JP7099811B2 - Credit cards, terminals, usage restrictions, information processing methods, and programs - Google Patents

Description

The present invention relates to a credit card or the like having a security function.

Conventionally, there has been an IC card equipped with a fingerprint reading sensor, which enables transmission / reception with a reader when fingerprint authentication is successful, and makes transmission / reception with a reader impossible after the authentication exemption time elapses (for example). , Patent Document 1).

Japanese Unexamined Patent Publication No. 2012-238126

However, with the above-mentioned conventional credit card using an IC card, there is a risk that the fingerprint authentication will be used repeatedly and illegally during the period from the successful fingerprint authentication to the elapse of the authentication exemption time.

Also, with other conventional credit cards, there is no limit to the number of times they can be used, and there is a risk of repeated fraudulent use.

The credit card of the first invention is a credit card having a usage restriction that it can be used only up to n (n is a natural number of 1 or more) after the permission instruction for permitting the use is received.

With such a configuration, the risk of repeated fraudulent use of the credit card can be reduced by limiting the number of times of use after receiving the permission instruction.

Further, the credit card of the second invention can be used only up to n (n is a natural number of 1 or more) times after the permission instruction for permitting the use is received with respect to the first invention. It is a credit card that can be used only for the time within the threshold or the time below the threshold after the permission instruction is received.

With such a configuration, the risk of repeated fraudulent use of the credit card can be further reduced by limiting the number of times of use and the time of use after receiving the permission instruction.

Further, the credit card of the third invention has a storage unit for storing usage restriction information for specifying usage restrictions, a reception unit for receiving permission instructions, and a reception unit for the first or second invention. After receiving the permission instruction, it has a judgment unit that determines whether or not the usage restriction information is satisfied, and a prohibition processing unit that prohibits the use of the credit card if the judgment unit determines that the usage restriction information is not satisfied. It is a credit card to do.

With such a configuration, the risk of repeated fraudulent use can be reduced by determining whether or not the credit card satisfies the usage restriction information by itself.

Further, the credit card of the fourth invention is a credit card for which the reception unit receives a permission instruction from the terminal device for the third invention.

With such a configuration, the credit card cannot be used unless a permission instruction is received from the terminal device, so that the risk of unauthorized use can be further reduced.

Further, in the credit card of the fifth invention, for the third or fourth invention, the reception department also accepts the execution information regarding the execution of the settlement, and after the reception department receives the permission instruction, the execution information is received. It is a credit card further provided with an acquisition unit for acquiring status information regarding the status until acceptance and an output unit for outputting status information.

With such a configuration, the user can know the situation after receiving the permission instruction (for example, the number of times of use, the elapsed time, etc.), so that the execution information (for example, the price information, the execution instruction, etc.) can be accurately input.

Further, in the credit card of the sixth invention, for the third or fourth invention, the reception unit accepts the number of times of use restriction n, and the reception unit has the number of times of use restriction n. It is a credit card further provided with an output unit that stores the information in the storage unit.

With such a configuration, the user can set the number of usage restrictions n.

Further, the information processing apparatus of the seventh invention has a storage unit for storing usage restriction information for specifying usage restrictions, a reception unit for receiving a permission instruction having a card identifier for identifying a credit card, and a reception unit for permission. After receiving the instruction, the judgment unit that determines whether or not the usage restriction information is satisfied, and if the judgment unit determines that the usage restriction information is not satisfied, the use of the credit card identified by the card identifier is prohibited. It is an information processing device including a processing unit.

With such a configuration, the risk of repeated fraudulent use of the credit card can be reduced by determining whether or not the information processing apparatus satisfies the usage restriction information.

Further, the information processing apparatus of the eighth invention is an information processing apparatus for receiving a permission instruction from the terminal apparatus for the seventh invention.

With such a configuration, the information processing device does not enable the credit card unless it receives a permission instruction from the terminal device, so that the risk of unauthorized use of the credit card can be further reduced.

Further, in the information processing apparatus of the ninth invention, for the seventh or eighth invention, the reception unit also receives the execution information regarding the execution of the settlement, and after the reception unit receives the permission instruction, the execution information. It is an information processing device further provided with an acquisition unit for acquiring status information regarding the situation until the reception of the information processing and an output unit for outputting the status information.

With such a configuration, the user can know the situation after receiving the permission instruction, so that the execution information can be accurately input.

Further, in the information processing apparatus of the tenth invention, with respect to the seventh or eighth invention, the reception unit accepts the number of times of use restriction n, and the reception unit has the number of times of use restriction n received. It is an information processing device further provided with an output unit for storing information in a storage unit.

With such a configuration, the user can set the number of usage restrictions n.

According to the present invention, the risk of repeated fraudulent use of a credit card can be reduced by limiting the number of times of use after receiving a permission instruction.

Block diagram of the card system according to the first embodiment Flow chart explaining the operation of the credit card The figure which shows an example of the same initial screen A diagram showing an example of a screen immediately after receiving the permission instruction. Block diagram of the card system according to the second embodiment Flow chart explaining the operation of the information processing device Data structure diagram of the card management information A diagram showing an example of the internal configuration of the computer system

Hereinafter, two embodiments such as a credit card will be described with reference to the drawings. In addition, since the components with the same reference numerals perform the same operation in each embodiment, the description may be omitted again.

In any of the embodiments, a credit card that can be settled n times or less after receiving an instruction will be described. The main difference between the first and second embodiments is that the credit card makes the judgment regarding the restriction on the use of the credit card by itself in the former case, whereas the external device makes the decision in the latter case.

(Embodiment 1)
FIG. 1 is a block diagram of the card system 100 according to the present embodiment. The card system 100 includes a credit card 1 and a terminal device 2.

The credit card 1 may be, for example, an IC card. An IC card is a card having an IC chip. The IC chip is composed of a group of elements such as an MPU, a memory, and a communication module. The communication module may be, for example, a module that performs short-range wireless communication. The short-range wireless communication is, for example, NFC, Bluetooth (registered trademark), wireless LAN, or the like, but any method can be used as long as the wireless communication has a short reach. In addition to short-range wireless communication, it is preferable that the communication module can perform wide-area communication via, for example, the Internet or a communication line.

Alternatively, the credit card 1 may be, for example, a virtual card. A virtual card is a virtual card realized by using a computer. It is particularly preferable that the credit card 1 is a virtual card in a mobile terminal such as a smartphone or a tablet terminal. The mobile terminal also has an MPU, a memory, a communication module, and the like, and can realize the same functions as an IC card. The substance of the virtual card is credit card information stored in the memory of the mobile terminal.

However, the credit card 1 may be, for example, a magnetic card. A magnetic card is a card having a magnetic stripe on which credit card information or the like is written. Further, the credit card 1 may be, for example, a debit card, electronic money, a point card, or the like, and any type of card can be used as long as it can be used for electronic payment.

The credit card information is information related to the credit card 1. Credit card information includes, for example, information such as a credit card identifier, expiration date, and name. The credit card identifier is information that identifies the credit card 1. The credit card identifier is usually a credit card number, but may be an ID or the like, and may be any information that can identify the credit card 1. However, the content of the credit card information does not matter.

The mobile terminal usually also has a display, a touch panel, and the like. It is more preferable that the image information of the actual card corresponding to the virtual card is further stored in the memory of the mobile terminal, and the image of the card is displayed on the display of the mobile terminal. That is, the display of the mobile terminal can function as an output device that outputs card images and other information. In addition, the touch panel or keyboard of the mobile terminal can function as an input device that accepts input of instructions and other information.

A general IC card usually has neither a display nor a touch panel, but may have one or more of the display or the touch panel. Further, when the credit card 1 is a general IC card, for example, the display or touch panel of the terminal device 2 can be used as an input / output device.

As the terminal device 2, for example, a wearable terminal, a smartphone, or the like is suitable. However, the terminal device 2 may be, for example, an IC chip, a clock or a card with an IC chip, and any type of device can be used as long as it is easy to carry and can communicate with the credit card 1. do not have. The communication between the credit card 1 and the terminal device 2 is usually short-range wireless communication.

It is preferable that each of the credit card 1 and the terminal device 2 can communicate with, for example, an external device (for example, an information processing device, a payment server of a financial institution, a credit card processing terminal, etc.) (not shown). .. Communication with an external device is usually wide-area communication via the Internet, a communication line, or the like, but short-range wireless communication may also be used, and the method is not limited.

