JP6482700B2 - Payment system, sales server device, payment server device and server program - Google Patents

Description

  The present invention relates to a payment system, a sales server device, a payment server device, and a server program for performing payment processing related to sales of products (articles, digital contents, services, virtual currencies, etc.) via a network.

  Conventionally, a system in which a user using a user terminal device accesses a server device via a network and buys and sells goods by transmitting and receiving information between the user terminal device and the server device, a system such as so-called online shopping has been widely used. It is widespread (see, for example, Patent Document 1). In such a system, various means are provided as a method of paying for the purchased goods. Payment methods include, for example, a method using a credit card, a method using electronic money, bank transfer, exchange of goods and prices, and post-payment at a store.

JP 2013-248292 A

  In a system for selling and selling products between a user terminal device and a server device, payment can be completed online by using a credit card or electronic money to pay for the product. In order to realize this, in many cases, a settlement server device that performs processing (settlement processing) related to payment is provided separately from a server device that sells products (hereinafter referred to as sales server device). Smooth communication is required between the user terminal device, the sales server device, and the settlement server device.

  An object of the present invention is to provide a payment system, a sales server device, a payment server device, and a server program that enable a user terminal device, a sales server device, and a payment server device to perform smooth communication. .

The payment system according to the present invention includes a sales server device that performs sales processing related to sales of products, a payment server device that performs payment processing related to products sold by the sales server device through the sales processing, and the network via a network. A communication unit that communicates with the sales server device and the settlement server device, a non-contact communication unit that performs non-contact communication with a storage medium that stores amount information, and an operation reception that receives an operation related to the purchase of the product and a user terminal having a part, the shop server in association with the identification information attached to the payment processing, a storage unit for storing a processing status information relating to the settlement processing, the identification information and based on said processing status information, and a trouble confirmation unit for confirming the presence or absence of defects of the settlement process.

  In the payment system according to the present invention, the storage unit holds the processing status information even when the sales process or the payment process is not completed.

  In the payment system according to the present invention, the sales server device stores correspondence between identification information given to the payment processing and user identification information given to a user who uses the user terminal device. Keep it.

  In the payment system according to the present invention, the sales server device stores the result of the payment process in association with the identification information attached to the payment process.

  In the payment system according to the present invention, the user terminal device notifies the user of the user terminal device of a problem related to the payment processing.

  In the payment system according to the present invention, when the user terminal device performs a login process to the sales server device, the user terminal device notifies the user of the user terminal device of the problem.

  In addition, the payment system according to the present invention relates to a problem with the user of the user terminal device after the user terminal device has failed in the payment process and at least until the next payment process is started. Make a notification.

  In addition, the payment system according to the present invention includes a resuming unit that resumes the payment process in which the failure has occurred after the user terminal device has notified the failure.

  In addition, the payment system according to the present invention includes a resuming unit that resumes the payment process in which a defect has occurred when the defect confirmation unit confirms that there is a defect.

  Further, the settlement system according to the present invention is configured to determine a failure occurrence location in a process of payment processing based on the identification information attached to the payment processing and the processing status information stored in the storage unit. A part.

  In addition, the settlement system according to the present invention includes a resuming unit that resumes the settlement process from the location determined by the defect determination unit when the defect confirmation unit confirms that there is a defect.

  In addition, the payment system according to the present invention includes a generation unit that generates identification information that the sales server device attaches to the payment processing.

  Further, in the payment system according to the present invention, the storage medium stores history information of the stored amount information, and the payment server device is stored in the storage medium based on the history information acquired from the storage medium. An update determination unit that determines whether there is a defect related to the update processing of the amount information.

  In the payment system according to the present invention, the storage medium stores a change in amount information in association with the identification information attached to the update process, and the payment server device The correspondence between the attached identification information and the identification information attached to the settlement process is stored.

  A payment system according to the present invention includes a user terminal device having a non-contact communication unit that performs non-contact communication with a storage medium that stores amount information and history information of the amount information, and the user terminal device. An update processing unit that performs communication to update the amount information stored in the storage medium, and a process by the update processing unit based on a history of processing by the update processing unit and history information acquired from the storage medium. A settlement server device having an update determination unit for determining the presence or absence of such a defect.

  Further, in the settlement system according to the present invention, when the update determination unit has a defect, the content of the defect is determined.

  In the payment system according to the present invention, the user terminal device is a non-face-to-face device.

  In addition, a sales server device according to the present invention is a sales server device that includes a communication unit that communicates with a user terminal device, and that performs sales processing related to sales of products. A storage unit that stores processing status information related to the payment processing in association with the identification information attached to the processing, and confirms whether there is a defect related to the payment processing based on the identification information and the processing status information And a failure confirmation unit.

  The settlement server device according to the present invention is a settlement server device that includes a communication unit that communicates with a user terminal device, and that performs a settlement process related to the settlement of a product, and includes an identification attached to the settlement process The processing of the settlement process based on the storage unit that stores the processing status information related to the settlement process in association with the information, the identification information attached to the settlement process, and the processing status information stored in the storage unit A defect determination unit that determines a position where a defect occurs in the process.

  In addition, a server program according to the present invention includes a communication unit that communicates with a user terminal device, and provides a sales server device that performs a sales process related to sales of a product to a settlement process related to a product that is sold through the sales process. A storage means for storing processing status information related to the payment processing in association with the identification information attached, and a defect confirmation for checking whether there is a defect related to the payment processing based on the identification information and the processing status information Operate as a means.

  In addition, the server program according to the present invention includes a communication unit that communicates with the user terminal device, and corresponds to a settlement server device that performs a settlement process related to the settlement of a product to the identification information attached to the settlement process. In addition, based on the storage means for storing the processing status information related to the payment processing, the identification information attached to the payment processing, and the processing status information stored in the storage unit, a defect in the processing process of the payment processing It is made to operate as a failure determination means for determining the occurrence location.

  In the present invention, the user terminal device relays transmission / reception of information between the sales server device and the settlement server device. This makes it possible to smoothly transmit and receive information necessary for the payment process.

It is a schematic diagram for demonstrating the outline | summary of the payment system which concerns on this Embodiment. It is a block diagram which shows the structure of a user terminal device. It is a block diagram which shows the structure of an IC card. It is a schematic diagram which shows an example of the balance log | history information which an IC card memorize | stores in a memory | storage part. It is a block diagram which shows the structure of a sales server apparatus. It is a schematic diagram which shows an example of the sales history information which a sales server apparatus memorize | stores in a memory | storage part. It is a block diagram which shows the structure of a 1st payment server apparatus. It is a schematic diagram which shows an example of the payment history information which a 1st payment server apparatus memorize | stores in a memory | storage part. It is a block diagram which shows the structure of a 2nd payment server apparatus. It is a schematic diagram which shows an example of the payment process by the payment system which concerns on this Embodiment. It is a flowchart which shows the procedure of the sales process which a sales server apparatus performs. It is a flowchart which shows the procedure of the relay process which a user terminal device performs. It is a flowchart which shows the procedure of the relay process which a user terminal device performs. It is a flowchart which shows the procedure of the payment process which a 1st payment server apparatus performs. It is a flowchart which shows the procedure of the payment process which a 1st payment server apparatus performs. It is a flowchart which shows the procedure of the payment process which a 2nd payment server apparatus performs. It is a flowchart which shows the procedure of the payment process which a 2nd payment server apparatus performs. It is a schematic diagram which shows an example of the malfunction confirmation process of the payment system which concerns on this Embodiment. It is a flowchart which shows the procedure of the return process which a sales server apparatus performs. It is a flowchart which shows the procedure of the return process which a sales server apparatus performs. It is a flowchart which shows the procedure of the malfunction determination process which a 1st payment server apparatus performs. It is a flowchart which shows the procedure of the log | history inquiry process which a 2nd payment server apparatus performs.

<System overview>
FIG. 1 is a schematic diagram for explaining the outline of the settlement system according to the present embodiment. The payment system according to the present embodiment includes a user terminal device 1, a sales server device 3, and a payment server device 5. The user terminal device 1 is a device that a user uses when purchasing a product. For example, the user terminal device 1 is a device such as a game machine, a personal computer, a mobile phone, a smartphone, or a tablet terminal. The user terminal device 1 can communicate with the sales server device 3 and the settlement server device 5 through a wired or wireless network. Further, the user terminal device 1 can communicate with the IC card 7 by a non-contact communication function.

  The settlement system according to the present embodiment is a so-called online sales system in which the sales server device 3 sells products via a network, and the user purchases products using the user terminal device 1. That is, in the settlement system according to the present embodiment, the consumer purchases goods or services through the network such as the Internet using the user terminal device 1 without the seller and the purchaser (consumer) facing each other. It is a system that performs. Therefore, the user terminal device 1 is not a store installation type device but a non-face-to-face type device. That is, the user terminal device 1 is not a device operated by a merchandise seller, but a device operated by a merchandise purchaser.

  The product sold by the sales server device 3 may be, for example, an article delivered to the user's home or the like at a later date by mail or the like, or may be any service provided to the purchased user, for example. For example, it may be digital content downloaded to the user terminal device 1 by purchase, or may be various other types.

  When the product sold by the sales server device 3 is digital content, the user terminal device 1 can download and use the purchased digital content. Examples of digital content include video works such as movies or television broadcasts, games, applications, databases, websites, program software, text data, comics, music, animation, photographs, art, computer graphics, or characters. For example, when a video work is purchased as digital content, the user terminal device 1 downloads video data of the video work from the sales server device 3 or another server device, and reproduces the video data and displays it on a display unit or the like. Processing can be performed. Digital content such as video works or music may be provided by so-called streaming distribution. For example, when a game is purchased as digital content, the user terminal device 1 can download and execute a game program and data. Thus, the user terminal device 1 can perform processing for using the purchased digital content.

  Further, for example, a product sold by the sales server device 3 may be a virtual currency. For example, the virtual currency includes points that can be used to purchase a product on a specific website or points that can be used to purchase an item or an additional scenario in a specific game. The user terminal device 1 can purchase a virtual currency in the sales server device 3 and purchase a product using the virtual currency in a specific website or game.

  In the settlement system according to the present embodiment, a user who has purchased a product can use the IC card 7 for payment. The user can charge electronic money, points, or the like that can be used to purchase a product, for example, at a store. The IC card 7 stores a balance of charged electronic money or points in an internal memory or the like. The IC card 7 has a non-contact communication function, and can perform payment processing with the payment server device 5 via the user terminal device 1.

  A user who uses online sales first operates the user terminal device 1 to access the sales server device 3 and performs login processing for the system. When the login is successful, information such as a list of products for sale is transmitted from the sales server device 3 to the user terminal device 1, and a list of products that can be purchased is displayed on the display unit of the user terminal device 1. The user operates the user terminal device 1 to select a product to purchase and gives a purchase request to the sales server device 3 (see (1) in the figure). The sales server device 3 to which the purchase request is given from the user terminal device 1 calculates the total price of the product to be purchased, and transmits a payment request for this price to the user terminal device 1 as a settlement request (in the figure ( 2a)). The user terminal device 1 that has received the payment request from the sales server device 3 transmits the received payment request to the payment server device 5 (see (2b) in the figure).

