WO2015083278A1 - Management device, management method, and program - Google Patents

Management device, management method, and program Download PDF

Info

Publication number
WO2015083278A1
WO2015083278A1 PCT/JP2013/082770 JP2013082770W WO2015083278A1 WO 2015083278 A1 WO2015083278 A1 WO 2015083278A1 JP 2013082770 W JP2013082770 W JP 2013082770W WO 2015083278 A1 WO2015083278 A1 WO 2015083278A1
Authority
WO
WIPO (PCT)
Prior art keywords
value
recipient
identification information
portable device
fishing
Prior art date
Application number
PCT/JP2013/082770
Other languages
French (fr)
Japanese (ja)
Inventor
亘 鈴掛
Original Assignee
楽天株式会社
楽天Ｅｄｙ株式会社
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 楽天株式会社, 楽天Ｅｄｙ株式会社 filed Critical 楽天株式会社
Priority to JP2015551351A priority Critical patent/JP6304568B2/en
Priority to PCT/JP2013/082770 priority patent/WO2015083278A1/en
Publication of WO2015083278A1 publication Critical patent/WO2015083278A1/en

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/36—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes
    • G06Q20/367—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes involving electronic purses or money safes
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/08—Payment architectures
    • G06Q20/18—Payment architectures involving self-service terminals [SST], vending machines, kiosks or multimedia terminals
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/22—Payment schemes or models
    • G06Q20/24—Credit schemes, i.e. "pay after"
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/22—Payment schemes or models
    • G06Q20/28—Pre-payment schemes, e.g. "pay before"
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/32—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
    • G06Q20/322—Aspects of commerce using mobile devices [M-devices]
    • G06Q20/3227—Aspects of commerce using mobile devices [M-devices] using secure elements embedded in M-devices
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/32—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using wireless devices
    • G06Q20/327—Short range or proximity payments by means of M-devices
    • G06Q20/3278—RFID or NFC payments by means of M-devices
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/401—Transaction verification
    • G06Q20/4012—Verifying personal identification numbers [PIN]
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/401—Transaction verification
    • G06Q20/4014—Identity check for transactions
    • G06Q20/40145—Biometric identity checks
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07F—COIN-FREED OR LIKE APPARATUS
    • G07F13/00—Coin-freed apparatus for controlling dispensing or fluids, semiliquids or granular material from reservoirs
    • G07F13/02—Coin-freed apparatus for controlling dispensing or fluids, semiliquids or granular material from reservoirs by volume
    • G07F13/025—Coin-freed apparatus for controlling dispensing or fluids, semiliquids or granular material from reservoirs by volume wherein the volume is determined during delivery

Definitions

  • the present invention relates to a management apparatus and management method for managing transactions using electronic money, and a program for realizing these by a computer.
  • Patent Document 1 discloses a technique of an electronic money server for paying a regular fee with electronic money.
  • Patent Document 2 discloses a method (paragraph 0004) in which charging is performed with electronic money whenever one copy is completed. If this method is simply provided for the above transaction, it is necessary to leave the portable device on the reader / writer from the start to the end of the transaction.
  • Patent Document 2 the payment of deposits is made from the electronic money settlement medium before the copy is started, and after the copy is completed, the change is refunded according to the number of copies actually made.
  • a technique (summary) for writing on a medium is also disclosed. With this technology, the remaining amount is refunded only when the payment medium used for charging with electronic money every time the transaction ends and the payment medium used for receiving the remaining amount (fishing) match. Yes. That is, in this technique, the identity of the recipient who receives the transaction object is determined only by the identity of the settlement medium.
  • the present invention is intended to solve the above-described problem, and provides a corresponding value corresponding to a deposit value or less by subtracting the remaining value associated with the portable device by the deposit value corresponding to the deposit at the start of the transaction.
  • Management device, management method, and program for realizing these by a computer which are suitable for managing a transaction that provides a transaction object by the amount and increases the remaining value by the fishing value corresponding to change at the end of the transaction The purpose is to provide.
  • the management device Record the first identification information that identifies the recipient to receive the offer of the transaction object, Prior to the provision of the transaction target, accept the designation of custody value from the recipient, Decrease the first remaining value associated with the first portable device used by the recipient by the custody value, When the decrease is made, the transaction target is controlled to provide only the provision amount corresponding to the consideration value below the custody value, Obtain second identification information that identifies the recipient who will receive the fishing value obtained by subtracting the consideration value from the custody value, Based on the first identification information and the second identification information, it is determined whether or not the receiver should receive the fishing value.
  • 6 is a display example of a screen for requesting input of a personal identification number as first identification information. It is a display example of a screen for guiding a recipient to insert a nozzle into a fuel filler port and pull a lever to start fueling. It is a display example of a screen for notifying a recipient of a provision status of a transaction target. It is a display example of a screen for notifying a recipient that it has been detected that the next provision of a transaction target cannot be performed.
  • the value in the electronic money system has a value similar to cash.
  • the value may be managed in the same currency unit so that it can be exchanged with cash or from one side to the other, or it may be converted at the time of exchange using an original unit. It is also possible to use various points given in accordance with user actions (purchasing products, answering questionnaires, visiting stores, etc.) as values.
  • Stored value system supports values (also referred to as “balance”) that users can pay for in transactions for various portable devices such as cards, mobile phones, and smartphones that incorporate electronic circuits. Manage it.
  • a stored value type system it is common to store a numerical value of a usable value in an electronic circuit of a portable device. This aspect corresponds to a state where cash is in the wallet.
  • the value associated with the portable device will be referred to as “remaining value” in comparison with “cash remaining in the wallet”.
  • a product or service provider accepts payment for a user by using a reader / writer that can communicate with a portable device.
  • a reader / writer that can communicate with a portable device.
  • communication between the portable device and the reader / writer becomes possible.
  • various commands are sent from the reader / writer to the portable device, the execution result of the command is available. Sent from the portable device to the reader / writer.
  • the remaining value associated with the portable device is decreased by the value specified in the command. This corresponds to taking out cash from the wallet.
  • the decrease command is used when paying a consideration, that is, “billing” in a transaction for receiving provision of goods or services.
  • the value specified in the decrease command is referred to as a “price value”.
  • the heel increase command increases the remaining value associated with the portable device by the value specified in the command. This corresponds to putting cash in the wallet.
  • the increase command is used, for example, when a user charges a portable device with a value corresponding to the cash instead of paying cash to the clerk at the store.
  • an application that operates in the portable device responds to a command sent via the computer communication network. It is also possible to acquire or increase / decrease the residual value associated with the portable device. In this case, it is possible to pay the price and charge the remaining value without using the reader / writer.
  • That the value is increased or decreased by a decrease command or an increase command means that the value has moved between the recipient and the provider.
  • the provider transmits this value transfer information to the electronic money management server.
  • the electronic money management server is operated by a provider (operator) of the entire electronic money service. If the payment information stored in the electronic money management server is added up, the total amount of value that the provider has gained or lost within that period can be obtained.
  • the provider If the provider has acquired value, he can exchange it for cash etc. from the operator. On the other hand, if the value is lost, the provider is responsible for paying the operator cash or the like for the value.
  • the transaction object is provided using the value of the electronic money as a consideration. Then, the total provision amount of the transaction target provided from the start to the end of the transaction is determined at the end of the transaction. Therefore, the total provision amount is not fixed until the transaction is completed. In this embodiment, pay-per-use billing is assumed. Accordingly, the total provided amount of the transaction target and the total consideration value to be paid as the consideration for the total provided amount are determined only when the provision of the transaction target is completed.
  • the deposit value corresponding to the deposit is paid from the portable device before the start of the provision of the transaction object, and the fishing corresponding to the change after the provision is completed. Returns the value (change value). For this reason, the recipient receives a portable device twice from the reader / writer before the start of provision and after the end of provision. Total consideration value is the difference between custody value and fishing value.
  • NFC near field communication
  • Bluetooth Bluetooth (Registered trademark)
  • powders (wheat flour, rice bran, powdered detergent, etc.) and granular materials that are provided at a substantially constant supply speed from a faucet or a supply port and sold by weighing
  • products such as (salt, sugar, beads, etc.), liquid (gasoline, mineral water, milk, juice, liquor, etc.) and gel sol.
  • services that are charged for time in seconds or minutes such as network cafes, Internet connection providers, and electric vehicle rentals
  • services that perform some processing based on the materials brought in by the service recipient auto seat feeder
  • Services such as photocopying services, photo prints of all images in the USB memory, and brown rice that has been brought in
  • the management apparatus controls payment of deposit value, charge of fishing value, and provision of transaction objects in the transaction.
  • the payment of the deposit value and the charge of the fishing value are controlled by the management device communicating with the portable device associated with the remaining value of the electronic money.
  • the management device controls the providing device and the providing unit that provide the transaction object itself, but the management device and the providing device / providing unit may be configured as independent devices or integrated as a whole. You may comprise as an apparatus.
  • the management apparatus of this embodiment can be configured by a dedicated electronic circuit, or can be realized by causing a computer to execute a program.
  • a technology such as FPGA (Field Programmable Gate Array) that compiles a program into an electronic circuit design script and dynamically configures the electronic circuit based on the design script.
  • FIG. 1 is an explanatory diagram showing an overview of a management apparatus according to an embodiment of the present invention.
  • FIG. 2 is an explanatory diagram showing an outline of a transaction system including a management device according to an embodiment of the present invention.
  • the management device 101 includes a recording unit 102, a receiving unit 103, a reduction unit 104, a control unit 105, an acquisition unit 106, and a determination unit 107. Furthermore, the management apparatus 101 can include an increase unit 108 as an optional element.
  • the recording unit 102 records first identification information for identifying a recipient who is to receive the transaction target.
  • the first identification information recorded by the recording unit 102 identifies the recipient himself / herself and the article or the like for which the recipient is provided for the transaction. For example, biometric information of the recipient, a personal identification number (PIN) specified by the recipient, a password, and the like are recorded as the first identification information.
  • PIN personal identification number
  • Various aspects of the first identification information will be described later.
  • the portable device 201 used for billing of the custody value is referred to as a first portable device 201a
  • the portable device 201 used for returning the fishing value is referred to as the second portable device 201a.
  • This is called a portable device 201b.
  • the first portable device 201a and the second portable device 201b are the same portable device 201, but in the present embodiment, they may be different portable devices 201. Is possible.
  • the identification code (individual identification number, serial number, account ID, etc.) of the portable device 201 itself that the provider intends to use for charging electronic money deposit information is information for identifying the provider. Not used as.
  • the accepting unit 103 accepts designation of the custody value from the recipient prior to providing the transaction target, and the reducing unit 104 is the first remaining device associated with the first portable device 201a used by the recipient. Decrease the value by keeping the value.
  • a transaction is assumed in which the total provided amount is not fixed until the transaction is completed. Therefore, the recipient specifies an upper limit amount that he / she can pay in the transaction to the receiving unit 103.
  • control unit 105 performs control to provide the transaction target by the provision amount corresponding to the consideration value equal to or lower than the deposit value. Therefore, the control unit 105 may perform the process of providing the transaction object by itself, or provide a value corresponding to the custody value, which is the upper limit of the transaction, on a separately provided providing device or the like.
  • the upper limit value of the amount may be transmitted to instruct the providing device or the like to make a transaction up to the upper limit.
  • the consideration value is a consideration value with respect to the total provision amount actually provided to the recipient.
  • the acquisition unit 106 acquires second identification information for identifying a recipient who intends to receive a fishing value obtained by subtracting the consideration value from the custody value.
  • the type of the second identification information acquired here is the same type of information as the first identification information described above. However, it is not always necessary to acquire all of the information, and as described later, the first identification information depends on the situation. Information of a type less than information may be acquired as the second identification information.
  • the determination unit 107 determines whether or not the receiver should receive the fishing value based on the first identification information and the second identification information. If the first identification information and the second identification information match, the fishing value is passed to the person who should receive the fishing value. However, if there is no match, no fishing value is passed. If the two do not match, the recipient who is trying to receive the fishing value is different from the recipient who received the fishing value, and does not have a legitimate right to receive the fishing value. Because it is.
  • the optional increase unit 108 increases the second remaining value associated with the second portable device 201b used by the recipient who is determined to receive the fishing value by the fishing value.
  • the fishing value is charged to the second portable device 201b used by the recipient.
  • the identification number as the “electronic money wallet” of the portable device 201 is acquired by the reader / writer.
  • the identification number as the “electronic money wallet” is used for authentication of the identity of the recipient.
  • the identification number of the portable device 201 alone is insufficient to ensure the identity of the recipient.
  • the identity of the recipient is not authenticated only by the identification information of the portable device 201 itself.
  • the first portable device 201a used when collecting the custody value and the second portable device 201b used when charging the fishing value may be the same device or different devices.
  • the recording unit 102 acquires the identification information of the recipient by using a keyboard, a button, a touch screen, a voice recognition input device, or the like when the identification information is input to the recipient.
  • recording is performed by acquiring the identification information of the recipient using a camera or various sensors and storing the acquired identification information in a storage device such as a hard disk.
  • the accepting unit 103 is realized by a keyboard, a button, a touch screen, a voice recognition input device, or the like for allowing the recipient to specify the value of the stored value.
  • the haze reduction unit 104 and the increase unit 108 are realized by transmitting a decrease command or an increase command from the reader / writer for the electronic money system to the first portable device 201a or the second portable device 201b.
  • the command execution result can be acquired from the content of the response transmitted from the portable device 201 to the reader / writer.
  • NFC or the like can be employed for communication for transmitting and receiving these pieces of information.
  • the control unit 105 and the determination unit 107 control the entire management apparatus 101, and when a computer CPU (Central Processing Unit) executes a predetermined program, or when a control electronic circuit operates, Realized.
  • a computer CPU Central Processing Unit
  • FIG. 3 is a flowchart showing a control flow of management processing executed by the management apparatus according to the embodiment of the present invention.
  • FIG. 3 a description will be given with reference to FIG.
  • the accepting unit 103 accepts designation of custody value from the recipient (step S301).
  • the specified value of the deposit may be input as an explicit number. For example, if “full tank” is specified for gasoline refueling, the deposit value will be 10,000 yen. A numerical value may be specified.
  • the recording unit 102 records the first identification information of the recipient to be provided with the transaction object (step S302).
  • the first identification information may be acquired before execution of reception (step S301) or may be acquired after execution.
  • the decrease unit 104 decreases the first remaining value associated with the first portable device 201a used by the recipient by the designated deposit value (step S303).
  • the recipient receives the first portable device 201a close to the reader / writer for the electronic money system and communication between the two is established, and then the decrease command is sent from the reader / writer to the first portable device. By transmitting to 201a, the first remaining value is reduced.
  • the reader / writer Before sending the decrease command, the reader / writer sends an inquiry command to obtain the first remaining value, and if the obtained first remaining value is less than the deposit value, obtain the deposit value.
  • the updated first remaining value may be updated.
  • the first remaining value of the first portable device 201a is charged in full, it is exchanged for another portable device 201 in order to compensate for the difference between the deposit value designated by the user and the charged value. It may be requested from the recipient. In this aspect, the recipient continues to exchange the portable device 201 until the full deposit value is charged.
  • control unit 105 When charging for the custody value is performed in step S303, the control unit 105 performs control for providing the transaction target with the custody value as the upper limit amount, that is, with the provision amount corresponding to the custody value as the upper limit amount. (Step S304). As described above, the control unit 105 may provide the transaction target itself, or the control unit 105 may instruct the provision to a specified upper limit for a separately provided providing device. good.
  • step S305 it waits until the provision of the transaction object is completed (step S305).
  • control that is performed in parallel with the standby processing in step S305 and that exits step S305 when the provision is completed may be adopted. It is also possible to adopt a control that repeatedly checks whether or not the provision of the service has been completed.
  • the control unit 105 acquires a consideration value corresponding to the total provided amount of the transaction object provided (step S306).
  • the consideration value should be less than or equal to the custody value.
  • the fishing value is calculated by subtracting the consideration value from the deposit value (step S307).
  • step S308 the management apparatus 101 ends this process to end the transaction.
  • the receipt value and receipt indicating that the deposit value is equal to the consideration value the fishing value is 0 yen, and the total provided amount of the transaction object provided is the recipient It is desirable to pass to.
  • step S308 the acquiring unit 106 acquires the second identification information of the recipient who intends to receive the fishing value (step S309).
  • the type of the second identification information acquired may be a part or all of the type of the first identification information. Further, it may be changed depending on the difference between the first situation where the deposit value is charged and the second situation where the fishing value is received. For example, when time is adopted as the first situation and the second situation, if both are close, only the biometric information of the recipient's face photo is used as the second identification information, but a long time has passed In addition to the biometric information of the recipient's face photo as the second identification information, a mode in which the recipient inputs a personal identification number may be adopted.
  • the determination unit 107 determines whether or not the recorded first identification information matches the acquired second identification information (step S310).
  • a perfect match may be adopted as a match, or a partial match may be adopted.
  • the match tolerance may be changed based on the difference between the first situation and the second situation.
  • Step S310 When it is determined that they match (Step S310; Yes), the increase unit 108 increases the second remaining value associated with the second portable device 201b used by the recipient by the fishing value (Step S310). S311), the process is terminated. In this case, as described above, it is desirable to issue a receipt or receipt describing the deposit value, the total provision amount and the consideration value of the transaction object, and the fishing value and give it to the recipient.
  • the first portable device 201a is used as the second portable device 201b. Is used as is.
  • another portable device 201 can be used as the second portable device 201b.
  • Step S310 if it is determined that they do not match (Step S310; No), for example, a message is sent to the recipient to consult with a manned counter at the store, or a notification that there is a possibility of unauthorized use of electronic money is provided. A warning that the recipient and the recipient do not match is issued (step S312), and the processing ends without charging the fishing value. At this time, it is also possible to hand over to the recipient a description or the like on which the reason why the fishing value was not returned and instruction information for receiving the return is posted. In this case, the official receipt or receipt is issued after the clerk confirms that the recipient matches the recipient at the manned counter, and the clerk manually returns the fishing value.
  • step S309 Information may be reacquired and determination may be retried.
  • a personal identification number is not entered, or if the second portable device 201b is not installed in the communicable range and a certain period of time has elapsed, it is determined that the fishing value is forgotten and self-refueling is performed. It is assumed that the fishing value cannot be returned by the machine 501 after that, and is handled by refunding with a manned counter. A mode for returning the fishing value forgotten to be received by the self-fueling machine 501 will be described later.
  • the identification information that can be used as the first identification information and the second identification information is the simplest example.
  • the characteristics of the recipient's face photograph and the recipient's face photograph match to some extent, it is considered that both match.
  • Articles related to the provision of a transaction object photographed by a camera can also be used for identification information.
  • the first identification information is the car photo and the color, number, model, etc. of the car recognized from this picture. Then, it is possible to select the vehicle supplied by the recipient (provided person) from among them, or input the number, the vehicle type, etc., as the second identification information.
  • a personal identification number, a password, a signature, a character string, etc. can be used as identification information, or a plurality of images can be arranged as candidates to select one of them, and the selection result can be used as identification information.
  • the personal identification number entered by the recipient is used as the first identification information, and the recipient is prompted to enter the personal identification number as the second identification information.
  • the user is notified in advance that the fishing value can be returned, so that forgetting to receive the fishing value can be suppressed. Can do.
  • the management apparatus 101 may randomly determine a personal identification number and the like, present it to the recipient, store it, and input the stored personal identification number when receiving it.
  • the first identification information is used, and the second identification information is what was answered to the questionnaire. , Can be adopted. Also, as the second identification information, a plurality of questionnaire questions may be listed and the recipient may select which question the recipient has answered.
  • the date and time when the transaction was performed, the amount of the custody value and the portable device 201 on which the transaction was collected, and the obtained first identification information are non-volatile such as a hard disk or network storage. Recorded in the storage device.
  • the total provision amount of the transaction object provided and the amount of the consideration value are similarly recorded, and after the return of the fishing value, the second identification information, the amount of the fishing value and this are charged.
  • the portable device 201 thus recorded is recorded in the same manner. In addition to accounting records, these pieces of information are used in processing when the recipient forgets to charge the fishing value or forgets to place the portable device 201, as will be described later.
  • This example corresponds to a preferred embodiment of the above example, and the present invention is applied to a self-fueling machine at a gas station.
  • the present invention is applied to a self-fueling machine at a gas station.
  • FIG. 4 is an explanatory view showing the appearance of the self-fueling machine according to the embodiment of the present invention.
  • the self-fueling machine 501 includes an operation panel 502 for exchanging various information with the recipient, a reader / writer 503 for deceiving the portable device 201 used by the recipient for payment of compensation, cash It has a slot 504, a card slot 505, a printer 506, a nozzle 507 for supplying gasoline and the like, and a camera 508.
  • the recipient obtains information by viewing various messages displayed on the touch screen, display, and various lamps prepared on the operation panel 502, and touches the surface, buttons, and various keys on the touch screen. Various instruction operations are performed. In addition, information may be exchanged by voice by preparing a speaker and a microphone.
  • the cash slot 504 is used to insert bills in advance when cash is used for payment.
  • the card slot 505 uses a credit card, debit card, or prepaid card for payment. In order to insert these cards.
  • the reader / writer 503 is for the recipient to enter the portable device 201 to communicate when using electronic money for payment.
  • the surface of the reader / writer 503 is substantially vertical along the front surface 552 of the self-fueling machine 501, or the surface of the reader / writer 503 is along the recess provided in the self-fueling machine 501. If the recipient is inclined, he / she charges the portable device 201 with the reader / writer 503 to charge the stored value, and stores the portable device 201 in a pocket or bag to return the fishing value. At this time, the portable device 201 is put in the reader / writer 503 again.
  • the surface of the reader / writer 503 is horizontal or various holders can be used so that the portable device 201 does not fall or leave the reader / writer 503 and leave the communicable range, It is also possible to leave the portable device 201 from the start to the end of the transaction based on the will of the user.
  • the card insertion slot 505 requires a mechanism for taking out / inserting cards.
  • the portable device 201 when using electronic money, settlement is possible if the portable device 201 is placed on the surface of the reader / writer 503 and is within the communicable range. Therefore, the portable device 201 can be held by using a simple and inexpensive structure such as a holder.
  • Printer 506 prints a receipt or receipt after the transaction is completed.
  • Camera 508 detects the visit of the recipient. Thereby, the self-fueling machine 501 can be shifted from the power saving mode to the normal mode. In addition, for crime prevention, it is possible to photograph the appearance of the recipient and the appearance of the automobile that is the target of refueling.
  • nozzles 507 are prepared according to the type of oil, but the number can be appropriately changed according to the number of types of gasoline to be sold. While the condition of full refueling is satisfied, gasoline or the like flows out at the maximum flow rate while pulling the lever of the nozzle 507 strongly.
  • Self refueling machine 501 is a cash dispenser (not shown) for cash change, a store register (not shown) in the store reserved by the store clerk, self-refueling via a LAN (Local Area Network) in the store. It is connected to an external storage device 203 or the like for recording a sales log traded through the machine 501.
  • Each part of the self-fueling machine 501 is controlled by a CPU (not shown) executing a predetermined program or by a dedicated electronic circuit.
  • FIG. 5 is a display example of a screen for allowing the recipient to select a payment method.
  • payment method buttons 601a to 601d for paying with each of cash, credit card, debit card, and electronic money are displayed on the touch screen of the operation panel 502, and in the message display field 605, A message to the recipient is displayed to select one of the payment methods.
  • the conventional transaction procedure is executed.
  • the payment method button 601d is touched, the transaction procedure of this embodiment is started.
  • FIG. 6 is a display example of a screen for allowing the recipient to select transaction conditions.
  • oil type check boxes 611a-611c for selecting an oil type from regular, high-octane, and light oil are displayed on the touch screen of the operation panel 502.
  • upper limit amount buttons 612a-612e for selecting 10 liters, 20 liters, 30 liters, 40 liters, and full tanks as the refueling amount are displayed on the touch screen of the operation panel 502.
  • upper limit buttons 613a-613d for setting the amount of refueling by selecting payment amounts of 1000 yen, 2000 yen, 3000 yen, 5000 yen are displayed on the touch screen of the operation panel 502.
  • a message for selecting one is displayed in the message display field 605.
  • the recipient can restart the input from the beginning.
  • Step S301 when the recipient selects one of the oil type check boxes 611a-611c and touches any of the upper limit buttons 612a-612d, the price when the upper limit amount is refueled is designated as the deposit value.
  • the upper limit of the total supply amount is not determined simply by touching the upper limit amount button 612e for selecting the full tank after the recipient selects one of the oil type check boxes 611a-611c.
  • the recipient may be allowed to input the custody value, or “the custody value preset by the gas station” or “the remaining value of the first portable device 201a”, whichever is smaller
  • One value may be used as a custody value (step S301).
  • a fishing return button 609 is also displayed in the figure. This is because, in the previous refueling, the recipient who forgot to receive the fishing value left the gas station and then visited the gas station again, or another chain store that accounts with the gas station. To visit and ask for return of fishing value. Processing after this button is pressed will be described later.
  • FIG. 7 is a display example of a screen for guiding the recipient to place the portable device in the communicable range.
  • various messages for the recipient are displayed in the message display field 605.
  • a message such as “Please enter the portable device into the reader / writer” is displayed in the message display field 605. Also, in this display example, “0” yen is displayed in the deposit amount display column 615 for which charging has been completed, and “5000” yen is displayed in the deposit amount display column 616 designated by the recipient. .
  • the recipient / writer 503 holds the portable device 201 appropriately in a holder or the like, so that the first portable device 201a enters the communicable range of the reader / writer 503 and communication between the two is established. Transmits an inquiry command to the first portable device 201a to acquire the value of the remaining value.
  • FIG. 8 is a display example of a screen for notifying the recipient that the remaining value of the portable device is insufficient.
  • the message display field 605 displays “Remaining value is insufficient”.
  • the custody value will be re-input. If the recipient operates the button 621 for using all the remaining value and not replenishing it with other portable devices, the entire remaining value is stored and used as the value.
  • FIG. 9 is a display example of a screen for informing the recipient that the portable device needs to be replaced.
  • a message indicating that the remaining value of 3912 yen has been added to the charged deposit value is displayed in the deposit amount display column 615, and a message “Please replace with another portable device” is displayed in the message display column 605.
  • a button 623 for stopping further replenishment and starting refueling with the deposit value as the current charge amount and the deposit value is also displayed.
  • the portable device 201 Prior to entering the transaction conditions, the portable device 201 is urged to move to the reader / writer 502, the remaining value of the portable device 201 is inquired, and the stored value can be selected within the range of the remaining value.
  • This is suitable when collecting the custody value from only one portable device 201.
  • FIG. 10 is a display example of a screen for requesting input of a personal identification number as the first identification information.
  • the message display field 605 displays “Please enter your PIN for receiving change”.
  • the recipient may operate the keypad 661 displayed on the touch screen of the operation panel 501 to input each digit of the desired personal identification number, delete the input digit, or terminate the input. it can.
  • FIG. 11 is a display example of a screen for guiding a recipient to insert a nozzle into a fuel filler port and pull a lever to start fueling.
  • the message “Please insert the nozzle into the filler port and pull the lever to start the lubrication” in the message display field 605 is displayed.
  • the charged deposit value is displayed in the deposit amount display field 615.
  • “0” is displayed in the already provided amount display column 633 as the already provided amount.
  • the recipient who sees this message removes the tank cap of the automobile, removes the nozzle 507 of the desired oil type from the main body of the self-fueling machine 501, and inserts it into the fuel filler opening of the automobile. Then, refueling is performed with the deposit value as the upper limit.
  • FIG. 12 is a display example of a screen for notifying the recipient of the transaction target provision status.
  • the price corresponding to the already provided amount supplied to the car from the nozzle 507 is displayed in the consideration display column 631
  • the deposit value is displayed in the deposit amount display column 615
  • the deposit value and the already provided amount are displayed.
  • the difference from the corresponding price is displayed in the fishing display field 634.
  • FIG. 13 is a display example of a screen for informing the recipient that it has been detected that the next provision of the transaction target cannot be performed.
  • “It is almost full” is displayed in the message display field 605.
  • the self-fueling machine 501 enters a state where the lever of the nozzle 507 cannot be pulled strongly, or even when it is pulled strongly, no fuel is supplied. At this time, if the recipient re-adjusts the position of the nozzle 507 at the refueling port, the air in the tank may escape and the establishment of the automatic stop condition may be released. In this case, the lever can be pulled strongly again, and further fueling is continued. For this reason, the display on the operation panel 502 returns to FIG. 12, and refueling can be continued at the maximum flow rate. If the self-fueling machine 501 is compatible, hands-free fueling is also possible.
  • the lever of the nozzle 507 can be pulled weakly to continue refueling with a small flow rate.
  • the easiest way to stop refueling is to remove the nozzle 507 from the vehicle and return it to the self-fueling machine 501 main body.
  • FIG. 14 is a display example of a screen for requesting input of a personal identification number as the second identification information.
  • “Please enter your PIN” is displayed in the message display field 605, and the recipient (provider) operates the keypad 661 to enter the PIN entered at the start of the transaction. Input as second identification information.
  • the reader / writer 503 attempts to establish communication with the second portable device 201b for refunding the fishing value. If the first portable device 201a is supported by a holder or the like, the first portable device 201a functions as the second portable device 201b. If communication between the reader / writer 503 and the portable device 201 cannot be established, the self-fueling machine 501 prompts the recipient (provided person) to place the second portable device 201b within the communicable range.
  • FIG. 15 is a display example of a screen for notifying the recipient that an error has occurred in communication with the portable device. In this figure, a message “Please place a portable device for charging fishing on the reader / writer” is displayed in the message display field 605.
  • FIG. 16 is a display example of a screen for informing the recipient that the transaction has been completed.
  • the message display field 605 displays “Refueling completed. Please take your receipt and portable device home.”
  • the second portable device 201b and the reader / writer 503 remain communicable when a certain time-out period elapses after the receipt is printed or after a warning (step S312) or when the leaving of the automobile is detected. If there is, it can be determined that the recipient has forgotten the portable device 201 on the spot. Therefore, in these cases, it is desirable to warn the provider's terminal that there is something to forget via the in-store LAN.
  • the first information input to the operation panel 502 is a personal identification number. That is, in this aspect, both the input performed last before refueling on the operation panel 502 and the first input performed after refueling are both passwords. For this reason, the recipient can forget the password in this mode compared to the mode in which the password after refueling is entered after entering the password before refueling. The sex is much lower. For this reason, possibility that a recipient will forget a personal identification number can be reduced.
  • the PIN first identification information
  • the second portable device 201b is placed on the reader / writer 503, and then the order is changed as appropriate, such as inputting the PIN (second identification information) while receiving it and receiving the fishing value. It is also possible.
  • the personal identification number is used as the identification information of the recipient (recipient), but the image taken by the camera 508 of the self-fueling machine 501 or the surveillance camera in the store is used. Other information can be used as identification information.
  • the self-fueling machine 501 detects that the automobile has stopped in front of the self-fueling machine 501 by the camera 508, and is provided with the person to be provided (the operator of the self-fueling machine 501. Typically, the driver of the car. ) And the article (car) provided with the transaction object is photographed, and accumulation of the photograph is started.
  • the biometric information obtained from the face photograph of the recipient, the photograph of the photographed car, the color of the car recognized from the photograph of the car, the number, the model, etc. are collectively used as the first identification information. .
  • the operation panel 502 may be provided with a sensor such as a fingerprint or a vein for biometric authentication. Also, there may be a method in which a microphone is prepared in the self-fueling machine 501 to make the recipient speak up and the voiceprint is used as identification information.
  • the management apparatus 101 randomly determines a password number, etc., presents it to the recipient, stores it, and inputs the stored password number at the time of receipt, the password number is received together with the receipt of the stored value.
  • the printer is printed with the printer 508 and delivered to the recipient.
  • the recipient inputs the personal identification number described in the receipt of the deposit value as the second identification information.
  • step S310 processing corresponding to step S310, step S311, and step S312 in FIG. 3 will be described.
  • the first mode uses authentication based on biometric information based on a personal identification number and a face photograph. That is, in the present embodiment, before and after charging the deposit value from the first portable device 201a, the password is input by the provider and the photograph of the face of the provider is taken.
  • FIG. 18 is a flowchart showing a flow of control in a mode in which authentication is performed using a password and a face photograph.
  • step S801 the self-fueling machine 501 shoots the face of the recipient (step S801) and asks for the input of a personal identification number as shown in FIG. 14 (step S801). S802). It is not always necessary to take a photograph of the recipient's face at this timing. If the photograph is taken constantly for monitoring the area around the self-fueling machine 501 with the camera 508 or the like, the photographed result should be used as appropriate. It is also good to do.
  • step S803 the input of the password is detected. If no input is detected, if the password input timeout time has not elapsed (step S804; No), the process returns to step S803. On the other hand, if the predetermined time-out period has elapsed (step S804; Yes), it is determined that the recipient has left the place without receiving the fishing value, and the first identification is made in preparation for a refund at a later date.
  • the information and the amount of fishing value to be returned are associated with each other and recorded as unrefunded information in a hard disk, a network storage, or the like (step S805), and this processing is terminated. In accordance with this, a warning may be given to the terminal of the counter used by the provider.
  • step S803 if the input of a personal identification number is detected (step S803; Yes), the face photograph of the recipient and the face photograph of the recipient are compared to determine whether they are the same person based on the biometric information, and to the recipient. It is determined whether or not the password entered by is coincident with the password entered by the recipient (step S806).
  • step S806 If the saddle face photos are the same person and the passwords match (step S806; Yes), the process proceeds to step S311. That is, if the second portable device 201b and the reader / writer 503 cannot communicate, the self-fueling machine 501 places the second portable device 201b within the communicable range of the reader / writer 503 as shown in FIG. The receiver is prompted to charge the fishing value to the second portable device 201b that can communicate with the reader / writer 503.
  • FIG. 17 is a display example of a screen for notifying that the authentication has failed and that a manned counter is used. As shown in this figure, if authentication fails, a message “Please consult with a manned counter” is displayed in the message display field 605 displayed on the touch screen of the operation panel 502. In addition, a warning notification that a problem may occur for the provider is given to the manned counter via the in-store LAN. In this case, since the fishing value is returned face-to-face with the manned counter, the risk of fraudulent detection is extremely low.
  • simple and safe transactions can be performed by inputting a face photograph and a password.
  • the level of authentication is changed depending on whether the recipient has left the self-fueling machine 501 or not.
  • the self-fueling machine 501 monitors the recipient to determine whether the recipient has left between the time when the deposit value is charged and the time when the fishing value is to be returned. .
  • a bag camera 508 a surveillance camera in the store, a human sensor, or the like, it is possible to detect the leaving of the recipient. For example, if the presence sensor continues to detect that there is a person near the self-fueling machine 501 without interruption from the start of refueling, the recipient is highly likely to remain near the self-fueling machine 501. It can be judged that it is expensive.
  • the leaving of the recipient may be determined based on the presence of the automobile. For example, when a camera 508 or a surveillance camera in a store is used, or a weight sensor, an infrared sensor, a laser sensor, a motion sensor, or the like is used, it is possible to detect the leaving of the automobile. Further, as detecting the engine sound with the microphone, it may be determined that the automobile has moved if the engine sound is generated after the end of refueling. In addition, it is also possible to determine the presence or absence of an automobile by communicating with the ETC (Electronic Toll Collection systems) on-vehicle device of the automobile.
  • ETC Electronic Toll Collection systems
  • FIG. 19 is a flowchart showing a control flow of a mode in which the level of authentication is changed according to the situation.
  • the same step numbers are assigned to equivalent processes.
  • the authentication level is set based on whether or not the recipient has left since the deposit value is charged (step S901). In the following, the authentication level is set to 1 when there is no leaving, and the authentication level is set to 2 when leaving. The higher the authentication level, the higher the degree required for the match between the first identification information and the second identification information, and the lower the tolerance of the match.
  • step S901; 1 the process proceeds to step S311. That is, if the second portable device 201b and the reader / writer 503 are not communicable, the self-fueling machine 501 urges the recipient to place the second portable device 201b within the communicable range of the reader / writer 503. The fishing value is charged to the second portable device 201b that can communicate with the reader / writer 503.
  • step S801 the process proceeds to step S801, and the fishing value is returned through the authentication using the personal identification number and the face photograph as in the above-described embodiment.
  • whether to return the fishing value is determined by authentication of the aspect that basically does not require input by the recipient, such as whether or not it is away from the self-fueling machine 501, so
  • the strength of personal authentication can be maintained or improved while improving the convenience of the recipient.
  • it is possible to improve the convenience of the recipient by not requiring the recipient who is not away from the self-fueling machine 501 to take a picture of the recipient's face or to input a personal identification number.
  • FIG. 20 is a flowchart showing the flow of control when returning the fishing value at a later date.
  • a description will be given with reference to FIG.
  • the fishing return process is started when the recipient selects the fishing return button 609 in FIG.
  • the self-fueling machine 501 takes a photograph of the recipient's face with the camera 502 or the like (step S911), and further takes a photograph of the vehicle or the like on which the recipient is boarding.
  • Shoot step S912.
  • the order of photographing may be changed as appropriate, or one photograph may be replaced. You may use as a face photograph and a vehicle photograph. Then, the vehicle number is recognized from the vehicle photograph (step S913).
  • step S914 it is searched whether the non-refundable information that matches the face photograph taken in step S912 is recorded in the hard disk or network storage (step S914).
  • step S914 Because there is an error in the biometric match by facial photo, even if the recipient is a legitimate recipient who wants to return the fishing value, unrefunded information may not be found, or multiple unrefunded information Sometimes found. Therefore, if no unrefunded information matching the face photo is found (step S914; none), as shown in FIG. 17, a warning is given to receive a fishing value refund at the manned counter (step S312), and this process is terminated. To do.
  • step S914 when one unrefunded information with a matching face photo is found (step S914; one), it is checked whether or not the vehicle number in the unrefunded information matches the vehicle number recognized by the character (Ste S916).
  • step S916 If they do not match (step S916; No), the keypad 661 similar to that shown in FIG. 14 is used to input the number of the vehicle that was refueled in the transaction forgetting to receive the fishing value (step S917). This is because it is understood that the recipient has boarded a different vehicle than before and visited the self-fueling machine 501, or that the character recognition was incorrect. Then, it is checked whether or not the vehicle number in the unrefunded information matches the input number (step S918). If they do not match (step S918; No), the process goes to step S312 in order to deal with the manned counter.
  • step S916 / S918 Yes
  • the self-fueling machine 501 is Using the same keypad 661, input of a password is requested (step S919). Then, the self-fueling machine 501 checks whether or not the password number in the unrefunded information matches the input password number (step S920). If they do not match (step S920; No), the process goes to step S312 in order to deal with the manned counter.
  • step S919 If they match (step S919; Yes), that is, if there is only one unrefunded information that matches the face photo, vehicle number, and PIN, the process proceeds to step S311 to return the fishing value, The process ends.
  • step S914 when multiple non-refundable information matching the face photo is found (step S914; multiple), from the found non-refundable information, the vehicle number in the non-refundable information matches the vehicle number recognized by the character Search for information (step S921). If there is no unrefunded information in which the face photo matches and the character number of the recognized vehicle number is found (step S921; none), the process goes to step S312 in order to deal with the manned counter. This is because there is a possibility that misrecognition may occur in biometric authentication of face photographs and character recognition of vehicle numbers.
  • step S921 when a plurality of unrefunded information is found that matches the face photo and the character number of the recognized vehicle (step S921; plural), the process proceeds to step S312 in order to deal with the multiple manned counter.
  • biometric authentication of facial photographs and character recognition of vehicle numbers may be misrecognized, and there is a possibility that the same recipient forgets to receive fishing value multiple times. .
  • step S921 If the face photo matches and only one non-refundable information is found that matches the recognized vehicle number (step S921; one), the process proceeds to step S918, and the input of the password is started.
  • the level of authentication that is, the match tolerance is changed according to the difference between the charging status where the deposit value is charged and the refund status where the fishing value is refunded.
  • the convenience of the user is enhanced.
  • various modes can be considered as examples of changing the authentication level by changing the match tolerance based on the magnitude of the difference between the charging status and the refund status. For example, at the time of billed value billing, which is the billing status, three photos of a face photo, fingerprint, and PIN are recorded.
  • the respective reliability levels are often different. In this case, it may be determined that the fishing value is returned if “highly reliable type information matches one” or “low reliability type of information matches multiple”.
  • this authentication method offers the portable device 201 forgotten to be left in the store after charging the custody value or the portable device 201 placed in the self-fueling machine 501 with the fishing value refunded as the owner at a later date. It is also possible to use a manned counter to determine whether or not to return to a person who has returned.
  • the applicant inputs the password and takes a face photo. If both match the first identification information, the terminal determines that the offerer is the recipient and presents the determination result to the store clerk. If the clerk determines that the offerer is the recipient, the clerk can also return the portable device 201 without further identity verification. Of course, when the forgotten portable device 201 is returned, the provider may separately prevent the trouble by keeping a copy of the applicant's license number.
  • authentication is performed before the second portable device 201b is placed on the reader / writer 503.
  • authentication may be performed after the second portable device 201b is placed.
  • the recipient inputs the personal identification number or the like while holding the second portable device 201b on the reader / writer 503, or sets the second portable device 201b to the reader / writer. It is necessary to touch the writer 503 once, release it, enter a password, etc., and then touch the second portable device 201b to the reader / writer 503 again.
  • first portable device 201a and the second portable device 201b are the same portable device 201 can be used as a difference between the first situation and the second situation.
  • the recipient and the recipient are not in a situation other than being stolen by a third party from the recipient. It can be estimated that they are the same. Therefore, when the first portable device 201a and the second portable device 201b are the same, the matching tolerance may be larger than when the two are different.
  • the recipient when recording the first identification information, consider a mode in which the recipient is input a personal identification number, and biometric information is obtained from the face photograph of the recipient. If the first portable device 201a and the second portable device 201b are different, the recipient is requested to input a personal identification number, and it is determined whether the personal identification number and the face photograph are matched or not. On the other hand, if the first portable device 201a and the second portable device 201b are the same, only the biometric information based on the face photograph of the recipient and the recipient is compared without requiring the recipient to enter a personal identification number. Determines whether or not to match.
  • the car stops moving from when the car stops before the self-fueling machine at the time of charging the value of the deposit until the time when the refueling is completed and the fishing value is received. If the first portable device 201a and the second portable device 201b are not the same, the second portable device is assumed to be extremely unlikely to receive illegal fishing value. The fishing value may be charged to the device 201b.
  • the recipient can copy the original without knowing the total number of pages of the original. In this case, it is not until the copying of all the originals is completed that the total number of pages of the originals is known and the payment amount for the copy service is also determined.
  • a personal identification number or the like can be used as the first identification information or the second identification information.
  • the first image of the original copied by the recipient can be used as the first identification information. That is, for example, in the case of a copy service, the scan result of the first document is used as the first identification information, the scan result or an enlarged part of the scan result, and another dummy scan result are arranged and received.
  • the user is made to input which original has been copied and used as the second identification information. That is, it is determined whether or not the recipient is a recipient by knowing the beginning of the copied manuscript.
  • the material required for providing the transaction object can be used as it is for identification information, or can be combined with other information as identification information.
  • the management apparatus of this embodiment is A recording unit for recording first identification information for identifying a recipient to receive a transaction target; Prior to the provision of the transaction object, a reception unit that accepts designation of custody value from the recipient, A decreasing unit that decreases the first remaining value associated with the first portable device used by the recipient by the custody value; When the reduction is performed, a control unit that controls the transaction target to provide only the provision amount corresponding to the consideration value below the custody value, An acquisition unit for acquiring second identification information for identifying a recipient who intends to receive a fishing value obtained by subtracting the consideration value from the custody value; A determination unit configured to determine whether the recipient should receive the fishing value based on the first identification information and the second identification information;
  • It may be configured to further include an increase unit that increases a second remaining value associated with a second portable device used by the recipient who is determined to receive the fishing value by the fishing value.
  • the first identification information and the first situation are within a tolerance range determined based on a difference between the first situation in which the first identification information is recorded and the second situation in which the second identification information is obtained. If the two identification information matches, the fishing value can be determined to be received by the recipient.
  • the first identification information and the first situation are within a tolerance range determined based on a difference between the first situation in which the first identification information is recorded and the second situation in which the second identification information is obtained. 2 If the identification information matches, it is determined that the recipient should receive the fishing value, The first portable device used by the recipient in the first situation and the second portable device used by the recipient in the second situation match. The first tolerance for determining whether or not 1 identification information and the second identification information match, The first portable device used by the recipient in the first situation and the second portable device used by the recipient in the second situation are different from each other. Than the second tolerance for determining whether the identification information and the second identification information match, Can be configured to be large.
  • the first identification information is a first character string input by the recipient
  • the second identification information is a second character string input by the recipient
  • the first identification information is first biological information of the recipient
  • the second identification information is second biological information of the recipient
  • the first identification information is a first character string presented from the management device to the recipient
  • the second identification information is a second character string input by the recipient, When the first character string matches the second character string, it can be configured that it is determined that the recipient should receive the fishing value.
  • the management method of this embodiment is A recording step in which the management device records first identification information for identifying a recipient to be provided for the transaction object; Prior to the provision of the transaction object, the management device accepts a custody value designation from the recipient, The management device, a reduction step of reducing the first remaining value associated with the first portable device used by the recipient by the custody value; When the reduction is made, the control device performs control to provide the transaction object with a provision amount corresponding to a consideration value equal to or less than the custody value; An acquisition step in which the management device acquires second identification information for identifying a recipient who intends to receive a fishing value obtained by subtracting the consideration value from the deposit value; The management device includes a determination step of determining whether or not the recipient should receive the fishing value based on the first identification information and the second identification information.
  • the program of this embodiment is a computer, A recording unit for recording first identification information for identifying a recipient to receive a transaction target; Prior to the provision of the transaction object, a reception unit that accepts designation of custody value from the recipient, A decreasing unit that decreases the first remaining value associated with the first portable device used by the recipient by the custody value; When the reduction is performed, a control unit that controls the transaction target to provide only the provision amount corresponding to the consideration value below the custody value, An acquisition unit for acquiring second identification information for identifying a recipient who intends to receive a fishing value obtained by subtracting the consideration value from the custody value; Based on the first identification information and the second identification information, it functions as a determination unit that determines whether or not the recipient should receive the fishing value.
  • the above programs can be read by a computer such as a compact disk, flexible disk, hard disk, magneto-optical disk, digital video disk, magnetic tape, ROM (Read Only Memory), EEPROM (Electrically Erasable Programmable ROM), flash memory, and semiconductor memory. It can be recorded on possible non-transitory information recording media. This information recording medium can be distributed and sold independently of the computer.
  • a computer reads a program recorded in a non-transitory information recording medium into a RAM (Random Access Memory) which is a temporary storage device, and then a CPU (Central Processing Unit). The command included in the read program is executed.
  • RAM Random Access Memory
  • CPU Central Processing Unit
  • the CPU directly reads and executes a command included in the program stored in the ROM.
  • the above program can be distributed and sold from a server device or the like to a terminal device or the like via a transitory transmission medium such as a computer communication network, independently of the computer on which the program is executed. .
  • the remaining value associated with the portable device is subtracted by the deposit value corresponding to the deposit at the start of the transaction, and the transaction target is provided by the provision amount corresponding to the consideration value equal to or less than the deposit value.
  • the management apparatus and management method suitable for managing a transaction for increasing the remaining value by the fishing value corresponding to the change at the end of the change, and a program for realizing these by a computer can be provided.