Further, for example, when the credit card 1 is a virtual card in a mobile terminal, the terminal device 2 can also be realized with the same mobile terminal. That is, the information system A can be realized by one mobile terminal, and its hardware configuration does not matter.

Further, the above-mentioned matters concerning the type and hardware of the credit card 1 and the like basically also apply to the second embodiment described later.

The credit card 1 includes a storage unit 11, a reception unit 12, a processing unit 13, and an output unit 14. The processing unit 13 includes an acquisition unit 131, a determination unit 132, and a prohibition processing unit 133.

The terminal device 2 includes a terminal storage unit 21, a terminal reception unit 22, a terminal transmission unit 23, a terminal processing unit 24, a terminal reception unit 25, and a terminal output unit 26.

The storage unit 11 constituting the credit card 1 may store various types of information. The various types of information are, for example, usage restriction information. The usage restriction information is information that specifies the usage restriction. The usage restriction is a restriction regarding the use of the credit card 1.

Usage restrictions include restrictions on the number of uses. The number of times of use is the number of times that the credit card 1 can be used after the permission instruction is received. The number of times the credit card 1 has been used after the permission instruction has been received may be referred to as the number of times of use. The permission instruction is an instruction to permit the use. The authorization instruction usually has a credit card identifier that identifies the credit card 1. The permission instruction is, for example, an operation of a predetermined button (for example, a permission instruction button described later), but may be a touch to a fingerprint authentication device, etc., and may be an instruction for permitting the use of the credit card 1. Anything is fine.

It is also preferable that the usage restrictions include restrictions on the usage time. The usage time is the time during which the credit card 1 can be used after the permission instruction is received.

The usage restriction information includes the usable number n (n is a natural number of 1 or more) which is the upper limit of the number of uses. For example, the usage restriction information "usable number n" indicates a usage restriction that the permission instruction can be used only up to n times. In the following, the usable number n may be referred to as "usage limit number n" or simply "number n".

Further, it is preferable that the usage restriction information also includes, for example, a threshold value regarding the usage time (for example, 1 minute, 5 minutes, etc.). For example, the usage restriction information "number of times n, & threshold value 1 minute" can only be used up to n times after the permission instruction is received, and the time or 1 minute within 1 minute after the permission instruction is received. Indicates a usage limit that can only be used for less than a period of time.

The storage unit 11 may store the usage restriction information as described above in advance, or the output unit 14 described later stores the usage restriction information received by the reception unit 12 to be described later. May be accumulated in.

The storage unit 11 usually stores a credit card identifier described above, credit card information other than the credit card identifier, a terminal device identifier described later, and the like.

The reception unit 12 receives various types of information. The various types of information include, for example, the above-mentioned permission instruction, the above-mentioned execution information, and the above-mentioned usable number of times n. The reception may be, for example, reception via an input device such as a touch panel, reception from the terminal device 2, or reception from an external device such as an information processing device (not shown). The reception from the terminal device 2 is usually reception by short-range radio, but may be reception by wide area communication. Further, the reception from the external device is usually reception by wide area communication, but may be reception by short-range radio. However, the reception may be, for example, reception of information read from a recording medium such as a disk or a semiconductor memory, and the mode thereof does not matter.

The reception unit 12 receives a permission instruction via, for example, an input device. In addition, accepting via the input device may be, for example, accepting the operation of the permission instruction button displayed on the display on the touch panel, or fingerprint authentication is performed according to the touch to the fingerprint authentication device, and the fingerprint authentication is successful. If so, the touch may be accepted as a permission instruction.

Alternatively, the reception unit 12 may receive a permission instruction from the terminal device 2. In receiving the permission instruction from the terminal device 2, for example, the credit card 1 and the terminal device 2 can communicate with each other by short-range wireless communication such as NFC by holding the credit card 1 over the terminal device 2. In that case, the terminal device identifier transmitted from the terminal device 2 may be received as a permission instruction. In such a case, the terminal device 2 performs short-range wireless communication only with a credit card 1 permitted in advance (for example, a credit card 1 identified by a credit card identifier stored in the terminal storage unit 21). That is preferable. As described above, the acceptance of the permission instruction may be any as long as it is the acceptance of the instruction for permitting the use of the credit card 1.

The reception unit 12 also receives execution information via, for example, an input device. Alternatively, the reception unit 12 may receive execution information from the terminal device 2. Alternatively, the reception unit 12 may receive the performance information from, for example, a credit card processing terminal (not shown), and the transmission source of the performance information does not matter.

Execution information is information for executing payment. The settlement is the payment of the price by the credit card 1. Execution may be the execution of payment or the processing for payment. The processing for payment may also include, for example, transmission of payment information and credit card information to a device (for example, a payment server of a financial institution) on which payment is executed. The price information is information indicating the price settled by the credit card 1.

The performance information may be, for example, a performance instruction. The execution instruction is an instruction to execute the settlement. The execution instruction is, for example, an operation of a predetermined button (for example, a payment button), but may be an operation such as inputting a personal identification number or swiping a magnetic card through a card reader to execute payment by credit card 1. Any instructions can be used. Also, the performance information usually includes a credit card identifier. In addition, the execution information usually includes the price information. Further, the performance information may include, for example, the personal identification number of the credit card 1, and the content thereof does not matter.

The reception unit 12 receives, for example, the number of times n via the input device. Alternatively, the reception unit 12 may receive the number of times n from the terminal device 2.

The reception unit 12 may also receive a threshold value regarding time via an input device, for example. Alternatively, the reception unit 12 may receive the threshold value from the terminal device 2.

The processing unit 13 performs various processes. The various processes are, for example, processes of the acquisition unit 131, the determination unit 132, the prohibition processing unit 133, and the like, which will be described later. Further, the processing unit 13 executes the payment by using the payment information received by the reception unit 12. Further, the processing unit 13 also performs various types of discrimination described in the flowchart.

The acquisition unit 131 acquires status information. The status information refers to information regarding the status after the reception unit 12 has received the permission instruction. The status information is usually information on the situation after the reception unit 12 receives the permission instruction until the performance information is received, but it may be information on the situation after the performance information is received. Here, "after receiving the permission instruction until the execution information is received" is the period from the reception of the permission instruction to the reception of the nth (that is, the last) execution information corresponding to the usable number n, for example. Is preferable.

For example, the acquisition unit 131 acquires the initial status information when the reception unit 12 receives the permission instruction, and thereafter, every time the reception unit 12 receives the execution information, the acquisition unit 131 acquires new status information. It may be repeated until the number of times the execution information is received reaches the number of times n that can be used. The number of times the execution information is received is the number of times the reception unit 12 receives the execution information after receiving the permission instruction. The number of receptions is usually the same as the number of times the credit card 1 is used.

Alternatively, the acquisition unit 131 may, for example, perform an operation of acquiring new status information at predetermined time intervals after acquiring the initial status information as described above. Such an operation may also be terminated after the number of receptions or the number of uses reaches the number of times n that can be used, but it may be continued for a period until the reception unit 12 receives a new permission instruction, for example.

Specifically, the status information includes, for example, the number of times the credit card 1 has been used (number of times of use) after the reception unit 12 has received the permission instruction, or the number of times remaining up to the number of times the credit card 1 can be used. The remaining number of times is the number of times that the number of times of use is subtracted from the number of times of use n, and the credit card 1 can be used as many times as the remaining number of times.

Further, the status information may include, for example, the elapsed time from the reception of the permission instruction or the remaining time to the threshold value regarding the time. The remaining time is a value obtained by subtracting the elapsed time from the threshold value for time, and the credit card 1 can be used only for the remaining time.

The status information may include, for example, a threshold value regarding the distance from the terminal device 2 to the credit card 1 after the permission instruction is received, and the content thereof does not matter.

Specifically, the acquisition unit 131 may count, for example, the number of times the credit card 1 has been used after the reception unit 12 has received the permission instruction. That is, the acquisition unit 131 may hold, for example, the number of times of use information. The usage count information is information indicating the number of times the credit card 1 has been used after the permission instruction is received. The usage count information may be reset to "0" in response to the reception unit 12 receiving the permission instruction, and then the usage count information may be incremented each time the payment by the credit card 1 is executed. Further, the acquisition unit 131 may calculate the remaining number of times by subtracting the number of times of use information from the number of times of use n.

