JP6403910B1 - Service providing system and computer program used therefor - Google Patents

Abstract

To provide a system capable of enhancing the safety of transactions using an image including information to be used for a service such as settlement by a mechanism different from the conventional one.
In a service providing system in which target information included in an image displayed on a user terminal 2 is read by an information acquisition terminal 3 and processing based on the obtained target information is executed by a server 5, the target image The confirmation information differentiated from the target information is output to the user terminal before or after the display (F3), and the confirmation information is acquired by the information acquisition terminal 3 and transmitted to the server 5 (F5, F6). ), The information transmission path from the information acquisition terminal 3 to the server 5 regarding the confirmation information acquired by the server 5 is confirmed, and the information transmission path from the information acquisition terminal 3 to the server 5 is also confirmed for the target information. Based on the comparison of transmission paths, permission or prohibition of execution of processing by the server 5 is controlled.
[Selection] Figure 2

Description

  The present invention relates to a service providing system that reads information displayed on a user terminal and executes a process for providing a predetermined service based on the obtained information.

  An image such as a two-dimensional code in which predetermined information is embedded is displayed on a portable user terminal such as a cellular phone possessed by the user, and information obtained by reading information in the image at a terminal such as a store is stored in a server. A system in which a server executes a predetermined process such as a settlement process based on the information is put into practical use. However, in such a system, there is a risk that an image displayed on the user terminal is taken by a third party and illegally used. Therefore, a mechanism for enhancing security has been intensively studied. For example, a first partial settlement code that is a part of payment information such as a credit card number and an account number is distributed and held in a user terminal, and a second partial settlement code that is another portion is distributed and stored in a server. The first one-time code is transmitted from the user terminal to the server and the user is authenticated on the server side, and the second one-time code is transmitted from the server side to the user terminal to connect the server on the user terminal side. After the authentication, the first partial settlement code is displayed on the user terminal so as to include the user identifier such as the user ID and the telephone number, which is read by the POS terminal and transmitted to the server. In the server, a system for executing a settlement process by determining a second partial settlement code based on the obtained user identifier and concatenating the partial settlement codes to generate a settlement code has been proposed. (For example, refer to Patent Document 1).

Japanese Patent No. 5959410

  In the above-described system, since the payment information is displayed after the user terminal and the server are mutually authenticated using a one-time password, the security of the transaction can be improved accordingly. However, ensuring security with a one-time password is not perfect, and if it is broken, there is a possibility that a third party may obtain a payment code by voyeurism and use it illegally. For example, when a user displays a payment code on his or her terminal as a preparation for payment while queuing for payment, a third party voyeurs this and uses it in another place first. Such a fear cannot be completely eliminated.

  SUMMARY OF THE INVENTION Accordingly, an object of the present invention is to provide a service providing system and the like that can enhance the safety of transactions using an image including information that should be used for a service such as a settlement with a mechanism different from the conventional one. .

  A service providing system according to an aspect of the present invention is configured to use a network to which a communication rule with information for specifying an information transmission path is applied, and is included in a target image displayed on a user terminal Processing for providing a predetermined service at the server by reading the target information stored in the information acquisition terminal and transmitting the obtained target information from the information acquisition terminal to the predetermined server via the network. Is provided on the basis of the target information, the target image display means for displaying the target image on the user terminal, and the confirmation information differentiated from the target information, the target image display means Confirmation information output means for causing the user terminal to output the target image prior to or subsequent to the display of the target image by the information acquisition terminal. Information acquisition means for acquiring each of the information and the target information and transmitting the obtained confirmation information and target information from the information acquisition terminal to the server; and the information relating to each of the confirmation information and the target information acquired by the server Based on the comparison of the confirmation result of the information transmission path with respect to each of the confirmation information and the target information based on the target information by the server based on the path confirmation means for confirming the information transmission path from the acquisition terminal to the server Execution control means for controlling permission or prohibition of execution of processing.

  A computer program according to an aspect of the present invention is configured to use a network to which a communication rule with information for specifying an information transmission path is applied, and is included in a target image displayed on a user terminal. Processing for providing a predetermined service at the server by reading the target information at the information acquisition terminal and transmitting the obtained target information from the information acquisition terminal to the predetermined server via the network. A computer program used in a service providing system that executes based on the target information, the computer provided in the service providing system, target image display means for displaying the target image on the user terminal, the target information, and Differentiated confirmation information prior to display of the target image by the target image display means. Or confirmation information output means for subsequently outputting to the user terminal, causing the information acquisition terminal to acquire each of the confirmation information and the target information, and obtaining the obtained confirmation information and target information from the information acquisition terminal to the server Information acquisition means to be transmitted to the server, route confirmation means for confirming an information transmission route from the information acquisition terminal to the server regarding each of the confirmation information and target information acquired by the server, and each of the confirmation information and the target information The server is configured to function as an execution control unit that controls permission or prohibition of execution of the processing based on the target information by the server based on a comparison of confirmation results of the information transmission path.

The figure which shows an example of the schematic whole structure of the payment system which concerns on one form of this invention. The figure which shows the outline | summary in an example of the process sequence in the payment system of FIG. The figure which shows an example of the image of the confirmation code displayed on a user terminal. The figure which shows an example of the image of the payment code displayed on a user terminal. The functional block diagram which shows an example of a structure of the control system in the payment system of FIG. The flowchart which shows an example of the procedure of the payment process performed in the control system of FIG. The figure which shows the modification of FIG. The figure which shows the modification of FIG. The figure which shows the other modification of FIG. The figure which shows another modification of FIG. The figure which shows the further modification of FIG.

  Hereinafter, an example of a service providing system according to an embodiment of the present invention will be described with reference to the drawings. In the following, an example in which the present invention is applied to a payment system that provides a payment service is shown, but the service provided by the service providing system of the present invention is not limited to the payment service. As shown in FIG. 1, the settlement system 1 according to the present embodiment includes a plurality of user terminals 2, a plurality of store terminals 3, a management server 4, and a settlement server 5. These terminals 2 and 3 and servers 4 and 5 are connected to a network 6. The user terminal 2 can communicate with the payment server 5 via the network 6, the store terminal 3 can communicate with the management server 4 via the network 6, and the management server 4 and the payment server 5 can communicate via the network 6. Communication is possible.

  The user terminal 2 is a portable information communication terminal that has an image display function and can be carried by the user. As an example, the user terminal 2 is a smartphone having a communication call function. However, the user terminal 2 may be a variety of terminals that can display an image and can be connected to a network, such as a portable game machine and a tablet terminal. The store terminal 3 is a terminal installed in the store 7 in order to manage sales information. At least one store terminal 3 is installed in one store 7. In addition to the register function for registering sales at the store 7, the store terminal 3 has an information acquisition function for reading an image displayed as a barcode or a two-dimensional code and acquiring information embedded in the image. Yes. For example, a POS terminal or the like is used as the store terminal 3. The store terminal 3 corresponds to an example of an information acquisition terminal. The store 7 is a store that sells products or provides a predetermined service. For example, a convenience store, a grocery store, a clothing store, a restaurant, a beauty salon, a ticket shop, an amusement facility, etc. are assumed as the store 7. May be.