Abstract

A management device (101) manages a transaction, in which electronic money corresponding to a deposit is collected before a transaction item is supplied, and electronic money corresponding to the change is returned after the completion of the supply. A recording unit (102) records first identification information identifying an item recipient who is about to receive a supply of a transaction item. A reception unit (103) receives specification of a deposit value from the item recipient before the transaction item is supplied. A decreasing unit (104) decreases a first remaining value associated with a first portable device used by the item recipient, by an amount corresponding to the deposit value. After the decrease of the first remaining value, a control unit (105) performs control to supply an amount of the transaction item corresponding to a price value that is equal to or less than the deposit value. An acquisition unit (106) obtains second identification information identifying a receiving person who is about to receive the change value, which is calculated by subtracting the price value from the deposit value. On the basis of the first identification information and the second identification information, a determination unit (107) determines whether to allow the receiving person to receive the change value.

Description

管理装置、管理方法、ならびに、プログラムManagement device, management method, and program
  本発明は、電子マネーによる取引を管理する管理装置、管理方法、ならびに、これらをコンピュータにより実現するためのプログラムに関する。 The present invention relates to a management apparatus and management method for managing transactions using electronic money, and a program for realizing these by a computer.
  対価を支払うことで商品やサービスの提供を受ける取引において、電子マネーを利用するシステムが種々提案されている。電子マネーシステムでは、現金を財布に入れて持ち歩く代わりに、可搬デバイス(財布に相当する。)に対応付けられ、電子情報により表現されるバリュー(財布の中の現金に相当する。)により、支払いを行う。 Various systems using electronic money have been proposed in transactions in which goods and services are provided by paying compensation. In the electronic money system, instead of carrying cash in a wallet, it is associated with a portable device (corresponding to a wallet) and represented by electronic information (corresponding to cash in the wallet). Make a payment.
  電子マネーを用いた取引では、課金の際に、可搬デバイスを、提供者のリーダ/ライタに1回だけ短時間だけ翳して、可搬デバイスに対応付けられる残存バリューを減少させることにより、バリューの支払をする態様が広く用いられている。特許文献1には、電子マネーにより定期的な料金の支払をするための電子マネーサーバの技術が開示されている。 In transactions using electronic money, when charging, the portable device is tricked into the provider's reader / writer for only a short time to reduce the remaining value associated with the portable device. The mode of paying is widely used. Patent Document 1 discloses a technique of an electronic money server for paying a regular fee with electronic money.
  一方で、取引の開始時点では、商品やサービスをどれだけの量提供すれば良いかが不明であり、商品やサービスの提供が完了して、初めてその総提供量がわかるような取引もある。たとえば、ADF(Auto Document Feeder)を利用した無人コピーサービスや、ガソリンスタンドのセルフ給油機で、満タンになるまでガソリンを購入するような場合である。 On the other hand, at the start of the transaction, it is unclear how much goods and services should be provided, and there are also transactions in which the total provided amount is known only after the provision of the products and services is completed. For example, it is possible to purchase gasoline until it is full with an unmanned copy service using ADF (Auto Document Feeder) or a self-fueling machine at a gas station.
  特許文献2では、コピーが1枚終了する度に電子マネーによる課金を行う方式(段落0004)が開示されている。この方式を上記の取引に単純に提供すると、取引の開始から終了まで、リーダ/ライタに可搬デバイスを翳したままとする必要がある。 Patent Document 2 discloses a method (paragraph 0004) in which charging is performed with electronic money whenever one copy is completed. If this method is simply provided for the above transaction, it is necessary to leave the portable device on the reader / writer from the start to the end of the transaction.
  また、特許文献2では、コピーを開始する前に、電子マネーの決済用媒体から預かり金の支払をさせて、コピーが完了した後に、実際にコピーした枚数に応じて、釣銭の返金を決済用媒体に書き込む技術(要約書)も開示されている。この技術では、終了する毎に電子マネーによる課金を行う課金に用いられる決済用媒体と、残金(釣り)の受け取りに用いられる決済用媒体と、が一致することのみをもって、残金の返金をしている。すなわち、この技術では、取引対象の提供を受ける被提供者の同一性を、決済用媒体の同一性のみにより判定している。 Also, in Patent Document 2, the payment of deposits is made from the electronic money settlement medium before the copy is started, and after the copy is completed, the change is refunded according to the number of copies actually made. A technique (summary) for writing on a medium is also disclosed. With this technology, the remaining amount is refunded only when the payment medium used for charging with electronic money every time the transaction ends and the payment medium used for receiving the remaining amount (fishing) match. Yes. That is, in this technique, the identity of the recipient who receives the transaction object is determined only by the identity of the settlement medium.
特開2013-140452号公報JP 2013-140452 特開2009-301244号公報JP 2009-301244 JP
  しかしながら、電子マネーシステムの通常の利用形態と同様に、取引の開始時点で可搬デバイスをリーダ/ライタに翳して課金がなされたら、その後は、取引対象が提供されている間であっても、可搬デバイスをリーダ/ライタから離したい、という要望がある。 However, as in the normal usage mode of the electronic money system, if the portable device is charged to the reader / writer at the start of the transaction and then charged, then even while the transaction target is being provided, There is a desire to move the portable device away from the reader / writer.
  すなわち、可搬デバイスは財布に相当するものであるから、取引の最中とはいえ、リーダ/ライタに翳したまま外に出しっぱなしにしたくない、と考える電子マネー利用者は、確実に存在する。 In other words, since a portable device is equivalent to a wallet, there is definitely an electronic money user who thinks that he / she does not want to leave the reader / writer while he / she is in the middle of a transaction. To do.
  このほか、ADFを利用したセルフコピーサービス等では、その場を離れてもサービスが継続するので、その間、コピー機を離れて、コピー機が配置されている店内で他の買い物をしたい電子マネー利用者も存在する。その場合には、他の買い物をするために、可搬デバイスをコピー機から離して、有人カウンタに持っていく必要がある。 In addition, with self-copying services using ADF, the service continues even if you leave the site, so during that time you leave the copier and use other electronic money that you want to purchase in the store where the copier is located. There are also people. In that case, it is necessary to take the portable device away from the copier and take it to the manned counter for other shopping.
  このような状況下においては、特許文献2の技術を適用することが考えられる。しかしながら、上記のように、この技術では、取引対象の提供を受ける被提供者の同一性を、可搬デバイスの同一性のみにより判定し、釣銭の返金を行う。これでは、その場に忘れた可搬デバイスを拾得した第三者が、可搬デバイスのみならず、釣銭までも不正に拾得してしまう可能性がある。したがって、より高レベルの認証が必要とされる。 Under such circumstances, it is conceivable to apply the technique of Patent Document 2. However, as described above, in this technique, the identity of the recipient who receives the transaction object is determined only by the identity of the portable device, and the change is refunded. In this case, there is a possibility that a third party who has picked up a forgotten portable device on the spot may illegally pick up not only the portable device but also change. Therefore, a higher level of authentication is required.
  さらに、可搬デバイスを複数所有する被提供者であれば、預かり金を課金するときと、釣りバリューの返却を受けるときと、で、異なる可搬デバイスを利用したいこともありうる。可搬デバイスの同一性を必須とする特許文献2の技術では、この要望に応えることはできない。したがって、新たな対応策が必要となる。 で あ れ ば Furthermore, if the recipient owns a plurality of portable devices, he / she may want to use different portable devices depending on whether he / she charges the deposit and returns the fishing value. The technology of Patent Document 2 that requires the identity of a portable device cannot meet this demand. Therefore, new countermeasures are required.
  このほか、ユーザの意思により、取引対象の提供中も可搬デバイスをリーダ/ライタに翳したままとする場合であっても、このような高レベルの認証を行うことで、安全な取引をしたい、という要望もある。 In addition to this, even if the portable device is left on the reader / writer while the transaction target is being provided, the user wants to conduct a safe transaction by performing such high-level authentication. There is also a request.
  本発明は、上記の課題を解決しようとするもので、取引の開始時に預かり金に相当する預かりバリューだけ可搬デバイスに対応付けられる残存バリューを減算し、預かりバリュー以下の対価バリューに対応する提供量だけ取引対象を提供し、取引の終了時に釣銭に相当する釣りバリューだけ当該残存バリューを増加させる取引を管理するのに好適な管理装置、管理方法、ならびに、これらをコンピュータにより実現するためのプログラムを提供することを目的とする。 The present invention is intended to solve the above-described problem, and provides a corresponding value corresponding to a deposit value or less by subtracting the remaining value associated with the portable device by the deposit value corresponding to the deposit at the start of the transaction. Management device, management method, and program for realizing these by a computer, which are suitable for managing a transaction that provides a transaction object by the amount and increases the remaining value by the fishing value corresponding to change at the end of the transaction The purpose is to provide.
  本発明においては、管理装置は、
  取引対象の提供を受けようとする被提供者を識別する第1識別情報を記録し、
  取引対象の提供に先立って、預かりバリューの指定を被提供者から受け付け、
  被提供者が使用する第1可搬デバイスに対応付けられる第1残存バリューを預かりバリューだけ減少させ、
  減少がされると、取引対象を、預かりバリュー以下の対価バリューに対応する提供量だけ提供する制御をし、
  預かりバリューから対価バリューを差し引いた釣りバリューを受け取ろうとする受取者を識別する第2識別情報を取得し、
  第1識別情報と、前記第2識別情報と、に基いて、釣りバリューを受取者に受け取らせるべきか否かを判定する。 In the present invention, the management device
Record the first identification information that identifies the recipient to receive the offer of the transaction object,
Prior to the provision of the transaction target, accept the designation of custody value from the recipient,
Decrease the first remaining value associated with the first portable device used by the recipient by the custody value,
When the decrease is made, the transaction target is controlled to provide only the provision amount corresponding to the consideration value below the custody value,
Obtain second identification information that identifies the recipient who will receive the fishing value obtained by subtracting the consideration value from the custody value,
Based on the first identification information and the second identification information, it is determined whether or not the receiver should receive the fishing value.
本発明の実施例に係る管理装置の概要を示す説明図である。It is explanatory drawing which shows the outline | summary of the management apparatus which concerns on the Example of this invention. 本発明の実施例に係る管理装置を含む取引システムの概要を示す説明図である。It is explanatory drawing which shows the outline | summary of the transaction system containing the management apparatus which concerns on the Example of this invention. 本発明の実施例に係る管理装置が実行する管理処理の制御の流れを示すフローチャートである。It is a flowchart which shows the flow of control of the management process which the management apparatus which concerns on the Example of this invention performs. 本発明の実施例に係るセルフ給油機の外観を示す説明図である。It is explanatory drawing which shows the external appearance of the self-fueling machine which concerns on the Example of this invention. 支払方法を被提供者に選択させるための画面の表示例である。It is a display example of a screen for allowing a recipient to select a payment method. 取引条件を被提供者に選択させるための画面の表示例である。It is a display example of the screen for making a recipient select transaction conditions. 可搬デバイスを通信可能範囲に置くように被提供者に案内するための画面の表示例である。It is a display example of a screen for guiding a recipient to place a portable device in a communicable range. 可搬デバイスの残存バリューが不足していることを被提供者に知らせるための画面の表示例である。It is a display example of a screen for notifying the recipient that the remaining value of the portable device is insufficient. 可搬デバイスの交換を求めることを被提供者に知らせるための画面の表示例である。It is the example of a display of the screen for notifying a recipient that it requests | requires replacement | exchange of a portable device. 第1識別情報として暗証番号の入力を求めるための画面の表示例である。6 is a display example of a screen for requesting input of a personal identification number as first identification information. 給油口にノズルを挿してレバーを引き、給油を開始するように被提供者に案内するための画面の表示例である。It is a display example of a screen for guiding a recipient to insert a nozzle into a fuel filler port and pull a lever to start fueling. 取引対象の提供状況を被提供者に知らせるための画面の表示例である。It is a display example of a screen for notifying a recipient of a provision status of a transaction target. 取引対象の次の提供ができないことを検知したことを被提供者に知らせるための画面の表示例である。It is a display example of a screen for notifying a recipient that it has been detected that the next provision of a transaction target cannot be performed. 第2識別情報として暗証番号の入力を求めるための画面の表示例である。It is a display example of a screen for requesting input of a personal identification number as second identification information. 可搬デバイスとの通信にエラーが生じたことを被提供者に知らせるための画面の表示例である。It is a display example of a screen for notifying a recipient that an error has occurred in communication with a portable device. 取引が完了したことを被提供者に知らせるための画面の表示例である。It is a display example of a screen for notifying a recipient that a transaction is completed. 認証に失敗したため、有人カウンタにて対応する旨を知らせるための画面の表示例である。It is a display example of a screen for notifying that the authentication is failed and that a manned counter responds. 暗証番号と顔写真により認証を行う態様の制御の流れを示すフローチャートである。It is a flowchart which shows the flow of control of the aspect which authenticates with a PIN code and a face photograph. 状況に応じて認証のレベルを変化させる態様の制御の流れを示すフローチャートである。It is a flowchart which shows the flow of control of the aspect which changes the level of authentication according to a condition. 釣りバリューの返還を後日に行う際の制御の流れを示すフローチャートである。It is a flowchart which shows the flow of control at the time of performing return of fishing value at a later date.
  以下に本発明の実施形態を説明する。なお、本実施形態は説明のためのものであり、本願発明の範囲を制限するものではない。したがって、当業者であればこれらの各要素もしくは全要素をこれと均等なものに置換した実施形態を採用することが可能であるが、これらの実施形態も本発明の範囲に含まれる。 Hereinafter, embodiments of the present invention will be described. In addition, this embodiment is for description and does not limit the scope of the present invention. Therefore, those skilled in the art can employ embodiments in which each or all of these elements are replaced with equivalent ones, and these embodiments are also included in the scope of the present invention.
  電子マネーシステムにおけるバリューは、現金に類する価値を有するものである。バリューは、現金と相互もしくは一方から他方へ交換が可能なように、同じ通貨単位で管理されることもあるし、独自の単位を採用して交換の際に換算することもある。また、ユーザのアクション(商品の購入やアンケートへの回答、店舗への来店等)に応じて付与される各種のポイントを、バリューとして利用することも可能である。 バ リ ュ ー The value in the electronic money system has a value similar to cash. The value may be managed in the same currency unit so that it can be exchanged with cash or from one side to the other, or it may be converted at the time of exchange using an original unit. It is also possible to use various points given in accordance with user actions (purchasing products, answering questionnaires, visiting stores, etc.) as values.
  本実施例では、ストアドバリュー(stored-value)型と呼ばれる電子マネーシステムを想定する。ストアドバリュー型システムでは、ユーザが取引において対価として支払うことが可能なバリュー(「残高」とも称される。)を、電子回路を組み込んだカードや携帯電話、スマートフォンなどの各種の可搬デバイスに対応付けて管理する。 In this embodiment, an electronic money system called a stored-value type is assumed. Stored value system supports values (also referred to as “balance”) that users can pay for in transactions for various portable devices such as cards, mobile phones, and smartphones that incorporate electronic circuits. Manage it.
  ストアドバリュー型システムでは、可搬デバイスが有する電子回路に、利用可能なバリューの数値を記憶させるのが一般的である。この態様は、財布に現金が入っている状態に相当する。以下では、可搬デバイスに対応付けられるバリューを、「財布の中に残っている現金」になぞらえて、「残存バリュー(remaining value)」と呼ぶ。 In a stored value type system, it is common to store a numerical value of a usable value in an electronic circuit of a portable device. This aspect corresponds to a state where cash is in the wallet. Hereinafter, the value associated with the portable device will be referred to as “remaining value” in comparison with “cash remaining in the wallet”.
  商品やサービスの提供者は、可搬デバイスと通信可能なリーダ/ライタを利用することにより、ユーザからの対価の支払を受け付ける。ユーザが可搬デバイスをリーダ/ライタに翳すと、可搬デバイスとリーダ/ライタの通信が可能となり、リーダ/ライタから可搬デバイスへ、各種のコマンドを送信すると、そのコマンドの実行結果が可搬デバイスからリーダ/ライタへ送信される。 A product or service provider accepts payment for a user by using a reader / writer that can communicate with a portable device. When the user places the portable device on the reader / writer, communication between the portable device and the reader / writer becomes possible. When various commands are sent from the reader / writer to the portable device, the execution result of the command is available. Sent from the portable device to the reader / writer.
  たとえば、問い合わせコマンドを利用することにより、実行結果として、現在可搬デバイスに対応付けられている残存バリューの数値を取得することができる。 For example, by using an inquiry command, it is possible to acquire the numerical value of the remaining value currently associated with the portable device as the execution result.
  減少コマンドでは、当該コマンドに指定されたバリューだけ、可搬デバイスに対応付けられている残存バリューを減少させる。これは、財布から現金を取り出したことに対応する。すなわち、減少コマンドは、商品やサービスの提供を受ける取引において、対価を支払う際、すなわち「課金」の際に利用される。以下では、減少コマンドに指定されるバリューを、対価バリュー(price value)と呼ぶ。 In the wrinkle reduction command, the remaining value associated with the portable device is decreased by the value specified in the command. This corresponds to taking out cash from the wallet. In other words, the decrease command is used when paying a consideration, that is, “billing” in a transaction for receiving provision of goods or services. Hereinafter, the value specified in the decrease command is referred to as a “price value”.
  増加コマンドは、当該コマンドに指定されたバリューだけ、可搬デバイスに対応付けられている残存バリューを増加させる。これは、財布に現金を入れることに対応する。増加コマンドは、たとえば店頭で、ユーザが店員に現金を支払うかわりに、当該現金に相当するバリューを可搬デバイスにチャージする際に利用される。 The heel increase command increases the remaining value associated with the portable device by the value specified in the command. This corresponds to putting cash in the wallet. The increase command is used, for example, when a user charges a portable device with a value corresponding to the cash instead of paying cash to the clerk at the store.
  なお、可搬デバイスが、インターネット等のコンピュータ通信網を介した通信を行う機能を有する場合には、可搬デバイス内で動作するアプリケーションが、コンピュータ通信網を介して送られたコマンドに呼応して、可搬デバイスに対応付けられる残存バリューの取得や増減を行うことも可能である。この場合には、リーダ/ライタを利用せずに、対価の支払や残存バリューのチャージが可能となる。 When the portable device has a function of performing communication via a computer communication network such as the Internet, an application that operates in the portable device responds to a command sent via the computer communication network. It is also possible to acquire or increase / decrease the residual value associated with the portable device. In this case, it is possible to pay the price and charge the remaining value without using the reader / writer.
  減少コマンドや増加コマンドなどで、バリューの増減が行われる、ということは、被提供者と提供者との間でバリューの移動が起きたことを意味する。提供者は、このバリューの移動の情報を、電子マネーの管理サーバに伝達する。電子マネーの管理サーバは、電子マネーサービス全体の提供者(運営者)により運営されている。電子マネーの管理サーバに蓄積された決済情報を合算すれば、提供者がその期間内に得た、あるいは、失ったバリューの総額が得られる。 That the value is increased or decreased by a decrease command or an increase command means that the value has moved between the recipient and the provider. The provider transmits this value transfer information to the electronic money management server. The electronic money management server is operated by a provider (operator) of the entire electronic money service. If the payment information stored in the electronic money management server is added up, the total amount of value that the provider has gained or lost within that period can be obtained.
  提供者は、バリューを獲得しているのであれば、運営者から現金等に交換して手に入れることができる。一方、バリューを失っているのであれば、提供者は、運営者に対して、当該バリューに対する現金等の支払いをする責務を負う。 If the provider has acquired value, he can exchange it for cash etc. from the operator. On the other hand, if the value is lost, the provider is responsible for paying the operator cash or the like for the value.
  本実施例に係る取引では、電子マネーのバリューを対価として、取引対象の提供がなされる。そして、取引の開始から終了までに提供される取引対象の総提供量は、取引の終了をもって確定する。したがって、取引が終了するまでには、総提供量は確定しない。本実施例では、従量制課金を想定する。したがって、取引対象の総提供量、ならびに、当該総提供量に対する対価として支払うべき総対価バリューは、取引対象の提供が完了することをもって初めて確定することになる。 取 引 In the transaction according to the present embodiment, the transaction object is provided using the value of the electronic money as a consideration. Then, the total provision amount of the transaction target provided from the start to the end of the transaction is determined at the end of the transaction. Therefore, the total provision amount is not fixed until the transaction is completed. In this embodiment, pay-per-use billing is assumed. Accordingly, the total provided amount of the transaction target and the total consideration value to be paid as the consideration for the total provided amount are determined only when the provision of the transaction target is completed.
  そこで、本実施例では、上記のように、取引対象の提供の開始前に可搬デバイスから預かり金に相当する預かりバリュー(deposit value)の支払をさせて、提供の完了後に釣銭に相当する釣りバリュー(change value)を返還する。このため、被提供者は、時間をおいて、可搬デバイスを2回、提供の開始前と提供の終了後に、リーダ/ライタに翳すことになる。総対価バリューは、預かりバリューと釣りバリューの差である。 Therefore, in this embodiment, as described above, the deposit value corresponding to the deposit is paid from the portable device before the start of the provision of the transaction object, and the fishing corresponding to the change after the provision is completed. Returns the value (change value). For this reason, the recipient receives a portable device twice from the reader / writer before the start of provision and after the end of provision. Total consideration value is the difference between custody value and fishing value.
  取引対象の提供中も可搬デバイスをリーダ/ライタに翳したままとするか、それとも、預かりバリューの課金後は可搬デバイスをリーダ/ライタから外し、釣りバリューの返金の際に再度リーダ/ライタに翳すか、は、ユーザの意思に基づいていずれも選択が可能である。 Either leave the portable device as a reader / writer while the transaction target is being provided, or remove the portable device from the reader / writer after charging the stored value and re-read the reader / writer when refunding the fishing value. Either of these can be selected based on the user's intention.
  本実施例では、リーダ/ライタと、その通信可能範囲に入っている可搬デバイスと、の通信には、近距離無線通信(Near Field Communication;NFC)を採用するが、赤外線通信やブルートゥース(Bluetooth(登録商標))を採用してもよい。 In this embodiment, near field communication (NFC) is used for communication between the reader / writer and a portable device within the communicable range, but infrared communication or Bluetooth (Bluetooth) (Registered trademark)) may be adopted.
  さて、本実施例が適用可能な取引対象には、たとえば、蛇口や供給口からほぼ一定の供給スピードで提供され、量り売りにより販売される粉状体(小麦粉、米ぬか、粉洗剤等)、粒状体(塩、砂糖、ビーズ等)、液体(ガソリン、鉱泉水、ミルク、ジュース、酒等)、ゲル・ゾル等の商品がある。 Now, for example, powders (wheat flour, rice bran, powdered detergent, etc.) and granular materials that are provided at a substantially constant supply speed from a faucet or a supply port and sold by weighing, There are products such as (salt, sugar, beads, etc.), liquid (gasoline, mineral water, milk, juice, liquor, etc.) and gel sol.
  また、秒単位や分単位で時間課金されるサービス(ネットワークカフェ、インターネット接続プロバイダ、電気自動車のレンタル等)や、サービスの被提供者が持ち込んだ素材に基づいて何らかの処理を行うサービス(オートシートフィーダを利用したコピーサービス、USBメモリ内の全画像の写真プリント、持ち込んだ玄米の精米等)等のサービスも、取引対象とすることができる。 In addition, services that are charged for time in seconds or minutes (such as network cafes, Internet connection providers, and electric vehicle rentals), and services that perform some processing based on the materials brought in by the service recipient (auto seat feeder) Services such as photocopying services, photo prints of all images in the USB memory, and brown rice that has been brought in) can also be dealt with.
  本実施例に係る管理装置は、取引における預かりバリューの支払、釣りバリューのチャージならびに取引対象の提供を制御する。預かりバリューの支払および釣りバリューのチャージは、管理装置が電子マネーの残存バリューに対応付けられる可搬デバイスと通信することにより制御される。また、管理装置は、取引対象の提供そのものを行う提供装置や提供ユニットを制御するが、管理装置と提供装置・提供ユニットは、それぞれ独立した装置として構成しても良いし、全体として一体化された装置として構成しても良い。 The management apparatus according to the present embodiment controls payment of deposit value, charge of fishing value, and provision of transaction objects in the transaction. The payment of the deposit value and the charge of the fishing value are controlled by the management device communicating with the portable device associated with the remaining value of the electronic money. In addition, the management device controls the providing device and the providing unit that provide the transaction object itself, but the management device and the providing device / providing unit may be configured as independent devices or integrated as a whole. You may comprise as an apparatus.
  本実施例の管理装置は、専用の電子回路により構成することも可能であるし、プログラムをコンピュータに実行させることにより実現することも可能である。このほか、コンピュータと専用電子回路の中間形態として、プログラムを電子回路の設計スクリプトにコンパイルして、当該設計スクリプトに基づいて電子回路を動的に構成するFPGA(Field Programmable Gate Array)などの技術を適用することにより、本実施例の管理装置を構成することも可能である。 管理 The management apparatus of this embodiment can be configured by a dedicated electronic circuit, or can be realized by causing a computer to execute a program. In addition, as an intermediate form between a computer and a dedicated electronic circuit, a technology such as FPGA (Field Programmable Gate Array) that compiles a program into an electronic circuit design script and dynamically configures the electronic circuit based on the design script. By applying this, it is possible to configure the management apparatus of this embodiment.
  なお、以下では、まず、電子マネーのバリューを用いた取引を管理する管理装置の一般的な構成を説明するが、理解を容易にするため、セルフ給油機、ならびに、ADFを用いたコピーサービスにおける適用事例に、適宜言及する。また、末尾に、セルフ給油機ならびにADFを用いたコピーサービスにおける適用事例の詳細について、説明を加えることとする。 In the following, first, the general configuration of a management device that manages transactions using the value of electronic money will be described. However, in order to facilitate understanding, in self-fueling machines and copy services using ADF, Where appropriate, mention application cases. In addition, the details of application examples in the self-fueling machine and copy service using ADF will be explained at the end.
  図1は、本発明の実施例に係る管理装置の概要を示す説明図である。図2は、本発明の実施例に係る管理装置を含む取引システムの概要を示す説明図である。以下、これらの図を参照して説明する。 FIG. 1 is an explanatory diagram showing an overview of a management apparatus according to an embodiment of the present invention. FIG. 2 is an explanatory diagram showing an outline of a transaction system including a management device according to an embodiment of the present invention. Hereinafter, description will be given with reference to these drawings.
  本実施例に係る管理装置101は、記録部102、受付部103、減少部104、制御部105、取得部106、判定部107を備える。さらに、管理装置101は、省略可能な要素として、増加部108を備えることができる。 The management device 101 according to the present embodiment includes a recording unit 102, a receiving unit 103, a reduction unit 104, a control unit 105, an acquisition unit 106, and a determination unit 107. Furthermore, the management apparatus 101 can include an increase unit 108 as an optional element.