Further, the acquisition unit 131 may use, for example, the built-in clock of the MPU, an NTP server, or the like to measure the elapsed time from the reception unit 12 receiving the permission instruction. Further, the acquisition unit 131 may calculate the remaining time by subtracting the elapsed time from the threshold value for time.

The acquisition unit 131 may acquire the distance between the credit card 1 and the terminal device 2 by using, for example, the reception strength of the short-range radio or the signal from the GPS receiver.

The acquisition unit 131 acquires status information including one or more of the number of uses counted in this way or the remaining number of times calculated. Further, it is preferable that the acquisition unit 131 acquires status information including information including one or more of the timed elapsed time or the calculated remaining time in addition to the number of times of use and the like. The acquisition unit 131 may acquire status information including the distance from the terminal device 2 in addition to the number of times of use.

After the reception unit 12 receives the permission instruction, the determination unit 132 determines whether or not the usage restriction information is satisfied by using, for example, the status information acquired by the acquisition unit 131. Specifically, when the usage restriction information includes the number of times n, the determination unit 132 determines whether or not the number of times the credit card 1 has been used is n or less after the reception unit 12 receives the permission instruction. Then, the determination unit 132 determines that the usage restriction information is satisfied when the number of times the credit card 1 is used is n or less, and the usage restriction information is not satisfied when the number of times the credit card 1 is used is not n or less. to decide.

Further, when the usage restriction information includes the number of times n and the threshold value regarding the time, the determination unit 132 determines whether or not the number of times the credit card 1 has been used is n or less after the reception unit 12 receives the permission instruction. And, it is determined whether or not the elapsed time is within or below the threshold value. Then, the determination unit 132 determines that the usage restriction information is satisfied when the number of times the credit card 1 has been used is n or less and the elapsed time is within or less than the threshold value, and the number of times the credit card 1 is used. Is not less than or equal to n, or if the elapsed time is within or less than the threshold value, it is determined that the usage restriction information is not satisfied.

When the usage restriction information also includes a threshold value related to the distance, in the determination unit 132, the distance from the terminal device 2 to the credit card 1 acquired by the acquisition unit 12 after the reception unit 12 receives the permission instruction is the distance. It is also determined whether or not it is below or below the threshold value for. Then, even if the number of times the credit card 1 is used is n or less, or the number of times is n or less and the elapsed time is within or less than the threshold value, the determination unit 132 determines that the acquired distance is related to the distance. If it is below the threshold value or below the threshold value, it may be determined that the usage restriction information is not satisfied.

When the determination unit 132 determines that the usage restriction information is not satisfied, the prohibition processing unit 133 performs processing for prohibiting the use of the credit card 1. The processing for prohibiting may be, for example, making the credit card information unreadable, preventing the credit card information from being decrypted, and indicating whether or not the credit card 1 can be used. The flag may be set to "prohibited", and any process may be used as long as it is a process for disabling the credit card 1.

Specifically, the prohibition processing unit 133 may, for example, stop the operation of a module such as a card reader that reads credit card information, or hinder the activation or execution of a program or the like that decrypts the read credit card information. By doing so, the credit card 1 may be disabled. Alternatively, if such a module or program is designed to read or decrypt credit card information according to a predetermined flag value, the prohibition processor 133 may, for example, "use" the flag. The credit card 1 may be disabled by setting a value corresponding to "prohibited".

However, as a result, the use of the credit card 1 may be prohibited, and the prohibition processing unit 133 does not care about the method of prohibiting the use of the credit card 1. In the following, when the determination unit 132 determines that the usage restriction information is not satisfied, the process of prohibiting the use of the credit card 1 may be referred to as "prohibition process".

The output unit 14 outputs various information. The various types of information include, for example, the above-mentioned situation information (for example, the number of times of use, elapsed time, etc.), the above-mentioned usage restriction information (for example, the number of times of use n, a threshold value for use time, etc.). The output may be, for example, output via an output device such as a display or a speaker, transmission to an external device such as a terminal device 2 or an information processing device (not shown), or to a storage unit 11 or other recording medium. It may be an accumulation of. The transmission to the terminal device 2 is usually transmitted by short-range radio, but may be transmitted by wide area communication. Further, the transmission to the external device is usually a transmission by wide area communication, but may be a transmission by short-range radio. However, the output may be, for example, delivery of the processing result to another processing device, another program, or the like, and the mode thereof does not matter.

The output unit 14 outputs, for example, the status information acquired by the acquisition unit 131. The output unit 14 normally transmits the status information acquired by the acquisition unit 131 to the terminal device 2, but may output the status information via, for example, an output device.

The output unit 14 stores, for example, usage restriction information including the number of times n and the like received by the reception unit 12 in the storage unit 11. The accumulation may be performed by updating the number of times n or the like included in the usage restriction information stored in the storage unit 11 to a new number of times n or the like received.

The terminal storage unit 21 constituting the terminal device 2 can store various types of information. The various types of information are, for example, terminal device identifiers and the like. The terminal device identifier is information that identifies the terminal device 2. The terminal device identifier is, for example, a MAC address, an IP address, an ID, or the like, but may be any information as long as it can identify the terminal device 2. Further, the terminal storage unit 21 usually stores a credit card identifier that identifies the credit card 1.

The terminal reception unit 22 receives various types of information. The various types of information include, for example, permission instructions, execution information, number of times n, threshold values related to time, and the like. The reception by the terminal reception unit 22 is usually reception via an input device. However, the acceptance of the permission instruction is performed when the credit card 1 and the terminal device 2 can communicate with each other by short-range radio such as NFC by, for example, holding the credit card 1 over the terminal device 2. The credit card identifier transmitted from the card 1 may be received as a permission instruction. In such a case, the credit card 1 may perform short-range wireless communication only with the terminal device 2 permitted in advance (for example, the terminal device 2 identified by the terminal identifier stored in the storage unit 11). Suitable.

The terminal transmission unit 23 transmits information such as a permission instruction received by the terminal reception unit 22 to the credit card 1. Normally, the terminal transmission unit 23 transmits information such as a permission instruction to the credit card 1 in pairs with the terminal device identifier stored in the terminal storage unit 21. The transmission by the terminal transmission unit 23 is usually a short-range radio transmission.

The terminal processing unit 24 performs various processes. The various processes may be, for example, determination of whether or not the terminal reception unit 22 has received information such as a permission instruction.

The terminal receiving unit 25 receives the status information from the credit card 1.

The terminal output unit 26 outputs the status information received by the terminal reception unit 25. The output by the terminal output unit 26 is usually an output via an output device such as a display.

The storage unit 11 and the terminal storage unit 21 are preferably non-volatile recording media such as a flash memory, but can also be realized by a volatile recording medium such as RAM. The process of storing information in the storage unit 11 or the like does not matter. For example, information may be stored in the storage unit 11 or the like via a recording medium, or information transmitted via a network, a communication line, or the like may be stored in the storage unit 11 or the like. Well, or the information input via the input device may be stored in the storage unit 11 or the like. The input device may be anything, for example, a touch panel or a keyboard. It should be noted that such a matter also applies to the storage unit 31 in the second embodiment.

The reception unit 12 and the terminal reception unit 22 may or may not include the input device. The reception unit 12 and the like can be realized by the driver software of the input device or by the input device and the driver software thereof. It should be noted that such a matter also applies to the reception unit 32 in the second embodiment.

The processing unit 13, the acquisition unit 131, the determination unit 132, the prohibition processing unit 133, and the terminal processing unit 24 can usually be realized from an MPU, a memory, or the like. The processing procedure of the processing unit 13 and the like is usually realized by software, and the software is recorded in a recording medium such as ROM. However, the processing procedure may be realized by hardware (dedicated circuit). It should be noted that such a matter also applies to the processing unit 33, the acquisition unit 331, the determination unit 332, and the prohibition processing unit 333 in the second embodiment.

The output unit 14 and the terminal output unit 26 may or may not include an output device such as a display or a speaker. The output unit 14 and the like can be realized by the driver software of the output device, or by the output device and the driver software thereof. It should be noted that such a matter also applies to the output unit 34 in the second embodiment.