  The management server 4 is a server operated by a predetermined operator 8 and manages or supports the operation of the store 7 based on various information acquired by the store terminal 3. . For example, the management server 4 provides the store 7 with information necessary for sales management and inventory management of the store 7 based on the sales analysis of the store 7. Alternatively, when payment using a credit card, electronic currency, or the like at the store 7 is necessary, the management server 4 executes processing necessary for payment in cooperation with a server (not shown) such as a card issuing company or a financial institution. . The settlement server 5 is provided as one of means for realizing such a settlement service in cooperation with the user terminal 2, the store terminal 3, and the management server 4, and is operated by a predetermined operator 9. The combination of the store terminal 3 and the management server 4 is widely used as a POS system, for example. A function for reading image information such as a barcode and a two-dimensional code from the user terminal 2 and executing necessary processing has already been realized in those known systems. The payment system 1 of this embodiment is intended to increase the safety of payment by introducing a procedure specific to payment processing while using such a system.

  For example, the business operator 8 that operates the management server 4 is a business operator that enters into a business contract with the operator of the store 7 and is involved in the operation of the store 7 based on the conclusion. As such an example, a franchisor that concludes a contract with the operator of the store 7 as a franchisee and manages the operation of the store 7 in accordance with the contract can be cited as the business operator 8. The operator 9 that operates the settlement server 5 may be the same as or different from the operator 8 of the management server 4. As an example, the business operator 9 that operates the settlement server 5 is a business operator that concludes a contract with the business operator 8 of the management server 4 as a customer and collects a fixed fee from the business operator 8 for use of the settlement service. is there. Each of the servers 4 and 5 may be configured by appropriately combining a plurality of server units, or may be configured by a single server unit. The servers 4 and 5 may be configured as cloud servers using cloud computing technology.

  The network 6 is configured by appropriately combining a WAN such as the Internet and a LAN constructed in the operators 8 and 9. The network 6 is a network to which a communication rule with information necessary for specifying an information transmission path or a communication path is applied. For example, when the Internet is used as the network 6, information such as the IP address of the transmission source and the transmission destination that are specified to be included in the header in the Internet protocol is used as information necessary for specifying the information transmission path. be able to. However, the communication rule used in the network 6 is not limited to the Internet protocol, and information necessary for specifying an information transmission path such as information for specifying a transmission source, a transmission destination, or a relay point of information. The communication rule of the network 6 should just be defined so that communication may be performed including.

  Next, the outline of the procedure of the payment process in the payment system 1 will be described with reference to FIG. In the payment system 1 of this embodiment, first, user authentication is performed between the user terminal 2 and the payment server 5, and then the user terminal 2 requests the payment server 5 to issue a confirmation code (F1). User authentication may be executed using, for example, a user ID as an example of user identification information unique to the user and authentication information such as a password. The confirmation code is issued to confirm an information transmission path from the store terminal 3 to the settlement server 5 and corresponds to an example of confirmation information. The settlement server 5 issues a confirmation code to the user terminal 2 on the condition that user authentication is established (F2). The confirmation code is issued so that it does not overlap with an already issued confirmation code. An expiration date may be set in the confirmation code like a one-time password.

  When the confirmation code is issued to the user terminal 2, the confirmation code is displayed on the user terminal 2 that has received the confirmation code (F3). The confirmation code is displayed embedded in the image. For example, as shown in FIG. 3, a two-dimensional code image 101 </ b> A and a barcode image 102 </ b> A in which a confirmation code is embedded are displayed on the user terminal 2. These images 101A and 102A correspond to examples of confirmation images.

  Returning to FIG. 2, when the confirmation code images 101A, 102A are displayed on the user terminal 2, the confirmation code is read by the store terminal 3 (F4). For example, a hand scanner provided in the store terminal 3 is used for reading. When the confirmation code is read, processing corresponding to the confirmation code is requested from the store terminal 3 to the management server 4 (F5), and further processing is requested from the management server 4 that has received the request to the settlement server 5. (F6). Note that the processing request in this case may include information for specifying a price to be paid by the user. Upon receiving the confirmation code processing request, the settlement server 5 refers to information such as the transmission source included in the processing request to confirm the information transmission path of the confirmation code (F7). In this case, in addition to the confirmation of the route through which the confirmation code is sent to the settlement server 5, it may be confirmed whether or not the route corresponds to a reliable route. For example, when a node such as a terminal or a server such as a transmission source or a transmission destination included in an information transmission path includes a predetermined node as a node whose reliability is guaranteed, the information transmission path is reliable. It may be determined that the route has the same. More specifically, when the store terminal 3 designated by the operator 8 of the management server 4 and the management server 4 with which the operator 9 of the settlement server 5 has entered into a contract are included in the information transmission route, the route May be judged to be reliable.

  If there is no problem in the confirmation regarding the information transmission path, a payment code is issued from the payment server 5 to the user terminal 2 (F8). When determining the reliability of the information transmission path, the issuance of the settlement code may be stopped when it cannot be confirmed that the path has the reliability. The payment code is issued as information necessary for executing the payment process in the payment server 5, and corresponds to an example of target information. For example, when the payment server 5 holds the balance of the user's electronic currency in association with the user ID, the user ID or an account ID that identifies the account may be included in a part of the payment code. When the information on the price is included in the processing request (F5, F6) corresponding to the reading of the confirmation code, the information on the price to be paid by the user may be included in the settlement code. Alternatively, the payment code may include information indicating a correspondence relationship with the previously issued confirmation code and information indicating the payment code. In any case, the payment code only needs to be configured as information that allows the payment server 5 that has received the payment code to execute a payment process based on the payment code. May be set appropriately. However, the settlement code and the confirmation code are set to be at least partially different so that the settlement server 5 can distinguish between the confirmation code and the settlement code. An expiration date may also be set for the settlement code, like a one-time password.

  When the payment code is issued to the user terminal 2, the payment code is displayed on the user terminal 2 that has received it (F9). The payment code is also displayed embedded in the image. For example, as shown in FIG. 4, a two-dimensional code image 101 </ b> B and a barcode image 102 </ b> B in which a payment code is embedded are displayed on the user terminal 2. These images 101B and 102B correspond to examples of target images. In the two-dimensional code image 101A in which the confirmation code is embedded and the two-dimensional code image 101B in which the settlement code is embedded, each of the confirmation code and the settlement code as information to be recorded in those images conforms to the same standard. It is an example of the image produced | generated by describing. The same applies to the barcode images 102A and 102B.

  Returning to FIG. 2, when the settlement code images 101B and 102B are displayed on the user terminal 2, the settlement code is read by the store terminal 3 (F10). The reading may be performed in the same manner as when the confirmation code is read. When the payment code is read, processing corresponding to the payment code is requested from the store terminal 3 to the management server 4 (F11), and further processing is requested from the management server 4 that has received the request to the payment server 5. (F12). If the processing request at the time of reading the confirmation code does not include the price information, the processing request at this stage includes the price information.

