount accumulation file is set to the current charge amount (step S332).

Specifically, as described above, the main control unit 222 uses the file name obtained by encrypting the character string based on the current charge amount and today's date as the file name of the charge amount accumulation file. .
Thereafter, the process proceeds to step S341.

On the other hand, when it is determined in step S311 that the accumulated amount is out of the allowable range (step S311: NO), the main control unit 222 displays a message to stop charging on the display screen of the POS terminal device 200. Then, charge execution stop processing is performed (step S351).
Thereafter, the process proceeds to step S361.

FIG. 10 is a flowchart showing a procedure of processing performed by the server apparatus 100 that has received the terminal authentication request (transmitted by the member store terminal apparatus 400 in step S304 of FIG. 9) in charging the settlement medium.
In the process of FIG. 6, first, the inactive terminal determination unit 121 extracts the identification information of the member store terminal device 400 included in the terminal authentication request received by the communication unit 110 and outputs it to the inactive terminal information DB 132. The active terminal information DB 132 searches whether the identification information is included in the inactive terminal information (see FIG. 7B) (step S401).

  At that time, the inactive terminal determination unit 121 extracts the identification information of the member store terminal device 400 that is the terminal authentication request transmission source. When the temporary charge flag is “1”, the inactive terminal determination unit 121 also extracts the identification information of the member store terminal device 400 that has been charged in the previous transaction. Then, the inactive terminal information DB 132 searches whether or not each piece of identification information extracted by the inactive terminal determination unit 121 is included in the inactive terminal information.

And the inactive terminal determination part 121 determines whether at least any one of the identification information extracted by step S401 is registered into inactive terminal information based on the search result of the inactive terminal information DB132 ( Step S402).
If it is determined that none of the identification information is registered (step S402: NO), the inactive terminal determination unit 121 transmits (answers) a normal response via the communication unit 110 (step S411).
Thereafter, the process of FIG.

On the other hand, when it is determined that any identification information is registered (step S402: YES), the inactive terminal determination unit 121 transmits (answers) a rejection response via the communication unit 110 (step S421).
Thereafter, the process of FIG.

FIG. 11 is a flowchart illustrating a procedure of processing performed by the server apparatus 100 that has received the charge result notification file (transmitted by the member store terminal apparatus 400 in step S361 in FIG. 9) in charging the settlement medium.
In the process of FIG. 6, the communication unit 110 first outputs the received charge result notification file to the control unit 120, and the control unit 120 confirms the message item of the charge result notification file (501).

Next, the control unit 120 outputs the charge result notification file to the charge result notification DB 131, and the charge result notification DB 131 saves (stores) the charge result notification file (step S502).
Next, the control unit 120 refers to the error code column of the charge result notification file (step S503) and determines whether or not the alert target code is stored (step S504). Here, the alert target code is an error code that is set in advance as a serious error that is a warning mail transmission target.

When it is determined that the alert target code is not stored (step S504: NO), the control unit 120 refers again to the error code column of the charge result notification file (step S505), and the number of charges per fixed time. It is determined whether or not the charge amount is abnormal (exceeding the upper limit) (step S506).
If it is determined that there is no abnormality (step S506: NO), the processing in FIG.

On the other hand, when it is determined in step S504 that the alert target code is stored (step S504: YES) or in step S506, it is determined that there is an abnormality (step S506: YES), the control unit 120 is charged. The identification information of the member store terminal device 400 that is the result notification file transmission source is output to the inactive terminal information DB 132 and registered in the inactive terminal information (step S511).
Note that the registration to the inactive terminal information is also performed by a request from an electronic money business operator.

The inactive terminal determination unit 121 also generates an e-mail that warns that there is a possibility of unauthorized processing, and transmits the e-mail to a preset transmission destination via the communication unit 110.
Thereafter, the process of FIG.

FIG. 12 is a flowchart illustrating a procedure of processing performed by the member store terminal device 400 (OCX processing unit 220) when electronic money payment processing is performed. When receiving the payment instruction from the POS application processing unit 210, the OCX processing unit 220 starts the processing in FIG.
In the process of FIG. 6, first, the previous situation determination unit 226 refers to the storage unit 230 (step S601), and determines whether or not the previous charge result notification file exists (step S602). If it is determined that it exists (step S602: YES), the OCX processing unit 220 performs a payment stop process such as displaying a message to stop the payment process on the display screen of the POS terminal device 200 (step S621).
Thereafter, the process of FIG.
The charge suspension due to the existence of the previous charge result notification file is canceled when the charge result notification file is transmitted to the server device 100 and no longer exists in the storage unit 230.