  ここで、記録部102は、取引対象の提供を受けようとする被提供者を識別する第1識別情報を記録する。記録部102により記録される第1識別情報は、被提供者本人や、被提供者が取引対象の提供を受ける物品等を識別するものである。たとえば、被提供者の生体情報、被提供者により指定された暗証番号(PIN;Personal Identification Number)やパスワード等が、第1識別情報として記録される。第1識別情報の種々の態様については、後述する。 Here, the recording unit 102 records first identification information for identifying a recipient who is to receive the transaction target. The first identification information recorded by the recording unit 102 identifies the recipient himself / herself and the article or the like for which the recipient is provided for the transaction. For example, biometric information of the recipient, a personal identification number (PIN) specified by the recipient, a password, and the like are recorded as the first identification information. Various aspects of the first identification information will be described later.
  また、本実施例では、預かりバリューの課金のために使用される可搬デバイス201を、第1可搬デバイス201aと呼び、釣りバリューの返還のために使用される可搬デバイス201を、第2可搬デバイス201bと呼ぶ。多くの場合には、第1可搬デバイス201aと、第2可搬デバイス201bと、は、同一の可搬デバイス201であるが、本実施例では、両者を異なる可搬デバイス201とすることも可能である。 In the present embodiment, the portable device 201 used for billing of the custody value is referred to as a first portable device 201a, and the portable device 201 used for returning the fishing value is referred to as the second portable device 201a. This is called a portable device 201b. In many cases, the first portable device 201a and the second portable device 201b are the same portable device 201, but in the present embodiment, they may be different portable devices 201. Is possible.
  このため、被提供者が電子マネーの預かり金の課金に利用しようとする可搬デバイス201自体の識別符号(個体識別番号、製造番号、アカウントID等)は、被提供者を識別するための情報としては利用しない。 For this reason, the identification code (individual identification number, serial number, account ID, etc.) of the portable device 201 itself that the provider intends to use for charging electronic money deposit information is information for identifying the provider. Not used as.
  さて、受付部103は、取引対象の提供に先立って、預かりバリューの指定を被提供者から受け付け、減少部104は、被提供者が使用する第1可搬デバイス201aに対応付けられる第1残存バリューを預かりバリューだけ減少させる。本実施例においては、取引が完了するまで総提供量が確定しないような取引を想定する。したがって、被提供者は、取引において支払っても良いと考える上限額を、受付部103に対して指定する。 The accepting unit 103 accepts designation of the custody value from the recipient prior to providing the transaction target, and the reducing unit 104 is the first remaining device associated with the first portable device 201a used by the recipient. Decrease the value by keeping the value. In this embodiment, a transaction is assumed in which the total provided amount is not fixed until the transaction is completed. Therefore, the recipient specifies an upper limit amount that he / she can pay in the transaction to the receiving unit 103.
  さらに、減少がされると、制御部105は、取引対象を、預かりバリュー以下の対価バリューに対応する提供量だけ提供する制御をする。したがって、制御部105は、取引対象を提供する処理を自ら行っても良いし、別途用意された提供装置等に、取引の上限額である預かりバリューの値、もしくは、当該預かりバリューに相当する提供量の上限値を伝達して、当該提供装置等に、当該上限までの取引をするよう指示するのでも良い。対価バリューは、被提供者に実際に提供された総提供量に対する対価額である。 Further, when the decrease is made, the control unit 105 performs control to provide the transaction target by the provision amount corresponding to the consideration value equal to or lower than the deposit value. Therefore, the control unit 105 may perform the process of providing the transaction object by itself, or provide a value corresponding to the custody value, which is the upper limit of the transaction, on a separately provided providing device or the like. The upper limit value of the amount may be transmitted to instruct the providing device or the like to make a transaction up to the upper limit. The consideration value is a consideration value with respect to the total provision amount actually provided to the recipient.
  そして、取得部106は、預かりバリューから対価バリューを差し引いた釣りバリューを受け取ろうとする受取者を識別する第2識別情報を取得する。ここで取得される第2識別情報の種類は、上記の第1識別情報と同種の情報であるが、必ずしも、すべてを取得する必要はなく、後述するように、状況に応じて、第1識別情報よりも少ない種類の情報を第2識別情報として取得することとしても良い。 取得 Then, the acquisition unit 106 acquires second identification information for identifying a recipient who intends to receive a fishing value obtained by subtracting the consideration value from the custody value. The type of the second identification information acquired here is the same type of information as the first identification information described above. However, it is not always necessary to acquire all of the information, and as described later, the first identification information depends on the situation. Information of a type less than information may be acquired as the second identification information.
  また、判定部107は、第1識別情報と、第2識別情報と、に基いて、釣りバリューを受取者に受け取らせるべきか否かを判定する。第1識別情報と、第2識別情報と、がマッチすれば、釣りバリューを受け取るべき者に対して、釣りバリューを渡す。しかしながら、マッチしなければ、釣りバリューは渡さない。両者がマッチしない、ということは、釣りバリューを受け取ろうとしている受取者が預かりバリューを預けた被提供者とは異なる者であり、釣りバリューを受け取るための正当な権利を有していないと考えられるからである。 In addition, the determination unit 107 determines whether or not the receiver should receive the fishing value based on the first identification information and the second identification information. If the first identification information and the second identification information match, the fishing value is passed to the person who should receive the fishing value. However, if there is no match, no fishing value is passed. If the two do not match, the recipient who is trying to receive the fishing value is different from the recipient who received the fishing value, and does not have a legitimate right to receive the fishing value. Because it is.
  そして、省略可能な増加部108は、釣りバリューを受け取らせるべきと判定された受取者が使用する第2可搬デバイス201bに対応付けられる第2残存バリューを釣りバリューだけ増加させる。 Then, the optional increase unit 108 increases the second remaining value associated with the second portable device 201b used by the recipient who is determined to receive the fishing value by the fishing value.
  すなわち、受取者が、釣りバリューを受け取る正当な権利を有すると考えられる者である、と判定されると、受取者が利用する第2可搬デバイス201bに、釣りバリューがチャージされる。 In other words, if it is determined that the recipient is considered to have a legitimate right to receive the fishing value, the fishing value is charged to the second portable device 201b used by the recipient.
  電子マネーシステムを利用する場面では、電子マネー用のリーダ/ライタと可搬デバイスが通信によりコマンドの要求と応答のやりとりをする。したがって、可搬デバイス201の「電子マネーの財布」としての標別番号は、自ずとリーダ/ライタにより取得される。特許文献2に開示される技術では、この「電子マネーの財布」としての識別番号を、被提供者の同一性の認証に用いる。しかしながら、上述の通り、可搬デバイス201の識別番号のみでは、被提供者の同一性を担保するのに不十分な局面も多い。 場面 When using an electronic money system, a reader / writer for electronic money and a portable device exchange commands and responses via communication. Accordingly, the identification number as the “electronic money wallet” of the portable device 201 is acquired by the reader / writer. In the technique disclosed in Patent Document 2, the identification number as the “electronic money wallet” is used for authentication of the identity of the recipient. However, as described above, there are many situations where the identification number of the portable device 201 alone is insufficient to ensure the identity of the recipient.
  一方、本実施例においては、可搬デバイス201自体の識別情報だけをもって、被提供者の同一性を認証することはない。このため、預かりバリューの徴収時に使われる第1可搬デバイス201aと、釣りバリューのチャージ時に使われる第2可搬デバイス201bと、は、同じデバイスでも良いし、異なるデバイスでも良い。 On the other hand, in this embodiment, the identity of the recipient is not authenticated only by the identification information of the portable device 201 itself. For this reason, the first portable device 201a used when collecting the custody value and the second portable device 201b used when charging the fishing value may be the same device or different devices.
  このため、本発明では、種々の識別情報を利用することにより、釣りバリューを受け取ろうとする者が、取引対象の被提供者と同一であることを確認することで、より確実に、正当なユーザに釣りバリューを返却することができる。 For this reason, in the present invention, by using various kinds of identification information, it is confirmed that the person who wants to receive the fishing value is the same as the recipient of the transaction target. Fishing value can be returned.
  ここで、記録部102は、被提供者に識別情報を入力させる場合には、キーボードやボタン、タッチスクリーン、音声認識入力機等によって被提供者の識別情報を取得し、被提供者の積極的な行動を要しない形態では、被提供者の識別情報をカメラや各種センサによって取得して、取得された識別情報をハードディスクなどの記憶装置に記憶させることにより、記録を行う。 Here, the recording unit 102 acquires the identification information of the recipient by using a keyboard, a button, a touch screen, a voice recognition input device, or the like when the identification information is input to the recipient. In a form that does not require any action, recording is performed by acquiring the identification information of the recipient using a camera or various sensors and storing the acquired identification information in a storage device such as a hard disk.
  一方、受付部103は、預かりバリューの値を被提供者に指定させるためのキーボードやボタン、タッチスクリーン、音声認識入力機等によって実現される。 On the other hand, the accepting unit 103 is realized by a keyboard, a button, a touch screen, a voice recognition input device, or the like for allowing the recipient to specify the value of the stored value.
  減少部104ならびに増加部108は、電子マネーシステム用のリーダ/ライタから減少コマンドや増加コマンドを第1可搬デバイス201aや第2可搬デバイス201bへ送信することにより、実現される。コマンドの実行結果は、可搬デバイス201からリーダ/ライタへ送信される応答の内容から取得できる。これらの情報を送受するための通信には、上述の通り、NFC等を採用することができる。 The haze reduction unit 104 and the increase unit 108 are realized by transmitting a decrease command or an increase command from the reader / writer for the electronic money system to the first portable device 201a or the second portable device 201b. The command execution result can be acquired from the content of the response transmitted from the portable device 201 to the reader / writer. As described above, NFC or the like can be employed for communication for transmitting and receiving these pieces of information.
  制御部105ならびに判定部107は、管理装置101全体を制御するもので、コンピュータのCPU(Central Processing Unit)が所定のプログラムを実行することにより、もしくは、制御用の電子回路が動作することにより、実現される。 The control unit 105 and the determination unit 107 control the entire management apparatus 101, and when a computer CPU (Central Processing Unit) executes a predetermined program, or when a control electronic circuit operates, Realized.
  以下では、管理装置101における制御の実施例について、さらに詳細に説明する。図3は、本発明の実施例に係る管理装置が実行する管理処理の制御の流れを示すフローチャートである。以下、本図を参照して説明する。 In the following, an embodiment of control in the management apparatus 101 will be described in more detail. FIG. 3 is a flowchart showing a control flow of management processing executed by the management apparatus according to the embodiment of the present invention. Hereinafter, a description will be given with reference to FIG.
  まず、受付部103は、被提供者から、預かりバリューの指定を受け付ける(ステップS301)。預かりバリューの指定は、明示的な数値を入力させるのでも良いし、たとえば、ガソリンの給油において「満タン」が指定されると預かりバリューが1万円分とされる、等のように、暗黙のうちに数値の指定がされることとしても良い。 First, the accepting unit 103 accepts designation of custody value from the recipient (step S301). The specified value of the deposit may be input as an explicit number. For example, if “full tank” is specified for gasoline refueling, the deposit value will be 10,000 yen. A numerical value may be specified.
  次に、記録部102は、取引対象の提供を受けようとする被提供者の第1識別情報を記録する(ステップS302)。なお、第1識別情報は、受付(ステップS301)の実行よりも前に取得したものでも良いし、後に取得したものでも良い。 Next, the recording unit 102 records the first identification information of the recipient to be provided with the transaction object (step S302). Note that the first identification information may be acquired before execution of reception (step S301) or may be acquired after execution.
  ついで、減少部104は、被提供者が使用する第1可搬デバイス201aに対応付けられる第1残存バリューを、指定された預かりバリューだけ、減少させる(ステップS303)。本実施例では、被提供者が第1可搬デバイス201aを電子マネーシステム用のリーダ/ライタに近付け、両者の間の通信が確立されてから、減少コマンドがリーダ/ライタから第1可搬デバイス201aへ送信されることによって、第1残存バリューの減少が実現される。 Next, the decrease unit 104 decreases the first remaining value associated with the first portable device 201a used by the recipient by the designated deposit value (step S303). In the present embodiment, the recipient receives the first portable device 201a close to the reader / writer for the electronic money system and communication between the two is established, and then the decrease command is sent from the reader / writer to the first portable device. By transmitting to 201a, the first remaining value is reduced.
  なお、リーダ/ライタが減少コマンドを送信する前に、問合せコマンドを送信して、第1残存バリューを取得し、取得された第1残存バリューが預かりバリューよりも少ない場合には、預かりバリューを取得された第1残存バリューに更新することとしても良い。このほか、ステップS301に戻って、被提供者に、預かりバリューを再指定させても良い。 Before sending the decrease command, the reader / writer sends an inquiry command to obtain the first remaining value, and if the obtained first remaining value is less than the deposit value, obtain the deposit value. The updated first remaining value may be updated. In addition, it is possible to return to step S301 and allow the recipient to re-specify the custody value.
  さらに、第1可搬デバイス201aの第1残存バリューを全額課金した後に、ユーザにより指定された預かりバリューと、課金済みのバリューとの差額を補填するため、他の可搬デバイス201に交換するよう被提供者に求めることとしても良い。この態様では、被提供者は、預かりバリュー全額が課金されるまで、可搬デバイス201を交換し続けることになる。 Further, after the first remaining value of the first portable device 201a is charged in full, it is exchanged for another portable device 201 in order to compensate for the difference between the deposit value designated by the user and the charged value. It may be requested from the recipient. In this aspect, the recipient continues to exchange the portable device 201 until the full deposit value is charged.
  このほか、これらを組み合わせて、途中で補填を打ち切ったり、途中で預かりバリューの再指定をさせることとしても良い。 ほ か In addition, it is also possible to combine these and cancel compensation on the way or re-specify the stored value on the way.
  ステップS303により、預かりバリュー分の課金が行われたら、制御部105は、預かりバリューを上限額として、すなわち、預かりバリューに対応する提供量を上限量として、取引対象を提供するための制御を行う(ステップS304)。上記のように、取引対象の提供そのものを制御部105が行っても良いし、別途用意された提供装置に対して指定された上限までの提供を行うように制御部105が指示をするのでも良い。 When charging for the custody value is performed in step S303, the control unit 105 performs control for providing the transaction target with the custody value as the upper limit amount, that is, with the provision amount corresponding to the custody value as the upper limit amount. (Step S304). As described above, the control unit 105 may provide the transaction target itself, or the control unit 105 may instruct the provision to a specified upper limit for a separately provided providing device. good.
  そして、取引対象の提供が完了するまで待機する(ステップS305)。取引対象の提供そのものの処理には、ステップS305の待機処理とは並行して行われ提供が完了すると、割込等が生じてステップS305を抜けるような制御を採用しても良いし、取引対象の提供が完了したか否かを繰り返しチェックするような制御を採用しても良い。 す る Then, it waits until the provision of the transaction object is completed (step S305). In the processing of the transaction target provision itself, control that is performed in parallel with the standby processing in step S305 and that exits step S305 when the provision is completed may be adopted. It is also possible to adopt a control that repeatedly checks whether or not the provision of the service has been completed.
  取引対象の提供が完了したら、制御部105は、提供された取引対象の総提供量に対応する対価バリューを取得する(ステップS306)。対価バリューは、預かりバリュー以下の値となるはずである。そして、預かりバリューから対価バリューを減算することにより、釣りバリューを計算する(ステップS307)。 When the provision of the transaction object is completed, the control unit 105 acquires a consideration value corresponding to the total provided amount of the transaction object provided (step S306). The consideration value should be less than or equal to the custody value. Then, the fishing value is calculated by subtracting the consideration value from the deposit value (step S307).
  そして、釣りバリューが0であれば(ステップS308;Yes)、管理装置101は、取引を終了するため、本処理を終了する。上述の通り、取引の終了にあたっては、預かりバリューと対価バリューが一致し、釣りバリューが0円であること、ならびに、提供された取引対象の総提供量を記載した領収書やレシートを、受取者に渡すことが望ましい。 If the fishing value is 0 (step S308; Yes), the management apparatus 101 ends this process to end the transaction. As described above, at the end of the transaction, the receipt value and receipt indicating that the deposit value is equal to the consideration value, the fishing value is 0 yen, and the total provided amount of the transaction object provided is the recipient It is desirable to pass to.
  一方、釣りバリューが正であれば(ステップS308;No)、取得部106は、釣りバリューを受け取ろうとする受取者の第2識別情報を取得する(ステップS309)。 On the other hand, if the fishing value is positive (step S308; No), the acquiring unit 106 acquires the second identification information of the recipient who intends to receive the fishing value (step S309).
  上述の通り、取得される第2識別情報の種類は、第1識別情報の種類の一部であっても良いし、全部であっても良い。また、預かりバリューの課金がされた第1状況と、釣りバリューを受け取ろうとする第2状況と、の差異によって変化させても良い。たとえば、第1状況と第2状況として時刻を採用する場合に、両者が近ければ、第2識別情報として受取者の顔写真の生体情報のみを利用するが、長時間が経過している場合には、第2識別情報として受取者の顔写真の生体情報に加えて、受取者に暗証番号を入力させる、などのような態様を採用しても良い。 As described above, the type of the second identification information acquired may be a part or all of the type of the first identification information. Further, it may be changed depending on the difference between the first situation where the deposit value is charged and the second situation where the fishing value is received. For example, when time is adopted as the first situation and the second situation, if both are close, only the biometric information of the recipient's face photo is used as the second identification information, but a long time has passed In addition to the biometric information of the recipient's face photo as the second identification information, a mode in which the recipient inputs a personal identification number may be adopted.
  そして、判定部107は、記録されている第1識別情報と、取得された第2識別情報と、がマッチするか否かを判定する(ステップS310)。ここで、マッチとして、完全一致を採用しても良いし、部分一致を採用しても良い。また、第1状況と第2状況の差異に基づいて、マッチの許容度を変化させても良い。 Then, the determination unit 107 determines whether or not the recorded first identification information matches the acquired second identification information (step S310). Here, a perfect match may be adopted as a match, or a partial match may be adopted. Further, the match tolerance may be changed based on the difference between the first situation and the second situation.
  マッチする、と判定された場合(ステップS310;Yes)、増加部108は、受取者が使用する第2可搬デバイス201bに対応付けられる第2残存バリューを、釣りバリューだけ、増加させて(ステップS311)、本処理を終了する。なお、この際には、上記と同様に、預かりバリュー、取引対象の総提供量および対価バリュー、釣りバリューを記載したレシートや領収書を発行して、受取者に渡すことが望ましい。 When it is determined that they match (Step S310; Yes), the increase unit 108 increases the second remaining value associated with the second portable device 201b used by the recipient by the fishing value (Step S310). S311), the process is terminated. In this case, as described above, it is desirable to issue a receipt or receipt describing the deposit value, the total provision amount and the consideration value of the transaction object, and the fishing value and give it to the recipient.
  ここで、被提供者が第1可搬デバイス201aを電子マネーシステム用のリーダ/ライタに近付けたまま取引対象の提供が完了した場合には、第2可搬デバイス201bとして第1可搬デバイス201aがそのまま利用される。一方、第1可搬デバイス201aを一旦リーダ/ライタから離した場合には、他の可搬デバイス201を第2可搬デバイス201bとして利用することもできる。 Here, when the provider completes the provision of the transaction object while keeping the first portable device 201a close to the reader / writer for the electronic money system, the first portable device 201a is used as the second portable device 201b. Is used as is. On the other hand, when the first portable device 201a is once separated from the reader / writer, another portable device 201 can be used as the second portable device 201b.
  第2可搬デバイスとリーダ/ライタの間の通信が確立されてから、増加コマンドがリーダ/ライタから第2可搬デバイス201bへ送信されることによって、第2残存バリューの増加が実現される。 通信 After the communication between the second portable device and the reader / writer is established, an increase command is transmitted from the reader / writer to the second portable device 201b, thereby increasing the second remaining value.
  一方、マッチしない、と判定された場合(ステップS310;No)、たとえば店舗の有人カウンタにて相談するよう受取者にメッセージを出したり、電子マネーの不正利用の可能性がある旨の連絡を提供者に伝達する等、被提供者と受取者が合致しない旨の警告をして(ステップS312)、釣りバリューのチャージはしないまま、本処理を終了する。この際に、釣りバリューを返還しなかった理由及び返還を受けるための指示情報等を掲載した明細書等を受取者に渡すこととしても良い。この場合、正式な領収書やレシートは、有人カウンタにて受取者が被提供者と一致することを店員が確認し、店員が手動等で釣りバリューを返還した後に、発行されることになる。 On the other hand, if it is determined that they do not match (Step S310; No), for example, a message is sent to the recipient to consult with a manned counter at the store, or a notification that there is a possibility of unauthorized use of electronic money is provided. A warning that the recipient and the recipient do not match is issued (step S312), and the processing ends without charging the fishing value. At this time, it is also possible to hand over to the recipient a description or the like on which the reason why the fishing value was not returned and instruction information for receiving the return is posted. In this case, the official receipt or receipt is issued after the clerk confirms that the recipient matches the recipient at the manned counter, and the clerk manually returns the fishing value.
  なお、第1識別情報と第2識別情報がマッチしない場合には、第2識別情報の取得の際に何らかの誤りが生じたものと考えて、所定回数までは、ステップS309に戻り、第2識別情報の再取得ならびに判定の再試行を行うこととしても良い。 If the first identification information and the second identification information do not match, it is considered that some error has occurred during acquisition of the second identification information, and the process returns to step S309 up to a predetermined number of times, Information may be reacquired and determination may be retried.
  このように、本態様によれば、預かりバリューから提供された取引対象の総提供量に相当する対価バリューを差し引いた釣りバリューを、預かりバリューが課金された被提供者に安全に受け取らせることができる。 As described above, according to this aspect, it is possible to cause the recipient who is charged with the custody value to safely receive the fishing value obtained by subtracting the consideration value corresponding to the total provision amount of the transaction target provided from the custody value. it can.
  本実施例では、暗証番号が入力されず、あるいは、第2可搬デバイス201bが通信可能範囲へ設置されないまま、一定時間が経過した場合には、釣りバリューの受け取り忘れと判断して、セルフ給油機501による釣りバリューの返還は、それ以降はできないようにし、有人カウンタでの返金により対応することを想定している。受け取り忘れた釣りバリューの返却をセルフ給油機501で行うための態様については、後述する。 In the present embodiment, if a personal identification number is not entered, or if the second portable device 201b is not installed in the communicable range and a certain period of time has elapsed, it is determined that the fishing value is forgotten and self-refueling is performed. It is assumed that the fishing value cannot be returned by the machine 501 after that, and is handled by refunding with a manned counter. A mode for returning the fishing value forgotten to be received by the self-fueling machine 501 will be described later.
  さて、第1識別情報や第2識別情報として利用可能な識別情報としては、上記のような暗証番号が最も単純な例である。このほか、取引対象の提供にあたってカメラにより撮影された被提供者の写真そのもの、もしくは、当該写真から抽出される被提供者の生体情報を利用することができる。この態様では、被提供者の顔写真と、受取者の顔写真と、の特徴がある程度一致すれば、両者はマッチする、と考えられる。 Now, as the identification information that can be used as the first identification information and the second identification information, the above-mentioned personal identification number is the simplest example. In addition, it is possible to use a photograph of the recipient taken by the camera when providing the transaction target, or the recipient's biological information extracted from the photograph. In this aspect, if the characteristics of the recipient's face photograph and the recipient's face photograph match to some extent, it is considered that both match.
  また、カメラにより撮影された取引対象の提供に係る物品を、識別情報に利用することもできる。たとえば、自動車にガソリンを給油する場合には、自動車の写真や、この写真から認識される自動車の色、ナンバー、車種等を第1識別情報とし、受取者には、複数の自動車の写真を列挙してその中から受取者(被提供者)が給油した自動車を選択させたり、ナンバーや車種等を入力させて、第2識別情報とする、という態様が考えられる。 物品 Articles related to the provision of a transaction object photographed by a camera can also be used for identification information. For example, when gasoline is supplied to a car, the first identification information is the car photo and the color, number, model, etc. of the car recognized from this picture. Then, it is possible to select the vehicle supplied by the recipient (provided person) from among them, or input the number, the vehicle type, etc., as the second identification information.
  さらに、暗証番号、パスワード、署名、文字列などを識別情報としたり、複数の画像を候補として並べてこれらからいずれかを選択させ、その選択結果を識別情報とすることもできる。この態様では、被提供者が入力した暗証番号等を第1識別情報とし、受取者には、その暗証番号等を第2識別情報として入力させる、という態様を採用することができる。この態様では、取引対象の提供前に第1識別情報を被提供者に入力させることで、釣りバリューの返却が生じうることをユーザに事前に告知するので、釣りバリューの受け取り忘れを抑制することができる。 Furthermore, a personal identification number, a password, a signature, a character string, etc. can be used as identification information, or a plurality of images can be arranged as candidates to select one of them, and the selection result can be used as identification information. In this aspect, it is possible to adopt an aspect in which the personal identification number entered by the recipient is used as the first identification information, and the recipient is prompted to enter the personal identification number as the second identification information. In this aspect, by allowing the recipient to input the first identification information before providing the transaction target, the user is notified in advance that the fishing value can be returned, so that forgetting to receive the fishing value can be suppressed. Can do.
  このほか、管理装置101が、暗証番号等をランダムに決めて被提供者に提示して記憶させ、受取時に、記憶させた暗証番号等を入力させることとしても良い。 In addition to this, the management apparatus 101 may randomly determine a personal identification number and the like, present it to the recipient, store it, and input the stored personal identification number when receiving it.
  さらに、複数のアンケートからいずれかを選択して、選択されたアンケートへの回答を被提供者に求めることで第1識別情報とし、第2識別情報としては、アンケートに対して何を回答したか、を採用することができる。また、第2識別情報として、複数のアンケートの問いを列挙して、被提供者はどの問いに対して回答したのか、を受取者に選択させることとしても良い。 Furthermore, by selecting one from multiple questionnaires and asking the recipient for an answer to the selected questionnaire, the first identification information is used, and the second identification information is what was answered to the questionnaire. , Can be adopted. Also, as the second identification information, a plurality of questionnaire questions may be listed and the recipient may select which question the recipient has answered.
  なお、各取引について、提供の開始時点で、取引が行われた日時、預かりバリューの金額およびこれが徴収された可搬デバイス201、取得された第1識別情報が、ハードディスクやネットワークストレージ等の不揮発性の記憶装置に記録される。また、各取引について、提供の終了時点で、提供された取引対象の総提供量および対価バリューの金額が同様に記録され、釣りバリューの返還後に、第2識別情報、釣りバリューの金額およびこれがチャージされた可搬デバイス201が、同様に記録される。これらの情報は、経理上の記録となるほか、後述するように、被提供者が釣りバリューのチャージを忘れたときや、可搬デバイス201を置き忘れたときの処理で利用される。 For each transaction, the date and time when the transaction was performed, the amount of the custody value and the portable device 201 on which the transaction was collected, and the obtained first identification information are non-volatile such as a hard disk or network storage. Recorded in the storage device. In addition, for each transaction, at the end of the provision, the total provision amount of the transaction object provided and the amount of the consideration value are similarly recorded, and after the return of the fishing value, the second identification information, the amount of the fishing value and this are charged. The portable device 201 thus recorded is recorded in the same manner. In addition to accounting records, these pieces of information are used in processing when the recipient forgets to charge the fishing value or forgets to place the portable device 201, as will be described later.