  Upon receiving the payment code processing request, the payment server 5 confirms the information transmission path of the payment code with reference to information such as a transmission source included in the processing request (F13). In this case, first, the route through which the payment code is sent to the payment server 5 is confirmed, the information transmission route is compared with the information transmission route confirmed for the confirmation code, and the two match. It is determined whether or not. However, when there is a node as a further relay point between the store terminal 3 and the management server 4 or between the management server 4 and the settlement server 5, for example, if the store terminal 3 and the management server 4 match, information transmission is performed. It may be determined that the information transmission paths match if the main nodes in the information transmission paths match, such as determining that the paths match. For example, the difference between the information transmission paths may be determined based on whether or not the above-described nodes whose reliability is guaranteed among the nodes included in the information transmission path match.

  When it is confirmed that the information transmission paths match, the settlement server 5 executes a settlement process based on the settlement code (F14). If the information transmission paths do not match, the settlement process is not executed. Note that the payment process is, for example, a process of consuming money from an electronic currency held in an account corresponding to the user ID or account ID embedded in the image 101B or 102B of the payment code, with a credit card associated with the user ID Set appropriately according to the payment method, such as processing to request the card issuer's server to settle the price or processing to request the financial institution server associated with the user ID to withdraw the price from the user's account. May be. That is, various processes for reading and paying a two-dimensional code or bar code displayed on the user terminal with a POS terminal or the like have been put to practical use, and the payment process based on the payment code (F14) The processing may be executed as appropriate.

  According to the above procedure, the two types of codes, the confirmation code and the settlement code, are read by the store terminal 3 and transmitted to the settlement server 5, and based on the settlement code only when the information transmission paths of these codes match. Settlement processing is executed. Therefore, even if a third party tries to acquire the images 101B and 102B of the settlement code displayed on the user terminal 2 by voyeurism and cause another store terminal 3 to read the images, the information transmission paths do not match. As a result, the execution of the payment process can be prohibited. The time difference from the reading of the confirmation code to the reading of the settlement code by the store terminal 3 is extremely short, for example, less than 1 second or about several seconds at the latest in view of the communication speed of a general network. Therefore, it is practically impossible for a third party to obtain a settlement code and have the same store terminal 3 (that is, the store terminal 3 used for reading the confirmation code) read it before the original user. Is possible. Therefore, the risk of unauthorized use by a third party can be eliminated and the security of settlement can be improved.

  Next, an example of the control system of the payment system 1 for realizing the payment process described above will be described with reference to FIG. In addition, although the user terminal 2 and the store terminal 3 are illustrated one by one in FIG. 5, the other user terminals 2 and the store terminals 3 have the same configuration. As shown in FIG. 5, the user terminal 2 includes a logical device realized by a combination of hardware resources as a computer of the user terminal 2 and a computer program Pt1 as a software resource installed in the user terminal 2. As shown, a user management unit 21, a code acquisition unit 22, and a code output unit 23 are provided. The user management unit 21 cooperates with the settlement server 5 to execute processing necessary for user authentication and the like. The code acquisition unit 22 executes processing for acquiring a confirmation code and a payment code from the payment server 5. The code output unit 23 is an image of a two-dimensional code and a barcode corresponding to each of the confirmation code and the settlement code acquired by the code acquisition unit 22 (for example, the images 101A and 102A in FIG. 3 and the images 101B and 102B in FIG. 4). Is generated and displayed on the display device 24 of the user terminal 2. In addition to the computer program Pt1 described above, a user ID and a terminal ID are recorded in advance in a storage device (not shown) of the user terminal 2. The terminal ID is identification information uniquely set for the user terminal 2. For example, identification information such as an international mobile device identification number or a MAC address can be used as the terminal ID.

  The store terminal 3 includes a code acquisition unit 31 and a logical device realized by a combination of a hardware resource as a computer of the store terminal 3 and a computer program Pt2 as a software resource installed in the store terminal 3. A processing request unit 32 is provided. The code acquisition unit 31 controls the scanner 33 provided in the store terminal 3 to read a two-dimensional code or bar code image displayed on the user terminal 2, and receives the confirmation code and the settlement code embedded in the image. get. The processing request unit 32 requests the management server 4 for processing corresponding to the confirmation code and the settlement code acquired by the code acquisition unit 31.

  The management server 4 includes a payment management unit 41 as a logical device realized by a combination of hardware resources as a computer of the management server 4 and a computer program Ps1 as a software resource installed in the management server 4. Provided. The payment management unit 41 receives a processing request from the store terminal 3 and transfers it to the payment server 5. In addition to the computer program Ps1 described above, business operator information may be recorded in advance in a storage device (not shown) of the management server 4. The business operator information is information for identifying the business operator 8 requesting the payment processing in the payment server 5 and includes, for example, the business operator ID set by the business operator 9 of the payment server 5 as the business operator information. Can do. According to the information required for processing in the settlement server 5, the operator information of the management server 4 may include appropriate information associated with the operator 8.

  The payment server 5 includes a user management unit 51 as a logical device realized by a combination of hardware resources as a computer of the payment server 5 and a computer program Ps2 as software resources installed in the payment server 5. A code issuing unit 52, a settlement management unit 53, a path confirmation unit 54, and a settlement execution unit 55 are provided. The user management unit 51 appropriately refers to the user management database 61 and executes various processes necessary for user management. Hereinafter, the database may be abbreviated as DB. The user management DB 61 uses the user ID of the user who uses the payment service as a key, and various information necessary for user management, such as the user name, the user telephone number, and the terminal ID of the user terminal 2 used by the user. It is a recorded database. The user management unit 51 performs processing necessary for user authentication in cooperation with the user management unit 21 of the user terminal 2 while referring to the user management DB 61 as one of processes for managing users. The code issuing unit 52 issues a confirmation code and a settlement code with reference to the code management DB 62 and transmits these codes to the user terminal 2. The code management DB 62 is a database for managing issued confirmation codes and settlement codes. For example, in the code management DB 62, the issued confirmation code and settlement code are recorded in association with the transaction ID. The transaction ID is identification information for distinguishing the unit of the settlement process, and is uniquely set for each settlement process to be executed using, for example, a pair of confirmation code and settlement code.

  The settlement management unit 53 receives a processing request from the management server 4 and manages the processing of the code issuing unit 52, the path confirmation unit 54, and the settlement execution unit 55 according to the processing request. For example, when the settlement management unit 53 receives a processing request from the management server 4, the settlement management unit 53 provides the processing request to the route confirmation unit 54, and performs processing for confirming the information transmission route for the processing request to the route confirmation unit 54. Let it run. The route confirmation unit 54 confirms the information transmission route from the store terminal 3 to the settlement server 5 while referring to the code management DB 62 and the customer management DB 63, returns the confirmation result to the settlement management unit 53, and codes the confirmation result into the code. Record in the management DB 62. The customer management DB 63 is a database in which information related to the customer viewed from the business operator 9 of the settlement server 5, that is, the business operator 8 of the management server 4 is recorded. For example, the customer management DB 63 includes information such as the name and address of the business 8 of the management server 4 and the IP address necessary for uniquely identifying the shop terminal 3 and the management server 4 designated by the business 8 on the network 6. To be recorded. Such information is referred to in order to determine the reliability of the nodes included in the information transmission path. The route confirmation unit 54 may determine the reliability of the information transmission route in addition to the confirmation of the information transmission route.