The transmission function of the terminal transmission unit 23 and the output unit 14 is usually realized by a wireless or wired communication means (for example, a communication module such as a NIC (Network interface controller) or a modem), but is realized by a broadcasting means (for example, broadcasting). It may be realized by a module). It should be noted that such a matter also applies to the output function of the output unit 34 in the second embodiment.

The receiving function of the terminal receiving unit 25 and the receiving unit 12 is usually realized by a wireless or wired communication means, but may be realized by a means for receiving a broadcast (for example, a broadcast receiving module). It should be noted that such a matter also applies to the reception function of the reception unit 32 in the second embodiment.

Next, the operation of the card system 100 will be described with reference to the flowchart of FIG. FIG. 2 is a flowchart illustrating the operation of the credit card 1.

(Step S201) The processing unit 13 determines whether or not the reception unit 12 has received the permission instruction. The reception here is usually reception from the terminal device 2. In the terminal device 2, the terminal receiving unit 22 receives the permission instruction, and the terminal transmitting unit 23 transmits the accepted permission instruction to the credit card 1. Further, such a matter also applies to the acceptance of the number of times n and the like in step S208 described later.

If the reception unit 12 has received the permission instruction, the process proceeds to step S202, and if the reception unit 12 has not received the permission instruction, the process proceeds to step S208.

(Step S202) The acquisition unit 131 acquires status information. The content of the status information and the acquisition method have been described above, so they will not be repeated.

(Step S203) The output unit 14 outputs the status information acquired in step S203. The output here is usually transmission to the terminal device 2. In the terminal device 2, the terminal receiving unit 25 receives the status information, and the terminal output unit 26 outputs the received status information via an output device such as a display.

(Step S204) The determination unit 132 determines whether or not the usage restriction information stored in the storage unit 11 is satisfied by using the status information acquired in step S202. The content of the usage restriction information and the judgment method have been described above and will not be repeated. If the usage restriction information is satisfied, the process proceeds to step S206, and if not, the process proceeds to step S207.

(Step S205) The processing unit 13 determines whether or not the reception unit 12 has received the execution information. The reception here may be, for example, reception from the terminal device 2 or reception from a credit card processing terminal (not shown). In the terminal device 2, the terminal receiving unit 22 receives the execution information, and the terminal transmitting unit 23 transmits the accepted execution information to the credit card 1.

If the reception unit 12 has received the execution information, the process proceeds to step S206, and if not, the process returns to step S202.

(Step S206) The processing unit 13 executes the settlement by using the execution information received in step S202. The processing unit 13 also increments the usage count information according to the execution of the settlement. Then, the process returns to step 202.

(Step S207) The prohibition processing unit 133 executes the prohibition processing. Then, the process returns to step S201. As a result, payment by credit card 1 will not be possible until a new permission instruction is received.

(Step S208) The processing unit 13 determines whether or not the reception unit 12 has received the number of times n or the like. If the reception unit 12 has received the number of times n or the like, the process proceeds to step S209, and if not, the process returns to step S201.

(Step S209) The output unit 14 stores the usage restriction information including the number of times n and the like received in step S208 in the storage unit 11. As a result, for example, the default usage restriction information stored in advance in the storage unit 11 is updated with new usage restriction information set by the user. After that, the process returns to step S201.

In the flowchart of FIG. 2, the process starts in response to, for example, the power on of the credit card 1, the approach of the terminal device 2 to the credit card 1, the start of the program, and the like, and the process is interrupted by the power off or the end of the process. Is finished. However, the trigger for the start or end of processing does not matter.

Hereinafter, the specific operation of the card system 100 in the present embodiment will be described. The following description is merely an example and can be changed as appropriate, and does not limit the present invention in any way.

The credit card 1 of this example is an IC card, and the terminal device 2 is a mobile terminal such as a smartphone. The credit card 1 is the property of the user A, and can communicate with the terminal device 2 which is also the property of the user A by short-range wireless communication. In the following, the credit card 1 may be referred to as "card XX" and the terminal device 2 may be referred to as "terminal aa".

The credit card identifier "XX" and the terminal device identifier "aa" are stored in the storage unit 11 of the card XX. In addition, usage restriction information and status information are also stored in the storage unit 11. The usage restriction information has a threshold value for the number of times n that can be used and the time. The status information has the number of uses, the number of remaining times, the elapsed time, and the remaining time.

In the initial state, the usage restriction information is "n = 1, threshold value = Null", and the status information is "number of uses = 0, remaining number of times = 1, elapsed time = 0, remaining time = Null". In addition, "Null" is information indicating that the element does not exist. In addition, the usage restriction information can be changed by the user setting, and the status information is automatically updated according to the execution of payment or the like.

It is assumed that the user A who has finished shopping at the store turns on the power of the terminal aa in order to make a payment with the card XX. In response to this, the display of the terminal aa displays, for example, an initial screen as shown in FIG. FIG. 3 is a diagram showing an example of an initial screen. The initial screen has an image of the card, a character string "If you press the permission instruction button, the credit card can be used only once", a permission instruction button, and a restriction change button. The permission instruction button is a button for inputting a permission instruction. The limit change button is a button for changing usage restriction information such as the number of times n.

Specifically, the terminal output unit 26 holds screen configuration information. The screen configuration information is information for configuring the screen. The screen configuration information includes, for example, character data, image data, layout information, and the like. The image data is, for example, image data for displaying a card or various buttons. The character data is, for example, data such as a character string corresponding to a button or the like. The layout information is information indicating the arrangement of cards, character strings, buttons, and the like on the screen. However, the data structure of the screen configuration information does not matter. The terminal output unit 26 configures an initial screen as shown in FIG. 3 by using the screen configuration information and the usage restriction information, and outputs the initial screen as shown in FIG. 3 via the display.

If the user A wants to change the number of times of use, the user A may operate the limit change button. In response to this, the terminal output unit 26 outputs an input screen. Although not shown, the input screen has one or more input fields for inputting the number of times n or the like, and the user A enters the one or more input fields via an input device such as a touch panel. The number of times n and the like may be input.

When the user A operates the permission instruction button, the terminal receiving unit 22 accepts the usage permission in the terminal aa, and the terminal transmitting unit 23 transmits the usage permission to the card XX.

In the card XX, the reception unit 12 receives the usage permission, and the processing unit 13 determines that the permission instruction having the credit card identifier "XX" included in the card management information 1 has been received. The acquisition unit 131 starts acquiring status information regarding the card XX identified by the credit card identifier "XX". The status information is acquired periodically, for example, at intervals of 1 minute, 10 seconds, etc., but may be acquired irregularly. Specifically, among the status information, the number of times of use or the number of remaining times may be acquired only when the settlement is executed.

The processing unit 13 updates the status information possessed by the card management information 1 by using the acquired status information. The output unit 14 transmits the acquired status information to the terminal aa. At the terminal aa, the above situation information is received and output via an output device such as a display. As a result, the user A knows the number of times the card XX has been used after the above permission instruction, or the remaining number of times until the use is prohibited.

The determination unit 132 determines whether or not the usage restriction information is satisfied by using the card management information 1. At this point, since the card XX is unused, it is determined that the usage restriction information is satisfied, and the processing unit 13 can execute the payment only once.

After that, while the card XX is not in use, for example, the display of the terminal aa displays a screen as shown in FIG. 4, for example. FIG. 4 is a diagram showing an example of a screen immediately after the permission instruction is received. The screen shown in Fig. 4 is the initial screen shown in Fig. 3. Instead of "If you press the permission instruction button, the credit card can be used only once", "The credit card can be used only once. Current use." The number of times is 0 ", and the permission instruction button and the restriction change button are grayed out. The terminal output unit 26 configures a screen as shown in FIG. 4 by using the screen configuration information, the usage restriction information, and the status information, and outputs the screen as shown in FIG. 4 via the display.

After that, the user A hands the card XX to the clerk. The clerk attaches the card XX to the credit card processing terminal and inputs the price information and the execution instruction. User A may input information such as a personal identification number into the credit card processing terminal, if necessary.