  本実施例は上記実施例の好適実施形態に該当するものであり、ガソリンスタンドのセルフ給油機に本発明を適用したものである。以下、理解を容易にするため、共通点や既に説明した要素については適宜説明を省略する。 This example corresponds to a preferred embodiment of the above example, and the present invention is applied to a self-fueling machine at a gas station. Hereinafter, in order to facilitate understanding, descriptions of common points and elements already described will be omitted as appropriate.
  図4は、本発明の実施例に係るセルフ給油機の外観を示す説明図である。以下、これらの図を参照して説明する。 FIG. 4 is an explanatory view showing the appearance of the self-fueling machine according to the embodiment of the present invention. Hereinafter, description will be given with reference to these drawings.
  セルフ給油機501は、被提供者との間で種々の情報をやりとりするための操作パネル502、被提供者が対価の支払に使用する可搬デバイス201を翳すためのリーダ/ライタ503、現金投入口504、カード投入口505、プリンタ506、ガソリン等を給油するためのノズル507、カメラ508を有する。 The self-fueling machine 501 includes an operation panel 502 for exchanging various information with the recipient, a reader / writer 503 for deceiving the portable device 201 used by the recipient for payment of compensation, cash It has a slot 504, a card slot 505, a printer 506, a nozzle 507 for supplying gasoline and the like, and a camera 508.
  被提供者は、操作パネル502に用意されたタッチスクリーンやディスプレイ、各種ランプ等に表示される種々のメッセージを見ることで情報を得て、そのタッチスクリーンの表面やボタン、各種キーに触れることで種々の指示操作を行う。このほか、スピーカとマイクを用意することで、音声により情報のやりとりをしても良い。 The recipient obtains information by viewing various messages displayed on the touch screen, display, and various lamps prepared on the operation panel 502, and touches the surface, buttons, and various keys on the touch screen. Various instruction operations are performed. In addition, information may be exchanged by voice by preparing a speaker and a microphone.
  現金投入口504は、対価の支払に現金を利用する場合に、前払いで紙幣を投入するためのものであり、カード投入口505は、対価の支払にクレジットカードやデビットカード、プリペイドカードを利用する際に、これらのカードを投入するためのものである。 The cash slot 504 is used to insert bills in advance when cash is used for payment. The card slot 505 uses a credit card, debit card, or prepaid card for payment. In order to insert these cards.
  リーダ/ライタ503は、対価の支払に電子マネーを利用する場合に、被提供者が可搬デバイス201を翳して、通信をさせるためのものである。 The reader / writer 503 is for the recipient to enter the portable device 201 to communicate when using electronic money for payment.
  本図に示すように、リーダ/ライタ503の表面がセルフ給油機501の前面552に沿って略垂直である場合や、リーダ/ライタ503の表面がセルフ給油機501に設けられた窪みに沿って斜めである場合等には、被提供者は、リーダ/ライタ503に可搬デバイス201を翳して預かりバリューの課金をしたら、可搬デバイス201をポケットや鞄などに収納し、釣りバリューの返却の際に、再度リーダ/ライタ503に可搬デバイス201を翳すことになる。 As shown in this figure, when the surface of the reader / writer 503 is substantially vertical along the front surface 552 of the self-fueling machine 501, or the surface of the reader / writer 503 is along the recess provided in the self-fueling machine 501. If the recipient is inclined, he / she charges the portable device 201 with the reader / writer 503 to charge the stored value, and stores the portable device 201 in a pocket or bag to return the fishing value. At this time, the portable device 201 is put in the reader / writer 503 again.
  可搬デバイス201が落下したりリーダ/ライタ503から離れて通信可能範囲から離脱したりしないように、リーダ/ライタ503の表面が水平になっていたり、各種のホルダを利用できる場合には、ユーザの意思に基づいて、取引の開始から終了までの間、可搬デバイス201を置いたままとすることも可能である。 If the surface of the reader / writer 503 is horizontal or various holders can be used so that the portable device 201 does not fall or leave the reader / writer 503 and leave the communicable range, It is also possible to leave the portable device 201 from the start to the end of the transaction based on the will of the user.
  さて、クレジットカード等を利用する場合は、取引の開始時にカード投入口505にカードを投入し、取引の終了時にカード投入口505からカードが吐き出される。したがって、カード投入口505では、カードの出し入れを行うための機構が必要となる。 Now, when using a credit card or the like, the card is inserted into the card slot 505 at the start of the transaction, and the card is discharged from the card slot 505 at the end of the transaction. Therefore, the card insertion slot 505 requires a mechanism for taking out / inserting cards.
  一方、電子マネーを利用する場合は、可搬デバイス201がリーダ/ライタ503の表面に翳されて通信可能範囲に入っていれば決済が可能となる。したがって、ホルダのような簡易かつ安価な構造物を用いれば、可搬デバイス201を保持することもできる。 On the other hand, when using electronic money, settlement is possible if the portable device 201 is placed on the surface of the reader / writer 503 and is within the communicable range. Therefore, the portable device 201 can be held by using a simple and inexpensive structure such as a holder.
  プリンタ506は、取引の完了後に、レシートや領収書を印刷する。 Printer 506 prints a receipt or receipt after the transaction is completed.
  カメラ508は、被提供者の来店を検知する。これにより、セルフ給油機501を省電力モードから通常モードに移行させることができる。また、防犯のため、被提供者の外見や給油の対象となる自動車の外観を撮影することもできる。 Camera 508 detects the visit of the recipient. Thereby, the self-fueling machine 501 can be shifted from the power saving mode to the normal mode. In addition, for crime prevention, it is possible to photograph the appearance of the recipient and the appearance of the automobile that is the target of refueling.
  本図に示すセルフ給油機501では、油種に応じて3個のノズル507が用意されているが、販売するガソリン等の種類の数に応じて、適宜数を変更することができる。フル給油の条件が満たされる間は、ノズル507のレバーを強く引いている間、ガソリン等が最大流量で流出する。 In the self-fueling machine 501 shown in this figure, three nozzles 507 are prepared according to the type of oil, but the number can be appropriately changed according to the number of types of gasoline to be sold. While the condition of full refueling is satisfied, gasoline or the like flows out at the maximum flow rate while pulling the lever of the nozzle 507 strongly.
  満タンが検知されると、強く引いているレバーが強制的に戻され、満タン検知がされている間は、レバーを強く引くことができなくなる。この場合には、レバーを弱く引けば、ごく少ない流量で給油がされる。 When a full tank is detected, the lever that is being pulled strongly is forcibly returned, and while the full tank is being detected, the lever cannot be pulled strongly. In this case, if the lever is pulled weakly, the oil is supplied at a very small flow rate.
  なお、セルフ給油機501において、ノズル507のレバーを強く引いたままの状態でロックをかけられるようにして、ハンズフリー給油を可能としても良い。 Note that in the self-fueling machine 501, it is possible to enable hands-free refueling by allowing the self-fueling machine 501 to be locked while the lever of the nozzle 507 is pulled strongly.
  上記のように、タンク内の油量が満タン近くになり、給油の自動停止がされると、強く引いているレバーが強制的に戻され、ハンズフリー給油用のロックをしていても解除される。そして、自動停止の条件が満たされている間は、レバーを強く引くことができなくなるか、レバーを強く引いても、給油がされない状態となる。この場合には、上記のように、レバーを弱く引けば、ごく少ない流量で給油がされるので、自動停止の条件が成立している間でも、さらに少量の給油をすることが可能である。 As mentioned above, when the amount of oil in the tank is nearly full and the automatic refueling is stopped, the lever that is pulled strongly is forcibly returned, and even if the lock for hands-free refueling is locked Is done. While the automatic stop condition is satisfied, the lever cannot be pulled strongly, or even if the lever is pulled strongly, no fuel is supplied. In this case, as described above, if the lever is pulled weakly, the fuel is supplied at a very small flow rate, so that it is possible to supply a smaller amount of oil even while the automatic stop condition is satisfied.
  セルフ給油機501は、販売店舗内LAN(Local Area Network)などを介して、現金による釣銭の支払機(図示せず)や、店員が控えている店舗内のレジスタ(図示せず)、セルフ給油機501を介して取引された販売ログを記録するための外部記憶装置203等に接続される。 Self refueling machine 501 is a cash dispenser (not shown) for cash change, a store register (not shown) in the store reserved by the store clerk, self-refueling via a LAN (Local Area Network) in the store. It is connected to an external storage device 203 or the like for recording a sales log traded through the machine 501.
  これらセルフ給油機501の各部は、図示しないCPUが所定のプログラムを実行することにより、もしくは専用の電子回路により制御される。 各 Each part of the self-fueling machine 501 is controlled by a CPU (not shown) executing a predetermined program or by a dedicated electronic circuit.
  被提供者が電子マネーを用いてセルフ給油機501によりガソリン等の提供を受ける際には、上記実施例と同様の制御がなされる。以下では、第1識別情報および第2識別情報として暗証番号を利用する最も単純な形態について、まず説明し、ついで、種々の態様について説明する。 When the recipient receives provision of gasoline or the like from the self-fueling machine 501 using electronic money, the same control as in the above embodiment is performed. Below, the simplest form using a personal identification number as the first identification information and the second identification information will be described first, and then various aspects will be described.
  まず、セルフ給油機501は、取引の開始にあたって被提供者から支払方法を選択させる。図5は、支払方法を被提供者に選択させるための画面の表示例である。本図に示す例では、現金、クレジットカード、デビットカード、電子マネーのそれぞれにより支払をするための支払方法ボタン601a-601dが操作パネル502のタッチスクリーン上に表示され、メッセージ表示欄605には、いずれかの支払方法を選ぶように、被提供者に対するメッセージが表示されている。 First, the self-fueling machine 501 selects the payment method from the provider at the start of the transaction. FIG. 5 is a display example of a screen for allowing the recipient to select a payment method. In the example shown in this figure, payment method buttons 601a to 601d for paying with each of cash, credit card, debit card, and electronic money are displayed on the touch screen of the operation panel 502, and in the message display field 605, A message to the recipient is displayed to select one of the payment methods.
  被提供者が、支払方法ボタン601a-601cに触れると、従来の取引の手続が実行される。支払方法ボタン601dに触れると、本実施例の取引の手続が開始される。 When the recipient touches the payment method button 601a-601c, the conventional transaction procedure is executed. When the payment method button 601d is touched, the transaction procedure of this embodiment is started.
  電子マネーによる支払が選択されると、セルフ給油機501は、被提供者に取引条件を入力するよう促す。図6は、取引条件を被提供者に選択させるための画面の表示例である。本図に示す例では、レギュラー、ハイオク、軽油から油種を選択するための油種チェックボックス611a-611cが操作パネル502のタッチスクリーン上に表示されている。 支 払 When payment by electronic money is selected, the self-fueling machine 501 prompts the recipient to input transaction conditions. FIG. 6 is a display example of a screen for allowing the recipient to select transaction conditions. In the example shown in the figure, oil type check boxes 611a-611c for selecting an oil type from regular, high-octane, and light oil are displayed on the touch screen of the operation panel 502.
  また、給油量として10リットル、20リットル、30リットル、40リットル、満タンを選択するための上限量ボタン612a-612eが操作パネル502のタッチスクリーン上に表示されている。 In addition, upper limit amount buttons 612a-612e for selecting 10 liters, 20 liters, 30 liters, 40 liters, and full tanks as the refueling amount are displayed on the touch screen of the operation panel 502.
  さらに、支払金額1000円、2000円、3000円、5000円を選択することにより給油量を設定するための上限額ボタン613a-613dが操作パネル502のタッチスクリーン上に表示されている。 In addition, upper limit buttons 613a-613d for setting the amount of refueling by selecting payment amounts of 1000 yen, 2000 yen, 3000 yen, 5000 yen are displayed on the touch screen of the operation panel 502.
  そして、いずれかを選択するよう求めるメッセージがメッセージ表示欄605に表示されている。 メ ッ セ ー ジ A message for selecting one is displayed in the message display field 605.
  また、被提供者は、戻るボタン614を操作すれば、最初から入力をやり直すことができる。 In addition, if the recipient operates the return button 614, the recipient can restart the input from the beginning.
  被提供者が油種チェックボックス611a-611cからいずれかを選択した上で、上限額ボタン613a-613dのいずれかに触れると、当該上限額を預かりバリューに指定する旨が受け付けられたことになる(ステップS301)。 When the recipient selects one of the oil type check boxes 611a-611c and touches one of the upper limit buttons 613a-613d, it is accepted that the upper limit is specified as the deposit value. (Step S301).
  一方、被提供者が油種チェックボックス611a-611cからいずれかを選択した上で、上限量ボタン612a-612dのいずれかに触れると、当該上限量を給油した場合の価格が、預かりバリューに指定されたことになる(ステップS301)。 On the other hand, when the recipient selects one of the oil type check boxes 611a-611c and touches any of the upper limit buttons 612a-612d, the price when the upper limit amount is refueled is designated as the deposit value. (Step S301).
  このほか、被提供者が油種チェックボックス611a-611cからいずれかを選択した上で、満タンを選択する上限量ボタン612eに触れただけでは、総提供量の上限は決まらない。この場合には、被提供者に預かりバリューを入力させても良いし、「当該ガソリンスタンドがあらかじめ設定した預かりバリュー」と、「第1可搬デバイス201aの残存バリュー」と、の、いずれか小さい方の値を、預かりバリューとしても良い(ステップS301)。 ほ か In addition, the upper limit of the total supply amount is not determined simply by touching the upper limit amount button 612e for selecting the full tank after the recipient selects one of the oil type check boxes 611a-611c. In this case, the recipient may be allowed to input the custody value, or “the custody value preset by the gas station” or “the remaining value of the first portable device 201a”, whichever is smaller One value may be used as a custody value (step S301).
  なお、本図には、釣り返却ボタン609も表示されている。これは、以前の給油の際に、釣りバリューの受け取りを忘れた被提供者が、ガソリンスタンドを離れた後、当該ガソリンスタンドに再度訪れ、もしくは、当該ガソリンスタンドと会計をともにする他のチェーン店に訪れて、釣りバリューの返却を求めるためのものである。このボタンが押された後の処理については、後述する。 Note that a fishing return button 609 is also displayed in the figure. This is because, in the previous refueling, the recipient who forgot to receive the fishing value left the gas station and then visited the gas station again, or another chain store that accounts with the gas station. To visit and ask for return of fishing value. Processing after this button is pressed will be described later.
  取引条件が入力されると、セルフ給油機501は、可搬デバイス201をリーダ/ライタ503に翳すよう促す。図7は、可搬デバイスを通信可能範囲に置くように被提供者に案内するための画面の表示例である。本実施例では、メッセージ表示欄605に被提供者に対する種々のメッセージが表示される。 When the transaction condition is input, the self-fueling machine 501 prompts the reader / writer 503 to move the portable device 201. FIG. 7 is a display example of a screen for guiding the recipient to place the portable device in the communicable range. In this embodiment, various messages for the recipient are displayed in the message display field 605.
  可搬デバイス201がリーダ/ライタ503の通信可能範囲に入る前は、メッセージ表示欄605に「可搬デバイスをリーダ/ライタに翳してください」等のメッセージが表示される。また、この表示例では、課金が完了した預かり額の表示欄615には「0」円が、被提供者が指定した預かり額の表示欄616には「5000」円が、それぞれ表示されている。 Before the portable device 201 enters the communicable range of the reader / writer 503, a message such as “Please enter the portable device into the reader / writer” is displayed in the message display field 605. Also, in this display example, “0” yen is displayed in the deposit amount display column 615 for which charging has been completed, and “5000” yen is displayed in the deposit amount display column 616 designated by the recipient. .
  一方、被提供者が可搬デバイス201を適宜ホルダ等に保持させる等して、第1可搬デバイス201aがリーダ/ライタ503の通信可能範囲に入り、両者の通信が確立すると、リーダ/ライタ503は、問合せコマンドを第1可搬デバイス201aに送信して、残存バリューの値を取得する。 On the other hand, the recipient / writer 503 holds the portable device 201 appropriately in a holder or the like, so that the first portable device 201a enters the communicable range of the reader / writer 503 and communication between the two is established. Transmits an inquiry command to the first portable device 201a to acquire the value of the remaining value.
  残存バリューが入力された預かりバリュー未満である場合には、セルフ給油機501は、残存バリュー全額を課金して、さらに他の可搬デバイス201により補充を行うか、残存バリュー全額のみを預かりバリューとするか、預かりバリューを再入力するか、を問い合わせる。図8は、可搬デバイスの残存バリューが不足していることを被提供者に知らせるための画面の表示例である。本図に示す例では、メッセージ表示欄605には「残存バリューが不足しています」との表示がされている。ここで、被提供者が戻るボタン614を操作すれば、預かりバリューを再入力することになる。また、被提供者が残存バリューを全部使って他の可搬デバイスでは補充しないためのボタン621を操作すれば、残存バリュー全額を預かりバリューとすることになる。 If the remaining value is less than the entered deposit value, the self-fueling machine 501 charges the entire remaining value and replenishes it with another portable device 201, or only the remaining value is stored as the deposited value. Ask whether to re-enter the custody value. FIG. 8 is a display example of a screen for notifying the recipient that the remaining value of the portable device is insufficient. In the example shown in the figure, the message display field 605 displays “Remaining value is insufficient”. Here, if the recipient operates the return button 614, the custody value will be re-input. If the recipient operates the button 621 for using all the remaining value and not replenishing it with other portable devices, the entire remaining value is stored and used as the value.
  このほか、被提供者が残存バリューを全部使ってさらに他の可搬デバイスでも補充するためのボタン622を操作すると、現在リーダ/ライタ503の通信可能範囲に入っている第1可搬デバイス201aの残存バリューの全額を減少コマンドにより課金してから、他の可搬デバイス201に交換させて、再度の課金を行うことにより、預かりバリューの補充を行う。図9は、可搬デバイスの交換を求めることを被提供者に知らせるための画面の表示例である。本図では、残存バリュー3912円を課金済預かりバリューに加算した旨が預かり額表示欄615に表示され、「他の可搬デバイスに交換してください」との旨が、メッセージ表示欄605に表示されている。また、これ以上の補充はやめて、預かりバリューを現在の課金額を預かりバリューとして給油を開始するためのボタン623も表示されている。 In addition, when the recipient operates the button 622 for replenishing another portable device using all the remaining value, the first portable device 201a that is currently in the communicable range of the reader / writer 503 is displayed. The full value of the remaining value is charged by the decrease command, then exchanged with another portable device 201 and charged again, thereby replenishing the stored value. FIG. 9 is a display example of a screen for informing the recipient that the portable device needs to be replaced. In this figure, a message indicating that the remaining value of 3912 yen has been added to the charged deposit value is displayed in the deposit amount display column 615, and a message “Please replace with another portable device” is displayed in the message display column 605. Has been. In addition, a button 623 for stopping further replenishment and starting refueling with the deposit value as the current charge amount and the deposit value is also displayed.
  この状況で、被提供者が他の可搬デバイス201をリーダ/ライタ502に近付けて、可搬デバイス201の交換を行うと、再度残存バリューの問合せを行う。以降は、預かりバリュー分の課金がされるまで、処理を繰り返す。 In this situation, if the recipient brings another portable device 201 close to the reader / writer 502 and exchanges the portable device 201, the remaining value is again inquired. Thereafter, the processing is repeated until the charged value is charged.
  なお、取引条件の入力に先立って、可搬デバイス201をリーダ/ライタ502に翳すよう促して、当該可搬デバイス201の残存バリューを問い合わせ、残存バリューの範囲内で、預かりバリューを選択できるようにしても良い。これは、預かりバリューの徴収を、1つの可搬デバイス201のみから行う場合に好適である。この態様では、ボタン612a-612d、613a-613dのうち、残存バリューで購入可能な量、金額のボタンのみを、取引条件として選択可能とすることが望ましい。 Prior to entering the transaction conditions, the portable device 201 is urged to move to the reader / writer 502, the remaining value of the portable device 201 is inquired, and the stored value can be selected within the range of the remaining value. Anyway. This is suitable when collecting the custody value from only one portable device 201. In this aspect, it is desirable that only the buttons of the amount and amount that can be purchased with the remaining value among the buttons 612a-612d and 613a-613d can be selected as the transaction conditions.
  さて、残存バリューが預かりバリュー以上である場合には、セルフ給油機501は、預かりバリューの課金を行ってから、第1識別情報として、暗証番号の入力をさせる。図10は、第1識別情報として暗証番号の入力を求めるための画面の表示例である。本図に示す例では、メッセージ表示欄605には、「お釣りの受取に使う暗証番号を入力してください」と表示されている。被提供者は、操作パネル501のタッチスクリーンに表示されたキーパッド661を操作して、希望の暗証番号の各桁を入力したり、入力済みの桁を削除したり、入力を終了することができる。 Now, if the remaining value is equal to or greater than the deposit value, the self-fueling machine 501 charges the deposit value and then inputs the password as the first identification information. FIG. 10 is a display example of a screen for requesting input of a personal identification number as the first identification information. In the example shown in the figure, the message display field 605 displays “Please enter your PIN for receiving change”. The recipient may operate the keypad 661 displayed on the touch screen of the operation panel 501 to input each digit of the desired personal identification number, delete the input digit, or terminate the input. it can.
  暗証番号が入力されたら、セルフ給油機501は、被提供者に給油を開始させる。図11は、給油口にノズルを挿してレバーを引き、給油を開始するように被提供者に案内するための画面の表示例である。本図に示す例では、メッセージ表示欄605の「ノズルを給油口に挿し、レバーを引いて給油を開始してください」のメッセージが表示されている。また、課金された預かりバリューが預かり額表示欄615に表示されている。また、給油はされていないので、既提供量として「0」が既提供量表示欄633に表示されている。 When the personal identification number is input, the self-fueling machine 501 causes the recipient to start refueling. FIG. 11 is a display example of a screen for guiding a recipient to insert a nozzle into a fuel filler port and pull a lever to start fueling. In the example shown in the figure, the message “Please insert the nozzle into the filler port and pull the lever to start the lubrication” in the message display field 605 is displayed. The charged deposit value is displayed in the deposit amount display field 615. Further, since refueling is not performed, “0” is displayed in the already provided amount display column 633 as the already provided amount.
  このメッセージを見た被提供者は、自動車のタンクキャップを外し、所望の油種のノズル507をセルフ給油機501本体から取り外して、自動車の給油口に挿入する。すると、預かりバリューを上限額として、給油が行われる。 被 The recipient who sees this message removes the tank cap of the automobile, removes the nozzle 507 of the desired oil type from the main body of the self-fueling machine 501, and inserts it into the fuel filler opening of the automobile. Then, refueling is performed with the deposit value as the upper limit.
  給油が行われている間、操作パネル502のタッチスクリーンには、提供状況の情報が表示される。図12は、取引対象の提供状況を被提供者に知らせるための画面の表示例である。本図に示す例では、ノズル507から自動車に給油された既提供量に対応する価格が対価表示欄631に表示され、預かりバリューが預かり額表示欄615に表示され、預かりバリューと既提供量に対応する価格との差が、釣り表示欄634に表示されている。 While the refueling is being performed, the information on the provision status is displayed on the touch screen of the operation panel 502. FIG. 12 is a display example of a screen for notifying the recipient of the transaction target provision status. In the example shown in this figure, the price corresponding to the already provided amount supplied to the car from the nozzle 507 is displayed in the consideration display column 631, the deposit value is displayed in the deposit amount display column 615, and the deposit value and the already provided amount are displayed. The difference from the corresponding price is displayed in the fishing display field 634.
  メッセージ表示欄605には、各種のメッセージが表示される。本図では、ユーザがノズル507のレバーを引いていることを検知して「給油中です」との表示がされているが、レバーが戻されている間は、「レバーを引いて給油してください」等の表示がされる。 In the message display field 605, various messages are displayed. In this figure, it is displayed that the user is pulling the lever of nozzle 507 and `` Refueling '' is displayed, but while the lever is returned, `` Pull the lever to refuel. Please display ".
  さて、給油が行われている間、ノズル507において給油の自動停止がされることがある。図13は、取引対象の次の提供ができないことを検知したことを被提供者に知らせるための画面の表示例である。本図に示す例では、メッセージ表示欄605に、「そろそろ満タンです」と表示されている。ハンズフリー給油をしている場合には、ノズル507のレバーを引いたままにするロックが解除され、レバーが元に戻る。 Now, while refueling is being performed, automatic refueling may be stopped at the nozzle 507. FIG. 13 is a display example of a screen for informing the recipient that it has been detected that the next provision of the transaction target cannot be performed. In the example shown in this figure, “It is almost full” is displayed in the message display field 605. When hands-free refueling is performed, the lock that keeps pulling the lever of the nozzle 507 is released, and the lever returns to its original position.
  自動停止がされると、セルフ給油機501は、ノズル507のレバーが強く引けない状態、あるいは、強く引いても給油がされない状態になる。このときに、被提供者が給油口でノズル507の位置を調整し直すと、タンク内の空気が抜け、自動停止の条件の成立が解除されることがある。この場合には、レバーを再度強く引くことができるようになり、さらに給油が継続される。このため、操作パネル502における表示は図12に戻り、最大流量で給油が継続できることになる。また、セルフ給油機501が対応しているのであれば、ハンズフリー給油も可能である。 When automatic stop is performed, the self-fueling machine 501 enters a state where the lever of the nozzle 507 cannot be pulled strongly, or even when it is pulled strongly, no fuel is supplied. At this time, if the recipient re-adjusts the position of the nozzle 507 at the refueling port, the air in the tank may escape and the establishment of the automatic stop condition may be released. In this case, the lever can be pulled strongly again, and further fueling is continued. For this reason, the display on the operation panel 502 returns to FIG. 12, and refueling can be continued at the maximum flow rate. If the self-fueling machine 501 is compatible, hands-free fueling is also possible.
  また、自動停止がされた後は、ノズル507のレバーを弱く引いて、少ない流量で給油を継続することもできる。 In addition, after the automatic stop, the lever of the nozzle 507 can be pulled weakly to continue refueling with a small flow rate.
  さて、被提供者が操作パネル502のタッチスクリーン上で「終了」と表示された終了ボタン635に触れると、給油を終了する。すなわち、この後、被提供者がノズル507のレバーを引き続けても、給油はしない。 When the recipient touches the end button 635 displayed as “END” on the touch screen of the operation panel 502, the refueling is ended. That is, after this, even if the recipient continues to pull the lever of the nozzle 507, no fuel is supplied.
  もっとも、給油を打ち切るには、ノズル507を自動車から外してセルフ給油機501本体に戻すのが、最も簡単である。 Of course, the easiest way to stop refueling is to remove the nozzle 507 from the vehicle and return it to the self-fueling machine 501 main body.
  給油が完了すると、第2識別情報の入力が開始される。図14は、第2識別情報として暗証番号の入力を求めるための画面の表示例である。本図では、メッセージ表示欄605に「暗証番号を入力してください」と表示されており、受取者(被提供者)は、キーパッド661を操作して、取引の開始時に入力した暗証番号を第2識別情報として入力する。 When the refueling is completed, the input of the second identification information is started. FIG. 14 is a display example of a screen for requesting input of a personal identification number as the second identification information. In this figure, “Please enter your PIN” is displayed in the message display field 605, and the recipient (provider) operates the keypad 661 to enter the PIN entered at the start of the transaction. Input as second identification information.
  また、給油は既に終了しているので、本図を含め、これ以降の処理では、終了ボタン635は消去されている。 In addition, since refueling has already ended, the end button 635 has been deleted in the subsequent processing including this figure.
  暗証番号が一致し、第1識別情報と第2識別情報がマッチすると、リーダ/ライタ503は、釣りバリューを返金するための第2可搬デバイス201bとの通信を確立させようとする。第1可搬デバイス201aをホルダ等で支えたままにしていれば、第1可搬デバイス201aが第2可搬デバイス201bとして機能する。リーダ/ライタ503と可搬デバイス201の通信が確立できない場合には、セルフ給油機501は、受取者(被提供者)に、第2可搬デバイス201bを通信可能範囲に置くよう促す。図15は、可搬デバイスとの通信にエラーが生じたことを被提供者に知らせるための画面の表示例である。本図では、メッセージ表示欄605に「釣りをチャージするための可搬デバイスをリーダ/ライタに翳してください」というメッセージが表示されている。 When the passwords match and the first identification information and the second identification information match, the reader / writer 503 attempts to establish communication with the second portable device 201b for refunding the fishing value. If the first portable device 201a is supported by a holder or the like, the first portable device 201a functions as the second portable device 201b. If communication between the reader / writer 503 and the portable device 201 cannot be established, the self-fueling machine 501 prompts the recipient (provided person) to place the second portable device 201b within the communicable range. FIG. 15 is a display example of a screen for notifying the recipient that an error has occurred in communication with the portable device. In this figure, a message “Please place a portable device for charging fishing on the reader / writer” is displayed in the message display field 605.