On the other hand, when it is determined in step S602 that the previous charge result notification file does not exist (step S602: NO), the main control unit 222 acquires the previous transaction information from the payment medium via the electronic money reader / writer 300 ( Step S611).
Next, the main control unit 222 refers to the temporary charge flag of the previous transaction information and determines whether or not the previous transaction is a temporary charge (step S612).

  When it determines with it being a temporary charge (step S612: YES), the main control part 222 produces | generates a terminal authentication request | requirement based on the last transaction information, and transmits to the server apparatus 100 via the communication process part 221, and a server A result notification from the apparatus 100 is awaited (step S613).

Next, the main control unit 222 determines whether there is a communication abnormality with the server device 100 and whether the member store terminal device 400 is registered in the inactive terminal information (step S614). Specifically, the main control unit 222 first determines whether there is an abnormality in communication with the server apparatus 100, such as failure to obtain a communication result from the server apparatus 100. If it is determined that there is no communication abnormality, the main control unit 222 uses the result of terminal authentication from the server device 100 as the last time the merchant terminal device 400 including the main control unit 222 itself or the settlement medium to be processed. It is determined whether or not at least one of the member store terminal devices 400 charged by the transaction is registered in the inactive terminal information.
If it is determined that there is a communication abnormality or that there is registration in the inactive terminal information (step S614: YES), the process proceeds to step S621.

On the other hand, when it is determined in step S614 that there is no communication abnormality and no registration in the inactive terminal information (step S614: NO), the main control unit 222 instructs the electronic money reader / writer 300 to execute the payment process. The electronic money reader / writer 300 performs a payment process (step S615). That is, the electronic money reader / writer 300 updates the available balance of the payment medium.
Also, the electronic money reader / writer 300 updates the transaction history (step S616). By updating the transaction history, the charge of the settlement medium is updated to a regular charge.
Thereafter, the process of FIG.

  On the other hand, if it is determined in step S612 that the temporary charge is not established (normal charge state) (step S612: NO), the process proceeds to step S615.

  The procedure of the process performed by the server apparatus 100 that has received the terminal authentication request in the electronic money payment process is the same as that described with reference to FIG.

  If it is determined in step S311 of FIG. 9 that the accumulated amount is outside the allowable range (step S311: NO), the member store terminal device 400 does not charge the payment medium, and in addition to the payment medium. The transaction history information may be written. For example, the electronic money reader / writer 300 writes a temporary charge history with a charge amount of 0 yen in the payment medium in accordance with an instruction from the main control unit 222.

  As described above, the identification information of the member store terminal device 400 (electronic money reader / writer 300) and the value “1” of the temporary charge flag (value indicating temporary charge) are written in the settlement medium as transaction history information. Thus, when this member store terminal device 400 is registered in the inactive terminal information, as described with reference to FIG. 6, the settlement medium can also be used over another member store terminal device 400. Can be stopped. That is, the use of a payment medium that has been illegally charged can be more reliably stopped.

Alternatively, when it is determined in step S311 in FIG. 9 that the accumulated amount is outside the allowable range (step S311: NO), the main control unit 222 sets the processing target payment medium as a payment suspension target payment medium. May be registered (for example, registered in negative information). In addition, the main control unit 222 may write information indicating the inability to use to the settlement medium via the electronic money reader / writer 300. Alternatively, the main control unit 222 may display a card collection instruction or a card unavailable notification on the display screen of the POS terminal device 200 or the display screen of the operator terminal device 800.
As a result, the use of the payment medium that has been illegally charged can be more reliably stopped.

It should be noted that the conditions for canceling the use suspension for the payment medium may be various conditions depending on the cause of the use stop.
First, the suspension of charging due to communication abnormality is canceled when the member store terminal device 400 performs online processing when the network is established and the communication abnormality is canceled.

Further, when the member store terminal device 400 that is charging is stopped due to the registration in the inactive terminal information, the charge at the other member store terminal device 400 is possible.
In addition, in the case of a charge stop due to the fact that the member store terminal device 400 charged in the previous transaction is registered in the inactive terminal information, the identification information of the member store terminal device 400 is deleted from the inactive terminal information. Thus, the suspension of use of the settlement medium is released.

  Alternatively, the payment medium is used when at least one of the member store terminal device 400 that has been charged or the member store terminal device 400 that has been charged in the previous transaction is registered in the inactive terminal information. In the case of a setting for performing a process to be disabled (for example, registration in negative information), for example, the identification information of the member store terminal device 400 is deleted from the inactive terminal information, and payment is made when a certain period of time has passed. It is conceivable to cancel the use stop of the medium (for example, to delete the identification information of the settlement medium from the negative information).