  Further, when the management server 53 requests processing including issuance of a settlement code from the management server 4, the settlement management unit 53 instructs the code issuance unit 52 to issue a settlement code in accordance with the request. Further, the payment management unit 53 determines whether or not to execute the payment process based on the payment code according to the confirmation result of the route confirmation unit 54. That is, the settlement management unit 53 compares the information transmission paths related to each of the confirmation code and the settlement code recorded in the code management DB 62 to determine whether or not they match, and performs the settlement process based on the determination result. Determine if it should be executed. When it is determined that the payment process should be executed, the payment management unit 53 instructs the payment execution unit 55 to execute the payment process based on the payment code. The payment execution unit 55 executes the payment process according to the payment code while referring to the payment management DB 64. As exemplified in the above, the payment process includes a process of consuming the electronic currency held in the user's account, a process of requesting the server of the card issuing company to settle the price with the user's credit card, or the user's Processing to request a financial institution server to withdraw money from the bank account is performed. In the settlement management DB 64, information necessary for these settlements is recorded using the user ID as a key. For example, information such as an account ID of an electronic currency held by the user, a credit card number used for payment by the user, or a financial institution code and an account number of a bank account used for payment by the user is set as the payment management DB 64 using the user ID as a key. To be recorded.

  Next, an example of a specific procedure of the payment process in the payment system 1 will be described with reference to FIG. The process shown in FIG. 6 is a process executed when the user purchases a product at the store 7 or receives a service, and pays the price at the store terminal 3. Further, it is assumed that user authentication is completed between the user terminal 2 and the settlement server 5 prior to the processing of FIG. In starting the settlement, first, the code acquisition unit 22 of the user terminal 2 requests the settlement server 5 to issue a confirmation code (step S11). At this time, in order to designate the user terminal 2 that is the transmission destination of the confirmation code, the terminal ID of the user terminal 2 is also notified. That is, the request in step S11 is an example of a confirmation information request for requesting a confirmation code by specifying the user terminal 2 that should display the confirmation code, and specifying the user terminal 2 to be used for displaying the settlement code. Thus, it has significance as an example of a processing request for requesting the start of processing based on a settlement code. Note that the user ID may also be notified in step S11. However, if the payment server 5 can identify the user ID based on the user authentication, the transmission of the user ID may be omitted. When issuance of the confirmation code is requested, the code issuing unit 52 of the payment server 5 issues a transaction ID for the current payment (step S41). Subsequently, the code issuing unit 52 issues a unique confirmation code in association with the transaction ID, transmits the unique confirmation code to the user terminal 2, and also issues the issued confirmation code and the terminal ID that transmitted the confirmation code (that is, in step S11). The transmitted terminal ID) is associated with the transaction ID and recorded in the code management DB 62 (step S42). By recording the terminal ID in association with the transaction ID, the terminal ID transmitted from the user terminal 2 in step S11 is set as information specifying the user terminal 2 to be used for displaying the confirmation code and the settlement code. It will be. The confirmation code may include a transaction ID. For the specific convenience of the user terminal 2 to which the payment code is to be transmitted, a terminal ID associated with the transaction ID may be included in the confirmation code. However, if the confirmation code is known, the transaction ID and terminal ID corresponding to the confirmation code can be specified, and the confirmation code may not include those IDs.

  When the confirmation code is transmitted, the code acquisition unit 22 of the user terminal 2 acquires this and passes it to the code output unit 23. The code output unit 23 displays and outputs the two-dimensional code and the barcode image in which the received confirmation code is embedded on the display device 24 (step S12). The image of the confirmation code displayed on the user terminal 2 is read by the scanner 33 of the store terminal 3 by the operation of the store clerk of the store 7. In response to the reading operation, the code acquisition unit 31 acquires a confirmation code and passes it to the processing request unit 32 (step S21). The process request unit 32 transmits the obtained confirmation code to the management server 4 and requests a process based on the confirmation code (step S22). The request is for requesting confirmation of the information transmission path regarding the confirmation code and requesting the issuance of a settlement code corresponding to the confirmation code. That is, the processing request in step S22 has significance as an example of a target information request that specifies the user terminal 2 that should display the settlement code using the confirmation code and requests transmission of the settlement code. In step S22, when the contents of the payment processing, for example, the accounting for the product purchased by the user is completed and the price to be paid by the user is confirmed, information for determining the price is transmitted together with the processing request. May be.

  When the processing request in step S22 is transmitted from the store terminal 3, the settlement management unit 41 of the management server 4 transmits the processing request to the settlement server 5 (step S31). In this case, the payment management unit 41 may add predetermined information to the processing request. For example, when the result of the payment process is recorded in association with the business name, business ID, etc., the information may be added to the processing request based on the business information. When the processing request is transmitted from the management server 4, the settlement management unit 53 of the settlement server 5 routes the confirmation code included in the obtained processing request and the information specifying the information transmission path related to the confirmation code. The information is provided to the confirmation unit 54, and the route confirmation unit 54 confirms the information transmission route related to the confirmation code (step S43). For example, the route confirmation unit 54 detects an IP address or the like for specifying a node included in the information transmission route based on information sent from the store terminal 3 via the management server 4 and the detection result is obtained. It is recorded in the code management DB 62 in association with the confirmation code or the transaction ID associated therewith. In step S43, the reliability of the information transmission path may be determined together. In that case, for example, the route confirmation unit 54 determines whether or not the node specified by the operator 8 of the management server 4 is included in the information transmission route based on the customer management DB 63. It may be determined that the reliability of the transmission path is guaranteed. If the reliability is not guaranteed, the payment server 5 may stop the subsequent processing. In that case, the payment server 5 may notify the management server 4 or the user terminal 2 that the payment processing cannot be performed.

  When the information transmission route regarding the confirmation code is confirmed, the route confirmation unit 54 notifies the settlement management unit 53 to that effect. Upon receiving the notification, the payment management unit 53 instructs the code issuing unit 52 to issue a payment code, and the code issuing unit 52 issues a payment code and transmits it to the user terminal 2 in accordance with the instruction. (Step S44). In this case, the user terminal 2 to which the payment code is transmitted is the user terminal 2 specified by the terminal ID notified in step S11. Therefore, even if a third party illegally uses the confirmation code by voyeurism or the like, the settlement code corresponding to the confirmation code is between the user terminal 2 of the user who should use the settlement code, that is, the settlement server 2. The user terminal 2 used by the user who has completed the user authentication, and transmitted to the user terminal 2 having the terminal ID recorded in association with the transaction ID in step S42. Thereby, there is no possibility that the payment code is sent to a third party and used illegally. In step S44, the code issuing unit 52 records the issued settlement code in the code management DB 62 in association with the transaction ID. The transaction ID in this case is a transaction ID corresponding to the confirmation code for which the information transmission path has been previously confirmed. That is, the confirmation code and the settlement code are recorded in the code management DB 62 in association with each other via the transaction ID. The payment code may include identification information necessary for specifying information to be used for payment in the payment management DB 64, such as a user account ID. When such information is necessary, the payment management unit 53 may acquire the necessary information from the payment management DB 64 via the payment execution unit 55 and provide it to the code issuing unit 52. Alternatively, in the case where price information is included in the processing request transmitted in step S22, information on the price to be paid by the user may be included in the settlement code.