  第2可搬デバイス201bがリーダ/ライタ502の通信可能範囲に置かれ、釣りバリューの返金の準備が整うと、リーダ/ライタ503は、第2可搬デバイス201bに増加コマンドを送ることにより、釣りバリューをチャージする。そして、セルフ給油機501は、プリンタ506にレシートを印刷させる。図16は、取引が完了したことを被提供者に知らせるための画面の表示例である。本図では、メッセージ表示欄605に「給油を完了しました。レシートと可搬デバイスを持ち帰ってください。」と表示されている。 When the second portable device 201b is placed in the communicable range of the reader / writer 502 and ready for refund of the fishing value, the reader / writer 503 sends an increase command to the second portable device 201b, thereby fishing. Charge value. Then, the self-fueling machine 501 causes the printer 506 to print a receipt. FIG. 16 is a display example of a screen for informing the recipient that the transaction has been completed. In this figure, the message display field 605 displays “Refueling completed. Please take your receipt and portable device home.”
  なお、レシート印刷後や警告(ステップS312)後に、一定のタイムアウト時間が経過したり自動車の立ち去りが検出されたりしたときに、第2可搬デバイス201bとリーダ/ライタ503とが通信可能なままであれば、被提供者が可搬デバイス201をその場に忘れたものと判断することができる。したがって、これらの場合には、販売店舗内LANを介して提供者の端末に、忘れものがある旨を警告することが望ましい。 Note that the second portable device 201b and the reader / writer 503 remain communicable when a certain time-out period elapses after the receipt is printed or after a warning (step S312) or when the leaving of the automobile is detected. If there is, it can be determined that the recipient has forgotten the portable device 201 on the spot. Therefore, in these cases, it is desirable to warn the provider's terminal that there is something to forget via the in-store LAN.
  上記の説明では、操作パネル502に対して暗証番号を入力した後は、直ちにノズル507を用いて給油を開始することができ、給油中は操作パネル502に対する操作は不要である。さらに、ノズル507を格納して給油が完了した後、最初に操作パネル502に対して入力する情報は、暗証番号である。すなわち、本態様では、操作パネル502に対して給油前に最後に行う入力と、給油後に最初に行う入力と、が、いずれも暗証番号である。このため、給油前の暗証番号を入力した後、別の操作入力を行ってから、給油後の暗証番号を入力する態様に比べて、本態様では、被提供者が暗証番号を忘れてしまう可能性が格段に低くなる。このため、被提供者が暗証番号を忘れてしまう可能性を低減することができる。 で は In the above description, after inputting the password to the operation panel 502, refueling can be started immediately using the nozzle 507, and no operation on the operation panel 502 is required during refueling. Further, after the nozzle 507 is stored and the refueling is completed, the first information input to the operation panel 502 is a personal identification number. That is, in this aspect, both the input performed last before refueling on the operation panel 502 and the first input performed after refueling are both passwords. For this reason, the recipient can forget the password in this mode compared to the mode in which the password after refueling is entered after entering the password before refueling. The sex is much lower. For this reason, possibility that a recipient will forget a personal identification number can be reduced.
  ただし、商慣習やその他のユーザインターフェース上の制約から、暗証番号(第1識別情報)の入力を行ってから第1可搬デバイス201aをリーダ/ライタ503に翳して預かりバリューの課金を行うこととしたり、第2可搬デバイス201bをリーダ/ライタ503に翳してから、これを翳したまま暗証番号(第2識別情報)を入力して釣りバリューの返還を受ける等のように、適宜順序を入れかえることも可能である。 However, due to business customs and other restrictions on the user interface, the PIN (first identification information) must be entered before the first portable device 201a is tricked into the reader / writer 503 to charge the stored value. Or the second portable device 201b is placed on the reader / writer 503, and then the order is changed as appropriate, such as inputting the PIN (second identification information) while receiving it and receiving the fishing value. It is also possible.
  本実施例によれば、セルフ給油機501において、電子マネーによる支払を安全に行うことができる。特に、可搬デバイス201で預かりバリューを支払った被提供者が、釣りバリューの受け取りを忘れて、可搬デバイス201をそのまま置き忘れたり、可搬デバイス201を盗まれたりした場合でも、その可搬デバイス201の拾得者に釣りバリューを奪われることはない。 に よ According to the present embodiment, payment by electronic money can be safely performed in the self-fueling machine 501. In particular, even if the recipient who has paid the value stored in the portable device 201 forgets to receive the fishing value, misplaces the portable device 201 as it is, or steals the portable device 201, the portable device The value of fishing is not deprived by the 201 finders.
  なお、上記の例では、暗証番号を被提供者(受取者)の識別情報として利用しているが、セルフ給油機501が持つカメラ508や、店内の監視カメラにより撮影された画像を利用して、他の情報を識別情報とすることも可能である。 In the above example, the personal identification number is used as the identification information of the recipient (recipient), but the image taken by the camera 508 of the self-fueling machine 501 or the surveillance camera in the store is used. Other information can be used as identification information.
  たとえば、セルフ給油機501は、自動車がセルフ給油機501の前に停車したことをカメラ508により検知して、被提供者(セルフ給油機501の操作者。典型的には、自動車の運転者。)と取引対象が提供される物品(自動車)を撮影して、写真の蓄積を開始する。 For example, the self-fueling machine 501 detects that the automobile has stopped in front of the self-fueling machine 501 by the camera 508, and is provided with the person to be provided (the operator of the self-fueling machine 501. Typically, the driver of the car. ) And the article (car) provided with the transaction object is photographed, and accumulation of the photograph is started.
  そして、被提供者の顔写真から得られる生体情報や、撮影された自動車の写真、自動車の写真から認識された自動車の色、ナンバーや車種等をまとめて、第1識別情報として利用するのである。 Then, the biometric information obtained from the face photograph of the recipient, the photograph of the photographed car, the color of the car recognized from the photograph of the car, the number, the model, etc. are collectively used as the first identification information. .
  複数の自動車の写真を列挙してその中から受取者(被提供者)が給油した自動車を選択させたり、ナンバーや車種等を入力させて、第2識別情報とすれば、後日釣りバリューを受け取りに来た受取者が、被提供者本人か、それとも、第1可搬デバイス201aの不正拾得者か、を識別することができる。 By listing photos of multiple cars and selecting the car that the recipient (provided person) refueled from them, or by entering the number, model, etc., and using it as the second identification information, you can receive fishing value at a later date It is possible to identify whether the recipient who has come to the recipient is the recipient himself or the unauthorized picker of the first portable device 201a.
  このほか、操作パネル502において、指紋や静脈などのセンサを用意して、生体認証をすることとしても良い。また、セルフ給油機501にマイクを用意して、被提供者に喋らせ、声紋を識別情報とする、という手法もありうる。 In addition, the operation panel 502 may be provided with a sensor such as a fingerprint or a vein for biometric authentication. Also, there may be a method in which a microphone is prepared in the self-fueling machine 501 to make the recipient speak up and the voiceprint is used as identification information.
  さらに、管理装置101が、暗証番号等をランダムに決めて被提供者に提示して記憶させ、受取時に、記憶させた暗証番号等を入力させる場合には、預かりバリューの受領書とともに当該暗証番号をプリンタ508で印刷して、被提供者に渡す、という態様もありうる。被提供者は、釣りバリューの受け取り時には、預かりバリューの受領書に記載された暗証番号を、第2識別情報として入力する。 In addition, when the management apparatus 101 randomly determines a password number, etc., presents it to the recipient, stores it, and inputs the stored password number at the time of receipt, the password number is received together with the receipt of the stored value. There is also a mode in which the printer is printed with the printer 508 and delivered to the recipient. When receiving the fishing value, the recipient inputs the personal identification number described in the receipt of the deposit value as the second identification information.
  以下では、このような種々の情報を用いた態様について、さらに詳細に説明する。 In the following, modes using such various information will be described in more detail.
  上記実施例では、預かりバリューの課金時に、ユーザにパスワードを決めさせて入力させ、釣りバリューの返却時に、ユーザに同じパスワードを入力させるのみをもって、本人確認を行っていたが、本実施例では、ユーザの利便性を考慮しつつ、不正の抑制を図る。 In the above embodiment, when charging the custody value, the user is allowed to determine and input a password, and when the fishing value is returned, the user is only verified by entering the same password, but in this embodiment, In consideration of user convenience, fraud is suppressed.
  以下では、図3におけるステップS310、ステップS311、ステップS312に相当する処理のバリエーションを種々説明する。 Hereinafter, various variations of processing corresponding to step S310, step S311, and step S312 in FIG. 3 will be described.
  第1の態様は、暗証番号と顔写真による生体情報により認証を用いるものである。すなわち、本実施形態では、第1可搬デバイス201aから預かりバリューを課金する前後に、被提供者による暗証番号の入力ならびに被提供者の顔写真の撮影を行う。図18は、暗証番号と顔写真により認証を行う態様の制御の流れを示すフローチャートである。 The first mode uses authentication based on biometric information based on a personal identification number and a face photograph. That is, in the present embodiment, before and after charging the deposit value from the first portable device 201a, the password is input by the provider and the photograph of the face of the provider is taken. FIG. 18 is a flowchart showing a flow of control in a mode in which authentication is performed using a password and a face photograph.
  さて、釣りバリューが0でなければ(ステップS308;No)、セルフ給油機501は、受取者の顔を撮影するとともに(ステップS801)、図14に示すように、暗証番号の入力を求める(ステップS802)。なお、受取者の顔写真の撮影は、必ずしもこのタイミングで行う必要はなく、常時カメラ508等によりセルフ給油機501周辺の監視のために撮影を行っている場合などは、その撮影結果を適宜利用することとしても良い。 Now, if the fishing value is not 0 (step S308; No), the self-fueling machine 501 shoots the face of the recipient (step S801) and asks for the input of a personal identification number as shown in FIG. 14 (step S801). S802). It is not always necessary to take a photograph of the recipient's face at this timing. If the photograph is taken constantly for monitoring the area around the self-fueling machine 501 with the camera 508 or the like, the photographed result should be used as appropriate. It is also good to do.
  そして、暗証番号の入力を検知する(ステップS803)。入力が検知されなければ、暗証番号入力用のタイムアウト時間が経過していなければ(ステップS804;No)、ステップS803に戻る。一方、所定のタイムアウト時間が経過していれば(ステップS804;Yes)、被提供者が釣りバリューを受け取らずにその場を立ち去ってしまったと判断して、後日の返金に備えるため、第1識別情報と返還すべき釣りバリューの金額とを対応付けて、未返金情報として、ハードディスクやネットワークストレージ等に記録して(ステップS805)、本処理を終了する。これに合わせて、提供者が利用するカウンタの端末への警告をしても良い。 入 力 Then, the input of the password is detected (step S803). If no input is detected, if the password input timeout time has not elapsed (step S804; No), the process returns to step S803. On the other hand, if the predetermined time-out period has elapsed (step S804; Yes), it is determined that the recipient has left the place without receiving the fishing value, and the first identification is made in preparation for a refund at a later date. The information and the amount of fishing value to be returned are associated with each other and recorded as unrefunded information in a hard disk, a network storage, or the like (step S805), and this processing is terminated. In accordance with this, a warning may be given to the terminal of the counter used by the provider.
  なお、被提供者が釣りバリューの返金を後で行うには、図6に示す釣り返却ボタン609を押圧操作する。これによって開始される釣り返却処理については、後述する。 Note that in order to refund the fishing value later, the recipient presses the fishing return button 609 shown in FIG. The fishing return process started by this will be described later.
  さて、暗証番号の入力が検知されたら(ステップS803;Yes)、被提供者の顔写真と、受取者の顔写真と、を対比して、生体情報により同一人物か判定するとともに、被提供者が入力した暗証番号と、受取者が入力した暗証番号と、が、一致するか、を判定する(ステップS806)。 Now, if the input of a personal identification number is detected (step S803; Yes), the face photograph of the recipient and the face photograph of the recipient are compared to determine whether they are the same person based on the biometric information, and to the recipient. It is determined whether or not the password entered by is coincident with the password entered by the recipient (step S806).
  顔写真が同一人物かつ暗証番号が一致すれば(ステップS806;Yes)、ステップS311に進む。すなわち、第2可搬デバイス201bとリーダ/ライタ503が通信可能でなければセルフ給油機501は、図15に示すように、第2可搬デバイス201bをリーダ/ライタ503の通信可能範囲に置くよう、受取者に促して、リーダ/ライタ503と通信可能な第2可搬デバイス201bに、釣りバリューをチャージする。 If the saddle face photos are the same person and the passwords match (step S806; Yes), the process proceeds to step S311. That is, if the second portable device 201b and the reader / writer 503 cannot communicate, the self-fueling machine 501 places the second portable device 201b within the communicable range of the reader / writer 503 as shown in FIG. The receiver is prompted to charge the fishing value to the second portable device 201b that can communicate with the reader / writer 503.
  一方、顔写真が同一人物でないもしくは暗証番号が一致しなければ(ステップS806;No)、ステップS312に進む。図17は、認証に失敗したため、有人カウンタにて対応する旨を知らせるための画面の表示例である。本図に示すように、認証が失敗すれば、操作パネル502のタッチスクリーンに表示されるメッセージ表示欄605には、「有人カウンタでご相談ください」とのメッセージが掲げられる。また、有人カウンタには、販売店舗内LANを介して、提供者に問題が生じうる旨の警告通知がなされる。この場合には、有人カウンタにて対面で、釣りバリューの返還を行うので、不正拾得がされる危険性は極めて低くなる。 On the other hand, if the face photos are not the same person or the passwords do not match (step S806; No), the process proceeds to step S312. FIG. 17 is a display example of a screen for notifying that the authentication has failed and that a manned counter is used. As shown in this figure, if authentication fails, a message “Please consult with a manned counter” is displayed in the message display field 605 displayed on the touch screen of the operation panel 502. In addition, a warning notification that a problem may occur for the provider is given to the manned counter via the in-store LAN. In this case, since the fishing value is returned face-to-face with the manned counter, the risk of fraudulent detection is extremely low.
  このように、本態様では、顔写真と暗証番号の入力をさせることで、簡易かつ安全な取引が可能となる。 As described above, in this aspect, simple and safe transactions can be performed by inputting a face photograph and a password.
  第2の態様は、被提供者がセルフ給油機501の前を立ち去ることがあったか否かによって、認証のレベルを変更するものである。 In the second mode, the level of authentication is changed depending on whether the recipient has left the self-fueling machine 501 or not.
  すなわち、セルフ給油機501は、預かりバリューの課金がされた時点から釣りバリューの返還をしようとする時点までの間に、被提供者を監視して、被提供者が立ち去ったか否かを判定する。 That is, the self-fueling machine 501 monitors the recipient to determine whether the recipient has left between the time when the deposit value is charged and the time when the fishing value is to be returned. .
  カメラ508や店舗内の監視カメラ、人感センサ等を利用すれば、被提供者の立ち去りを検知することが可能である。たとえば、人感センサが、給油開始から途切れずにセルフ給油機501の近くに人がいることを検知し続けていれば、被提供者がセルフ給油機501の近くに居続けている可能性が極めて高い、と判断できる。 By using a bag camera 508, a surveillance camera in the store, a human sensor, or the like, it is possible to detect the leaving of the recipient. For example, if the presence sensor continues to detect that there is a person near the self-fueling machine 501 without interruption from the start of refueling, the recipient is highly likely to remain near the self-fueling machine 501. It can be judged that it is expensive.
  また、自動車の存在により、被提供者の立ち去りを判定することとしても良い。たとえば、カメラ508や店舗内の監視カメラを利用したり、重量センサ、赤外線センサ、レーザーセンサ、モーションセンサ等を利用すれば、自動車の立ち去りを検知することが可能である。また、マイクによりエンジン音を検知することとして、給油終了後にエンジン音が生じたら、自動車が移動してしまったと判断しても良い。このほか、自動車のETC(Electronic Toll Collection systems)車載器と通信することにより、自動車の有無を判断することもできる。 Also, the leaving of the recipient may be determined based on the presence of the automobile. For example, when a camera 508 or a surveillance camera in a store is used, or a weight sensor, an infrared sensor, a laser sensor, a motion sensor, or the like is used, it is possible to detect the leaving of the automobile. Further, as detecting the engine sound with the microphone, it may be determined that the automobile has moved if the engine sound is generated after the end of refueling. In addition, it is also possible to determine the presence or absence of an automobile by communicating with the ETC (Electronic Toll Collection systems) on-vehicle device of the automobile.
  そして、人感センサがなくとも、預かりバリューを課金した第1可搬デバイス201aとのNFCによる通信が可能なままであり、かつ、自動車の存在を感知するセンサにより自動車の立ち去りが生じていないのであれば、被提供者がセルフ給油機501の近くに居るままである、と判断する。 And even if there is no human sensor, NFC communication with the first portable device 201a charged for the custody value is still possible, and the car has not left due to the sensor that detects the presence of the car. If there is, it is determined that the recipient remains in the vicinity of the self-fueling machine 501.
  一般的には、ハンズフリー給油をしたまま被提供者がその場を離れることは、オートストップが万が一作動しないような場合への対応も考慮して禁止されている。しかしながら、給油が終了し、ノズル507をセルフ給油機501の本体に格納して、自動車の給油口の蓋を閉じた後に、ガソリンスタンド内の自動販売機やトイレを利用するために、被提供者がセルフ給油機501を離れることはありうる。その隙を狙って、不正な釣りバリューの拾得が行われないよう、本態様では、認証のレベルを変化させる。図19は、状況に応じて認証のレベルを変化させる態様の制御の流れを示すフローチャートである。以下、図18との相違点を中心に説明する。両図において、同等の処理には、同じステップ番号を付している。 Generally, it is prohibited for the recipient to leave the site with hands-free refueling in consideration of the case where the auto stop should not work. However, after refueling is completed, the nozzle 507 is stored in the main body of the self-fueling machine 501, and the lid of the fueling port of the automobile is closed, and then the recipient is provided to use the vending machine or toilet in the gas station. May leave the self-fueling machine 501. In this aspect, the level of authentication is changed so that an illegal fishing value is not picked up aiming at the gap. FIG. 19 is a flowchart showing a control flow of a mode in which the level of authentication is changed according to the situation. Hereinafter, the difference from FIG. 18 will be mainly described. In both figures, the same step numbers are assigned to equivalent processes.
  本態様では、釣りバリューが0でなければ(ステップS308;No)、預かりバリューの課金から現在までに、被提供者の立ち去りが生じたか否かに基づいて認証レベルを設定する(ステップS901)。以下では、立ち去りが生じていない場合については、認証レベルを1とし、立ち去りが生じた場合については、認証レベルを2とする。認証レベルが高ければ高いほど、第1識別情報と第2識別情報のマッチに求められる度合は高くなり、マッチの許容度は低くなる。 In this embodiment, if the fishing value is not 0 (step S308; No), the authentication level is set based on whether or not the recipient has left since the deposit value is charged (step S901). In the following, the authentication level is set to 1 when there is no leaving, and the authentication level is set to 2 when leaving. The higher the authentication level, the higher the degree required for the match between the first identification information and the second identification information, and the lower the tolerance of the match.
  ついで、設定された認証レベルが1であれば(ステップS901;1)、そのまま、ステップS311に進む。すなわち、第2可搬デバイス201bとリーダ/ライタ503が通信可能でなければセルフ給油機501は、第2可搬デバイス201bをリーダ/ライタ503の通信可能範囲に置くよう、受取者に促した後、リーダ/ライタ503と通信可能な第2可搬デバイス201bに、釣りバリューをチャージする。 If the set authentication level is 1 (step S901; 1), the process proceeds to step S311. That is, if the second portable device 201b and the reader / writer 503 are not communicable, the self-fueling machine 501 urges the recipient to place the second portable device 201b within the communicable range of the reader / writer 503. The fishing value is charged to the second portable device 201b that can communicate with the reader / writer 503.
  一方、設定された認証レベルが2であれば、ステップS801に進み、上記態様と同様に、暗証番号と顔写真による認証を経て、釣りバリューの返還を行う。 On the other hand, if the set authentication level is 2, the process proceeds to step S801, and the fishing value is returned through the authentication using the personal identification number and the face photograph as in the above-described embodiment.
  このように、本態様では、セルフ給油機501の傍を離れたかそうでないかという、基本的に被提供者による入力等を必要としない態様の認証により、釣りバリューの返還の可否を決めるので、被提供者の利便性を高めつつ本人認証の強度を維持または向上することができる。特に、セルフ給油機501の傍を離れていない被提供者に対しては、受取者の顔の撮影や暗証番号の入力は求めないことで、被提供者の利便性を高めることができる。 In this way, in this aspect, whether to return the fishing value is determined by authentication of the aspect that basically does not require input by the recipient, such as whether or not it is away from the self-fueling machine 501, so The strength of personal authentication can be maintained or improved while improving the convenience of the recipient. In particular, it is possible to improve the convenience of the recipient by not requiring the recipient who is not away from the self-fueling machine 501 to take a picture of the recipient's face or to input a personal identification number.
  以下では、釣りバリューをチャージしないまま立ち去った場合に後日、同じセルフ給油機501もしくは同一店舗や同一チェーンの他のセルフ給油機501にて返金を求めるためのより高いレベル(レベル3)の認証を行う釣り返却処理について詳細に説明する。 In the following, if you leave without charging fishing value, you will receive a higher level (level 3) certification to ask for refund at the same self-fueling machine 501 or other self-fueling machine 501 in the same store or the same chain at a later date The fishing return process to be performed will be described in detail.
  レベル3の認証では、上記の例と同様に、操作パネル502のタッチスクリーンから入力された暗証番号、カメラ502等により撮影された被提供者(受取者)の顔写真による生体情報を利用するほか、カメラ502等により撮影された車両の写真から文字認識された車両のナンバーを、識別情報として利用する。図20は、釣りバリューの返還を後日に行う際の制御の流れを示すフローチャートである。以下、本図を参照して説明する。 In Level 3 authentication, as in the above example, the personal identification number input from the touch screen of the operation panel 502, biometric information based on the face photograph of the recipient (recipient) taken by the camera 502, etc. The number of the vehicle recognized by the character from the vehicle photograph taken by the camera 502 or the like is used as the identification information. FIG. 20 is a flowchart showing the flow of control when returning the fishing value at a later date. Hereinafter, a description will be given with reference to FIG.
  本実施例では、釣り返却処理は、受取者が図6において、釣り返却ボタン609を選択することによって開始される。 In this embodiment, the fishing return process is started when the recipient selects the fishing return button 609 in FIG.
  セルフ給油機501は、釣り返却ボタン609の選択操作がされると、カメラ502等により受取者の顔写真を撮影し(ステップS911)、さらに、受取者が搭乗している自動車等の車両写真を撮影する(ステップS912)。なお、カメラ502等による顔写真や車両写真は、釣り返却ボタン609の選択操作以前に撮影されたものを利用しても良いし、撮影の順序を適宜入れ換えても良いし、1枚の写真を顔写真ならびに車両写真として利用しても良い。そして、車両写真から車両ナンバーを文字認識する(ステップS913)。 When the fishing return button 609 is selected, the self-fueling machine 501 takes a photograph of the recipient's face with the camera 502 or the like (step S911), and further takes a photograph of the vehicle or the like on which the recipient is boarding. Shoot (step S912). In addition, as for the face photograph and the vehicle photograph by the camera 502 etc., those taken before the selection operation of the fishing return button 609 may be used, the order of photographing may be changed as appropriate, or one photograph may be replaced. You may use as a face photograph and a vehicle photograph. Then, the vehicle number is recognized from the vehicle photograph (step S913).
  ついで、ステップS912で撮影された顔写真にマッチする未返金情報が、ハードディスクやネットワークストレージに記録されているか検索する(ステップS914)。 Next, it is searched whether the non-refundable information that matches the face photograph taken in step S912 is recorded in the hard disk or network storage (step S914).
  顔写真による生体認証のマッチには誤差があるため、受取者が釣りバリューの返還を求める正当な被提供者であっても、未返金情報が見つからない場合もあるし、複数の未返金情報が見つかる場合もある。そこで、顔写真がマッチする未返金情報が見つからない場合(ステップS914;なし)、図17に示すように、有人カウンタで釣りバリューの返金を受けるよう警告して(ステップS312)、本処理を終了する。 Because there is an error in the biometric match by facial photo, even if the recipient is a legitimate recipient who wants to return the fishing value, unrefunded information may not be found, or multiple unrefunded information Sometimes found. Therefore, if no unrefunded information matching the face photo is found (step S914; none), as shown in FIG. 17, a warning is given to receive a fishing value refund at the manned counter (step S312), and this process is terminated. To do.
  一方、顔写真がマッチする未返金情報が1つ見つかった場合(ステップS914;1つ)、当該未返金情報における車両ナンバーと、文字認識された車両ナンバーと、が一致するか否かを調べる(ステップS916)。 On the other hand, when one unrefunded information with a matching face photo is found (step S914; one), it is checked whether or not the vehicle number in the unrefunded information matches the vehicle number recognized by the character ( Step S916).
  一致しない場合(ステップS916；No)、図14と同様のキーパッド661により、釣りバリューの受取を忘れた取引において給油された車両のナンバーの入力を求める(ステップS917)。これは、受取者が以前とは異なる車両に搭乗してセルフ給油機501を訪れた、もしくは、文字認識が誤ったと解されるからである。そして、当該未返金情報における車両ナンバーと、入力されたナンバーと、が、一致するか否かを調べる(ステップS918)。一致しない場合(ステップS918；No)、有人カウンタで対応するため、ステップS312に進む。 If they do not match (step S916; No), the keypad 661 similar to that shown in FIG. 14 is used to input the number of the vehicle that was refueled in the transaction forgetting to receive the fishing value (step S917). This is because it is understood that the recipient has boarded a different vehicle than before and visited the self-fueling machine 501, or that the character recognition was incorrect. Then, it is checked whether or not the vehicle number in the unrefunded information matches the input number (step S918). If they do not match (step S918; No), the process goes to step S312 in order to deal with the manned counter.
  さて、車両ナンバーが一致する場合(ステップS916/S918;Yes)、すなわち、顔写真がマッチし、車両ナンバーが一致する未返金情報が1つである場合は、セルフ給油機501は、図14と同様のキーパッド661により、暗証番号の入力を求める(ステップS919)。そして、セルフ給油機501は、当該未返金情報における暗証番号と、入力された暗証番号と、が、一致するか否かを調べる(ステップS920)。一致しない場合(ステップS920；No)、有人カウンタで対応するため、ステップS312に進む。 When the vehicle numbers match (step S916 / S918; Yes), that is, when the face photo matches and there is one unrefunded information with the matching vehicle number, the self-fueling machine 501 is Using the same keypad 661, input of a password is requested (step S919). Then, the self-fueling machine 501 checks whether or not the password number in the unrefunded information matches the input password number (step S920). If they do not match (step S920; No), the process goes to step S312 in order to deal with the manned counter.
  一致する場合(ステップS919；Yes)、すなわち、顔写真、車両ナンバー、暗証番号のすべてがマッチする未返金情報が1つである場合は、ステップS311へ進み、釣りバリューの返還を行って、本処理を終了する。 If they match (step S919; Yes), that is, if there is only one unrefunded information that matches the face photo, vehicle number, and PIN, the process proceeds to step S311 to return the fishing value, The process ends.
  さて、顔写真がマッチする未返金情報が複数見つかった場合(ステップS914;複数)見つかった未返金情報から、当該未返金情報における車両ナンバーと、文字認識された車両ナンバーと、が一致する未返金情報を探す(ステップS921)。顔写真がマッチし、文字認識された車両ナンバーが一致する未返金情報が1つも見つからなければ(ステップS921；なし)、有人カウンタで対応するため、ステップS312に進む。顔写真の生体認証や車両ナンバーの文字認識に誤認識が生じているおそれがあるためである。 Now, when multiple non-refundable information matching the face photo is found (step S914; multiple), from the found non-refundable information, the vehicle number in the non-refundable information matches the vehicle number recognized by the character Search for information (step S921). If there is no unrefunded information in which the face photo matches and the character number of the recognized vehicle number is found (step S921; none), the process goes to step S312 in order to deal with the manned counter. This is because there is a possibility that misrecognition may occur in biometric authentication of face photographs and character recognition of vehicle numbers.