In the card XX, the reception unit 12 accepts the input of the payment information and the like as execution information, and the processing unit 13 requests the credit card processing terminal to execute the payment using the card XX using the received execution information. .. The credit card processing terminal reads the credit card information including the credit card identifier "XX" from the card XX. Then, the credit card processing terminal transmits the read credit card information, the execution information including the input price information, and the like to the payment server of the financial institution. In the payment server, payment by card XX is executed using credit card information, price information, and the like. When the payment is completed, the payment server sends a notification indicating the completion of the payment to the credit card processing terminal. The processing unit 13 increments the number of uses included in the card management information 1 from "0" to "1" in response to the notification indicating the completion of payment.

It is assumed that the execution of such a settlement is completed within one minute from the permission instruction. When one minute has elapsed from the permission instruction, the status information of the storage unit 11 becomes "number of uses = 0, remaining number of times = 1, elapsed time = 0 minutes, remaining time = Null". The determination unit 132 determines whether or not the usage restriction information is satisfied by using the situation information and the usage restriction information “n = 1, Null”. In this case, since the number of times the card XX has been used has already reached the number of times it can be used n = 1, it is determined that the usage restriction information is not satisfied.

Therefore, the processing unit 13 cannot execute the settlement until a new permission instruction is received, and the settlement by the card XX becomes impossible. As a result, it is possible to reduce the risk that payment will be executed twice or more by mistake or intentionally with respect to one execution information.

After that, it is assumed that the user A turns on the power of the terminal aa and operates the restriction change button on the initial screen of FIG. 3 in order to change the usage restriction information. Since the user A plans to pay by the card XX in succession at the two stores, for example, it is assumed that the number of times "n = 2" and the threshold value "5 minutes" are input to the terminal aa. In the terminal aa, the terminal receiving unit 22 receives the number of times "n = 2" and the like, and the terminal transmitting unit 23 transmits the number of times "n = 2" and the like to the card XX.

In the card XX, the reception unit 12 receives the above-mentioned number of times "n = 2" and the like, and the output unit 14 stores the usage restriction information including the number of times received "n = 2" and the like in the storage unit 11. As a result, the default usage restriction information "n = 1, Null" is updated to new usage restriction information "n = 2.5 minutes" set by the user.

After that, the user A operates the permission instruction button of the terminal aa in order to make a purchase at the first store and make a payment with the card XX. The terminal aa transmits the license to the card XX1.

In the card XX1, the reception unit 12 receives the above license, and the acquisition unit 131 starts acquiring the status information regarding the card XX. The determination unit 132 determines whether or not the usage restriction information is satisfied by using the situation information. At this point, the card XX is unused and the elapsed time does not reach the threshold value "5 minutes". Therefore, it is determined that the usage restriction information is satisfied, and the processing unit 13 can execute the payment up to twice.

When the user A hands the card XX to the clerk, the clerk attaches the card XX to the credit card processing terminal and inputs the price information and the execution instruction. In the card XX, the reception unit 12 accepts the input, and the processing unit 13 executes the payment by the card XX. The credit card processing terminal transmits execution information to the payment server, and when payment is executed there, the number of uses included in the card management information 1 is incremented from "0" to "1".

After that, it is assumed that the user A makes a purchase at the second store but does not use the card XX for payment. When 5 minutes have passed from the permission instruction, the status information of the storage unit 11 becomes "number of uses = 1, number of remaining times = 1, elapsed time = more than 5 minutes, remaining time = 0". The determination unit 132 determines that the usage restriction information is not satisfied because the elapsed time has already exceeded the threshold value “5 minutes”.

Therefore, the processing unit 13 cannot execute the settlement until a new permission instruction is received, and the settlement by the card XX becomes impossible. As a result, it is possible to reduce the risk that the payment by the card XX is illegally executed due to the loss of the card XX or the like.

As described above, according to the present embodiment, the credit card 1 has a usage restriction that it can be used only up to n (n is a natural number of 1 or more) after the permission instruction for permitting the use is received. The risk of repeated unauthorized use of the card 1 can be reduced.

Further, in the above credit card 1, the usage restriction can be used only up to n (n is a natural number of 1 or more) after the permission instruction for permitting the use is received, and the threshold value is received after the permission instruction is received. The risk of repeated fraudulent use of the credit card 1 can be further reduced by limiting the use only to the time within or below the threshold.

Further, does the credit card 1 satisfy the usage restriction information after the storage unit 11 for storing the usage restriction information for specifying the usage restriction, the reception unit 12 for receiving the permission instruction, and the reception unit 12 accepting the permission instruction? The credit card 1 itself is provided with a determination unit 132 for determining whether or not the credit card 1 is provided, and a prohibition processing unit 133 for prohibiting the use of the credit card 1 when the determination unit 132 determines that the usage restriction information is not satisfied. By determining whether or not the usage restriction information is satisfied, the risk of repeated unauthorized use can be reduced.

Further, in the credit card 1, the reception unit 12 receives a permission instruction from the terminal device 2. Therefore, since the credit card 1 cannot be used unless a permission instruction is received from the terminal device 2, the risk of unauthorized use can be further reduced.

Further, in the credit card 1, the reception unit 12 also receives the execution information regarding the execution of the payment, and the acquisition unit 131 acquires the status information regarding the situation from the reception unit 12 receiving the permission instruction to the reception of the execution information. By further providing the output unit 14 for outputting the status information, the user can know the status (for example, the number of times of use, the elapsed time, etc.) after receiving the permission instruction, so that the execution information (for example, the price information, the execution) can be known. Instructions, etc.) can be entered accurately.

Further, in the credit card 1, the reception unit 12 further includes an output unit 14 that receives the usage restriction number n and stores the usage restriction information having the usage restriction number n accepted by the reception unit 12 in the storage unit 11. By doing so, the user can set the number of times n.

Further, the processing in the present embodiment may be realized by software. Then, this software may be distributed by software download or the like. Further, this software may be recorded on a recording medium such as a CD-ROM and disseminated. It should be noted that this also applies to other embodiments herein. The software that realizes the information processing device in this embodiment is the following program.

That is, this program is a program for limiting the credit card 1 so that it can be used only up to n (n is a natural number of 1 or more) after the permission instruction for permitting the use is received.

More specifically, the recording medium accessible to the computer of the credit card 1 includes a storage unit 11 in which the usage restriction information for specifying the usage restriction is stored, and this program gives the computer the permission instruction. The reception unit 12 that accepts the information, the determination unit 132 that determines whether or not the usage restriction information is satisfied after the reception unit 12 receives the permission instruction, and the determination unit 132 that determines that the usage restriction information is not satisfied. If so, it is a program for functioning as a prohibition processing unit 133 that prohibits the use of the credit card 1.

(Embodiment 2)
FIG. 5 is a block diagram of the card system 200 according to the present embodiment. The card system 200 includes an information processing device 3 and one or more credit cards 4. Each of the 1 or more credit cards 4 is connected to the information processing device 3 so as to be capable of wide-area communication via, for example, the Internet or a communication line.

The information processing device 3 is, for example, a server of a company or the like operating the card system 200, a cloud server, or the like, but may be a credit card processing terminal or a cash register terminal of a store, a home PC, or the like, and the type thereof. And whereabouts do not matter.

The credit card 4 is, for example, a virtual card in a mobile terminal, but may be an IC card. The latter type of credit card 4 may be connected to the Internet or the like via, for example, the terminal device 5. The terminal device 5 is, for example, a mobile terminal, but its type does not matter as long as it can perform short-range wireless communication with the credit card 4 and wide-area communication with the information processing device 3.

The information processing device 3 includes a storage unit 31, a reception unit 32, a processing unit 33, and an output unit 34. The processing unit 33 includes an acquisition unit 331, a determination unit 332, and a prohibition processing unit 333.

The component groups (31 to 34,331 to 333) of the information processing apparatus 3 are basically the corresponding component groups (11 to 14,131 to) of the credit card 1 described in the first embodiment. The same operation as 133) is performed for each one or more credit cards 4. Therefore, in the following, only the differences from the first embodiment will be described, and the description of common matters will be omitted or simplified.

One or two or more credit card identifiers are stored in the storage unit 31 constituting the information processing device 3. Further, the storage unit 31 also stores usage restriction information in association with each one or more credit card identifiers. Further, the storage unit 31 also stores status information in association with one or more credit card identifiers. The storage unit 31 may also store a terminal device identifier that identifies the terminal device 5 that communicates with the credit card identified by the credit card identifier in association with each one or more credit card identifiers.