  The payment server device 5 that has received the payment request from the user terminal device 1 communicates with the IC card 7 owned by the user via the user terminal device 1, and corresponds to a product price from the balance stored in the IC card 7. A process of reducing the amount is performed (see (3) in the figure). At this time, the user terminal device 1 displays, for example, a message for prompting the IC card 7 used for payment to contact a predetermined location of the user terminal device 1 on the display unit, and performs non-contact communication with the IC card 7. The user terminal device 1 transmits the information received from the settlement server device 5 to the IC card 7 and transmits the information received from the IC card 7 to the settlement server device 5. Communication between the settlement server device 5 and the IC card 7 via the user terminal device 1 is performed a plurality of times, whereby the commodity price is reduced from the balance of the IC card 7.

  The settlement server device 5 that has finished the communication with the IC card 7 transmits the result of the settlement process to the user terminal device 1 (see (4a) in the figure). When the product price can be reduced from the balance of the IC card 7, a result indicating that the payment process has been successful is transmitted. On the other hand, if the product price cannot be reduced due to a shortage of balance or a failure in communication, a result indicating that the payment process has failed is transmitted. The user terminal device 1 that has received the settlement result from the settlement server device 5 transmits the received settlement result to the sales server device 3 (see (4b) in the figure). The sales server device 3 performs a product sales process based on the settlement result received from the user terminal device 1. For example, if the payment process is successful, the sales server device 3 determines that the price of the product to be sold has been paid, and proceeds with the sales process to a stage such as preparation for shipment of the product or permission to download. Further, for example, when the payment processing has failed, the sales server device 3 notifies the user terminal device 1 that the payment processing has failed or that the payment processing is to be performed again.

  Thus, in the payment system according to the present embodiment, the sales server device 3 and the payment server device 5 do not communicate directly, but communicate via the user terminal device 1. For this reason, there is no possibility that the payment processing will fail due to a communication failure between the sales server device 3 and the payment server device 5, and smooth payment processing can be realized.

  Further, in the payment system according to the present embodiment, the payment request transmitted by the sales server device 3 is such that the information contained therein is encrypted, and the user terminal device 1 cannot be decrypted or altered. The settlement server device 5 can decrypt the data. Similarly, the settlement result transmitted by the settlement server device 5 is encrypted, and cannot be decrypted and modified by the user terminal device 1 but can be decrypted by the sales server device 3. By performing such encryption, the reliability of the payment system can be improved.

  The payment system according to the present embodiment is configured to encrypt and transmit / receive the payment request and the payment result as described above, but is not limited thereto. For example, the sales server device 3 sends a payment request with an electronic signature, and the payment server device 5 that has received the electronic signature via the user terminal device 1 checks whether the electronic signature is valid. It is good also as composition to do. In this case, the settlement server device 5 transmits the settlement result with an electronic signature, and the sales server device 3 that has received this via the user terminal device 1 determines whether the electronic signature is valid. It is good also as a structure which confirms.

<Device configuration>
FIG. 2 is a block diagram illustrating a configuration of the user terminal device 1. The user terminal device 1 according to the present embodiment includes a processing unit 10, a storage unit 11, a recording medium mounting unit 12, a display unit 13, an operation unit 14, a communication unit 15, a non-contact communication unit 16, and the like. Yes. The processing unit 10 of the user terminal device 1 is configured using an arithmetic processing device such as a CPU (Central Processing Unit). The processing unit 10 reads and executes the client program 91a recorded on the recording medium 91 mounted on the recording medium mounting unit 12, thereby performing various information processing related to product purchase and payment. The client program 91a read from the recording medium 91 may be stored in the storage unit 11, and the processing unit 10 may read the client program 91a from the storage unit 11.

  The storage unit 11 is configured by using a volatile or nonvolatile semiconductor memory element, a hard disk drive, or the like. The storage unit 11 stores various programs such as the client program 91a and data necessary for executing the programs. In addition, the storage unit 11 can store digital content purchased by the sales server device 3. The recording medium mounting unit 12 is configured so that a recording medium 91 such as a card type, a cassette type, or a disk type can be attached and detached. The processing unit 10 can read the client program 91a and various data from the recording medium 91 mounted on the recording medium mounting unit 12. The processing unit 10 may be configured to be able to write a program or data to the recording medium 91.

  The display unit 13 is configured using a liquid crystal panel or the like, and displays an image provided from the processing unit 10. The operation unit 14 is, for example, a push-down button or a touch panel provided on the display unit 13, and gives a signal corresponding to the content of an operation performed by the user (for example, pressing or releasing the button) to the processing unit 10. The communication unit 15 transmits / receives information to / from the sales server device 3, the settlement server device 5, another server device, another user terminal device 1, and the like via a network 99 such as the Internet. For example, the user terminal device 1 can communicate with the server device at the communication unit 15 to download the client program 91a and the like and store it in the storage unit 11.

  In the present embodiment, the settlement server device 5 includes a first settlement server device 5A and a second settlement server device 5B. The user terminal device 1 communicates with the first settlement server device 5A via the network 99 and does not communicate with the second settlement server device 5B.

  The non-contact communication unit 16 performs wireless non-contact data transmission / reception with the IC card 7 or the like in accordance with, for example, ISO / IEC 18092 (so-called NFC) communication standard. The communication distance of the non-contact communication unit 16 is typically about several mm to several cm. The non-contact communication unit 16 transmits a signal instructing reading of stored data to the IC tag 70 built in the IC card 7 and receives desired data as a response thereto. The non-contact communication unit 16 has a so-called IC tag reader function. Further, the non-contact communication unit 16 can cause the IC tag 70 to write data by transmitting a write instruction signal together with the write data. That is, the non-contact communication unit 16 has a function of an IC tag writer. However, the communication method by the non-contact communication unit 16 is not limited to NFC, and may be various communication methods adopted as non-contact communication or near field communication such as RFID.

  Further, in the user terminal device 1 according to the present embodiment, when the processing unit 10 executes the client program 91a, the settlement request relay unit 21, the settlement mediation unit 22, the settlement result relay unit 23, the purchase processing unit 24, and the operation reception The unit 25 and the like are implemented in the processing unit 10 as a software functional block. The settlement request relay unit 21 performs processing for transmitting the settlement request received from the sales server device 3 by the communication unit 15 to the first settlement server device 5A by the communication unit 15. The settlement intermediary unit 22 performs communication between the first settlement server device 5A and the IC card 7 by communication with the first settlement server device 5A by the communication unit 15 and non-contact communication with the IC card 7 by the non-contact communication unit 16. The process that mediates the settlement process is performed. The settlement result relay unit 23 performs processing for transmitting the settlement result received from the first settlement server device 5A by the communication unit 15 to the sales server device 3 by the communication unit 15. The purchase processing unit 24 communicates with the sales server device 3 in the communication unit 15 to display a list of commodities that can be purchased on the display unit 13, a process to accept selection of commodities to be purchased, and the selected Processing for transmitting a purchase request for the product to the sales server device 3 through the communication unit 15 is performed. The operation reception unit 25 performs a process of receiving a user operation based on an input signal from the operation unit 14. The processing unit 10 can perform various processes based on a user operation on the operation unit 14 received by the operation receiving unit 25.

  FIG. 3 is a block diagram showing the configuration of the IC card 7. The IC card 7 according to the present embodiment is a storage medium having a configuration in which an IC tag 70 and an antenna 77 are embedded in a card body made of synthetic resin or paper, for example. The IC card 7 stores information related to the balance of electronic money or points, and is used for payment of merchandise prices in online sales or the like. The antenna 77 of the IC card 7 may have a configuration in which, for example, a metal wire is spirally arranged in the IC card 7 and both ends thereof are connected to the IC tag 70. The IC tag 70 is provided as one IC chip, and includes a processing unit 71, a non-contact communication unit 72, a storage unit 73, a power supply unit 74, and the like.

  The IC tag 70 does not have a power source such as a battery, and operates by an electromotive force generated by electromagnetic induction or the like when the antenna 77 receives a radio signal from the user terminal device 1. The IC tag 70 is a so-called passive tag. Based on the electromotive force, the power supply unit 74 supplies power to the processing unit 71, the non-contact communication unit 72, the storage unit 73, and the like in the IC tag 70, whereby the operations of the respective units are performed. Although the IC tag 70 is a passive type in the present embodiment, it may be an active type.

  The non-contact communication unit 72 of the IC tag 70 receives the signal transmitted from the user terminal device 1 by the antenna 77 and provides the data related to the received signal to the processing unit 71 and the data provided from the processing unit 71. Is transmitted from the antenna 77 to the user terminal device 1. The storage unit 73 includes a volatile or nonvolatile memory element that can rewrite data. The storage unit 73 stores a card ID (IDentifier) 73a that is individually assigned to the IC tag 70, balance history information 73b that is a change history of balance such as electronic money or points, and the like. The processing unit 71 reads out data from the storage unit 73 according to the data given from the non-contact communication unit 72, and gives the read data to the non-contact communication unit 72 so as to transmit it to the user terminal device 1. Further, the processing unit 71 writes data to the storage unit 73 in accordance with the data given from the non-contact communication unit 72.

  FIG. 4 is a schematic diagram illustrating an example of the balance history information 73 b stored in the storage unit 73 by the IC card 7. In the balance history information 73b of this example, the update date and time, the balance, and the update ID are stored in association with each other. The update date / time is the date / time when the balance of the IC card 7 is updated. The balance is the amount of electronic money or points charged in the IC card 7 at the time of renewal. The update ID is identification information given to the balance update process for the IC card 7 and is given by the second settlement server device 5B. For the balance history that can be stored in the storage unit 73, the number of cases that can be stored is determined according to the storage capacity of the storage unit 73, such as 10 or 100 cases. When the update is performed exceeding the number of records that can be stored, the update with the oldest update date is deleted, and information about the new update is added. Note that the history stored in the balance history information 73b may be the value of the remaining money amount itself, or may be a change in money amount (that is, an increase / decrease value).

  FIG. 5 is a block diagram showing the configuration of the sales server device 3. The sales server device 3 according to the present embodiment includes a processing unit 30, a storage unit 31, a recording medium mounting unit 32, a communication unit 33, and the like. The processing unit 30 is configured using an arithmetic processing device such as a CPU, and performs various processes related to the sale of products by reading and executing the server program 92a stored in the storage unit 31. The storage unit 31 is configured using a nonvolatile storage device, and can store programs such as the server program 92a and various data. In the present embodiment, the storage unit 31 stores a history relating to the sale processing of products as sales history information 31a.