  一方、顔写真がマッチし、文字認識された車両ナンバーが一致する未返金情報が複数見つかった場合も(ステップS921；複数)、複数回有人カウンタで対応するため、ステップS312に進む。上記と同様に、顔写真の生体認証や車両ナンバーの文字認識に誤認識が生じているおそれがあるほか、同じ受取者による釣りバリューの受け取り忘れが複数回生じている可能性があるからである。 On the other hand, when a plurality of unrefunded information is found that matches the face photo and the character number of the recognized vehicle (step S921; plural), the process proceeds to step S312 in order to deal with the multiple manned counter. Similarly to the above, there is a possibility that biometric authentication of facial photographs and character recognition of vehicle numbers may be misrecognized, and there is a possibility that the same recipient forgets to receive fishing value multiple times. .
  顔写真がマッチし、文字認識された車両ナンバーが一致する未返金情報が1つだけ見つかった場合(ステップS921；1つ)、ステップS918に進み、暗証番号の入力を開始する。 If the face photo matches and only one non-refundable information is found that matches the recognized vehicle number (step S921; one), the process proceeds to step S918, and the input of the password is started.
  このように、本実施例では、預かりバリューの課金が行われる課金状況から釣りバリューの返金が行われる返金状況に至るまで、セルフ給油機501の周囲に居続けていると推定される場合には、課金状況と返金状況の差異が小さいものとして、暗証番号の入力や顔写真の撮影をしなくとも、受取者は被提供者である、と判定している。 In this way, in this embodiment, when it is estimated that the self-fueling machine 501 continues to stay from the charging status where the deposit value is charged to the refund status where the fishing value is refunded, Assuming that the difference between the billing status and the refund status is small, it is determined that the recipient is the recipient without entering a password or taking a face photo.
  また、自動車がその場を立ち去っておらず、課金状況と返金状況との差異が中程度である場合には、暗証番号の入力および顔写真の撮影をして、これらに基づいて、受取者と被提供者が一致するか否かを判定する。 If the car has not left the site and the difference between the billing status and refund status is moderate, enter the PIN and take a face photo. It is determined whether or not the recipients match.
  さらに、被提供者がセルフ給油機501の前を立ち去って、後から釣りバリューを受け取ろうとする場合は、課金状況と返金状況の差異が大きいものとして、暗証番号、顔写真および車両ナンバーの3つにより、受取者と被提供者が一致するか否かを判定する。 Furthermore, if the recipient leaves the self-fueling machine 501 and wants to receive fishing value later, it is assumed that the difference between the billing status and the refund status is large. Thus, it is determined whether the recipient and the recipient match.
  すなわち、本実施例では、預かりバリューの課金が行われる課金状況と、釣りバリューの返金が行われる返金状況と、の差異に応じて、認証のレベル、すなわち、マッチの許容度を変更することにより、安全性は確保しつつも、ユーザの利便性を高めている。 In other words, in this embodiment, the level of authentication, that is, the match tolerance is changed according to the difference between the charging status where the deposit value is charged and the refund status where the fishing value is refunded. In addition, while ensuring safety, the convenience of the user is enhanced.
  なお、課金状況と返金状況の差異の大きさに基づいて、マッチの許容度を変化させることで、認証レベルを変更する例としては、種々の態様が考えられる。たとえば、課金状況である預かりバリュー課金時には、顔写真、指紋、暗証番号の3つを記録する。そして、返金状況である釣りバリュー受取時に、
(a)給油前から給油後まで人と自動車が継続して停車中であれば、「指紋」あるいは「顔写真」のいずれかが一致すれば、釣りバリューを返還し、
(b)給油の途中で人が立ち去って戻ってきたり、人はそのままセルフ給油機501の前にいるが自動車が立ち去った場合には、「指紋および暗証番号」あるいは「顔写真および暗証番号」のいずれかが一致すれば、釣りバリューを返還し、
(c)給油後人も自動車も立ち去ってしまい、後日釣りバリューを受け取りにきた場合には、「指紋、顔写真、および暗証番号」のすべてが一致すれば、釣りバリューを返還する
等としても良い。 In addition, various modes can be considered as examples of changing the authentication level by changing the match tolerance based on the magnitude of the difference between the charging status and the refund status. For example, at the time of billed value billing, which is the billing status, three photos of a face photo, fingerprint, and PIN are recorded. And when you receive fishing value, which is the refund status,
(a) If the person and the car are stopped from before refueling until after refueling, if either `` fingerprint '' or `` face photo '' matches, the fishing value will be returned,
(b) If a person leaves and returns in the middle of refueling, or if the person is in front of the self-service refueling machine 501 but the car leaves, the “fingerprint and PIN” or “face photo and PIN” If any match, return fishing value,
(c) If the person and the car leave after refueling and come to receive the fishing value at a later date, the fishing value may be returned if all of the “fingerprint, face photo, and PIN” match. .
  なお、上記のように識別情報として複数の種類を利用できる場合には、それぞれの信頼度が異なることも多い。この場合には、「信頼度の高い種類の情報が1つ一致」または「信頼度の低い種類の情報が複数一致」であれば、釣りバリューを返還する、と判定しても良い。 Note that when a plurality of types of identification information can be used as described above, the respective reliability levels are often different. In this case, it may be determined that the fishing value is returned if “highly reliable type information matches one” or “low reliability type of information matches multiple”.
  なお、この認証の手法は、預かりバリューを課金した後に店舗に置き忘れた可搬デバイス201や、釣りバリューの返金がされたままセルフ給油機501に置きわすれた可搬デバイス201を、後日持ち主と申し出た者に返却するか否かを、有人カウンタにて判断する際にも利用することができる。 In addition, this authentication method offers the portable device 201 forgotten to be left in the store after charging the custody value or the portable device 201 placed in the self-fueling machine 501 with the fishing value refunded as the owner at a later date. It is also possible to use a manned counter to determine whether or not to return to a person who has returned.
  たとえば、有人カウンタの端末にて申出者に暗証番号の入力をさせ、顔写真を撮影する。そして、両者が第1識別情報とマッチするようであれば、端末は、申出者は被提供者であると判断して、その判断結果を店員に提示する。店員は、申出者は被提供者であると判断された場合には、それ以上の本人確認をせずに、可搬デバイス201を返却することも可能である。もちろん、提供者は、忘れものの可搬デバイス201の返却の際に、別途、申出者の免許証の番号などを控えて、トラブル防止を図ることとしても良い。 For example, at the terminal of the manned counter, the applicant inputs the password and takes a face photo. If both match the first identification information, the terminal determines that the offerer is the recipient and presents the determination result to the store clerk. If the clerk determines that the offerer is the recipient, the clerk can also return the portable device 201 without further identity verification. Of course, when the forgotten portable device 201 is returned, the provider may separately prevent the trouble by keeping a copy of the applicant's license number.
  上記実施例では、第2可搬デバイス201bをリーダ/ライタ503に翳す前に認証を行っていたが、翳した後に認証を行うこととしても良い。この場合には、受取者は、釣りバリューの返金を受けるため、第2可搬デバイス201bをリーダ/ライタ503に翳したまま、暗証番号等を入力するか、第2可搬デバイス201bをリーダ/ライタ503に一旦翳し、離した後、暗証番号等を入力してから、第2可搬デバイス201bをリーダ/ライタ503に再度翳す必要がある。 In the above-described embodiment, authentication is performed before the second portable device 201b is placed on the reader / writer 503. However, authentication may be performed after the second portable device 201b is placed. In this case, in order to receive a refund of the fishing value, the recipient inputs the personal identification number or the like while holding the second portable device 201b on the reader / writer 503, or sets the second portable device 201b to the reader / writer. It is necessary to touch the writer 503 once, release it, enter a password, etc., and then touch the second portable device 201b to the reader / writer 503 again.
  この態様では、第1可搬デバイス201aと第2可搬デバイス201bとが同一の可搬デバイス201であるか否かを、第1状況と第2状況との差異として利用することができる。すなわち、第1可搬デバイス201aと第2可搬デバイス201bが同一の可搬デバイス201であれば、被提供者から第三者に盗まれたなどの状況以外では、被提供者と受取者は同一であると推定できる。そこで、第1可搬デバイス201aと第2可搬デバイス201bとが同一である場合には、両者が異なる場合よりも、マッチの許容度を大きくしても良い。 で は In this aspect, whether or not the first portable device 201a and the second portable device 201b are the same portable device 201 can be used as a difference between the first situation and the second situation. In other words, if the first transportable device 201a and the second transportable device 201b are the same transportable device 201, the recipient and the recipient are not in a situation other than being stolen by a third party from the recipient. It can be estimated that they are the same. Therefore, when the first portable device 201a and the second portable device 201b are the same, the matching tolerance may be larger than when the two are different.
  たとえば、第1識別情報の記録時には、被提供者に暗証番号を入力させ、被提供者の顔写真による生体情報を取得する態様を考える。第1可搬デバイス201aと第2可搬デバイス201bとが異なる場合は、受取者に暗証番号の入力を求めて、暗証番号と顔写真の対比によりマッチするか否かを判定する。一方、第1可搬デバイス201aと第2可搬デバイス201bとが同一である場合は、受取者に暗証番号の入力は求めないまま、被提供者と受取者の顔写真による生体情報のみの対比によってマッチするか否かを決めるのである。 For example, when recording the first identification information, consider a mode in which the recipient is input a personal identification number, and biometric information is obtained from the face photograph of the recipient. If the first portable device 201a and the second portable device 201b are different, the recipient is requested to input a personal identification number, and it is determined whether the personal identification number and the face photograph are matched or not. On the other hand, if the first portable device 201a and the second portable device 201b are the same, only the biometric information based on the face photograph of the recipient and the recipient is compared without requiring the recipient to enter a personal identification number. Determines whether or not to match.
  一般に、第1状況と第2状況が近ければ近いほど、第三者が釣りバリューを騙し取る可能性は低くなる。したがって、第1状況と第2状況が十分に近い場合には、第2識別情報の取得を実質的に不要として、第1識別情報と第2識別情報とは常にマッチする、と考えてもよい。これは、マッチの許容度が最も大きい場合である。 Generally speaking, the closer the first situation and the second situation are, the lower the chance that a third party will catch the fishing value. Therefore, when the first situation and the second situation are sufficiently close, it may be considered that the acquisition of the second identification information is substantially unnecessary, and the first identification information and the second identification information always match. . This is the case when the tolerance of the match is the largest.
  たとえば、ガソリンの給油において、預かりバリューの課金時にセルフ給油機の前に自動車が停車してから、当該自動車に給油が完了して釣りバリューの受け取りをしようとする時点まで、自動車が停車したまま移動していない場合には、不正な釣りバリューの受取が生じる可能性は極めて低い、として、第1可搬デバイス201aと第2可搬デバイス201bとが同一か否かにかかわらず、第2可搬デバイス201bに釣りバリューをチャージしても良い。 For example, in the case of gasoline refueling, the car stops moving from when the car stops before the self-fueling machine at the time of charging the value of the deposit until the time when the refueling is completed and the fishing value is received. If the first portable device 201a and the second portable device 201b are not the same, the second portable device is assumed to be extremely unlikely to receive illegal fishing value. The fishing value may be charged to the device 201b.
  このように、適応的に認証の重さを変化させることで、ユーザの利便性を向上させつつも、不正拾得を抑制することが可能となる。 In this way, by changing the weight of authentication adaptively, it becomes possible to suppress fraudulent detection while improving user convenience.
  本実施例は上記実施例の好適実施形態に該当するものであり、ADFを用いたコピーサービスに本発明を適用したものである。以下、理解を容易にするため、共通点や既に説明した要素については適宜説明を省略する。 This example corresponds to the preferred embodiment of the above example, and the present invention is applied to a copy service using ADF. Hereinafter, in order to facilitate understanding, descriptions of common points and elements already described will be omitted as appropriate.
  ADFを用いたコピーサービスでは、被提供者が原稿の総頁数を知らないまま、原稿をコピーすることが可能である。この場合には、全原稿のコピーが完了して初めて、原稿の総頁数がわかり、コピーサービスに対する支払い額も確定することになる。 コ ピ ー In the copy service using ADF, the recipient can copy the original without knowing the total number of pages of the original. In this case, it is not until the copying of all the originals is completed that the total number of pages of the originals is known and the payment amount for the copy service is also determined.
  この態様においても、第1識別情報や第2識別情報として、暗証番号等を利用することができる。このほか、被提供者がコピーした原稿の1枚目の画像を第1識別情報として利用することも可能である。すなわち、たとえば、コピーサービスの場合には、1枚目の原稿のスキャン結果を第1識別情報とし、スキャン結果やその一部を拡大したものと、他のダミーのスキャン結果と、を並べて、受取者に、どの原稿をコピーしたのか入力させて、第2識別情報とする。すなわち、コピーした原稿の冒頭を知っているか否かにより、被提供者か否かを判別するのである。 態 様 Also in this aspect, a personal identification number or the like can be used as the first identification information or the second identification information. In addition, the first image of the original copied by the recipient can be used as the first identification information. That is, for example, in the case of a copy service, the scan result of the first document is used as the first identification information, the scan result or an enlarged part of the scan result, and another dummy scan result are arranged and received. The user is made to input which original has been copied and used as the second identification information. That is, it is determined whether or not the recipient is a recipient by knowing the beginning of the copied manuscript.
  このように、取引対象の提供に要する素材を、そのまま識別情報に利用することもできるし、他の情報と組み合わせて識別情報とすることも可能である。 素材 As described above, the material required for providing the transaction object can be used as it is for identification information, or can be combined with other information as identification information.
  以上説明したように、本実施例の管理装置は、
  取引対象の提供を受けようとする被提供者を識別する第1識別情報を記録する記録部、
  前記取引対象の提供に先立って、預かりバリューの指定を前記被提供者から受け付ける受付部、
  前記被提供者が使用する第1可搬デバイスに対応付けられる第1残存バリューを前記預かりバリューだけ減少させる減少部、
  前記減少がされると、前記取引対象を、前記預かりバリュー以下の対価バリューに対応する提供量だけ提供する制御をする制御部、
  前記預かりバリューから前記対価バリューを差し引いた釣りバリューを受け取ろうとする受取者を識別する第2識別情報を取得する取得部、
  前記第1識別情報と、前記第2識別情報と、に基いて、前記釣りバリューを前記受取者に受け取らせるべきか否かを判定する判定部
  を備える。 As described above, the management apparatus of this embodiment is
A recording unit for recording first identification information for identifying a recipient to receive a transaction target;
Prior to the provision of the transaction object, a reception unit that accepts designation of custody value from the recipient,
A decreasing unit that decreases the first remaining value associated with the first portable device used by the recipient by the custody value;
When the reduction is performed, a control unit that controls the transaction target to provide only the provision amount corresponding to the consideration value below the custody value,
An acquisition unit for acquiring second identification information for identifying a recipient who intends to receive a fishing value obtained by subtracting the consideration value from the custody value;
A determination unit configured to determine whether the recipient should receive the fishing value based on the first identification information and the second identification information;
  また、本実施例の管理装置において、
  前記釣りバリューを受け取らせるべきと判定された前記受取者が使用する第2可搬デバイスに対応付けられる第2残存バリューを前記釣りバリューだけ増加させる増加部
  をさらに備えるように構成することができる。 Moreover, in the management apparatus of the present embodiment,
It may be configured to further include an increase unit that increases a second remaining value associated with a second portable device used by the recipient who is determined to receive the fishing value by the fishing value.
  また、本実施例の管理装置において、
  前記第1識別情報が記録された第1状況と、前記第2識別情報が取得された第2状況と、の差異に基いて定められる許容度の範囲内で、前記第1識別情報と前記第2識別情報とがマッチすると、前記釣りバリューを前記受取者に受け取らせるべきと判定される
  ように構成することができる。 Moreover, in the management apparatus of the present embodiment,
The first identification information and the first situation are within a tolerance range determined based on a difference between the first situation in which the first identification information is recorded and the second situation in which the second identification information is obtained. If the two identification information matches, the fishing value can be determined to be received by the recipient.
  また、本実施例の管理装置において、
  前記第1識別情報が記録された第1状況と、前記第2識別情報が取得された第2状況と、の差異に基いて定められる許容度の範囲内で、前記第1識別情報と前記第2識別情報とがマッチすると、前記釣りバリューを前記受取者に受け取らせるべきと判定され、
  前記第1状況において前記被提供者により使用される前記第1可搬デバイスと、前記第2状況において前記受取者により使用される前記第2可搬デバイスと、が、一致する場合の、前記第1識別情報と前記第2識別情報とがマッチするか否かを判定するための第1許容度は、
  前記第1状況において前記被提供者により使用される前記第1可搬デバイスと、前記第2状況において前記受取者により使用される前記第2可搬デバイスと、が、異なる場合の、前記第1識別情報と前記第2識別情報とがマッチするか否かを判定するための第2許容度よりも、
  大きい
  ように構成することができる。 Moreover, in the management apparatus of the present embodiment,
The first identification information and the first situation are within a tolerance range determined based on a difference between the first situation in which the first identification information is recorded and the second situation in which the second identification information is obtained. 2 If the identification information matches, it is determined that the recipient should receive the fishing value,
The first portable device used by the recipient in the first situation and the second portable device used by the recipient in the second situation match. The first tolerance for determining whether or not 1 identification information and the second identification information match,
The first portable device used by the recipient in the first situation and the second portable device used by the recipient in the second situation are different from each other. Than the second tolerance for determining whether the identification information and the second identification information match,
Can be configured to be large.
  また、本実施例の管理装置において、
  前記第1識別情報は、前記被提供者により入力された第1文字列であり、
  前記第2識別情報は、前記受取者により入力された第2文字列であり、
  前記第1文字列と前記第2文字列とが一致すると、前記釣りバリューを前記受取者に受け取らせるべきと判定される
  ように構成することができる。 Moreover, in the management apparatus of the present embodiment,
The first identification information is a first character string input by the recipient,
The second identification information is a second character string input by the recipient,
When the first character string matches the second character string, it can be configured that it is determined that the recipient should receive the fishing value.
  また、本実施例の管理装置において、
  前記第1識別情報は、前記被提供者の第1生体情報であり、
  前記第2識別情報は、前記受取者の第2生体情報であり、
  前記第1生体情報と前記第2生体情報とがマッチすると、前記釣りバリューを前記受取者に受け取らせるべきと判定される
  ように構成することができる。 Moreover, in the management apparatus of the present embodiment,
The first identification information is first biological information of the recipient,
The second identification information is second biological information of the recipient,
When the first biometric information and the second biometric information match, it can be configured that it is determined that the recipient should receive the fishing value.
  また、本実施例の管理装置において、
  前記第1識別情報は、前記管理装置から前記被提供者へ提示された第1文字列であり、
  前記第2識別情報は、前記受取者により入力された第2文字列であり、
  前記第1文字列と前記第2文字列とが一致すると、前記釣りバリューを前記受取者に受け取らせるべきと判定される
  ように構成することができる。 Moreover, in the management apparatus of the present embodiment,
The first identification information is a first character string presented from the management device to the recipient,
The second identification information is a second character string input by the recipient,
When the first character string matches the second character string, it can be configured that it is determined that the recipient should receive the fishing value.
  また、本実施例の管理方法は、
  管理装置が、取引対象の提供を受けようとする被提供者を識別する第1識別情報を記録する記録ステップ、
  前記管理装置が、前記取引対象の提供に先立って、預かりバリューの指定を前記被提供者から受け付ける受付ステップ、
  前記管理装置が、前記被提供者が使用する第1可搬デバイスに対応付けられる第1残存バリューを前記預かりバリューだけ減少させる減少ステップ、
  前記減少がされると、前記管理装置が、前記取引対象を、前記預かりバリュー以下の対価バリューに対応する提供量だけ提供する制御をする制御ステップ、
  前記管理装置が、前記預かりバリューから前記対価バリューを差し引いた釣りバリューを受け取ろうとする受取者を識別する第2識別情報を取得する取得ステップ、
  前記管理装置が、前記第1識別情報と、前記第2識別情報と、に基いて、前記釣りバリューを前記受取者に受け取らせるべきか否かを判定する判定ステップ
  を備える。 The management method of this embodiment is
A recording step in which the management device records first identification information for identifying a recipient to be provided for the transaction object;
Prior to the provision of the transaction object, the management device accepts a custody value designation from the recipient,
The management device, a reduction step of reducing the first remaining value associated with the first portable device used by the recipient by the custody value;
When the reduction is made, the control device performs control to provide the transaction object with a provision amount corresponding to a consideration value equal to or less than the custody value;
An acquisition step in which the management device acquires second identification information for identifying a recipient who intends to receive a fishing value obtained by subtracting the consideration value from the deposit value;
The management device includes a determination step of determining whether or not the recipient should receive the fishing value based on the first identification information and the second identification information.
  また、本実施例のプログラムは、コンピュータを、
  取引対象の提供を受けようとする被提供者を識別する第1識別情報を記録する記録部、
  前記取引対象の提供に先立って、預かりバリューの指定を前記被提供者から受け付ける受付部、
  前記被提供者が使用する第1可搬デバイスに対応付けられる第1残存バリューを前記預かりバリューだけ減少させる減少部、
  前記減少がされると、前記取引対象を、前記預かりバリュー以下の対価バリューに対応する提供量だけ提供する制御をする制御部、
  前記預かりバリューから前記対価バリューを差し引いた釣りバリューを受け取ろうとする受取者を識別する第2識別情報を取得する取得部、
  前記第1識別情報と、前記第2識別情報と、に基いて、前記釣りバリューを前記受取者に受け取らせるべきか否かを判定する判定部
  として機能させる。 In addition, the program of this embodiment is a computer,
A recording unit for recording first identification information for identifying a recipient to receive a transaction target;
Prior to the provision of the transaction object, a reception unit that accepts designation of custody value from the recipient,
A decreasing unit that decreases the first remaining value associated with the first portable device used by the recipient by the custody value;
When the reduction is performed, a control unit that controls the transaction target to provide only the provision amount corresponding to the consideration value below the custody value,
An acquisition unit for acquiring second identification information for identifying a recipient who intends to receive a fishing value obtained by subtracting the consideration value from the custody value;
Based on the first identification information and the second identification information, it functions as a determination unit that determines whether or not the recipient should receive the fishing value.
  また、上記のプログラムは、コンパクトディスク、フレキシブルディスク、ハードディスク、光磁気ディスク、ディジタルビデオディスク、磁気テープ、ROM(Read Only Memory)、EEPROM(Electrically Erasable Programmable ROM)、フラッシュメモリ、半導体メモリ等のコンピュータ読み取り可能な非一時的(non-transitory)情報記録媒体に記録することができる。この情報記録媒体は、コンピュータとは独立して配布・販売することができる。
  一般には、コンピュータは、非一時的(non-transitory)情報記録媒体に記録されたプログラムを、一時的(temporary)記憶装置であるRAM(Random Access Memory)に読み出してから、CPU(Central Processing Unit)が読み出されたプログラムに含まれる指令を実行する。ただし、ROMとRAMを一つのメモリ空間にマッピングして実行することが可能なアーキテクチャでは、ROMに格納されたプログラムに含まれる指令を、直接CPUが読み出して実行する。
  さらに、上記のプログラムは、プログラムが実行されるコンピュータとは独立して、コンピュータ通信網等の一時的(transitory)伝送媒体を介して、サーバ装置等から端末装置等へ配布・販売することができる。 In addition, the above programs can be read by a computer such as a compact disk, flexible disk, hard disk, magneto-optical disk, digital video disk, magnetic tape, ROM (Read Only Memory), EEPROM (Electrically Erasable Programmable ROM), flash memory, and semiconductor memory. It can be recorded on possible non-transitory information recording media. This information recording medium can be distributed and sold independently of the computer.
Generally, a computer reads a program recorded in a non-transitory information recording medium into a RAM (Random Access Memory) which is a temporary storage device, and then a CPU (Central Processing Unit). The command included in the read program is executed. However, in an architecture in which ROM and RAM can be mapped to a single memory space and executed, the CPU directly reads and executes a command included in the program stored in the ROM.
Furthermore, the above program can be distributed and sold from a server device or the like to a terminal device or the like via a transitory transmission medium such as a computer communication network, independently of the computer on which the program is executed. .
  本発明によれば、取引の開始時に預かり金に相当する預かりバリューだけ可搬デバイスに対応付けられる残存バリューを減算し、預かりバリュー以下の対価バリューに対応する提供量だけ取引対象を提供し、取引の終了時に釣銭に相当する釣りバリューだけ当該残存バリューを増加させる取引を管理するのに好適な管理装置、管理方法、ならびに、これらをコンピュータにより実現するためのプログラムを提供することができる。 According to the present invention, the remaining value associated with the portable device is subtracted by the deposit value corresponding to the deposit at the start of the transaction, and the transaction target is provided by the provision amount corresponding to the consideration value equal to or less than the deposit value. The management apparatus and management method suitable for managing a transaction for increasing the remaining value by the fishing value corresponding to the change at the end of the change, and a program for realizing these by a computer can be provided.
  101 管理装置
  102 記録部
  103 受付部
  104 減少部
  105 制御部
  106 取得部
  107 判定部
  108 増加部
  201 可搬デバイス
  202 提供装置
  203 外部記憶装置
  204 電子マネーサーバ
  501 セルフ給油機
  502 操作パネル
  503 リーダ/ライタ
  504 現金投入口
  505 カード投入口
  506 プリンタ
  507 ノズル
  508 カメラ
  601a, 601b, 601c, 601d 支払方法ボタン
  605 メッセージ表示欄
  609 釣り返却ボタン
  611a, 611b, 611c 油種チェックボックス
  612a, 612b, 612c, 612d, 612e 上限量ボタン
  613a, 613b, 613c, 613d 上限額ボタン
  614 戻るボタン
  615 課金済みの預かり額表示欄
  616 指定された預かり額表示欄
  621 残存バリューを全部使って他の可搬デバイスでは補充しないためのボタン
  622 残存バリューを全部使ってさらに他の可搬デバイスでも補充するためのボタン
  623 給油を開始するためのボタン
  661 キーパッド
  631 既提供量の価格表示欄
  633 既提供量表示欄
  634 釣り表示欄
  635 終了ボタン 101 management device 102 recording unit 103 receiving unit 104 decrementing unit 105 control unit 106 obtaining unit 107 determining unit 108 incrementing unit 201 portable device 202 providing device 203 external storage device 204 electronic money server 501 self-fueling machine 502 operation panel 503 reader / writer 504 Cash slot 505 Card slot 506 Printer 507 Nozzle 508 Camera 601a, 601b, 601c, 601d Payment method button 605 Message display field 609 Fishing return button 611a, 611b, 611c Oil type check box 612a, 612b, 612c, 612d, 612e Maximum amount button 613a, 613b, 613c, 613d Maximum amount button 614 Back button 615 Charged deposit amount display column 616 Specified deposit amount display column 621 Button to use all remaining value and not replenish in other portable devices 622 Button for replenishing other remaining portable devices using all remaining value 623 Button for starting refueling 661 Key Price display column 633 already provides the amount display column of the pad 631 already provides the amount of 634 fishing display column 635 Exit button