  In addition, in the case of charge stoppage due to the accumulated charge amount exceeding the upper limit amount, if the setting is made so that the history information of the transaction is not written in the settlement medium, the transaction at the other member store terminal device 400 is possible. On the other hand, when the history information of the transaction is set to be written in the payment medium, the use of the payment medium is released by deleting the identification information of the member store terminal device 400 from the inactive terminal information.

As described above, the inactive terminal determination unit 121 determines whether or not the member store terminal device 400 that has charged the payment medium to be processed is registered in the inactive terminal information, and determines that it is registered. In such a case, the use suspension processing unit 223 stops the use of the settlement medium.
Therefore, even if the member store terminal device 400 is stolen, such as when it is illegally charged, use of the charged electronic money can be prevented. In this respect, the safety of the member store terminal device 400 (electronic money charging machine) can be further enhanced.

Further, the communication processing unit 221 sends information indicating that the electronic money reader / writer 300 needs to confirm the validity of the charge performed on the payment medium (for example, the value “1” of the temporary charge flag). , It transmits an inactive terminal determination request (terminal authentication request) for requesting a determination as to whether or not the identification information of the member store terminal device 400 that has performed temporary charging is included in the inactive terminal information.
As described above, the communication processing unit 221 transmits an inactive terminal determination request based on information indicating that the validity of the charge needs to be confirmed, such as a temporary charge flag. Can prevent.

If the accumulated amount determination unit 224 determines that the accumulated amount of charge within a predetermined time exceeds the upper limit amount, the use suspension processing unit 223 stops the use of the payment medium.
As a result, the electronic money system 1 can detect illegal charges that are repeatedly performed and prevent the charged electronic money from being used.

In addition, when the previous situation determination unit 226 determines that the member store terminal device 400 provided with itself has not transmitted the previous charge result, the use suspension processing unit 223 stops the use of the payment medium.
As a result, the electronic money system 1 can prevent repeated unauthorized charging offline.

  Further, when the accumulated amount determining unit 224 determines that the accumulated amount of charge within a predetermined time exceeds the upper limit amount, the communication unit 110 is preset with an email indicating that the upper limit amount has been detected. To the destination.

  Here, when the upper limit of the accumulated charge of the member store terminal device 400 is set to an amount that does not exceed the normal charge at the store, the possibility of an unauthorized charge is high when the upper limit is exceeded. . Therefore, when the upper limit amount is exceeded, the communication unit 110 can send an e-mail to alert a person concerned with the electronic money system 1.

  In addition, when the inactive terminal determination unit 121 determines that the member store terminal device 400 that has charged the processing-target payment medium is registered in the inactive terminal information, the communication unit 110 uses the terminal device whose use is to be suspended. An e-mail indicating that a charge has been detected is transmitted to a preset destination.

  Here, the charge by the member store terminal device 400 registered in the inactive terminal information is considered to be an unauthorized charge. Therefore, when the inactive terminal determination unit 121 detects the charge, the communication unit 110 can send an e-mail to alert a person concerned with the electronic money system 1.

  Further, the inactive terminal information DB 132 indicates that the member store terminal device 400 when the accumulated amount charged by the member store terminal device 400 having the inactive terminal information DB 132 itself within a predetermined period exceeds a predetermined upper limit amount. When the (cumulative amount determination unit 224) determines, the member store terminal device 400 is registered in the inactive terminal information. Thus, when the accumulated amount of charge exceeds the upper limit amount, the possibility of unauthorized charge is high. Therefore, when the upper limit amount is exceeded, the inactive terminal information DB 132 registers the member store terminal device 400 in the inactive terminal information, so that it is possible to prevent subsequent unauthorized charges and use of illegally charged electronic money.

The inactive terminal information DB 132 determines that the member store terminal device 400 (cumulative amount determination unit 224) determines that the number of times the member store terminal device 400 has charged within a predetermined period exceeds a predetermined upper limit number. The identification information of the member store terminal device 400 is included in the inactive terminal information.
Here, when the upper limit number of charges of the member store terminal device 400 is set to a number that does not exceed the normal charge in the store, the possibility of unauthorized charge is high when the upper limit number of times is exceeded. Therefore, when the upper limit number of times is exceeded, the inactive terminal information DB 132 registers the member store terminal device 400 in the inactive terminal information, so that it is possible to prevent subsequent unauthorized charges and use of illegally charged electronic money.