In the following, information composed of one credit card identifier, usage restriction information, status information, and terminal device identifier corresponding thereto may be collectively referred to as "card management information". That is, it may be said that one or more card management information corresponding to one or more credit cards 4 is stored in the storage unit 31.

The reception unit 32 receives a permission instruction having a credit card identifier that identifies one credit card 4. The reception unit 32 receives the permission instruction from, for example, the credit card 4, but may also receive the permission instruction from the terminal device 5 that communicates with the credit card 4.

The reception unit 32 also receives execution information having a credit card identifier. The reception unit 32 receives such execution information from, for example, the credit card 4, but may also receive it from the terminal device 5.

The reception unit 32 receives the number of usage restrictions n in pairs with the credit card identifier. The reception unit 32 may also accept a threshold value regarding time. The reception unit 32 receives the number of times n and the like from, for example, the credit card 4, but may also receive it from the terminal device 5.

The processing unit 33 performs various processes. The various processes are, for example, processes such as an acquisition unit 331, a determination unit 332, and a prohibition processing unit 333, which will be described later. Further, the processing unit 33 uses, for example, the execution information received by the reception unit 32 to execute payment using the credit card 4 identified by the credit card identifier of the execution information. Further, the processing unit 33 also performs various types of discrimination described in the flowchart.

The acquisition unit 331 is the situation from the reception unit 32 receiving the permission instruction to the reception of the execution information, and acquires the status information regarding the status of the credit card 4 identified by the credit card identifier possessed by the permission instruction.

After the reception unit 32 receives the permission instruction, the determination unit 332 determines whether or not the usage restriction information corresponding to the credit card identifier of the permission instruction is satisfied.

When the determination unit 332 determines that the usage restriction information is not satisfied, the prohibition processing unit 333 prohibits the use of the credit card 4 identified by the credit card identifier corresponding to the usage restriction information.

The output unit 34 outputs the status information acquired by the acquisition unit 331. The output unit 34 may, for example, transmit the status information acquired by the acquisition unit 331 after the reception unit 32 receives the permission instruction to the credit card 4 identified by the credit card identifier of the permission instruction. It may be transmitted to the terminal device 5 that communicates with the credit card 4. Alternatively, the output unit 34 may output status information via an output device such as a display in the information processing apparatus 3.

The output unit 34 stores the usage restriction information having the number of usage restrictions n and the like received by the reception unit 32 in pair with the credit card identifier in the storage unit 31 in association with the credit card identifier.

Next, the operation of the card system 200 will be described with reference to the flowcharts of FIGS. 6 and 2. FIG. 6 is a flowchart illustrating the operation of the information processing apparatus 3.

(Step S601) The processing unit 33 sets the initial value 1 in the variable i. The variable i is information for sequentially selecting unselected card management information from one or more card management information stored in the storage unit 31.

(Step S602) The processing unit 33 determines whether or not there is the i-th card management information. If there is the i-th card management information, the process proceeds to step S603, and if not, the process returns to step S601.

(Step S603) The processing unit 33 and the like perform processing using the i-th card management information. This process will be described later.

(Step S604) The processing unit 33 increments the variable i. Then, the process returns to step S602.

In the flowchart of FIG. 6, the process starts when the power of the information processing apparatus 3 is turned on or the program is started, and the process is terminated by the power off or the interrupt of the process end. However, the trigger for the start or end of processing does not matter.

A flowchart illustrating the process using the i-th card management information in step S603 is shown in FIG.

(Step S201) Whether or not the reception unit 32 has received the permission instruction having the credit card identifier (hereinafter, may be referred to as the i-th credit card identifier) included in the i-th card management information. To determine. The reception here is usually received from the credit card 4 identified by the i-th credit card identifier, but may be received from the terminal device 5 that communicates with the i-th credit card 4. The credit card 4 or the like accepts the permission instruction, and the accepted permission instruction is transmitted to the information processing apparatus 3. Further, such a matter also applies to the acceptance of the number of times n and the like in step S208 described later.

If the reception unit 32 has received the permission instruction having the i-th credit card identifier, the process proceeds to step S202, and if not, the process proceeds to step S208.

(Step S202) The acquisition unit 331 acquires the status information regarding the status of the credit card 4 identified by the i-th credit card identifier. Although not shown, the processing unit 33 updates the status information of the i-th card management information by using the acquired status information. In addition, the content of the status information and the acquisition method will not be repeated as described above.

(Step S203) The output unit 34 outputs the status information acquired in step S203. Specifically, the output unit 34 may transmit the acquired status information to, for example, the credit card 4 identified by the i-th credit card identifier, or to the terminal device 5 that communicates with the credit card 4. You may send it. The credit card 4 or the like receives the above status information and outputs it via an output device such as a display.

(Step S204) The determination unit 332 determines whether or not the usage restriction information is satisfied by using the i-th card management information. The content of the usage restriction information and the judgment method have been described above and will not be repeated. If the usage restriction information is satisfied, the process proceeds to step S206, and if not, the process proceeds to step S207.

(Step S205) The processing unit 33 determines whether or not the reception unit 32 has received the execution information having the i-th credit card identifier. The reception here may be, for example, reception from the credit card 4 identified by the i-th credit card identifier, reception from the terminal device 5 communicating with the credit card 4, or credit (not shown). It may be received from a card processing terminal. The credit card 4 or the like receives the execution information and transmits it to the information processing apparatus 3.

If the reception unit 32 has received the performance information having the i-th credit card identifier, the process proceeds to step S206, and if not, the process returns to step S202.

(Step S206) The processing unit 33 uses the execution information received in step S202 to execute payment using the credit card 4 identified by the i-th credit card identifier. Although not shown, the processing unit 33 also increments the number of times of use included in the i-th card management information according to the execution of payment. Then, the process returns to step S202.

(Step S207) The prohibition processing unit 333 executes the prohibition processing regarding the credit card 4 identified by the i-th credit card identifier. Then, the process returns to step S201. As a result, payment by the credit card 4 identified by the i-th credit card identifier becomes impossible until a new permission instruction having the i-th credit card identifier is received.

(Step S208) The processing unit 33 determines whether or not the reception unit 32 has received the i-th credit card identifier and the number of times n or the like. If the reception unit 32 has received the number n or the like in pairs with the i-th credit card identifier, the process proceeds to step S209, and if not, the process returns to step S201.

(Step S209) The output unit 34 stores the usage restriction information including the number of times n and the like received in pair with the i-th credit card identifier in step S208 in the storage unit 31 in association with the i-th credit card identifier. .. As a result, for example, the default usage restriction information previously included in the i-th card management information is updated with new usage restriction information set by the user. Then, the process returns to step S201.

Hereinafter, a specific operation example of the card system 200 according to the present embodiment will be described. The following description is merely an example and can be changed as appropriate, and does not limit the present invention in any way.

The card system 200 of this example includes an information processing device 3 and two or more credit cards 4. The information processing device 3 is a server of a company or the like that operates the card system 200. One of the two or more credit cards 4 is an IC card, and the other one is a virtual card in a mobile terminal. In the following, the IC card type credit card 4 may be referred to as "card XX", and the virtual card type credit card 4 may be referred to as "card YY".

The card XX is the property of the user A, and can communicate with the terminal device 5 which is also the property of the user A by short-range wireless communication. This terminal device 5 may be referred to as "terminal aa". The card YY is the property of user B.

For example, two or more card management information as shown in FIG. 7 can be stored in the storage unit 31 of the information processing apparatus 3. FIG. 7 is a data structure diagram of card management information. The card management information includes a credit card identifier, a terminal device identifier, usage restriction information, and status information. The usage restriction information has a threshold value for the number of times n that can be used and the time. The status information has the number of uses, the number of remaining times, the elapsed time, and the remaining time.

Each of the two or more card management information stored in the storage unit 31 corresponds to an ID (for example, "1", "2", etc.). For example, the card management information corresponding to the ID "1" (hereinafter, may be referred to as card management information 1) includes a credit card identifier "XX", a terminal device identifier "aa", and usage restriction information "n = 1, threshold value". = Null ”, and status information“ Number of uses = 1, Remaining number of times = 0, Elapsed time = 1 minute, Remaining time = Null ”and the like. In addition, "Null" is information indicating that the element does not exist.