  When the settlement code is transmitted, the code acquisition unit 22 of the user terminal 2 acquires this and passes it to the code output unit 23. The code output unit 23 displays and outputs the two-dimensional code and barcode image in which the received payment code is embedded on the display device 24 (step S13). Note that the display of the confirmation code in step S12 and the display of the settlement code in step S13 are both performed by a dedicated application installed in the user terminal 2 or a function of a web browser (at least a part of the computer program Pt1). It may be displayed automatically in response to reception from the server without requiring any user operation. In this case, the image displayed on the user terminal 2 is switched in less than one second from the state in which the confirmation code is displayed, or in a few seconds at the latest. Therefore, it is difficult to recognize that the two-dimensional code and the bar code displayed on the user terminal 2 are switched not only to the user but also to a third party around. That is, it is difficult to notice that two types of codes are displayed sequentially. Further, the store clerk of the store 7 does not need to repeat the reading operation every time the code is switched, and the store terminal 3 can be made to acquire two types of codes sequentially by simply pointing the scanner 33 at the user terminal 2. it can. Therefore, the risk of voyeurism is extremely low.

  The image of the settlement code displayed on the user terminal 2 is read by the scanner 33 of the store terminal 3 by the operation of the store clerk of the store 7 as with the confirmation code. In response to the reading operation, the code acquisition unit 31 acquires the settlement code and passes it to the processing request unit 32 (step S23). The process request unit 32 transmits the obtained settlement code to the management server 4 and requests a process based on the settlement code (step S24). The request is for requesting a payment process based on the payment code. If the price information is not notified from the store terminal 3 to the management server 4 at this stage, the price information is transmitted together with the processing request in step S24.

  When the processing request in step S24 is transmitted from the store terminal 3, the settlement management unit 41 of the management server 4 transmits the processing request to the settlement server 5 (step S32). In this case, the payment management unit 41 may add predetermined information to the processing request as in the case of step S31. When the processing request based on the payment code is transmitted from the management server 4, the payment management unit 53 of the payment server 5 identifies the payment code included in the obtained processing request and an information transmission path related to the payment code. Information is provided to the route confirmation unit 54, and the route confirmation unit 54 confirms the information transmission route related to the settlement code (step S45). The confirmation of the information transmission path may be the same as in step S43, but the reliability of the information transmission path need not be determined in step S45. Further, the route confirmation unit 54 records the confirmation result of the information transmission route related to the settlement code in the code management DB 62 in association with the settlement code or the transaction ID corresponding thereto.

  When the confirmation of the information transmission path related to the settlement code is completed, the settlement management unit 53 compares the confirmation code recorded in association with the code management DB 62 via the transaction ID and the information transmission path regarding the settlement code, and whether the two match. It is determined whether or not (step S46). As described above, matching of information transmission paths does not necessarily require complete matching. For example, when main nodes such as the store terminal 3 and the management server 4 match, the information transmission paths may be regarded as matching. If the information transmission paths match, the payment management unit 53 provides a payment code to the payment execution unit 55 and instructs execution of the payment process corresponding to the payment code. In response to this, the payment execution unit 55 executes a payment process based on the payment code while referring to the payment management DB 64 (step S47). On the other hand, when the information transmission paths do not match, the payment management unit 53 skips step S47. As a result, settlement processing is prohibited.

  If payment processing is executed in step S47 or step S47 is skipped, the payment management unit 53 notifies the management server 4 of the processing result (step S48). The notification may indicate success or failure of payment. When the processing result is notified, the settlement management unit 41 of the management server 4 notifies the store terminal 3 of this (step S33), and the processing request unit 32 of the store terminal 3 that receives this notifies the processing result to the store terminal. 3 is displayed (step S25). Thus, the process illustrated in FIG. 6 ends.

  In the above embodiment, the settlement server 5 corresponds to an example of a predetermined server that executes processing for providing a predetermined service based on target information. Further, the code output unit 23 of the user terminal 2 functions as an example of the target image display unit by executing the process of step S13 of FIG. 6, and the code output unit 23 executes the process of step S12 of FIG. It functions as an example of confirmation information output means, the code acquisition unit 31 of the store terminal 3 executes the processing of steps S21 and S23 in FIG. 6, and the processing request unit 32 executes the processing of steps S22 and S24 in FIG. Accordingly, the combination of the code acquisition unit 31 and the processing request unit 32 functions as an example of the information acquisition unit, and the route confirmation unit of the settlement server 5 executes the processing of steps S43 and S45 in FIG. It functions as an example of a means, and the payment management unit 53 of the payment server 5 executes the process of step S46 in FIG. To function as. The code acquisition unit 22 of the user terminal 2 functions as an example of a confirmation information requesting unit and a processing requesting unit by executing the processing of step S11 in FIG. 2, and the code issuing unit 52 of the settlement server 5 performs step S42 in FIG. By executing the above process, it functions as an example of a confirmation information providing unit and an information providing unit. The process request unit 32 of the store terminal 3 functions as an example of the target information request unit by executing the process of step S22 of FIG. 6, and the code issuing unit 52 of the settlement server 5 executes the process of step S44 of FIG. By doing so, it functions as an example of the target information providing means.

  This invention is not limited to said form, You may implement in the form to which the appropriate deformation | transformation or change was given. For example, in the above embodiment, the confirmation code is first transmitted from the store terminal 3 to the settlement server 5 to confirm the information transmission path, and then the settlement code is transmitted from the store terminal 3 to the settlement server 5 to confirm the information transmission path. However, the relationship may be reversed. An example is shown in FIG. In FIG. 7, first, after user authentication, a payment code is requested from the user terminal 2 to the payment server 5 (F1A), and a payment code is issued from the payment server 5 to the user terminal 2 accordingly (F2A). The code is displayed on the user terminal 2 (F3A). The settlement code is read by the store terminal 3 (F4A), the processing is requested from the store terminal 3 to the settlement server 5 via the management server 4 (F5A, F6A). Is confirmed (F7A). Subsequently, a confirmation code is issued from the settlement server 5 to the user terminal 2 (F8A), and the confirmation code is displayed on the user terminal 2 (F9A). Further, the confirmation code is read by the store terminal 3 (F10A), the processing is requested from the store terminal 3 to the settlement server 5 via the management server 4 (F11A, F12A), and the settlement server 5 that receives the confirmation code confirms it. The information transmission path of the code is confirmed (F13A). Then, on the condition that the information transmission path of the payment code matches the information transmission path of the confirmation code, the payment process is executed in the payment server 5 (F14).