  The recording medium mounting unit 32 is configured such that a disk-shaped recording medium 92 can be attached and detached. The processing unit 30 can read the server program 92 a and other various data from the recording medium 92 mounted on the recording medium mounting unit 32 and install it in the storage unit 31. The communication unit 33 transmits and receives data to and from the user terminal device 1 via a network 99 such as the Internet. In the present embodiment, sales server device 3 does not communicate with first payment server device 5A and second payment server device 5B.

  Further, in the sales server device 3 according to the present embodiment, when the processing unit 30 executes the server program 92a, the sales processing unit 41, the ID generation unit 42, the encryption processing unit 43, the defect confirmation unit 44, and the like are software-like. Realized as a functional block. The sales processing unit 41 performs processing for transmitting information such as a list of products for sale to the user terminal device 1, processing for receiving a purchase request for products from the user terminal device 1, and a settlement request for the requested product. 1, a process of receiving a result of the payment process from the user terminal device 1, a process of selling a product according to the result of the payment process, and the like.

  When receiving a purchase request from the user terminal device 1, the ID generation unit 42 generates identification information for a series of processes such as a sales process and a settlement process related to a product requested for purchase. In the present embodiment, this identification information is referred to as a transaction ID. For example, the ID generation unit 42 may generate a random numerical value and use it as a transaction ID, or may use a serial number or the like as a transaction ID, or may generate a transaction ID by a method other than these. The transaction ID generated by the ID generation unit 42 is attached to the settlement request transmitted from the sales processing unit 41 to the user terminal device 1. The sales server device 3 manages the progress of the sales process of the product using the transaction ID.

  The encryption processing unit 43 performs processing for encrypting information included in the payment request when the payment request is transmitted to the user terminal device 1. For example, the payment request may include information such as the transaction ID, date and time information when the payment request is made, price information of purchased products, or an electronic signature. The sales processing unit 41 transmits the settlement request encrypted by the encryption processing unit 43 to the user terminal device 1. The encrypted payment request cannot be decrypted or modified by the user terminal device 1 but can be decrypted by the first payment server device 5A. The settlement result received from the user terminal device 1 is similarly encrypted, and the encryption processing unit 43 performs a process of decrypting the received settlement result. The encryption processing unit 43 encrypts and decrypts information using, for example, a public key encryption algorithm.

  For example, the defect confirmation unit 44 performs payment when a payment result is not obtained from the user terminal device 1 for a predetermined time or more after a payment request, or when a payment failure result is given from the user terminal device 1. A process for confirming whether or not a defect has occurred in the processing, a process for confirming the occurrence of a defect in the process of the settlement process, and the like are performed. At this time, the defect confirmation unit 44 designates the transaction ID and inquires the user terminal device 1 about the progress status of the payment process, and confirms whether or not a defect has occurred and the location of the occurrence based on the response thereto. In addition, the defect confirmation unit 44 performs processing for resuming settlement processing or sales processing that has been stopped due to a defect.

  FIG. 6 is a schematic diagram illustrating an example of sales history information 31 a stored in the storage unit 31 by the sales server device 3. In the sales history information 31a, information such as a user ID, sales merchandise information, total amount, settlement request date, settlement result, and sales processing status is stored in association with the transaction ID. The user ID is identification information given to a user who purchases a product using the user terminal device 1 and is input by the user at the user terminal device 1 when performing login processing to the system. Sales merchandise information is information relating to merchandise sold (user requested to purchase), and includes, for example, information such as a merchandise name or merchandise number and information such as the number or quantity sold. The total price is numerical information indicating the total price of the sold products. The settlement request date and time is the date and time when the settlement request related to the transaction ID is transmitted to the user terminal device 1. The payment result is information indicating the result of payment received from the user terminal device 1 in response to the payment request, and is either payment completion, payment failure, processing incomplete or unreceived. Payment completion is a state in which it has been confirmed that the payment processing by the payment server device 5 has been completed normally. The settlement failure is a state in which it has been confirmed that the settlement processing has not been completed normally, for example, due to an insufficient balance of the IC card 7 or the like. Incomplete processing means that it is unclear whether or not the writing of information to the IC card 7 has been completed normally. Unreceived is a state in which the settlement result has not been received from the user terminal device 1. The sales process status is a flag indicating whether or not the sales process of the product related to the transaction ID has been completed. The configuration of the sales history information 31a shown in FIG. 6 is an example, and the present invention is not limited to this.

  In the payment system according to the present embodiment, as described above, the payment server device 5 is composed of two devices, the first payment server device 5A and the second payment server device 5B. The first settlement server device 5A stores the history information regarding the processing for communicating with the sales server device 3 via the user terminal device 1 in the settlement processing performed by the settlement server device 5 shown in FIG. The processing to do is performed. The second settlement server device 5B performs processing for reducing the price of the product from the IC card 7.

  FIG. 7 is a block diagram showing the configuration of the first settlement server device 5A. The first settlement server device 5A according to the present embodiment includes a processing unit 50, a storage unit 51, a recording medium mounting unit 52, a communication unit 53, and the like. The processing unit 50 is configured using an arithmetic processing device such as a CPU, and performs the above-described processing related to settlement by reading and executing the server program 93a stored in the storage unit 51. The memory | storage part 51 is comprised using a non-volatile memory | storage device, and can memorize | store programs and various data, such as a server program 93a. In the present embodiment, the storage unit 51 stores a history related to a payment process as payment history information 51a.

  The recording medium mounting unit 52 is configured so that a recording medium 93 such as a disk can be attached and detached. The processing unit 50 can read the server program 93 a and other various data from the recording medium 93 mounted on the recording medium mounting unit 52 and install it in the storage unit 51. The communication unit 53 transmits and receives data to and from the user terminal device 1 and the second settlement server device 5B via a network 99 such as the Internet. In the present embodiment, the first settlement server device 5A does not communicate with the sales server device 3.

  In the first settlement server device 5A according to the present embodiment, the processing unit 50 executes the server program 93a, so that the first settlement processing unit 50a, the encryption processing unit 50b, the defect determination unit 50c, and the like function as software. Realized as a block. The encryption processing unit 50 b performs processing for decrypting the payment request received from the user terminal device 1 by the communication unit 53 and processing for encrypting information included in the payment result transmitted to the user terminal device 1.

  The first payment processing unit 50 a generates a payment request in a format suitable for the second payment server device 5 B based on the payment request received and decrypted from the user terminal device 1, and sends the generated payment request to the communication unit 53. And processing to transmit to the second settlement server device 5B. That is, the first settlement processing unit 50a converts or translates the settlement request from the sales server device 3 into a settlement request suitable for the second settlement server device 5B (such as a command that can be interpreted by the second settlement server device 5B). I do.

  The first settlement processing unit 50a converts the processing request for the IC card 7 received from the second settlement server device 5B into a command for accessing the IC card 7, and transmits the command to the user terminal device 1. The first settlement processing unit 50a receives a response from the IC card 7 via the user terminal device 1, creates a response to the processing request of the second settlement server device 5B based on the response from the IC card 7, The communication unit 53 transmits it to the second settlement server device 5B.

  The first settlement processing unit 50a generates a settlement result suitable for the sales server device 3 based on the result of the settlement process received from the second settlement server device 5B by the communication unit 53, and the generated settlement result is transmitted to the communication unit. A process of transmitting to the sales server device 3 is performed at 53. That is, the first settlement processing unit 50a converts or translates the settlement result from the second settlement server device 5B into a settlement result suitable for the sales server device 3 (such as a command in a format that can be interpreted by the sales server device 3). I do.

  In this way, the first settlement processing unit 50a performs the conversion process and transfer process of information transmitted and received between the sales server device 3 and the second settlement server device 5B, and between the second settlement server device 5B and the IC card 7. Performs a conversion process and a transfer process for information transmitted and received in the network. By providing the first settlement server device 5A for performing such processing, for example, a plurality of types of sales server devices 3 having different configurations, a user terminal device 1 having a different protocol from the second settlement server device 5B, or a plurality of types. The payment processing of the second payment server device 5B can be easily associated with the IC card 7 or the like. Moreover, the other can be easily made compatible with the specification change of one of the sales server device 3 and the second settlement server device 5B.

  In addition, the first settlement processing unit 50a performs a process of storing the history related to the settlement process in the storage unit 51 as the settlement history information 51a. At this time, the first settlement processing unit 50a stores a history of settlement processing in association with the transaction ID. When a transaction ID is specified from the sales server device 3 or the like and a payment confirmation failure check request is given, the failure determination unit 50c of the first payment server device 5A refers to the payment history information 51a of the storage unit 51. It is determined whether or not a failure has occurred in the settlement process. The defect determination unit 50c notifies the sales server device 3 via the user terminal device 1 of the presence / absence of the defect and the occurrence location of the defect in the process of the settlement process.

  FIG. 8 is a schematic diagram illustrating an example of payment history information 51 a stored in the storage unit 51 by the first payment server device 5 </ b> A. The payment history information 51a stores information such as a payment state, a card ID, an update ID, and a payment date and time in association with the transaction ID. The payment state is information indicating the progress state of the payment process, and is one of three states of payment non-successful, process unsuccessful, and payment successful in the present embodiment. The settlement failure is a state from when a settlement request is received from the user terminal device 1 until data writing to the IC card 7 is performed. When the processing is not completed, a data write command to the IC card 7 is given, but no response is obtained, and it is unknown whether the writing has been performed normally. The settlement is a state in which data writing to the IC card 7 has been normally completed.

  The card ID of the payment history information 51a is stored in the IC card 7 used for the payment process by the user. The first settlement processing unit 50 a can acquire the card ID of the IC card 7 at the first communication with the IC card 7 performed via the user terminal device 1. The update ID is identification information given to the balance update process for the IC card 7 and is given by the second settlement server device 5B. This update ID is also stored in the balance history information 73b of the IC card 7. The settlement date and time is the date and time when the settlement process is started, and is the date and time when the settlement request is received from the user terminal device 1.

  When the first settlement processing unit 50a of the first settlement server device 5A receives the settlement request from the sales server device 3 via the user terminal device 1, the first settlement processing unit 50a receives the received settlement request in the settlement history information 51a of the storage unit 51. The information regarding the transaction ID attached to is added. At this time, the information added to the settlement history information 51a is that the settlement state is not settled, the card ID and the update ID are unknown, and the settlement date and time is the date and time when the settlement request is received. Thereafter, the first settlement processing unit 50a mediates information exchange between the second settlement server device 5B and the IC card 7, and stores the card ID in the settlement history information 51a when the card ID is obtained from the IC card 7. When the update ID is obtained from the second settlement server device 5B, it is stored in the settlement history information 51a. Furthermore, the first settlement processing unit 50a changes the settlement state to “unfinished” when a data write command is given to the IC card 7, and the settlement state when a response indicating completion of writing is obtained from the IC card 7. Is changed to settlement completion.

  FIG. 9 is a block diagram showing a configuration of the second settlement server device 5B. The second settlement server device 5B according to the present embodiment includes a processing unit 60, a storage unit 61, a recording medium mounting unit 62, a communication unit 63, and the like. The processing unit 60 is configured using an arithmetic processing device such as a CPU, and performs processing related to settlement by reading and executing the server program 94a stored in the storage unit 61. The memory | storage part 61 is comprised using a non-volatile memory | storage device, and can memorize | store programs and various data, such as a server program 94a.