Similarly, the card management information (card management information 2) corresponding to the ID "2" includes the credit card identifier "YY", the terminal device identifier "Null", the usage restriction information "n = 2, threshold = 5 minutes", and It has status information such as "number of uses = 1, number of remaining times = 1, elapsed time = more than 5 minutes, remaining time = 0".

The usage restriction information possessed by each of the above two or more card management information can be changed by user setting, and the status information is automatically updated according to the execution of payment or the like.

Further, the storage unit 31 also stores, for example, correspondence information indicating the correspondence between the user identifier and the credit card identifier. The user identifier is information that identifies the user. The user identifier is, for example, an address / name, an e-mail address, an ID, or the like, but any information that can identify the user may be used. The correspondence information includes, for example, a pair of the user identifier "A" and the credit card identifier "XX", a pair of the user identifier "B" and the credit card identifier "YY", and the like.

In the information processing apparatus 3, the processing unit 33 repeats an operation of sequentially selecting two or more card management information stored in the storage unit 31 and performing processing using the selected card information.

It is assumed that the user A who has finished shopping at the store turns on the power of the terminal aa in order to make a payment with the card XX. In response to this, the display of the terminal aa displays, for example, an initial screen as shown in FIG.

At this point, the status information possessed by the card management information 1 corresponding to the card XX is "number of uses = 0, remaining number of times = 1, elapsed time = 0 minutes, remaining time = Null" corresponding to the initial state. .. When the user A operates the permission instruction button, the terminal aa accepts the usage permission, receives the credit card identifier "XX" from the card XX, and transmits the usage permission having the credit card identifier "XX" to the information processing device 3. do.

In the information processing apparatus 3, the reception unit 32 receives the usage permission, and the processing unit 33 determines that the permission instruction having the credit card identifier "XX" included in the card management information 1 has been received. The acquisition unit 331 starts acquiring status information regarding the card XX identified by the credit card identifier "XX". The status information is acquired periodically, for example, at intervals of 1 minute, 10 seconds, etc., but may be acquired irregularly. Specifically, among the status information, the number of times of use or the number of remaining times may be acquired only when the settlement is executed.

The processing unit 33 updates the status information possessed by the card management information 1 by using the acquired status information. The output unit 34 transmits the acquired status information to the terminal aa. At the terminal aa, the above situation information is received and output via an output device such as a display. As a result, the user A knows the number of times the card XX has been used after the above permission instruction, or the remaining number of times until the use is prohibited.

The determination unit 332 uses the card management information 1 to determine whether or not the usage restriction information is satisfied. At this point, since the card XX is unused, it is determined that the usage restriction information is satisfied, and the processing unit 33 can execute the payment only once.

While the card XX is not in use, for example, instead of "pressing the permission instruction button, the credit card can be used only once" on the initial screen of FIG. 3, "credit card can be used once". The screen that has "Currently used 0 times" and the permission instruction button and limit change button are grayed out is displayed on the display of the terminal aa.

After that, the user A hands the card XX to the clerk. The clerk attaches the card XX to the credit card processing terminal and inputs the price information and the execution instruction. User A may input information such as a personal identification number into the credit card processing terminal, if necessary. The credit card processing terminal reads the credit card information including the credit card identifier "XX" from the card XX. Then, the credit card processing terminal transmits the read credit card information, the execution information including the input price information, and the like to the information processing apparatus 3.

In the information processing apparatus 3, the reception unit 32 receives the execution information, and the processing unit 33 determines that the execution information having the credit card identifier "XX" has been received. The processing unit 33 uses the received execution information to execute payment using the card XX identified by the credit card identifier "XX". Further, the processing unit 33 increments the number of times of use included in the card management information 1 from "0" to "1" according to the execution of payment.

It is assumed that the execution of the payment using the card management information 1 is completed within 1 minute from the permission instruction. When 1 minute has passed from the permission instruction, the status information of the card management information 1 is as shown in FIG. 7, "Number of uses = 0, remaining number of times = 1, elapsed time = 0 minutes, remaining time = Null. ". The determination unit 332 determines whether or not the usage restriction information is satisfied by using the card management information 1. In this case, since the number of times the card XX has been used has already reached the number of times it can be used n = 1, it is determined that the usage restriction information is not satisfied.

Therefore, the processing unit 33 cannot execute the payment until a new permission instruction is received, and the payment by the card XX becomes impossible. As a result, it is possible to reduce the risk that payment will be executed more than once for one execution information.

The process using the card management information 2 is, for example, as follows. This process corresponds to the process after changing the usage restriction information in the specific example of the first embodiment. However, since the card XX in the specific example of the previous embodiment is an IC card, the card YY corresponding to the card management information 2 is a virtual card, so this process is the same as the process in the specific example of the previous embodiment. Is partially different.

User B operates the permission instruction button of the mobile terminal that realizes the card YY in order to make a purchase at the first store and make a payment with the card YY. The mobile terminal transmits a license having the credit card identifier "YY" to the information processing apparatus 3.

In the information processing apparatus 3, the reception unit 32 receives the usage permission, and the acquisition unit 331 starts acquiring the status information regarding the card YY. The determination unit 332 uses the card management information 2 to determine whether or not the usage restriction information is satisfied. At this point, the card YY is unused and the elapsed time does not reach the threshold value "5 minutes". Therefore, it is determined that the usage restriction information is satisfied, and the processing unit 33 can execute the payment up to twice.

User B inputs price information and execution instructions to the mobile terminal. The mobile terminal transmits the credit card information of the card YY and the execution information including the input price information to the information processing apparatus 3.

In the information processing apparatus 3, the reception unit 32 receives the execution information, and the processing unit 33 executes the payment by the card YY using the execution information. The number of uses included in the card management information 2 is incremented from "0" to "1".

After that, it is assumed that the user B makes a purchase at the second store but does not use the card YY for payment. When 5 minutes have passed from the permission instruction, the status information of the card management information 2 becomes "number of uses = 1, number of remaining times = 1, elapsed time = more than 5 minutes, remaining time = 0". The determination unit 332 determines whether or not the usage restriction information is satisfied by using the card management information 2. In this case, since the elapsed time has already exceeded the threshold value "5 minutes", it is determined that the usage restriction information is not satisfied.

Therefore, the processing unit 33 cannot execute the settlement until a new permission instruction is received, and the settlement by the card YY becomes impossible. As a result, it is possible to reduce the risk that the payment by the card YY is illegally executed due to the loss of the mobile terminal that realizes the card YY or the like.

As described above, according to the present embodiment, the credit card 4 is credited because there is a usage restriction that the credit card 4 can be used only up to n (n is a natural number of 1 or more) after the permission instruction for permitting the use is received. The risk of repeated unauthorized use of the card 4 can be reduced.

Further, in the above credit card 4, the usage restriction can be used only up to n (n is a natural number of 1 or more) after the permission instruction for permitting the use is received, and the threshold value is received after the permission instruction is received. The risk of repeated fraudulent use of the credit card 4 can be further reduced by limiting the use only to the time within or below the threshold.

Further, in the information processing apparatus 3, the storage unit 31 for storing the usage restriction information for specifying the usage restriction, the reception unit 32 for receiving the permission instruction having the card identifier for identifying the credit card 4, and the reception unit 32 give the permission instruction. If the judgment unit 332 that determines whether or not the usage restriction information is satisfied and the determination unit 332 determines that the usage restriction information is not satisfied, the use of the credit card 4 identified by the card identifier is prohibited. By providing the prohibition processing unit 333 to determine whether or not the information processing apparatus 3 satisfies the usage restriction information, the risk of the credit card 4 being repeatedly used illegally can be reduced.

Further, in the information processing apparatus 3, the reception unit 32 receives a permission instruction from the terminal apparatus 5. Therefore, since the information processing device 3 does not enable the credit card 4 unless it receives a permission instruction from the terminal device 5, the risk of unauthorized use of the credit card 4 can be further reduced.