Claims (7)

  1.   取引対象の提供を受けようとする被提供者を識別する第1識別情報を記録する記録部、
      前記取引対象の提供に先立って、預かりバリューの指定を前記被提供者から受け付ける受付部、
      前記被提供者が使用する第1可搬デバイスに対応付けられる第1残存バリューを前記預かりバリューだけ減少させる減少部、
      前記減少がされると、前記取引対象を、前記預かりバリュー以下の対価バリューに対応する提供量だけ提供する制御をする制御部、
      前記預かりバリューから前記対価バリューを差し引いた釣りバリューを受け取ろうとする受取者を識別する第2識別情報を取得する取得部、
      前記第1識別情報と、前記第2識別情報と、に基いて、前記釣りバリューを前記受取者に受け取らせるべきか否かを判定する判定部
      を備えることを特徴とする管理装置。     A recording unit for recording first identification information for identifying a recipient to receive a transaction target;
    Prior to the provision of the transaction object, a reception unit that accepts designation of custody value from the recipient,
    A decreasing unit that decreases the first remaining value associated with the first portable device used by the recipient by the custody value;
    When the reduction is performed, a control unit that controls the transaction target to provide only the provision amount corresponding to the consideration value below the custody value,
    An acquisition unit for acquiring second identification information for identifying a recipient who intends to receive a fishing value obtained by subtracting the consideration value from the custody value;
    A management apparatus comprising: a determination unit that determines whether or not the recipient should receive the fishing value based on the first identification information and the second identification information.
  2.   請求項1に記載の管理装置であって、
      前記釣りバリューを受け取らせるべきと判定された前記受取者が使用する第2可搬デバイスに対応付けられる第2残存バリューを前記釣りバリューだけ増加させる増加部
      をさらに備えることを特徴とする管理装置。     The management device according to claim 1, wherein
    The management apparatus further comprising: an increase unit configured to increase a second remaining value associated with a second portable device used by the recipient who is determined to receive the fishing value by the fishing value.
  3.   請求項1または2に記載の管理装置であって、
      前記第1識別情報が記録された第1状況と、前記第2識別情報が取得された第2状況と、の差異に基いて定められる許容度の範囲内で、前記第1識別情報と前記第2識別情報とがマッチすると、前記釣りバリューを前記受取者に受け取らせるべきと判定される
      ことを特徴とする管理装置。     The management device according to claim 1 or 2,
    The first identification information and the first situation are within a tolerance range determined based on a difference between the first situation in which the first identification information is recorded and the second situation in which the second identification information is obtained. If the two identification information matches, it is determined that the receiver should receive the fishing value.
  4.   請求項2に記載の管理装置であって、
      前記第1識別情報が記録された第1状況と、前記第2識別情報が取得された第2状況と、の差異に基いて定められる許容度の範囲内で、前記第1識別情報と前記第2識別情報とがマッチすると、前記釣りバリューを前記受取者に受け取らせるべきと判定され、
      前記第1状況において前記被提供者により使用される前記第1可搬デバイスと、前記第2状況において前記受取者により使用される前記第2可搬デバイスと、が、一致する場合の、前記第1識別情報と前記第2識別情報とがマッチするか否かを判定するための第1許容度は、
      前記第1状況において前記被提供者により使用される前記第1可搬デバイスと、前記第2状況において前記受取者により使用される前記第2可搬デバイスと、が、異なる場合の、前記第1識別情報と前記第2識別情報とがマッチするか否かを判定するための第2許容度よりも、
      大きい
      ことを特徴とする管理装置。     The management device according to claim 2,
    The first identification information and the first situation are within a tolerance range determined based on a difference between the first situation in which the first identification information is recorded and the second situation in which the second identification information is obtained. 2 If the identification information matches, it is determined that the recipient should receive the fishing value,
    The first portable device used by the recipient in the first situation and the second portable device used by the recipient in the second situation match. The first tolerance for determining whether or not 1 identification information and the second identification information match,
    The first portable device used by the recipient in the first situation and the second portable device used by the recipient in the second situation are different from each other. Than the second tolerance for determining whether the identification information and the second identification information match,
    Management device characterized by being large.
  5.   請求項1から4のいずれか1項に記載の管理装置であって、
      前記第1識別情報は、前記被提供者により入力された第1文字列であり、
      前記第2識別情報は、前記受取者により入力された第2文字列であり、
      前記第1文字列と前記第2文字列とが一致すると、前記釣りバリューを前記受取者に受け取らせるべきと判定される
      ことを特徴とする管理装置。     The management device according to any one of claims 1 to 4,
    The first identification information is a first character string input by the recipient,
    The second identification information is a second character string input by the recipient,
    When the first character string matches the second character string, it is determined that the receiver should receive the fishing value.
  6.   管理装置が、取引対象の提供を受けようとする被提供者を識別する第1識別情報を記録する記録ステップ、
      前記管理装置が、前記取引対象の提供に先立って、預かりバリューの指定を前記被提供者から受け付ける受付ステップ、
      前記管理装置が、前記被提供者が使用する第1可搬デバイスに対応付けられる第1残存バリューを前記預かりバリューだけ減少させる減少ステップ、
      前記減少がされると、前記管理装置が、前記取引対象を、前記預かりバリュー以下の対価バリューに対応する提供量だけ提供する制御をする制御ステップ、
      前記管理装置が、前記預かりバリューから前記対価バリューを差し引いた釣りバリューを受け取ろうとする受取者を識別する第2識別情報を取得する取得ステップ、
      前記管理装置が、前記第1識別情報と、前記第2識別情報と、に基いて、前記釣りバリューを前記受取者に受け取らせるべきか否かを判定する判定ステップ
      を備えることを特徴とする管理方法。     A recording step in which the management device records first identification information for identifying a recipient to be provided for the transaction object;
    Prior to the provision of the transaction object, the management device accepts a custody value designation from the recipient,
    The management device, a reduction step of reducing the first remaining value associated with the first portable device used by the recipient by the custody value;
    When the reduction is made, the control device performs control to provide the transaction object with a provision amount corresponding to a consideration value equal to or less than the custody value;
    An acquisition step in which the management device acquires second identification information for identifying a recipient who intends to receive a fishing value obtained by subtracting the consideration value from the deposit value;
    The management device includes a determination step of determining whether or not the receiver should receive the fishing value based on the first identification information and the second identification information. Method.
  7.   取引対象の提供を受けようとする被提供者を識別する第1識別情報を記録する記録部、
      前記取引対象の提供に先立って、預かりバリューの指定を前記被提供者から受け付ける受付部、
      前記被提供者が使用する第1可搬デバイスに対応付けられる第1残存バリューを前記預かりバリューだけ減少させる減少部、
      前記減少がされると、前記取引対象を、前記預かりバリュー以下の対価バリューに対応する提供量だけ提供する制御をする制御部、
      前記預かりバリューから前記対価バリューを差し引いた釣りバリューを受け取ろうとする受取者を識別する第2識別情報を取得する取得部、
      前記第1識別情報と、前記第2識別情報と、に基いて、前記釣りバリューを前記受取者に受け取らせるべきか否かを判定する判定部
      として機能させることを特徴とするプログラム。     A recording unit for recording first identification information for identifying a recipient to receive a transaction target;
    Prior to the provision of the transaction object, a reception unit that accepts designation of custody value from the recipient,
    A decreasing unit that decreases the first remaining value associated with the first portable device used by the recipient by the custody value;
    When the reduction is performed, a control unit that controls the transaction target to provide only the provision amount corresponding to the consideration value below the custody value,
    An acquisition unit for acquiring second identification information for identifying a recipient who intends to receive a fishing value obtained by subtracting the consideration value from the custody value;
    A program that functions as a determination unit that determines whether or not the recipient should receive the fishing value based on the first identification information and the second identification information.
PCT/JP2013/082770 2013-12-06 2013-12-06 Management device, management method, and program WO2015083278A1 (en)