  The recording medium mounting unit 62 is configured so that a recording medium 94 such as a disk can be attached and detached. The processing unit 60 can read the server program 94 a and other various data from the recording medium 94 mounted on the recording medium mounting unit 62 and install it in the storage unit 61. The communication unit 63 transmits / receives data to / from the first settlement server device 5A via a network 99 such as the Internet. In the present embodiment, the second settlement server device 5B does not communicate with the user terminal device 1 and the sales server device 3.

  Further, in the second settlement server device 5B according to the present embodiment, the processing unit 60 executes the server program 94a, so that the second settlement processing unit 60a, the ID generation unit 60b, the history inquiry unit 60c, and the like function as software. Realized as a block. The second settlement processing unit 60a performs a process of reducing the product price from the balance of the IC card 7 based on the settlement request given from the first settlement server device 5A. At this time, the second settlement processing unit 60a exchanges information with the IC card 7 a plurality of times via the first settlement server device 5A and the user terminal device 1 to update the balance of the IC card 7.

  The ID generation unit 60b generates identification information for a series of payment processes performed with the IC card 7 when a payment request is received from the first payment server device 5A. In the present embodiment, this identification information is referred to as an update ID. The ID generation unit 60b may generate a random numerical value and use it as an update ID, for example, or may use a serial number or the like as an update ID, or may generate an update ID using a method other than these. The update ID is stored in the balance history information 73b of the IC card 7 and the settlement history information 51a of the first settlement server device 5A.

  The history inquiry unit 60c performs a process of reading the balance history information 73b from the IC card 7 when a request for inquiry of the balance history of the IC card 7 is given from the first settlement server device 5A. The history inquiry unit 60c transmits the read balance history information 73b to the first settlement server device 5A. The failure determination unit 50c of the first payment server device 5A can determine whether or not a failure has occurred in the payment processing based on the balance history information 73b of the IC card 7 received from the second payment server device 5B.

<Payment processing>
FIG. 10 is a schematic diagram showing an example of payment processing by the payment system according to the present embodiment. For example, the user can select a product to be purchased from the list of products displayed on the display unit 13 of the user terminal device 1 and operate the operation unit 14 to make a purchase request to the sales server device 3. The user terminal device 1 accepts a user operation on the operation unit 14 by the operation accepting unit 25, and according to the accepted operation, an ID of a user who uses the user terminal device 1, information for identifying a product to be purchased, and A purchase request including information such as the number of purchases is transmitted to the sales server device 3 by the communication unit 15.

  Upon receiving the purchase request from the user terminal device 1 by the communication unit 33, the sales server device 3 generates a transaction ID for processing such as sale and settlement of the product related to the received purchase request by the ID generation unit 42. The sales processing unit 41 of the sales server device 3 creates a payment request including information such as a transaction ID, payment date / time information, product price information, and an electronic signature, and transmits the payment request to the user terminal device 1 through the communication unit 33. Information included in the payment request is encrypted by the encryption processing unit 43. In addition, the sales processing unit 41 of the sales server device 3 that has received the purchase request adds information to the sales history information 31 a in the storage unit 31. The sales processing unit 41 associates the transaction ID generated by the ID generation unit 42 with the user ID, product information and total amount generated or acquired from the information included in the received purchase request, and the date and time when the payment request was made. And stored in the sales history information 31a. At this time, the settlement result of the corresponding sales history information 31a has not been received, and the sales processing status has not been completed.

  The payment request relay unit 21 of the user terminal device 1 that has received the payment request from the sales server device 3 through the communication unit 15 transmits the received payment request to the first payment server device 5A through the communication unit 15. At this time, the payment request relay unit 21 may change information such as the header of the received payment request, but does not change the encrypted information.

  The first settlement server device 5A that has received the settlement request from the user terminal device 1 decrypts the information included in the received settlement request by the encryption processing unit 50b. The first settlement processing unit 50a of the first settlement server device 5A acquires the amount information included in the decrypted information, and requests the second settlement server device 5B to settle the amount. At this time, the first settlement processing unit 50a may not transmit information such as the transaction ID, settlement date information, and electronic signature included in the received settlement request to the second settlement server device 5B. The first settlement processing unit 50a of the first settlement server device 5A that has received the settlement request adds information to the settlement history information 51a in the storage unit 51. The first settlement processing unit 50a stores the transaction ID and the settlement date / time included in the received settlement request in the settlement history information 51a. At this time, the settlement state of the corresponding settlement history information 51a is not settled, and the card ID and update ID are undecided.

  In the second settlement server device 5B that has received the settlement request from the first settlement server device 5A by the communication unit 63, a settlement process for reducing the amount requested for settlement by the second settlement processing unit 60a from the balance of the IC card 7 is performed. Be started. First, in the second settlement server device 5B, the ID generation unit 60b generates an update ID. The second settlement processing unit 60a gives a read request for the IC card 7 to the first settlement server device 5A in order to specify the IC card 7 used for the settlement process. The read request transmitted by the second settlement processing unit 60a includes an update ID. The first settlement server device 5A given the read request generates a read command for the first settlement processing unit 50a to read out information (for example, card ID 73a) stored in the storage unit 73 of the IC card 7, and the user terminal Transmit to device 1. The first settlement processing unit 50a registers the update ID included in the given read request in the settlement history information 51a.

  The payment intermediary unit 22 of the user terminal device 1 that has received the read command from the first payment server device 5A performs non-contact communication with the IC card 7 by the non-contact communication unit 16, and transmits the read command to the IC card 7. . At this time, the settlement intermediary unit 22 may display a message prompting the IC card 7 to contact the display unit 13 or the like. The settlement intermediary unit 22 transmits a response obtained from the IC card 7 to the read command by the non-contact communication to the first settlement server device 5A. Note that the response obtained from the IC card 7 includes information read from the storage unit 73 such as the card ID 73a. In the present embodiment, the user terminal device 1 and the first settlement server device 5A directly receive such information. Can't be treated.

  The first settlement processing unit 50a of the first settlement server device 5A that has received the response from the user terminal device 1 transmits the received response to the second settlement server device 5B. The second settlement processing unit 60a of the second settlement server device 5B that has received the response from the first settlement server device 5A acquires the read information included in the received response. The second settlement processing unit 60a reads information from the IC card 7 a plurality of times, and acquires information such as the card ID 73a and the balance stored in the storage unit 73 of the IC card 7. The second settlement processing unit 60a obtains the card ID 73a from the IC card 7, and then designates the card ID 73a to make a read request for the IC card 7 to the first settlement server device 5A. When the card ID 73a is included in the read request, the first settlement processing unit 50a of the first settlement server device 5A registers the card ID in the settlement history information 51a of the storage unit 51.

  The second settlement processing unit 60a that has acquired the necessary information from the IC card 7 gives a write request to the first settlement server device 5A in order to write in the IC card 7 the amount obtained by reducing the product price from the balance of the IC card 7. . The first settlement processing unit 50 a of the first settlement server device 5 A given the write request generates a write command for writing information to the storage unit 73 of the IC card 7 and transmits it to the user terminal device 1. To do. The first settlement processing unit 50a changes the corresponding settlement state of the settlement history information 51a in the storage unit 51 to processing incomplete.

  The payment intermediary unit 22 of the user terminal device 1 that has received the write command from the first payment server device 5A performs non-contact communication with the IC card 7 in the non-contact communication unit 16, and sends the write command to the IC card 7. Send. The processing unit 71 of the IC card 7 performs a writing process to the storage unit 73 in accordance with the write command received from the user terminal device 1 by non-contact communication. Thereby, the balance history information 73b of the storage unit 73 is updated. After the completion of the writing process, the processing unit 71 of the IC card 7 makes a response to the user terminal device 1 by non-contact communication. The settlement intermediary unit 22 of the user terminal device 1 that has received the response from the IC card 7 by non-contact communication transmits the received response to the first settlement server device 5A. The first settlement processing unit 50a of the first settlement server device 5A that has received the response from the user terminal device 1 transmits the received response to the second settlement server device 5B.

  The second settlement processing unit 60a of the second settlement server device 5B that has received the response from the first settlement server device 5A determines whether or not the information writing of the IC card 7 has succeeded from the received response. FIG. 10 shows a case where the writing process to the IC card 7 is successful. When the writing process has failed, the second settlement processing unit 60a may repeatedly transmit the writing request to the first settlement server apparatus 5A until the writing process is successful. When the writing process is successful, the second settlement processing unit 60a notifies the completion of the settlement process to the first settlement server apparatus 5A.

  The first settlement processing unit 50a of the first settlement server device 5A notified of the completion of settlement from the second settlement server device 5B changes the corresponding settlement state of the settlement history information 51a of the storage unit 51 to settlement successful. In addition, the first settlement processing unit 50a transmits a notification that the settlement processing is completed to the user terminal device 1. The payment intermediary unit 22 of the user terminal device 1 that has received the completion notification from the first payment server device 5A ends the non-contact communication with the IC card 7 by the non-contact communication unit 16 and a response that the completion notification has been received. Is transmitted to the first settlement server device 5A. The first settlement processing unit 50a of the first settlement server device 5A that has received the response from the user terminal device 1 provides the second settlement server device 5B with a response that the notification of completion of the settlement process has been received. In response to the response from the first settlement server device 5A, the second settlement processing unit 60a of the second settlement server device 5B ends the settlement process.

  Further, the first settlement processing unit 50a of the first settlement server device 5A that has received the response that the notification of completion of the settlement process has been received from the user terminal device 1 uses the result of the settlement process (successful settlement in this example) as information. The settlement result including the request is generated, and the generated settlement result is transmitted to the user terminal device 1. Information included in the settlement result is encrypted by the encryption processing unit 50b. Note that, for example, when the payment process cannot be performed normally due to an insufficient balance of the IC card 7, the first payment server apparatus 5A transmits a result of the payment failure. For example, when a time-out occurs because a response from the IC card 7 is not obtained, the first settlement server device 5A transmits a result of incomplete processing.

  In the user terminal device 1 that has received the settlement result from the first settlement server device 5 </ b> A, the settlement result received by the settlement result relay unit 23 is transmitted to the sales server device 3 through the communication unit 15. The sales server device 3 that has received the settlement result from the user terminal device 1 decrypts the information included in the received settlement result in the encryption processing unit 43. Based on the decrypted information, the sales processing unit 41 of the sales server device 3 updates the sales history information 31a in the storage unit 31 with the settlement result as a settlement completion, a settlement failure, or a processing incomplete. If the settlement result is a successful settlement, the sales processing unit 41 advances the product sales process to the next process. For example, when the product is digital content, the sales processing unit 41 permits downloading of the digital content. After performing the sales process, the sales processing unit 41 transmits the sales result to the user terminal device 1. When the user terminal device 1 receives the sales result from the sales server device 3, the product sales and payment processing by the payment system according to the present embodiment is completed.