  Further, the inactive terminal information DB 132 includes the identification information of the member store terminal device 400 indicated by the inactive terminal registration request acquired by the communication unit 110 in the inactive terminal information. When the inactive terminal information DB 132 performs the registration, when the member store terminal device 400 is stolen, the use of the member store terminal device 400 can be stopped.

In addition, the result of the inactive terminal determination (terminal authentication) by the server device 100 indicates that the member store terminal device 400 that has provisionally charged the payment medium to be processed in the previous transaction is not registered in the inactive terminal information. In the case shown, the electronic money reader / writer 300 updates the temporary charge in the settlement medium to the regular charge.
As described above, the electronic money reader / writer 300 performs the update from the temporary charge to the regular charge based on the result of the inactive terminal determination by the server device 100, so that the update to the regular charge and the update to the regular charge are performed. At the same time, it is possible to double check the legitimacy of the charge, and more reliably prevent illegally charged electronic money from being used.

In the above description, the example in which the payment to the settlement medium is always the temporary charge has been described. However, the temporary charge and the regular charge may be performed when charging.
For example, the member store terminal device 400 performs regular charging to the payment medium in the online processing. On the other hand, when a communication abnormality occurs between the member store terminal device 400 and the server device 100 and the member store terminal device 400 cannot transmit the charge history to the server device 100, the member store terminal device 400 is temporarily charged offline. I do. Then, when the settlement medium is used online, the server device 100 performs a regular charge determination (for example, terminal authentication of the member store terminal device 400 that has performed the temporary charge) and updates the temporary charge to the regular charge. To do.

This makes it possible to charge even offline while ensuring safety during charging.
When the franchise terminal device 400 makes a temporary charge, “The current charge is“ Temporary charge ”.“ Temporary charge ”automatically becomes a regular charge at the center inquiry at the time of use.” Such a message may be displayed. With this message, the user who has made the charge can easily confirm the state of the charge.

Note that the server device 100 may check the card history in addition to terminal authentication when determining the regular charge.
For example, when charging, the member store terminal device 400 writes the card history (the charge history) to the settlement medium and transmits it to the server device 100, and the server device 100 stores the card history. .

  And in the regular charge determination at the time of payment, in addition to terminal authentication, the server device 100 stores the card history stored in the payment medium to be processed and the card history of the payment medium stored in the server device 100. Is matched. When both match, the server apparatus 100 determines that there is no abnormality. On the other hand, if the card history stored in the settlement medium to be processed and the card history of the settlement medium stored in the server apparatus 100 do not match, the processing has been performed offline, and the server apparatus 100 Determines that there is a possibility of unauthorized processing.

As described above, the server device 100 can detect the offline processing by checking the card history, and can detect the illegal processing performed offline.
Note that the processing time is reduced by limiting the case where the server apparatus 100 performs card history verification, for example, when the server apparatus 100 performs card history verification only when the server apparatus 100 charges or pays 10,000 yen or more. You may do it.

A program for realizing all or part of the functions of the server device 100 or the POS terminal device 200 is recorded on a computer-readable recording medium, and the program recorded on the recording medium is read by a computer system. The processing of each unit may be performed by executing. Here, the “computer system” includes an OS and hardware such as peripheral devices.
Further, the “computer system” includes a homepage providing environment (or display environment) if a WWW system is used.
The “computer-readable recording medium” refers to a storage device such as a flexible medium, a magneto-optical disk, a portable medium such as a ROM and a CD-ROM, and a hard disk incorporated in a computer system. Furthermore, the “computer-readable recording medium” dynamically holds a program for a short time like a communication line when transmitting a program via a network such as the Internet or a communication line such as a telephone line. In this case, a volatile memory in a computer system serving as a server or a client in that case, and a program that holds a program for a certain period of time are also included. The program may be a program for realizing a part of the functions described above, and may be a program capable of realizing the functions described above in combination with a program already recorded in a computer system.

  The embodiment of the present invention has been described in detail with reference to the drawings. However, the specific configuration is not limited to this embodiment, and includes design changes and the like without departing from the gist of the present invention.