Priority Applications (2)

Application Number Priority Date Filing Date Title
JP2015551351A JP6304568B2 (en) 2013-12-06 2013-12-06 Management device, management method, and program
PCT/JP2013/082770 WO2015083278A1 (en) 2013-12-06 2013-12-06 Management device, management method, and program

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/JP2013/082770 WO2015083278A1 (en) 2013-12-06 2013-12-06 Management device, management method, and program

Publications (1)

Publication Number Publication Date
WO2015083278A1 true WO2015083278A1 (en) 2015-06-11

Family

ID=53273070

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/JP2013/082770 WO2015083278A1 (en) 2013-12-06 2013-12-06 Management device, management method, and program

Country Status (2)

Country Link
JP (1) JP6304568B2 (en)
WO (1) WO2015083278A1 (en)

Cited By (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2019526199A (en) * 2016-07-29 2019-09-12 エヌチェーン ホールディングス リミテッドＮｃｈａｉｎ Ｈｏｌｄｉｎｇｓ Ｌｉｍｉｔｅｄ Method and system realized by blockchain
JP2019210030A (en) * 2018-06-07 2019-12-12 トキコシステムソリューションズ株式会社 Fuel supply system
JP6635495B1 (en) * 2018-12-25 2020-01-29 パスロジ株式会社 Remote control system, remote control method, and program
JP2020107332A (en) * 2019-12-11 2020-07-09 パスロジ株式会社 Remote control system, remote control method, and program
JP2021015411A (en) * 2019-07-11 2021-02-12 株式会社豊田自動織機 Service provision system, management server, service provision device, management service provision program, device service provision program, and service provision method
JP7005802B1 (en) 2021-03-02 2022-01-24 株式会社 みずほ銀行 Payment management system and payment management method
JP2022108335A (en) * 2021-01-13 2022-07-26 Ｎｅｃプラットフォームズ株式会社 Electronic payment system, portable terminal apparatus, electronic payment method, and electronic money management program

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113816540B (en) * 2021-10-13 2024-03-29 无锡市道格环保科技有限公司 Electric flocculation device and treatment method for treating heavy metal ion wastewater

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2002163589A (en) * 2000-11-28 2002-06-07 Mitsui Finance Service Co Ltd Payment surrogate system, payment surrogate method, and recording medium which stores payment surrogate program
JP2007299293A (en) * 2006-05-01 2007-11-15 Ricoh Co Ltd Charging method, charging system and image processor
JP2009075752A (en) * 2007-09-19 2009-04-09 Oki Electric Ind Co Ltd Electronic money processor
JP2009193558A (en) * 2008-01-15 2009-08-27 Komota Kk Sales system using non-contact prepaid card
JP2012037987A (en) * 2010-08-04 2012-02-23 Sharp Corp Printer

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2002163589A (en) * 2000-11-28 2002-06-07 Mitsui Finance Service Co Ltd Payment surrogate system, payment surrogate method, and recording medium which stores payment surrogate program
JP2007299293A (en) * 2006-05-01 2007-11-15 Ricoh Co Ltd Charging method, charging system and image processor
JP2009075752A (en) * 2007-09-19 2009-04-09 Oki Electric Ind Co Ltd Electronic money processor
JP2009193558A (en) * 2008-01-15 2009-08-27 Komota Kk Sales system using non-contact prepaid card
JP2012037987A (en) * 2010-08-04 2012-02-23 Sharp Corp Printer

Cited By (14)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2019526199A (en) * 2016-07-29 2019-09-12 エヌチェーン ホールディングス リミテッドＮｃｈａｉｎ Ｈｏｌｄｉｎｇｓ Ｌｉｍｉｔｅｄ Method and system realized by blockchain
JP7269387B2 (en) 2016-07-29 2023-05-08 エヌチェーン ライセンシング アーゲー Methods and systems implemented by blockchain
JP7013441B2 (en) 2016-07-29 2022-01-31 エヌチェーン ホールディングス リミテッド Methods and systems realized by blockchain
JP2022058653A (en) * 2016-07-29 2022-04-12 エヌチェーン ホールディングス リミテッド Blockchain implemented method and system
JP7082908B2 (en) 2018-06-07 2022-06-09 トキコシステムソリューションズ株式会社 Fuel supply system
JP2019210030A (en) * 2018-06-07 2019-12-12 トキコシステムソリューションズ株式会社 Fuel supply system
JP6635495B1 (en) * 2018-12-25 2020-01-29 パスロジ株式会社 Remote control system, remote control method, and program
JP2021015411A (en) * 2019-07-11 2021-02-12 株式会社豊田自動織機 Service provision system, management server, service provision device, management service provision program, device service provision program, and service provision method
JP2020107332A (en) * 2019-12-11 2020-07-09 パスロジ株式会社 Remote control system, remote control method, and program
JP7228196B2 (en) 2019-12-11 2023-02-24 パスロジ株式会社 terminal program
JP2022108335A (en) * 2021-01-13 2022-07-26 Ｎｅｃプラットフォームズ株式会社 Electronic payment system, portable terminal apparatus, electronic payment method, and electronic money management program
JP7173622B2 (en) 2021-01-13 2022-11-16 Ｎｅｃプラットフォームズ株式会社 Electronic payment system, portable terminal device, electronic payment method and electronic money management program
JP2022133589A (en) * 2021-03-02 2022-09-14 株式会社 みずほ銀行 Payment management system and payment management method
JP7005802B1 (en) 2021-03-02 2022-01-24 株式会社 みずほ銀行 Payment management system and payment management method

Also Published As

Publication number Publication date
JPWO2015083278A1 (en) 2017-03-16
JP6304568B2 (en) 2018-04-04

Similar Documents

Publication Publication Date Title
JP6304568B2 (en) Management device, management method, and program
US20180240106A1 (en) Hand-held electronics device for aggregation of and management of personal electronic data
US6604087B1 (en) Vending access to the internet, business application software, e-commerce, and e-business in a hotel room
US6604085B1 (en) Universal interactive advertising and payment system network for public access electronic commerce and business related products and services
JP6174116B2 (en) Equipment for the supply of goods
US6609102B2 (en) Universal interactive advertizing and payment system for public access electronic commerce and business related products and services
US8313020B2 (en) Automated banking machine operated responsive to data bearing records
US11017395B2 (en) Vending machine with user ID/age verification system and associated method
US20060074803A1 (en) Multi-purpose kiosk and methods
US20160104157A1 (en) Method for producing a transaction signal
US20120036071A1 (en) Verification methods for fraud prevention in money transfer receive transactions
US11697581B2 (en) Efficient resource provider system
US20180300698A1 (en) Cash access with automatic transaction machine with mobile phone
US20170162004A1 (en) Communications system facilitating cash transfer
WO2015062255A1 (en) Information processing method, device and system
US20230368166A1 (en) System for providing applications on an automated teller machine (atm)
US20140279537A1 (en) Financial transaction system and method capable of utilizing a mobile device
WO2016130260A1 (en) Mobile system for exchanging gift cards
US20190236589A1 (en) Hand-held electronics device for aggregation of and management of personal electronic data
KR101871312B1 (en) system, server and method of providing settlement service for minor
EP2947615A1 (en) A method and a system for electronic payment
CN109767504A (en) Parking lot intelligent charging method, computer installation, computer readable storage medium
US20100174563A1 (en) System and Method for Purchasing Insurance
JP7395914B2 (en) Automatic teller machine, processing method, program
US11587086B1 (en) Payment distribution system and method

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 13898846

Country of ref document: EP

Kind code of ref document: A1

ENP Entry into the national phase

Ref document number: 2015551351

Country of ref document: JP

Kind code of ref document: A

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 13898846

Country of ref document: EP

Kind code of ref document: A1