  FIG. 11 is a flowchart showing the procedure of the sales process performed by the sales server device 3. In the present flowchart, description of login processing with the user terminal device 1, transmission processing of a product list, and the like is omitted. The sales processing unit 41 of the processing unit 30 of the sales server device 3 determines whether or not the communication unit 33 has received a purchase request from the user terminal device 1 (step S1). If a purchase request has not been received (S1: NO), the sales processing unit 41 waits until a purchase request is received. When the purchase request is received (S1: YES), the ID generation unit 42 of the processing unit 30 generates a transaction ID (step S2). The sales processing unit 41 adds an item related to the transaction ID generated in step S2 to the sales history information 31a in the storage unit 31 (step S3). The sales processing unit 41 generates a settlement request for the commodity price related to the received sales request (step S4). The encryption processing unit 43 of the processing unit 30 encrypts information included in the generated payment request (step S5). The sales processing unit 41 transmits the encrypted settlement request to the user terminal device 1 through the communication unit 33 (step S6).

  Thereafter, the sales processing unit 41 determines whether or not the settlement result is received from the user terminal device 1 by the communication unit 33 (step S7). When the settlement result has not been received (S7: NO), the sales processing unit 41 waits until the settlement result is received. When the settlement result is received (S7: YES), the encryption processing unit 43 decrypts the received settlement result (step S8). The sales processing unit 41 updates information such as the settlement result of the sales history information 31a in the storage unit 31 based on the decrypted information (step S9). The sales processing unit 41 determines whether or not the result of the payment process is a successful payment (step S10). If the payment process is successful (S10: YES), the sales processing unit 41 performs a sales process for the product requested for purchase (step S11), and transmits the sales result to the user terminal device 1 through the communication unit 33. (Step S12), the process ends. If the settlement process is not successful (S10: NO), the sales processing unit 41 transmits the sales result indicating that the sales process was not successful to the user terminal device 1 without performing the sales process (step S12). Exit.

  12 and 13 are flowcharts illustrating the procedure of the relay process performed by the user terminal device 1. In the processing unit 10 of the user terminal device 1, the operation receiving unit 25 receives an operation for purchasing a product for the operation unit 14, and the purchase processing unit 24 sends a purchase request for the product to the sales server 15 in response to the received purchase operation. It transmits to the apparatus 3 (step S21). Thereafter, the processing unit 10 determines whether or not the communication unit 15 has received a settlement request from the sales server device 3 (step S22). When a settlement request is received from the sales server device 3 (S22: YES), the settlement request relay unit 21 of the processing unit 10 transmits the received settlement request to the first settlement server device 5A via the communication unit 15 (step S23). ), The process returns to step S22.

  When the payment request has not been received (S22: NO), the processing unit 10 determines whether or not a processing command for the IC card 7 has been received from the first payment server device 5A (step S24). When the command is received (S24: YES), the settlement intermediary unit 22 of the processing unit 10 transmits the received command to the IC card 7 by the non-contact communication unit 16 (step S25). The settlement intermediary unit 22 determines whether or not the response from the IC card 7 is received by the non-contact communication unit 16 (step S26). If no response has been received (S26: NO), the settlement intermediary unit 22 waits until a response is received. When the response is received (S26: YES), the settlement intermediary unit 22 transmits the received response to the first settlement server device 5A through the communication unit 15 (step S27), and returns the process to step S22.

  When the command has not been received (S24: NO), the processing unit 10 determines whether or not a completion notification has been received from the first settlement server device 5A (step S28). When the completion notification is received (S28: YES), the processing unit 10 transmits a response to the first settlement server device 5A (step S29), and returns the process to step S22. When the completion notification has not been received (S28: NO), the processing unit 10 determines whether or not a settlement result has been received from the first settlement server device 5A (step S30). When the settlement result is received (S30: YES), the settlement result relay unit 23 of the processing unit 10 transmits the received settlement result to the sales server device 3 through the communication unit 15 (step S31), and the process proceeds to step S22. return. When the settlement result has not been received (S30: NO), the processing unit 10 determines whether or not the sales result has been received from the sales server device 3 (step S32). When the sales result has not been received (S32: NO), the processing unit 10 returns the process to step S22. When the sales result is received (S32: YES), the processing unit 10 ends the process.

  14 and 15 are flowcharts showing the procedure of the payment process performed by the first payment server device 5A. The first payment processing unit 50a of the processing unit 50 of the first payment server device 5A determines whether or not the communication unit 53 has received a payment request from the user terminal device 1 (step S41). When the payment request has not been received (S41: NO), the first payment processing unit 50a stands by until the payment request is received. When the payment request is received (S41: YES), the encryption processing unit 50b of the processing unit 50 decrypts the information included in the received payment request (step S42). The first settlement processing unit 50a adds new information to the settlement history information 51a in the storage unit 51 based on the decrypted information (Step S43). The first settlement processing unit 50a creates a settlement request for the second settlement server device 5B based on the decrypted information, and transmits the settlement request to the second settlement server device 5B through the communication unit 53 (step S44). ).

  The first settlement processing unit 50a determines whether or not the communication unit 53 has received a processing request such as reading or writing with respect to the IC card 7 from the second settlement server device 5B (step S45). When the request for the IC card 7 is received (S45: YES), the first settlement processing unit 50a, based on the received request, information such as the settlement status, the card ID or the update ID of the settlement history information 51a in the storage unit 51 Is updated as necessary (step S46). The first settlement processing unit 50a creates a command for the IC card 7 according to the received request and transmits the command to the user terminal device 1 by the communication unit 53 (step S47). The first settlement processing unit 50a determines whether or not a response to the transmitted command has been received from the user terminal device 1 by the communication unit 53 (step S48). If no response has been received (S48: NO), the first settlement processing unit 50a waits until a response is received. When the response is received (S48: YES), the first settlement processing unit 50a transmits the response received from the user terminal device 1 to the second settlement server device 5B through the communication unit 53 (step S49), and proceeds to step S45. Return processing.

  When the processing request for the IC card 7 has not been received (S45: NO), the first settlement processing unit 50a determines whether or not the communication unit 53 has received a settlement completion notification from the second settlement server device 5B. (Step S50). When the payment completion notification has not been received (S50: NO), the first payment processing unit 50a returns the process to step S45. When the payment completion notification is received (S50: YES), the first payment processing unit 50a updates the payment state of the payment history information 51a in the storage unit 51 based on the received payment completion notification (step S51). The first settlement processing unit 50a transmits a settlement processing completion notification to the user terminal device 1 through the communication unit 53 (step S52).

  The first settlement processing unit 50a determines whether or not the communication unit 53 has received a response from the user terminal device 1 to the completion notification (step S53). If no response has been received (S53: NO), the first settlement processing unit 50a waits until a response is received. When the response is received (S53: YES), the first settlement processing unit 50a transmits a response to the settlement completion notification to the second settlement server device 5B through the communication unit 53 (step S54). The first settlement processing unit 50a creates a settlement result for transmission to the sales server device 3 (step S55). The encryption processing unit 50b encrypts information included in the created settlement result (Step S56). The first settlement processing unit 50a transmits the encrypted settlement result to the user terminal device 1 through the communication unit 53 (step S57), and ends the process.

  16 and 17 are flowcharts showing the procedure of the payment process performed by the second payment server device 5B. The second settlement processing unit 60a of the processing unit 60 of the second settlement server device 5B determines whether or not the communication unit 63 has received a settlement request from the first settlement server device 5A (step S61). When the settlement request has not been received (S61: NO), the second settlement processing unit 60a stands by until the settlement request is received. When the settlement request is received (S61: YES), the ID generation unit 60b of the processing unit 60 generates an update ID (step S62).

  The second settlement processing unit 60a attaches the generated update ID and transmits a request for reading information from the IC card 7 to the first settlement server device 5A via the communication unit 63 (step S63). The second settlement processing unit 60a determines whether or not the communication unit 63 has received a response from the first settlement server device 5A to the read request (step S64). If no response has been received (S64: NO), the second settlement processing unit 60a waits until a response is received. When the response is received (S64: YES), the second settlement processing unit 60a determines whether or not information necessary for updating the balance of the IC card 7 has been obtained by reading the information from the IC card 7. (Step S65). If the necessary information is not complete (S65: NO), the second settlement processing unit 60a returns the process to step S63, and repeatedly reads the information from the IC card 7.

  When necessary information is collected (S65: YES), the second settlement processing unit 60a sends a write request for writing new balance information to the IC card 7 in the first settlement server device 5A via the communication unit 63. (Step S66). The second settlement processing unit 60a determines whether or not the communication unit 63 has received a response from the first settlement server device 5A with respect to the write request (step S67). When the response is not received (S67: NO), the second settlement processing unit 60a waits until the response is received. When the response is received (S67: YES), the second settlement processing unit 60a determines whether or not the writing to the IC card 7 is successful based on the received response (step S68). If the writing is not successful (S68: NO), the second settlement processing unit 60a returns the process to step S66 and repeats the writing to the IC card 7.

  When the writing to the IC card 7 is successful (S68: YES), the second settlement processing unit 60a transmits a settlement completion notification notifying the completion of the settlement process to the first settlement server device 5A via the communication unit 63 (Step S68). S69). The second settlement processing unit 60a determines whether or not the communication unit 63 has received a response from the first settlement server device 5A to the settlement completion notification (step S70). If no response has been received (S70: NO), the second settlement processing unit 60a waits until a response is received. When the response is received (S70: YES), the second settlement processing unit 60a ends the process.

<Return processing from communication failure>
The payment system according to the present embodiment includes communication between the sales server device 3 and the user terminal device 1 via the network 99, communication between the user terminal device 1 and the first payment server device 5A, and the first payment server device 5A and the second. There may be a problem in communication between the settlement server device 5B or communication between the user terminal device 1 and the IC card 7 by non-contact communication. When such a communication failure occurs, the above-described payment processing or the like is interrupted, and the processing in each device may end abnormally. As a result, for example, although the balance of the IC card 7 is decreasing, a situation in which the merchandise sales process is not completed may occur, so the settlement system according to the present embodiment is interrupted due to a problem. Perform processing to restore the processing.

  For example, when the sales process and the settlement process are interrupted due to a communication failure, in the sales history information 31a stored in the storage unit 31 of the sales server device 3, the settlement result regarding the interrupted process becomes a settlement failure or unreceived, The sales processing status is incomplete. Therefore, for example, the sales processing unit 41 of the sales server device 3 searches the sales history information 31a based on the user ID when the user performs a login process to the system using the user terminal device 1, and performs the sales process. It is determined whether there is a process whose status is incomplete. When there is an incomplete process, the sales processing unit 41 notifies the user terminal device 1 that there is an incomplete process through the communication unit 33. The purchase processing unit 24 of the user terminal device 1 that has received this notification by the communication unit 15 displays a message indicating that there is an incomplete process on the display unit 13. In addition, the operation accepting unit 25 accepts a selection as to whether or not to resume this process at the operation unit 14. The message display by the user terminal device 1 is performed at least before the next settlement process is started. When the user terminal device 1 is selected to resume the process interrupted by the user, the return process of the payment system according to the present embodiment is started.