Further, in the information processing apparatus 3, the reception unit 32 also receives the execution information regarding the execution of the settlement, and the acquisition unit acquires the status information regarding the situation from the reception unit 32 receiving the permission instruction to the reception of the execution information. By further providing the 331 and the output unit 34 for outputting the status information, the user can know the status after receiving the permission instruction, so that the execution information can be accurately input.

Further, in the information processing apparatus 3, the reception unit 32 further receives an output unit 34 that receives the usage limit number n and stores the usage restriction information having the usage limit number n received by the reception unit 32 in the storage unit 31. By providing it, the user can set the number of times of use restriction n.

Further, the processing in the present embodiment may be realized by software. Then, this software may be distributed by software download or the like. Further, this software may be recorded on a recording medium such as a CD-ROM and disseminated. It should be noted that this also applies to other embodiments herein. The software that realizes the information processing device 3 in this embodiment is the following program.

That is, this program is a program for limiting the credit card 4 so that it can be used only up to n (n is a natural number of 1 or more) after the permission instruction for permitting the use is received.

More specifically, the recording medium accessible to the computer of the information processing apparatus 3 includes a storage unit 31 in which the usage restriction information for specifying the usage restriction is stored, and this program uses the computer as a credit card. A reception unit 32 that accepts a permission instruction having a card identifier that identifies 4, a determination unit 332 that determines whether or not the usage restriction information is satisfied after the reception unit 32 receives the permission instruction, and the determination unit 332. Is a program for functioning as a prohibition processing unit 333 for prohibiting the use of the credit card 4 identified by the card identifier when it is determined that the usage restriction information is not satisfied.

Further, FIG. 8 is a diagram showing an example of an internal configuration of a computer system 900 that realizes a credit card 1, a terminal device 2, and the like by executing a program in each of the above embodiments. In FIG. 8, the computer system 900 is connected to the MPU 911, which is a computer for executing the program, the ROM 912 for storing the program such as the boot-up program, and the MPU 911, and temporarily stores the instructions of the application program. Provides a RAM 913 that provides a temporary storage space, a storage 914 that stores application programs, system programs, and data, a bus 915 that interconnects the MPU 911, ROM 912, etc., and a connection to a network such as an external network or an internal network. A network card 916, a memory card slot 917, a display 918, and a touch panel 919 provided on the display surface of the display 918 are provided. The storage 914 is, for example, a flash memory or the like. The entire computer system 900 may be referred to as a computer.

A program that causes the computer system 900 to execute a function such as a credit card 1 may be stored in the memory card 920, inserted into the memory card slot 917, and transferred to the storage 914, for example. Alternatively, the program may be transmitted over the network to the computer system 900 and stored in storage 914. The program is loaded into RAM 913 at run time. The program may be loaded directly from the memory card 920 or the network.

The program does not necessarily have to include an operating system (OS), a third-party program, or the like that causes the computer system 900 to execute a function such as a credit card 1. The program may contain only a portion of instructions that call appropriate functions or modules in a controlled manner to achieve the desired result. It is well known how the computer system 900 works, and detailed description thereof will be omitted.

The computer system 900 described above is a mobile terminal such as a smartphone, but the information processing device 3 may be realized by, for example, a server or a stationary PC. In this case, for example, the touch panel 919 may be replaced with a keyboard and mouse, the memory card slot 917 may be replaced with a disk drive, the storage 914 may be replaced with a hard disk or SSD, and the memory card 920 may be replaced with a disk such as a CD or DVD. Further, the credit card 1 and the like may be realized by an IC card or an IC chip, and in that case, the storage 914, the memory card slot 917, the display 918, and the touch panel 919 may be omitted from the above configuration. However, the above is an example, and the hardware configuration of the computer that realizes the credit card 1 or the like is not limited.

In the above program, in the transmission step for transmitting information and the reception step for receiving information, processing performed by hardware, for example, processing performed by a modem or interface card in the transmission step (only performed by hardware). Processing that is not done) is not included.

Further, the number of computers that execute the above program may be singular or plural. That is, centralized processing may be performed, or distributed processing may be performed.

Further, in each of the above embodiments, it goes without saying that the two or more communication means (terminal transmitting unit 23, terminal receiving unit 25, etc.) existing in one device may be physically realized by one medium. ..

Further, in each of the above embodiments, each process (each function) may be realized by centralized processing by a single device (system), or may be realized by distributed processing by a plurality of devices. May be done.

It goes without saying that the present invention is not limited to the above embodiments, and various modifications can be made, and these are also included in the scope of the present invention.

As described above, the credit card or the like according to the present invention has the effect of reducing the risk of repeated unauthorized use of the credit card by limiting the number of times of use after receiving the permission instruction, and is useful as the credit card or the like. Is.

1, 4 Credit card 2, 5 Terminal device 3 Information processing device 11, 31 Storage unit 12, 32 Reception unit 13, 33 Processing unit 14, 34 Output unit 21 Terminal storage unit 22 Terminal reception unit 23 Terminal transmission unit 24 Terminal processing unit 25 Terminal receiver 26 Terminal output 100, 200 Card system 131, 331 Acquisition unit 132, 332 Judgment unit 133, 333 Prohibition processing unit

Claims (10)

A storage unit that stores usage restriction information that specifies usage restrictions that can only be used up to n (n is a natural number of 1 or more) after receiving a permission instruction to permit use.
The reception unit that receives the permission instruction from the terminal device,
After the reception unit receives the permission instruction, the determination unit determines whether or not the usage restriction information satisfies the usage restriction specified.
A credit card including a prohibition processing unit that performs processing for prohibiting the use of the credit card when the determination unit determines that the usage restriction is not satisfied. An acquisition unit that acquires status information, which is the number of times the credit card has been used or the number of times the credit card can be used, which is the remaining number of times n.
The credit card according to claim 1, further comprising an output unit for transmitting the status information to the terminal device. The reception department
Accepting the number of times n of the usage limit,
The credit card according to claim 1 or 2, further comprising an output unit that stores usage restriction information having the number of times of usage restriction n received by the reception unit in the storage unit. The number of usage restrictions specified by the usage restriction information is one.
The reception department
The credit card according to any one of claims 1 to 3, wherein the permission instruction is received from the terminal device to which the permission instruction button is instructed by the user. The reception department
The credit card according to any one of claims 1 to 4, wherein the permission instruction is received from the terminal device by short-range wireless communication. The terminal reception section that accepts permission instructions and
A terminal transmitter for transmitting the permission instruction to the credit card according to claim 2.
A terminal receiver that receives status information from the credit card,
A terminal device including a terminal output unit that outputs the status information. A storage unit, a reception unit, a judgment unit, and a storage unit that stores usage restriction information that specifies a usage restriction that can be used only n (n is a natural number of 1 or more) after receiving a permission instruction for permitting use. It is a usage restriction method realized by the prohibition processing unit.
The reception step in which the reception unit receives the permission instruction from the terminal device, and
A determination step in which the determination unit determines whether or not the usage restriction information satisfies the usage restriction specified after the permission instruction is received in the reception step.
A usage restriction method including a prohibition processing step for prohibiting the use of a credit card when the prohibition processing unit determines that the usage restriction is not satisfied in the determination step. It is an information processing method realized by a terminal reception unit, a terminal transmission unit, a terminal reception unit, and a terminal output unit.
The terminal reception step in which the terminal reception unit receives a permission instruction, and
A terminal transmission step in which the terminal transmission unit transmits the permission instruction to the credit card according to claim 2.
A terminal receiving step in which the terminal receiving unit receives status information from the credit card,
An information processing method in which the terminal output unit includes a terminal output step for outputting the status information. In a legit card that can access a storage unit that stores usage restriction information that identifies usage restrictions that can only be used up to n (n is a natural number of 1 or more) after receiving a permission instruction to permit use . A program to make a computer work
The reception unit that receives the permission instruction from the terminal device,
After the reception unit receives the permission instruction, the determination unit determines whether or not the usage restriction information satisfies the usage restriction specified.
A program for operating the computer as a prohibition processing unit that performs processing for prohibiting the use of a credit card when the determination unit determines that the usage restriction is not satisfied. Computer,
The terminal reception section that accepts permission instructions and
A terminal transmitter for transmitting the permission instruction to the credit card according to claim 2.
A terminal receiver that receives status information from the credit card,
A program for functioning as a terminal output unit that outputs the status information.

Images