  FIG. 8 shows an example of a specific procedure when the processing of FIG. 7 is realized by the control system of FIG. In FIG. 8, portions common to FIG. 6 are denoted by the same reference numerals. The process in FIG. 8 is performed in steps S11 to S13, S21 to S24, S31, S32, and S42 corresponding to the procedures related to the issuance of the confirmation code and the settlement code in FIG. 6 and the confirmation of the information transmission path regarding the confirmation code and the settlement code. , S44 is different in that the settlement code and the confirmation code are replaced with steps S11A to S13A, S21A to S24A, S31A, S32A, S42A, and S44A. Since these processes correspond to processes in which the confirmation code and the settlement code in the process of FIG. 6 described above are replaced, a specific description of each process is omitted. As described above, even when the settlement code is transmitted from the store terminal 3 to the settlement server 5 in advance and the confirmation code is subsequently transmitted from the store terminal 3 to the settlement server 5, the information transmission paths regarding both codes do not match. As long as the settlement code is not settled. Therefore, even if the payment code is acquired by a third party, it is practically impossible for the third party to illegally use it, and the security of the transaction can be improved.

  In the above embodiment, the process is started by requesting a confirmation code or a settlement code from the user terminal 2 to the settlement server 5, but the terminal that requests these codes is not limited to the user terminal 2. For example, as shown in FIG. 9, the user accesses the payment server 5 using a PC (personal computer) different from the user terminal 2, performs user authentication, and uses his / her user terminal as a confirmation code transmission destination. 2 may be specified to request the settlement server 5 to transmit a confirmation code. In this case, after the confirmation code is issued to the user terminal 2, the process can proceed as in FIG. Alternatively, as shown in FIG. 10, the user designates the PC 10 as the confirmation code transmission destination, requests the settlement server 5 to transmit the confirmation code (F1), and transmits the confirmation code from the settlement server 5 to the PC 10 (F2B). It is also possible to modify such that the obtained confirmation code is provided from the PC 10 to the user terminal 2 (F2C). Thus, when requesting a confirmation code at a terminal different from the user terminal 2, it is not essential for the user to perform an operation for requesting the confirmation code at the store 7 or other place where the user terminal 2 should be used. For example, it is possible to request the issuance of a confirmation code and give it to the user terminal 2 at a time when there is time, such as before going to the store 7. This is particularly advantageous when there is a lot of information that the user must enter to request a confirmation code. 9 and 10, similarly to the example of FIG. 7, the payment code is acquired by the user terminal 2 prior to the confirmation code, and is transmitted from the store terminal 3 to the payment server 5. It is also possible to do.

  The confirmation code and the settlement code do not necessarily need to be issued by the settlement server 5. For example, as shown in FIG. 11, a confirmation code and a settlement code are generated at the user terminal 2 (F1B), and the confirmation code and the settlement code are sequentially displayed and output at the user terminal 2 (F3, F9). The permission or prohibition of the execution of the settlement process may be controlled based on the comparison of the information transmission paths of those codes. For example, if a function for generating a confirmation code and a settlement code according to a predetermined generation rule is installed in the computer program Pt1 of the user terminal 2, such processing can be realized. Also in this case, the transmission order of the settlement code and the confirmation code may be switched. In place of the user terminal 2 in FIG. 11, for example, a confirmation code and settlement code generation function is implemented in the PC 10 in FIGS. 9 and 10, and the obtained confirmation code and settlement code are provided from the PC 10 to the user terminal 2. May be.

  In the above-described form, the confirmation code and the settlement code as the confirmation information and the target information are displayed and output on the user terminal 2 as the two-dimensional code images 101A and 101B or the barcode images 102A and 102B, respectively, and this is the information acquisition terminal. However, the confirmation information is not necessarily acquired by the information acquisition terminal via the image. For example, when wireless communication conforming to the short-range wireless communication standard is possible between the user terminal 2 and the store terminal 3, the confirmation information is provided from the user terminal 2 to the store terminal 3 by wireless communication, and the target information is an image. It is good also as what is provided to the shop terminal 3 via. Even in this case, it is possible to compare the information transmission path related to the confirmation information and the information transmission path related to the target information, and based on the comparison result, it is possible to determine whether the processing according to the target information is possible or not. Can be increased.

  In the above embodiment, the management server 4 is interposed between the store terminal 3 as an example of the information acquisition terminal and the settlement server 5 as an example of a server that executes processing based on the target information. 4 may be omitted or added as appropriate. For example, the store terminal 3 and the payment server 5 may communicate directly, or a plurality of intermediate servers may be interposed between the store terminal 3 and the payment server 5.

  In the above form, for each of the confirmation code and the settlement code, the information transmission path from the store terminal 3 to the settlement server 5 is confirmed, and the user terminal 2 used for displaying those codes confirms the information transmission path. Not included in the target. Since the user terminal 2 is a terminal with which the user can be appropriately involved in the process, the user is involved in the identification and confirmation of the information transmission path when the user terminal 2 is excluded from the confirmation target of the information transmission path. There is an advantage that the safety of the transaction can be improved by eliminating the risk. However, by including the user terminal in the confirmation target of the information transmission path, it may be possible to determine whether the user terminal itself should be the starting point for sending the confirmation code and the settlement code. For example, when the store terminal 3 acquires information for identifying the user terminal 2 from the user terminal 2, such a modification can be realized. As a means for the store terminal 3 to acquire information for identifying the user terminal 2, for example, the identification information of the user terminal 2, for example, the terminal ID as an example, is added to the confirmation code and the settlement code on the user terminal 2 side. It is possible to display the information, and the store terminal 3 reads the codes to acquire the terminal ID and transmit it to the settlement server 5. According to this, on the settlement server 5 side, the user terminal 2 used for displaying the confirmation code and the settlement code can be uniquely identified. Even when the confirmation information is wirelessly transmitted from the user terminal 2 to the store terminal 3, the store terminal 3 can naturally acquire information for uniquely identifying the user terminal 2.

  In the above embodiment, the example in which the present invention is applied to the settlement system 1 that processes the price of goods or services purchased by the user at the store 7 is shown. However, the service provided by the service providing system of the present invention is a settlement. Not limited to services. For example, when providing a service in which a user purchases a ticket purchased via a network at a store terminal, information necessary for the store terminal to issue a ticket with the approval of the server is given to the user terminal as target information. Confirmation information is transmitted from the store terminal to the server before or after the display to confirm the information transmission paths of the confirmation information and the target information, and the store terminal is based on the comparison result. It is possible to provide the present invention in such a form that the permission or prohibition of ticket issuance is controlled. In this case, since the payment related to the ticket purchase has already been completed, it is not necessary to provide the server with price information when transmitting the confirmation information or the target information. The target information is information necessary for issuing the ticket, such as ticket exchange. The confirmation information may be generated as information for confirming the information transmission path which is differentiated from the confirmation code. In addition, the type of service can be changed as appropriate, and the information acquisition terminal is not limited to the example installed in the store, but may be appropriate as long as the confirmation information and the target information can be acquired from the user terminal and transmitted to the server. A terminal may be used as an information acquisition terminal.

  Various aspects of the present invention derived from each of the above-described embodiments and modifications will be described below. In the following description, in order to facilitate understanding of each aspect of the present invention, the corresponding components illustrated in the accompanying drawings are added in parentheses, but the present invention is thereby limited to the illustrated embodiments. It is not something.