In the return process, the defect confirmation unit 44 of the processing unit 30 of the sales server device 3 first performs a process of confirming in which part of the processing process of the settlement process the defect has occurred. In the present embodiment, the defect confirmation unit 44 confirms in which of the following four states the settlement process is interrupted.
(1) A state where the payment request from the sales server device 3 has not reached the first payment server device 5A (unrequested).
(2) A state in which a payment request has arrived but a write command for the IC card 7 has not been transmitted from the first payment server device 5A to the user terminal device 1 (payment is not established).
(3) Although the write command has been transmitted, a response to this command has not arrived from the user terminal device 1 to the first settlement server device 5A (processing has not been completed).
(4) The balance of the IC card 7 has been updated, but the settlement result has not reached the sales server device 3 (settlement completion).

  The defect confirmation unit 44 of the sales server device 3 designates the transaction ID related to the suspended processing, and transmits a request for confirming the state of the settlement processing to the first settlement server device 5A via the user terminal device 1. In response to this request, the defect determination unit 50c of the processing unit 30 of the first settlement server device 5A acquires the settlement state corresponding to the transaction ID specified from the settlement history information 51a stored in the storage unit 51. When the information corresponding to the designated transaction ID is not stored in the settlement history information 51a, the defect determination unit 50c can determine that the state is (1). When the settlement state is not settled, the failure determination unit 50c can determine that the state is the state (2). When the payment state is incomplete, the defect determination unit 50c can determine that the state is the state (3). When the payment state is payment establishment, the defect determination unit 50c can determine that the state is the state (4). The defect determination unit 50 c transmits these determination results to the sales server device 3 via the user terminal device 1.

  In the above states (1) and (2), the processing unit 30 of the sales server device 3 can restart the payment process by retransmitting the payment request regarding the product for which the sales process has not been completed. In the case of (4) above, since the reduction of the product price from the IC card 7 has been completed and the payment process has been completed, the processing unit 30 of the sales server device 3 performs the sales process on the assumption that the payment process has been completed. You can resume. On the other hand, in the case of (3) above, it is unknown whether or not the writing of information to the IC card 7 has been completed. Therefore, the sales server device 3 inquires about the balance history information 73b stored in the storage unit 73 of the IC card 7.

  In this case, the defect confirmation unit 44 of the sales server device 3 requests the first settlement server device 5A via the user terminal device 1 to inquire the balance history information of the IC card 7 by specifying the transaction ID. In response to this request, the defect determination unit 50c of the first settlement server device 5A gives a request for inquiring the balance history of the IC card 7 to the second settlement server device 5B. At this time, the first settlement server device 5A may be configured to perform processing for reading the balance history information 73b from the IC card 7. However, in the settlement system according to the present embodiment, information on the IC card 7 is stored. The second settlement server device 5B performs the reading and writing, and the first settlement server device 5A requests the second settlement server device 5B to check the balance history.

  In response to a request from the first settlement server device 5A, the history inquiry unit 60c of the processing unit 60 of the second settlement server device 5B sends a request for reading the balance history information 73b to the first settlement server device 5A and the user terminal device 1. To the IC card 7. Information read from the IC card 7 in response to the read request is given to the second settlement server device 5B via the user terminal device 1 and the first settlement server device 5A. In the present embodiment, the information read from the IC card 7 cannot be directly handled by the first settlement server device 5A. The history inquiry unit 60c of the second settlement server device 5B transmits the balance history information 73b read from the IC card 7 to the first settlement server device 5A. In the present embodiment, the history inquiry unit 60c reads the entire history of the balance history information 73b from the IC card 7 and transmits it to the second settlement server device 5B.

  The failure determination unit 50c of the first settlement server device 5A that has received the balance history information 73b from the second settlement server device 5B acquires the update ID corresponding to the transaction ID from the settlement history information 51a of the storage unit 51, and this update ID It is determined whether or not a history marked with exists in the balance history information 73b. If there is a history that matches the update ID, the defect determination unit 50c determines that writing to the IC card 7 has been completed. If there is no history that matches the update ID, the defect determination unit 50c determines that writing to the IC card 7 has not been completed. The defect determination unit 50 c transmits the determination result to the sales server device 3 via the user terminal device 1.

  When the writing to the IC card 7 is not completed from the result of the history inquiry of the IC card 7, the processing unit 30 of the sales server device 3 re-sends a settlement request regarding a product for which the sales process has not been completed. Processing can be resumed. This is the same as the cases (1) and (2) above. On the other hand, when the writing to the IC card 7 has been completed, the processing unit 30 of the sales server device 3 can resume the sales process on the assumption that the payment process has been completed. This is the same as in the case of (4) above.

  FIG. 18 is a schematic diagram illustrating an example of a failure confirmation process of the payment system according to the present embodiment. For example, when a message indicating that a problem has occurred in the sales process and the payment process is displayed on the display unit 13 of the user terminal device 1, the user may operate the operation unit 14 to request a return of the process in which the problem has occurred. it can. The user terminal device 1 transmits a return request including information such as a user ID and a transaction ID attached to the interrupted process to the sales server device 3 via the communication unit 15.

  The failure confirmation unit 44 of the sales server device 3 that has received the return request from the user terminal device 1 by the communication unit 33 designates the transaction ID given to the process requested to return, and sets the suspension state of the settlement process. A settlement confirmation request for confirmation is created and transmitted to the user terminal device 1 by the communication unit 33. The information included in the payment confirmation request may be encrypted by the encryption processing unit 43. The processing unit 10 of the user terminal device 1 that has received the settlement confirmation request from the sales server device 3 through the communication unit 15 transmits the received settlement confirmation request to the first settlement server device 5A through the communication unit 15.

  The failure determination unit 50c of the first settlement server device 5A that has received the settlement confirmation request from the user terminal device 1 searches the settlement history information 51a in the storage unit 51, and stores the transaction ID information included in the received settlement confirmation request. Whether or not it has been stored, and if it is stored, the settlement state is determined. Thereby, the malfunction determination unit 50c can determine whether the state of the interrupted process is (1) unrequested, (2) settlement unsuccessful, (3) process unfinished, or (4) settlement completed. it can. The defect determination unit 50c transmits this determination result to the user terminal device 1 as a defect confirmation result. The processing unit 10 of the user terminal device 1 that has received the confirmation result from the first settlement server device 5 </ b> A transmits the received confirmation result to the sales server device 3.

  The failure confirmation unit 44 of the sales server device 3 that has received the confirmation result from the user terminal device 1 determines from which location the suspended payment processing is to be restored based on the received confirmation result (return determination in the figure). 1). If the confirmation result is (1) unrequested or (2) settlement not established, the defect confirmation unit 44 generates a settlement request to resume the settlement process from the beginning and transmits it to the user terminal device 1. When the confirmation result is (4) settlement is established, the defect confirmation unit 44 resumes the processing related to the sale of the product because the settlement processing is completed. If the confirmation result is (3) processing incomplete, the defect confirmation unit 44 designates a transaction ID and transmits a history inquiry request to the user terminal device 1 to inquire the balance history information 73b of the IC card 7. . FIG. 18 shows an example of processing assuming that the confirmation result is (3) processing incomplete.

  The user terminal device 1 that has received the history inquiry request from the sales server device 3 transmits the received history inquiry request to the first settlement server device 5A. The failure determination unit 50c of the first settlement server device 5A that has received the history inquiry request from the user terminal device 1 obtains the card ID corresponding to the transaction ID included in the received history inquiry request from the settlement history information 51a of the storage unit 51. get. The defect determination unit 50c transmits a history inquiry request specifying the acquired card ID to the second settlement server device 5B.

  The history inquiry unit 60c of the second settlement server device 5B that has received the history inquiry request from the first settlement server device 5A by the communication unit 63 starts processing to read the balance history information 73b from the IC card 7 of the designated card ID. Is done. The reading of the balance history information 73b from the IC card 7 by the second settlement server device 5B is realized by exchanging information a plurality of times between the second settlement server device 5B and the IC card 7. FIG. In this case, the processing is shown as a simplified example in which the balance history information 73b is read out by one information exchange. The history inquiry unit 60c of the second settlement server device 5B transmits a read request for reading the balance history information 73b from the IC card 7 to the first settlement server device 5A.

  The first settlement server device 5A given the read request generates a read command for reading the balance history information 73b from the IC card 7 and transmits it to the user terminal device 1. The processing unit 10 of the user terminal device 1 that has received the read command from the first settlement server device 5A performs non-contact communication with the IC card 7 by the non-contact communication unit 16, and transmits the read command to the IC card 7. The processing unit 10 transmits a response obtained from the IC card 7 to the read command to the first settlement server device 5A. The response obtained from the IC card 7 is balance history information 73b. The failure determination unit 50c of the first settlement server device 5A that has received the response from the user terminal device 1 transmits the received response to the second settlement server device 5B. The history inquiry unit 60c of the second settlement server device 5B that has received the response from the first settlement server device 5A acquires the balance history information 73b included in the received response. The history inquiry unit 60c transmits the acquired balance history information 73b to the first settlement server device 5A.

  The failure determination unit 50c of the first settlement server device 5A that has received the balance history information 73b from the second settlement server device 5B stores an update ID corresponding to the transaction ID specified in the history inquiry request from the sales server device 3. It is acquired from the settlement history information 51a of the unit 51, and it is determined whether or not the history of the acquired update ID is included in the balance history information 73b. When the update ID to be referred is included in the balance history information 73b, the defect determination unit 50c determines that writing to the IC card 7 has been completed. When the introduction history update ID is not included in the balance history information 73b, the defect determination unit 50c determines that writing to the IC card 7 has not been completed. The defect determination unit 50c transmits this determination result to the user terminal device 1 as an inquiry result. The processing unit 10 of the user terminal device 1 that has received the inquiry result from the first settlement server device 5 </ b> A transmits the received inquiry result to the sales server device 3.

  The failure confirmation unit 44 of the sales server device 3 that has received the inquiry result from the user terminal device 1 determines from which location the suspended payment processing is to be restored based on the received inquiry result (return determination in the figure). 2). If it is determined from the received inquiry result that the writing to the IC card 7 has not been completed, the defect confirmation unit 44 generates a settlement request to resume the settlement process from the beginning and transmits it to the user terminal device 1. If the defect confirmation unit 44 determines that the writing to the IC card 7 has been completed, the settlement process has been completed, and the process is resumed from the process related to the sale of the product. The processing unit 10 of the sales server device 3 starts the return process of the interrupted process by the method determined in the return determination 1 or the return determination 2.