DESCRIPTION OF SYMBOLS 1 Electronic money system 100 Server apparatus 110 Communication part 120 Control part 121 Inactive terminal determination part 130 Database part 131 Charge result notification DB
132 Inactive terminal information DB
133 Electronic Money Charge Detail DB
200 POS Terminal Device 210 POS Application Processing Unit 220 OCX Processing Unit 221 Communication Processing Unit 222 Main Control Unit 223 Usage Stop Processing Unit 224 Cumulative Amount Determination Unit 225 Number of Times Determination Unit 226 Previous State Determination Unit 230 Storage Unit 300 Electronic Money Reader / Writer 400 Membership Shop terminal device 800 Business terminal device 910, 920 Network

Claims (10)

A server device and a first terminal device;
The first terminal device
A medium data acquisition unit that reads identification information of a second terminal device that has charged the payment medium from a payment medium of prepaid electronic money;
Inactive terminal determination for transmitting to the server device an inactive terminal determination request for determining whether or not the identification information of the second terminal device is included in the inactive terminal information indicating the terminal device to be suspended. A request transmitter;
A determination result receiving unit that receives a determination result of the server device in response to the inactive terminal determination request;
When the determination result indicates that the identification information of the second terminal device is included in the inactive terminal information, a use stop processing unit that stops the use of the payment medium;
Comprising
The server device
An inactive terminal information storage unit for storing the inactive terminal information;
An inactive terminal determination request receiving unit for receiving the inactive terminal determination request;
In response to a request from the inactive terminal determination request transmission unit, an inactive terminal determination unit that determines whether or not the identification information of the second terminal device is included in the inactive terminal information;
A determination result transmission unit for transmitting the determination result;
Comprising
The inactive terminal determination request transmitting unit, when the medium data acquiring unit reads from the payment medium information indicating that it is necessary to confirm the validity of the charge performed on the payment medium, An electronic money system characterized by transmitting the inactive terminal determination request for requesting determination of whether or not terminal device identification information is included in the inactive terminal information. The first terminal device
A cumulative amount determination unit for determining whether or not the cumulative amount charged by the first terminal device within a predetermined period exceeds a predetermined upper limit amount;
The use stop processing unit stops use of the payment medium when the accumulated amount determination unit determines that the accumulated amount exceeds the predetermined upper limit amount. Electronic money system. The first terminal device
Including a previous situation determination unit that determines whether the first terminal device has transmitted the previous charge result;
The use stop processing unit stops use of the settlement medium when the previous state determination unit determines that the first terminal device has not transmitted the previous charge result. Or the electronic money system of 2.   When the accumulated amount determination unit determines that the accumulated amount exceeds the predetermined upper limit amount, the server device transmits an e-mail indicating that the upper limit amount has been detected to a preset destination. The electronic money system according to claim 2, further comprising a mail transmission unit.   When the inactive terminal determination unit determines that the identification information of the second terminal device is included in the inactive terminal information, the server device is an electronic device indicating that a charge by the terminal device to be suspended is detected. The electronic money system according to any one of claims 1 to 3, further comprising a mail transmission unit that transmits mail to a preset destination.   When the cumulative amount determination unit determines that the accumulated amount exceeds the predetermined upper limit amount, the server device includes an inactive terminal information management unit that includes identification information of the first terminal device in the inactive terminal information The electronic money system according to claim 2, further comprising: The first terminal device includes a number determination unit that determines whether or not the number of times the first terminal device has charged within a predetermined period exceeds a predetermined upper limit number of times,
When the server device determines that the number of times that the first terminal device has been charged within a predetermined period exceeds the predetermined upper limit number, the server device determines the identification information of the first terminal device. An inactive terminal information management unit included in the inactive terminal information;
The electronic money system according to any one of claims 1 to 5, wherein The server device
An inactive terminal registration request acquisition unit for acquiring a registration request of the terminal device to the inactive terminal information;
An inactive terminal information management unit including identification information of the terminal device indicated by the registration request acquired by the inactive terminal registration request acquisition unit in the inactive terminal information;
The electronic money system according to any one of claims 1 to 5, further comprising:   When the determination result of the server device received by the determination result receiving unit indicates that the identification information of the second terminal device is not included in the inactive terminal information, the charge performed on the payment medium is The electronic money system according to any one of claims 1 to 8, further comprising a determination result registration unit that registers information indicating validity in the settlement medium. A medium data acquisition unit that reads identification information of a terminal device that has charged the payment medium from a payment medium of prepaid electronic money;
An inactive terminal determination request transmission unit that transmits to the server device an inactive terminal determination request for determining whether or not the terminal device identification information is included in the inactive terminal information indicating the terminal device to be suspended. When,
A determination result receiving unit that receives a determination result of the server device in response to the inactive terminal determination request;
When the determination result indicates that the identification information of the terminal device is included in the inactive terminal information, a use stop processing unit that stops the use of the payment medium;
Comprising
When the inactive terminal determination request transmission unit reads from the payment medium information indicating that the medium data acquisition unit needs to confirm the validity of the charge performed on the payment medium, the terminal device The terminal device transmits the inactive terminal determination request for determining whether or not the identification information is included in the inactive terminal information.

Images