  A service providing system according to an aspect of the present invention is configured to use a network (6) to which a communication rule with information for specifying an information transmission path is applied, and is displayed on a user terminal (2). The target information (payment code as an example) included in the target image (101B, 102B) read by the information acquisition terminal (3), and the obtained target information is read from the information acquisition terminal via the network. A service providing system (1) for executing processing (S47) for providing a predetermined service (payment service as an example) at the server based on the target information by transmitting to the server (5). The target image display means (23, S13; S12A) for displaying the target image on the user terminal, and the confirmation information differentiated from the target information (one Confirmation information output means (23, S12; S13A) for outputting to the user terminal prior to or subsequent to the display of the target image by the target image display means, and the information acquisition terminal Information acquisition means (31, 32, S21, S22, S23, S24; S21A, which obtains each of the confirmation information and the target information and transmits the obtained confirmation information and target information to the server from the information acquisition terminal. S22A, S23A, S24A), route confirmation means (54, S43, S45) for confirming an information transmission route from the information acquisition terminal to the server regarding each of the confirmation information and target information acquired by the server, and the confirmation Based on the comparison of the confirmation results of the information transmission path for each of the information and the target information, the server And execution control means (53, S46) for controlling permission or prohibition of execution of the process based on the target information, are those having a.

  A computer program according to an aspect of the present invention is configured to use a network (6) to which a communication rule with information for specifying an information transmission path is applied, and is displayed on a user terminal (2). The target information (payment code as an example) included in the target images (101B, 102B) is read by the information acquisition terminal (3), and the obtained target information is read from the information acquisition terminal via the network through a predetermined server. By transmitting to (5), the computer program (Pt1, Pt2, Pt2, Pt2, Pt2, Pt2, Pt2, Pt2, Ps2), the computer (2, 3, 5) provided in the service providing system, the target image as the user Target image display means (23, S13; S12A) to be displayed at the end, confirmation information (a confirmation code as an example) differentiated from the target information is displayed prior to the display of the target image by the target image display means. Or a confirmation information output means (23, S12; S13A) that is subsequently output to the user terminal, causes the information acquisition terminal to acquire the confirmation information and the target information, and obtains the obtained confirmation information and target information. Information acquisition means (31, 32, S21, S22, S23, S24; S21A, S22A, S23A, S24A) transmitted from the information acquisition terminal to the server, the information related to each of the confirmation information and target information acquired by the server Route confirmation means (54, S43, S45) for confirming the information transmission route from the acquisition terminal to the server, and the confirmation Execution control means (53, S46) for controlling permission or prohibition of execution of the processing based on the target information by the server, based on a comparison of confirmation results of the information transmission path regarding each of the information and the target information It is configured to function.

  According to the above aspect, since the two types of information of confirmation information and target information are acquired from the user terminal to the information acquisition terminal and transmitted to the server, the information acquisition terminal to the server from each of the confirmation information and target information is transmitted. Information transmission paths can be confirmed and compared. The information transmission path when each of the confirmation information and the target information is correctly read sequentially from the same user terminal into the information acquisition device, and the target information displayed on the user terminal by a third party There is a clear difference from the information transmission path when trying to use it in another location. In view of the processing speed of a general information acquisition terminal and the communication speed of a network, either confirmation information or target information is read and transmitted to the server, and then the other information is read and transmitted to the server. The time difference until it is done is 1 second or less, or about several seconds at the latest, and it is actually that a third party who illegally acquired the target information causes the information acquisition terminal in the same place to acquire the target information on behalf of the original user Is impossible. Therefore, by comparing the information transmission path between the confirmation information and the target information, it is determined whether the information is used correctly or illegally. In the former case, the execution of the process based on the target information is permitted, In the latter case, it is possible to improve the safety of the transaction by prohibiting the execution of the processing based on the target information.

  Note that the computer program according to one embodiment of the present invention may be provided in a state of being stored in a storage medium. If this storage medium is used, the system of the present invention can be realized by using the computer by installing and executing the computer program according to the present invention on the computer, for example. The storage medium storing the computer program may be a non-transitory storage medium such as a CDROM.

  In the above aspect, the execution control means confirms that the information transmission path confirmed for the target information acquired from the information acquisition terminal matches the information transmission path confirmed for the confirmation information associated with the target information. Execution of processing based on the target information may be permitted as at least one of the conditions, and execution of processing based on the target information may be prohibited if they do not match. According to this, the process based on the target information is not executed unless the information transmission path regarding the confirmation information matches the information transmission path regarding the target information. Therefore, the safety of the transaction can be further increased with certainty.

  In the above aspect, the route confirmation unit confirms the information transmission route by including whether or not the information transmission route from the information acquisition terminal to the server corresponds to a predetermined reliability route. The execution control unit may permit the execution of the process on the condition that the information transmission path is confirmed as the reliable path. According to this, if the information transmission route does not correspond to a route having a predetermined reliability, the process based on the target information is not executed. For example, if confirmation information and target information are not transmitted through a node determined beforehand as a transmission source of the target information or a relay point, processing based on the target information can be prohibited as a reliable information transmission path. . Thereby, it is possible to further increase the safety of the transaction.

  In the above aspect, a confirmation information request for requesting the confirmation information by designating a user terminal to be used for displaying the target image is transmitted from the predetermined terminal (2; 10; 3) connected to the network to the server. Confirmation information requesting means (22, S11; 32, S24A) to be performed, and confirmation information providing means (52, S24) for transmitting the confirmation information to the server to the user terminal specified in the confirmation information request acquired by the server. S42; S44A). According to this, when confirmation information is requested from a predetermined terminal on the network to the server, the confirmation information is transmitted to the user terminal specified by the request. By providing the confirmation information from the server, the safety and reliability of the confirmation information can be managed on the server side to increase the safety of the transaction.

  In the above aspect, a target information request for requesting the target information by designating a user terminal to be used for displaying the target image is transmitted from the predetermined terminal (3; 2; 10) connected to the network to the server. Target information requesting means (32, S22) to be sent and target information providing means (52, S44; S42A) for sending the target information to the server to the user terminal specified in the target information request acquired by the server And may be further provided. According to this, when target information is requested from the predetermined terminal on the network to the server, the target information is transmitted to the user terminal specified by the request. By providing the target information from the server, the safety and reliability of the target information can be managed on the server side to increase the safety of the transaction.

  In the above aspect, the service providing system sends a processing request for specifying a user terminal to be used for displaying the target image and requesting the start of processing based on the target information to a predetermined terminal (2; connected to the network). 10) processing request means (22, S11; S11A) to be transmitted to the server, and processing to be executed based on the target information for the user terminal specified by the processing request acquired by the server; Information providing means (52, S42; S42A) for causing the server to transmit the associated confirmation information or target information to the server, and the route confirmation means from the information acquisition terminal to the one of the information acquisition means When the information is transmitted, the information transmission path regarding the one information is confirmed (S43), and the information providing means When the one information is transmitted from the confirmation information associated with the process to be executed on the basis of the target information or the target information for the user terminal specified in the processing request, Information may be further transmitted to the server (S44; S44A). According to this, when either the confirmation information or the target information is transmitted from the server to the user terminal and the information is returned from the information acquisition terminal to the server, the information transmission path is confirmed, and the confirmation information or The other information of the target information is transmitted to the user terminal. Therefore, according to server management, confirmation information and target information can be sequentially acquired from the user terminal to the information acquisition terminal, and permission or prohibition of execution of processing based on comparison of information transmission paths can be smoothly controlled. In the user terminal, if the user terminal is configured to sequentially switch and output the information provided from the server without requiring the user's operation, the process can be advanced more smoothly and quickly, and the information acquisition terminal It is possible to eliminate the possibility that the confirmation information and the target information are output unnecessarily continuously prior to the information acquisition by, thereby further improving the safety.