  19 and 20 are flowcharts showing the procedure of the return process performed by the sales server device 3. The failure confirmation unit 44 of the processing unit 30 of the sales server device 3 determines whether the communication unit 33 has received a return request from the user terminal device 1 (step S81). When the return request has not been received (S81: NO), the failure confirmation unit 44 waits until the return request is received. When the return request is received (S81: YES), the communication unit 33 transmits a settlement confirmation request specifying the transaction ID of the process requested to return (step S82). Thereafter, the failure confirmation unit 44 determines whether or not the communication unit 33 has received a confirmation result from the user terminal device 1 (step S83). When the confirmation result is not received (S83: NO), the defect confirmation unit 44 waits until the confirmation result is received.

  When the confirmation result is received (S83: YES), the failure confirmation unit 44 determines whether or not the received confirmation result is a settlement (step S84). If the confirmation result is that the settlement is successful (S84: YES), the defect confirmation unit 44 resumes the process from the sales process after the settlement process because the settlement process is completed (step S85), and ends the return process. . If the confirmation result is not a settlement (S84: NO), the failure confirmation unit 44 determines whether the confirmation result is unrequested or a settlement is not established (step S86). If the confirmation result is unrequested or settlement is not established (S86: YES), the defect confirmation unit 44 restarts the process from the beginning of the settlement process (step S87), and ends the return process.

  When the confirmation result is not requested and payment is not established (S86: NO), that is, when the confirmation result is unfinished, the defect confirmation unit 44 inquires the balance history information 73b of the IC card 7 used for the settlement process. Therefore, the communication unit 33 transmits a history inquiry request to the user terminal device 1 (step S88). Thereafter, the defect confirmation unit 44 determines whether or not the inquiry result for the history inquiry request has been received from the user terminal device 1 by the communication unit 33 (step S89). When the inquiry result has not been received (S89: NO), the defect confirmation unit 44 waits until the inquiry result is received. When the inquiry result is received (S89: YES), the defect confirmation unit 44 determines whether or not the received inquiry result is write completion (step S90). When the inquiry result is the completion of writing (S90: YES), the defect confirmation unit 44 resumes the process from the sales process after the settlement process (step S91) and ends the return process. If the inquiry result is not complete writing (S90: NO), the defect confirmation unit 44 restarts the process from the beginning of the settlement process (step S92) and ends the return process.

  In addition, illustration of the flowchart regarding the process which the user terminal device 1 performs in a return process is abbreviate | omitted. The user terminal device 1 transmits information received from the sales server device 3 to the first settlement server device 5A, transmits a command received from the first settlement server device 5A to the IC card 7 by non-contact communication, and Then, the information received from the first settlement server device 5A is transmitted to the sales server device 3.

  FIG. 21 is a flowchart showing the procedure of the failure determination process performed by the first settlement server device 5A. The failure determination unit 50c of the processing unit 50 of the first settlement server device 5A determines whether the communication unit 53 has received a settlement confirmation request from the user terminal device 1 (step S121). When the payment confirmation request is received (S121: YES), the failure determination unit 50c stores the payment history information stored in the storage unit 51 so as to determine the payment state corresponding to the transaction ID specified in the received payment confirmation request. 51a is searched (step S122). Based on the result of searching the settlement history information 51a, the defect determination unit 50c uses the communication unit 53 to confirm the confirmation result of whether the settlement state is unrequested, settlement is not established, processing has not been completed, or settlement is established. The data is transmitted to the device 1 (step S123), and the process returns to step S121.

  When the payment confirmation request has not been received from the user terminal device 1 (S121: NO), the defect determination unit 50c determines whether a history inquiry request has been received from the user terminal device 1 (step S124). When the history inquiry request has not been received (S124: NO), the defect determination unit 50c returns the process to step S121. When the history inquiry request is received (S124: YES), the defect determination unit 50c acquires the card ID corresponding to the transaction ID specified in the received history inquiry request from the payment history information 51a, and relates to the acquired card ID. A history inquiry request is transmitted to the second settlement server device 5B through the communication unit 53 (step S125).

  Thereafter, the failure determination unit 50c determines whether or not the communication unit 53 has received a read request for the IC card 7 from the second settlement server device 5B (step S126). If a read request has not been received (S126: NO), defect determination unit 50c waits until a read request is received. When the read request is received (S126: YES), the failure determination unit 50c creates a read command for the IC card 7 according to the received read request and transmits it to the user terminal device 1 (step S127). The defect determination unit 50c determines whether or not a response to the transmitted read command has been received from the user terminal device 1 by the communication unit 53 (step S128). When the response has not been received (S128: NO), the failure determination unit 50c waits until a response is received. When the response is received (S128: YES), the failure determination unit 50c transmits the response received from the user terminal device 1 to the second settlement server device 5B through the communication unit 53 (step S129).

  Thereafter, the defect determination unit 50c determines whether or not the balance history information 73b is received from the second settlement server device 5B by the communication unit 53 (step 130). When the balance history information 73b has not been received (S130: NO), the defect determination unit 50c waits until the balance history information 73b is received. When the balance history information 73b is received (S130: YES), the defect determination unit 50c acquires an update ID corresponding to the transaction ID specified in the history inquiry request from the settlement history information 51a, and uses the acquired update ID. By querying the received balance history information 73b (step S131), it is determined whether or not a history related to the update ID is included in the balance history information 73b. Thereby, the malfunction determination unit 50c determines whether or not the writing to the IC card 7 is completed, transmits the determination result to the user terminal device 1 as an inquiry result (step S132), and returns the process to step S121.

  FIG. 22 is a flowchart showing a procedure of history inquiry processing performed by the second settlement server device 5B. The history inquiry unit 60c of the processing unit 60 of the second settlement server device 5B determines whether the communication unit 63 has received a history inquiry request from the first settlement server device 5A (step S141). When the history inquiry request has not been received (S141: NO), the history inquiry unit 60c stands by until the history inquiry request is received. When the history inquiry request is received (S141: YES), a request for reading the balance history information 73b for the IC card 7 having the card ID specified in the history inquiry request is generated, and the first settlement server device 5A is generated by the communication unit 63. (Step S142).

  Thereafter, the history inquiry unit 60c determines whether or not a response to the read request has been received from the first settlement server device 5A by the communication unit 63 (step S143). When no response is received (S143: NO), the history inquiry unit 60c waits until a response is received. When the response is received (S143: YES), the history inquiry unit 60c acquires the balance history information 73b included in the response, and transmits the acquired balance history information 73b to the first settlement server device 5A via the communication unit 63. (Step S144), the process ends.

<Summary>
The payment system according to the present embodiment having the above-described configuration includes the sales server device 3 that sells products and the payment server device 5 that performs payment processing related to the products to be sold (the first payment server device 5A and the second payment server). Device 5B) and a user terminal device on which the user performs operations related to the purchase of merchandise. In the payment system according to the present embodiment, the user terminal device 1 relays information exchange that needs to be performed between the sales server device 3 and the payment server device 5 for the product payment processing. For example, the payment request relay unit 21 of the user terminal device 1 receives a payment request related to the purchased product from the sales server device 3, and transmits the received payment request to the payment server device 5 (first payment server device 5A). Further, for example, the settlement result relay unit 23 of the user terminal device 1 receives a settlement result as a result of the settlement process from the settlement server device 5 (first settlement server device 5A) and transmits the received settlement result to the sales server device 3. To do. The sales server device 3 and the settlement server device 5 do not perform direct communication. Thereby, the payment system according to the present embodiment can smoothly transmit and receive information necessary for the payment process.

  The sales server device 3 and the first settlement server device 5A have encryption processing units 43 and 50b for encrypting and decrypting information to be transmitted and received, respectively. The user terminal device 1 relays the encrypted information, but cannot decrypt or modify this information. Thereby, the reliability of the information exchanged via the user terminal device 1 between the sales server device 3 and the first settlement server device 5A can be improved.

  In addition, although it was set as the structure which encrypts the information transmitted / received between the sales server apparatus 3 and 5 A of 1st payment server apparatuses, it does not restrict to this. The sales server device 3 and the first settlement server device 5A may attach an electronic signature to the information to be transmitted. The sales server device 3 and the first settlement server device 5A convert, for example, information to be transmitted using a predetermined hash function into digest data, and the digest data is encrypted using predetermined key information as an electronic signature. be able to. When receiving information with an electronic signature, the sales server device 3 and the first settlement server device 5A decrypt the electronic signature to obtain digest data, and create digest data from the received information using the same hash function To do. The sales server device 3 and the first settlement server device 5A can determine that the received information is valid when both digest data match.

  In addition, the user terminal device 1 includes a non-contact communication unit 16 that performs non-contact communication with the IC card 7 that stores electronic money for purchasing commodities or money amount information such as points. In the payment process, it is necessary to exchange information between the payment server device 5 and the IC card 7, and the payment mediation unit 22 of the user terminal device 1 mediates communication between the payment server device 5 and the IC card 7. In the payment process, communication via the user terminal device 1 is performed between the payment server device 5 and the IC card 7, and the balance of the IC card 7 is reduced. Thereby, it is possible to realize a convenient settlement process using a storage medium having a non-contact communication function such as the IC card 7.

  In the payment system according to the present embodiment, the payment server device 5 is configured using two devices, the first payment server device 5A and the second payment server device 5B. The first settlement server device 5A relays communication between the user terminal device 1 and the second settlement server device 5B. Further, the first settlement server device 5A converts information transmitted / received between the sales server device 3 and the second settlement server device 5B, and information transmitted / received between the second settlement server device 5B and the IC card 7. Perform the conversion process. The second settlement server device 5B communicates with the IC card 7 and performs a settlement process for reducing the amount of the sold product from the balance of the IC card 7. By providing the first settlement server device 5A and the second settlement server device 5B as described above, for example, a plurality of types of sales server devices 3 having different configurations, a plurality of types of IC cards 7 having different protocols, etc. The settlement process of the settlement server device 5B can be easily handled. Moreover, the other can be easily made compatible with the specification change of one of the sales server device 3 and the second settlement server device 5B.

  In addition, the sales server device 3 generates a transaction ID for a series of processing such as sales processing and settlement processing of the purchased product, attaches the generated transaction ID to the settlement request, and the user terminal device 1 To the first settlement server device 5A. The first settlement server device 5A stores a history such as the status of the settlement process in the storage unit 51 as the settlement history information 51a in association with the transaction ID attached to the received settlement request. Note that the first settlement server device 5A stores the history relating to these processes in the settlement history information 51a even if the sales process or the settlement process is not completed due to a malfunction or the like. As a result, when a failure or the like occurs in communication and the settlement process is interrupted, the failure confirmation unit 44 of the sales server device 3 can confirm the presence or absence of the failure based on the transaction ID and the settlement history information 51a. Further, the defect determination unit 50c of the first settlement server device 5A can specify the location where the defect occurs in the process of the settlement process based on the settlement state of the settlement history information 51a.

  Further, the sales server device 3 stores the sales processing history in the storage unit 31 as sales history information 31a. In the sales history information 31a, the transaction ID, the user ID of the user using the user terminal device 1, the result of the settlement process, and the like are stored in association with each other. As a result, the sales server device 3 can easily determine whether or not the payment server device 5 should confirm whether or not the payment processing for the product to be sold has been completed. Further, the sales server device 3 can notify the user terminal device 1 that there is a process for which the payment process has not been completed, and the user terminal apparatus 1 indicates that there is an uncompleted process on the display unit 13. Users can be notified such as displaying messages. The notification by the user terminal device 1 can be performed, for example, when the user performs a login process for the sales server device 3 in the user terminal device 1. The user terminal device 1 notifies at least before the next settlement process is started. As a result, the user can be notified that the process has been interrupted due to a communication failure or the like, and the user can select whether or not to restart the process.

  The storage unit 73 of the IC card 7 stores a history of changes in balance such as electronic money or points as balance history information 73b. The first settlement server device 5A stores the correspondence between the update ID assigned to the balance update processing of the IC card 7 and the transaction ID related to the settlement processing in the settlement history information 51a. The defect determination unit 50c of the first settlement server device 5A compares the balance history information 73b acquired from the IC card 7 with the settlement history information 51a stored in the storage unit 51, and has a problem in the balance update process for the IC card 7. It is determined whether or not an error has occurred. Thereby, it is possible to accurately determine whether or not the writing to the IC card 7 in the settlement process is completed.

  When it is determined that a problem has occurred in the payment process, the sales server device 3 performs a process for resuming the interrupted process. At this time, the sales server device 3 resumes the processing by a method according to the state of the settlement processing, such as unrequested, settlement unsuccessful, processing unsuccessful or settlement confirmed, which is confirmed with the settlement server device 5 via the user terminal device 1. To do. That is, the sales server device 3 resumes the process from the interrupted point in the process of the payment process. As a result, the payment system according to the present embodiment can reliably complete the payment processing related to the product to be sold.

  In the present embodiment, the sales server device 3 is configured as one device. However, the present invention is not limited to this, and the sales server device 3 may be configured by two or more devices. Moreover, although the payment server apparatus 5 was comprised with two apparatuses, the 1st payment server apparatus 5A and the 2nd payment server apparatus 5B, it is not restricted to this, The function of 5 A of 1st payment server apparatuses and the 2nd payment server apparatus 5B May be integrated into a single settlement server device 5. Further, the settlement server device 5 may be composed of three or more devices. Moreover, although the user terminal device 1 is configured to include the non-contact communication unit 16 that performs non-contact communication with the IC card 7, it is not limited thereto. The user terminal device 1 may not include the contactless communication unit 16 and may be configured to connect an external device having a contactless communication function to the user terminal device 1 by wire or wirelessly. Further, although the storage medium for storing the amount information is the IC card 7, the storage medium is not limited to the card type and may be in various forms.

  In the payment system according to the present embodiment, the update ID is generated by the second payment server device 5B. However, the present invention is not limited to this. The first settlement server device 5A may generate the update ID and notify the second settlement server device 5B. In addition, the first settlement server device 5A that has received the settlement request from the sales server device 3 via the user terminal device 1 is configured to decrypt the encrypted settlement request. However, the present invention is not limited to this. The first settlement server device 5A transmits the received settlement request to the second settlement server device 5B without decrypting it, and the second settlement server device 5B decrypts the settlement request, and necessary information in the decrypted information. May be transmitted to the first settlement server device 5A. Similarly to the information transmitted / received between the sales server device 3 and the first settlement server device 5A via the user terminal device, the information transmitted / received between the first settlement server device 5A and the second settlement server device 5B is encrypted. Alternatively, the electronic signature may be attached and transmitted / received.

  In addition, although the electronic money or points charged in the IC card 7 is used for payment of the purchased product price, the present invention is not limited to this. For example, the credit card may be used for payment, for example, by the user inputting credit card identification information or the like at the user terminal device 1 in the payment process. The user terminal device 1 may store money amount information such as electronic money or points. In this case, a storage medium such as the IC card 7 may not be used. Further, in the present embodiment, the process is resumed by determining whether the state of the payment process is any of the four states of unrequested, payment not established, process incomplete, or payment established, but this is an example. is there. The state of the settlement process may be determined based on three states or less or five states or more, and may be determined based on four states different from the above four states.

  In addition, the processing procedure of the user terminal device 1, the sales server device 3, the first settlement server device 5A, and the second settlement server device 5B shown in the present embodiment is an example, and is not limited to this. Moreover, the structure of the balance history information 73b shown in FIG. 4, the sales history information 31a shown in FIG. 6, and the settlement history information 51a shown in FIG. 8 is an example, and is not limited thereto. Further, the apparatus configuration of the payment system and the sharing of functions in each apparatus are not limited to those described in the present embodiment. For example, the sales server device 3 or the settlement server device 5 may have at least a part of what is described as the function of the user terminal device 1 in the present embodiment. Conversely, the user terminal device 1 may have at least a part of what has been described as the function of the sales server device 3 or the settlement server device 5.

DESCRIPTION OF SYMBOLS 1 User terminal device 3 Sales server apparatus 5 Payment server apparatus 5A 1st payment server apparatus 5B 2nd payment server apparatus 7 IC card 10 Processing part 11 Storage part 12 Recording medium mounting part 13 Display part 14 Operation part 15 Communication part 16 Non-contact Communication unit 21 Settlement request relay unit 22 Settlement mediation unit 23 Settlement result relay unit 24 Purchase processing unit 25 Operation receiving unit 30 Processing unit 31 Storage unit 31a Sales history information 32 Recording medium mounting unit 33 Communication unit 41 Sales processing unit 42 ID generation unit 43 Cryptographic Processing Unit 44 Defect Checking Unit 50 Processing Unit 50a First Settlement Processing Unit 50b Encryption Processing Unit 50c Defect Determination Unit 51 Storage Unit 51a Settlement History Information 52 Recording Medium Mounting Unit 53 Communication Unit 60 Processing Unit 60a Second Settlement Processing Unit 60b ID generation unit 60c history inquiry unit 61 storage unit 62 recording medium mounting unit 63 communication unit 0 IC tag 71 processor 72 non-contact communication unit 73 storage unit 73a card ID
73b Balance history information 74 Power supply unit 77 Antenna 91 Recording medium 91a Client program 92 Recording medium 92a Server program 93 Recording medium 93a Server program 94 Recording medium 94a Server program 99 Network

Claims (21)

A sales server device that performs sales processing related to the sale of products;
A settlement server device that performs a settlement process related to products sold by the sales server device through the sales process;
A communication unit that communicates with the sales server device and the settlement server device via a network, a non-contact communication unit that performs non-contact communication with a storage medium that stores money amount information, and the purchase of the product A user terminal device having an operation receiving unit for receiving an operation ;
With
The sales server device includes:
A storage unit that stores processing status information related to the payment process in association with the identification information attached to the payment process;
A settlement system comprising: a defect confirmation unit that confirms the presence or absence of a defect related to the settlement process based on the identification information and the processing status information.   The payment system according to claim 1, wherein the storage unit holds the processing status information even when the sales process or the payment process is not completed.   The said sales server apparatus memorize | stores a response | compatibility with the identification information attached | subjected with respect to the said payment process, and the user identification information attached | subjected to the user who uses the said user terminal device. The payment system described in 1.   The settlement system according to any one of claims 1 to 3, wherein the sales server device stores a result of the settlement process in association with identification information attached to the settlement process. .   The payment system according to any one of claims 1 to 4, wherein the user terminal device notifies a user of the user terminal device of a problem related to payment processing.   The payment system according to claim 5, wherein the user terminal device notifies the user of the user terminal device of a problem when a login process is performed on the sales server device.   6. The user terminal device according to claim 5, wherein the user terminal device notifies the user of the user terminal device of the failure after the failure has occurred in the payment processing until at least the next payment processing is started. Payment system.   The payment system according to any one of claims 5 to 7, further comprising a resuming unit that resumes the payment process in which the failure has occurred after the user terminal device has notified the failure.   The settlement system according to any one of claims 1 to 7, further comprising a resuming unit that resumes the settlement process in which a malfunction has occurred when the malfunction confirmation unit confirms that there is a malfunction.   The apparatus according to claim 1, further comprising: a defect determination unit that determines a position where a defect occurs in a process of the payment process based on the identification information attached to the payment process and the process status information stored in the storage unit. The settlement system according to any one of 7 above.   The payment system according to claim 10, further comprising a resuming unit that resumes the payment process from the location determined by the defect determination unit when the defect confirmation unit confirms that there is a defect.   The payment system according to any one of claims 1 to 11, wherein the sales server device includes a generation unit that generates identification information attached to the payment process. The storage medium stores history information of stored amount information,
The said settlement server apparatus has an update determination part which determines the presence or absence of the malfunction which concerns on the update process of the money amount information memorize | stored in the said storage medium based on the historical information acquired from the said storage medium. The settlement system according to any one of 12. The storage medium stores a change in money amount information in association with the identification information attached to the update process,
The payment system according to claim 13, wherein the payment server device stores correspondence between identification information given to the update process and identification information given to the payment process. A user terminal device having a non-contact communication unit that performs non-contact communication with a storage medium that stores amount information and history information of the amount information;
Based on the update processing unit that communicates with the user terminal device and updates the amount information stored in the storage medium, and the history of processing performed by the update processing unit and the history information acquired from the storage medium, A payment system comprising: a payment server device having an update determination unit that determines whether or not there is a defect related to processing by the update processing unit.   The payment system according to claim 15, wherein when there is a defect, the update determination unit determines the content of the defect.   The payment system according to any one of claims 1 to 16, wherein the user terminal device is a non-face-to-face device. A sales server device that includes a communication unit that communicates with a user terminal device and performs a sales process related to the sale of products,
A storage unit that stores processing status information related to the payment process in association with identification information attached to the payment process related to the product sold by the sales process;
A sales server device comprising: a defect confirmation unit that confirms the presence or absence of a defect related to a payment process based on the identification information and the processing status information. A payment server device that includes a communication unit that communicates with a user terminal device and performs a payment process related to payment of a product,
A storage unit that stores processing status information related to the payment process in association with the identification information attached to the payment process;
A settlement server device comprising: a failure determination unit that determines a location where a failure occurs in the process of payment processing based on the identification information attached to the payment processing and the processing status information stored in the storage unit. A sales server device that includes a communication unit that communicates with a user terminal device and performs a sales process related to the sale of products,
Storage means for storing processing status information related to the payment processing in association with identification information attached to the payment processing related to the product sold by the sales processing;
A server program that operates as a defect confirmation unit that confirms the presence or absence of a defect related to payment processing based on the identification information and the processing status information. A payment server device that includes a communication unit that communicates with a user terminal device and performs a payment process related to payment of a product,
Storage means for storing processing status information related to the payment processing in association with identification information given to the payment processing;
A server program that operates as a failure determination unit that determines a location where a failure has occurred in a processing process of a payment process, based on identification information given to the payment process and processing status information stored in the storage unit.

Images