  In the above aspect, the user terminal or an information acquisition terminal that should acquire the confirmation information and the target information from the user terminal may be used as the predetermined terminal. According to this, the confirmation information and the target information are transmitted from the server to the user terminal in a place where the information acquisition terminal for acquiring the confirmation information and the target information is provided, and the processing based on the information is smoothly and quickly performed. Can proceed.

  In the above aspect, the confirmation information output means causes the user terminal to display and output confirmation images (101A, 102A) including the confirmation information, and the information acquisition means displays the information acquisition terminal on the user terminal. The target information may be read from the acquired target image, and the obtained target information may be transmitted from the information acquisition terminal to the server. According to this, since both the confirmation information and the target information are displayed and output on the user terminal, the information acquisition terminal side reads the confirmation image and the target image using common hardware, and is included in those images. Confirmation information and target information can be acquired. By sharing the output method, there is no need to switch the output method of the confirmation information and the target information, and the processing can be further smoothed and speeded up.

  In the above aspect, each of the target image and the confirmation image may be generated by describing information to be recorded in the image according to the same standard. For example, each of the target image and the confirmation image may be generated as a two-dimensional code or barcode image. According to these embodiments, the confirmation information and the target information can be acquired simply by reading an image in accordance with a certain standard on the information acquisition terminal side, so that the burden on the information acquisition terminal side can be reduced. .

1 Payment system (service provision system)
2 User terminal 3 Store terminal 4 Management server 5 Payment server (predetermined server)
6 Network 7 Store 8 Management server operator 9 Payment server operator 22 Code acquisition unit (confirmation information requesting means, target information requesting means, processing requesting means)
23 Code output unit (target image display means, confirmation information output means)
31 Code acquisition unit (information acquisition means)
32 Process request section (information acquisition means)
52 Code issuing section (information providing means, confirmation information providing means, target information providing means)
53 Settlement management unit (execution control means)
54 Route confirmation part (route confirmation means)
101A, 102A Confirmation code image 101B, 102B Payment code image

Claims (11)

It is configured to use a network to which a communication rule with information for specifying an information transmission path is applied, reads target information included in a target image displayed on a user terminal with an information acquisition terminal, A service providing system for executing processing for providing a predetermined service at the server based on the target information by transmitting the obtained target information from the information acquisition terminal to the predetermined server via the network. Because
Target image display means for displaying the target image on the user terminal;
Confirmation information output means for causing the user terminal to output confirmation information differentiated from the target information prior to or subsequent to display of the target image by the target image display means;
Information acquisition means for causing the information acquisition terminal to acquire the confirmation information and the target information, and transmitting the obtained confirmation information and target information from the information acquisition terminal to the server;
Route confirmation means for confirming an information transmission route from the information acquisition terminal to the server regarding each of the confirmation information and target information acquired by the server;
An execution control means for controlling permission or prohibition of execution of the processing based on the target information by the server, based on a comparison of confirmation results of the information transmission path with respect to each of the confirmation information and the target information;
Service providing system with   The execution control means includes at least one of the conditions that the information transmission path confirmed with respect to the target information acquired from the information acquisition terminal matches the information transmission path confirmed with respect to the confirmation information associated with the target information. The service providing system according to claim 1, wherein execution of processing based on the target information is permitted, and execution of processing based on the target information is prohibited if they do not match. The route confirmation means confirms the information transmission route so as to include whether or not the information transmission route from the information acquisition terminal to the server corresponds to a predetermined reliable route,
3. The service providing system according to claim 1, wherein the execution control unit permits the execution of the process on the condition that the information transmission path is confirmed as the path having the reliability. Confirmation information requesting means for transmitting a confirmation information request for requesting the confirmation information by designating a user terminal to be used for displaying the target image from a predetermined terminal connected to the network;
Confirmation information providing means for transmitting the confirmation information to the server for the user terminal specified in the confirmation information request acquired by the server;
The service providing system according to any one of claims 1 to 3, further comprising: Target information requesting means for transmitting a target information request for requesting the target information by specifying a user terminal to be used for displaying the target image from a predetermined terminal connected to the network;
Target information providing means for causing the server to transmit the target information to the user terminal specified in the target information request acquired by the server;
The service providing system according to any one of claims 1 to 3, further comprising: Processing request means for transmitting a processing request for specifying a user terminal to be used for displaying the target image and requesting a start of processing based on the target information from a predetermined terminal connected to the network;
Causes the user terminal specified in the processing request acquired by the server to send either confirmation information or target information associated with a process to be executed based on the target information to the server An information providing means,
When the one information is transmitted from the information acquisition terminal, the route confirmation unit confirms the information transmission route regarding the one information,
The information providing means is associated with a process to be executed based on the target information for the user terminal specified in the process request when the one information is transmitted from the information acquisition terminal. The service providing system according to any one of claims 1 to 3, further causing the server to further transmit either the confirmation information or the target information.   The service providing system according to any one of claims 4 to 6, wherein an information acquisition terminal that acquires the confirmation information and the target information from the user terminal or the user terminal is used as the predetermined terminal. The confirmation information output means causes the user terminal to display and output a confirmation image including the confirmation information,
The said information acquisition means makes the said information acquisition terminal read the said target information from the target image displayed in the said user terminal, and transmits the obtained target information to the said server from the said information acquisition terminal. 8. The service providing system according to any one of items 7.   9. The service providing system according to claim 8, wherein each of the target image and the confirmation image is generated by describing information to be recorded in the image according to the same standard.   The service providing system according to claim 9, wherein each of the target image and the confirmation image is generated as a two-dimensional code or barcode image. It is configured to use a network to which a communication rule with information for specifying an information transmission path is applied, reads target information included in a target image displayed on a user terminal with an information acquisition terminal, A service providing system for executing processing for providing a predetermined service at the server based on the target information by transmitting the obtained target information from the information acquisition terminal to the predetermined server via the network. A computer program used for
A computer provided in the service providing system,
Target image display means for displaying the target image on the user terminal;
Confirmation information output means for causing the user terminal to output confirmation information differentiated from the object information prior to or subsequent to display of the object image by the object image display means,
Information acquisition means for causing the information acquisition terminal to acquire the confirmation information and the target information, and transmitting the obtained confirmation information and target information from the information acquisition terminal to the server;
Route confirmation means for confirming an information transmission route from the information acquisition terminal to the server regarding each of the confirmation information and target information acquired by the server; and a confirmation result of the information transmission route regarding each of the confirmation information and the target information Execution control means for controlling permission or prohibition of execution of the processing based on the target information by the server based on the comparison of
A computer program for a service providing system configured to function as a computer program.

Images