WO2018142605A1 - Mobile terminal, server, control method, and program - Google Patents

Abstract

A mobile terminal (101) presented to an electronic asset owner by an operator executes a program, and a detection unit (109) detects the location of the mobile terminal (101). From a history of detected locations of the mobile terminal (101), a control unit (103) estimates whether or not the mobile terminal (101) is moving, and if it is estimated that the mobile terminal (101) is moving, the control unit (103) restricts the near-field communication between the mobile terminal (101) and a portable device that allows the operator to inherit an electronic asset from the owner. The mobile terminal (101) can store a predetermined maximum number of combinations of a detected location and a detection date and time. When the detection unit (109) has detected a new location of the mobile terminal (101), the combination of the detected new location and the detection date and time is stored in the mobile terminal (101) as a new combination after deleting, from among the combinations currently stored in the mobile terminal (101), the combination that can be most closely approximated from the new combination.

Description

Portable terminal, server, control method, and program

The present invention provides a portable terminal that an operator who intends to take over the electronic property from the owner of the electronic property presents the owner, a server that distributes a program executed on the portable terminal, a method for controlling the portable terminal, And related to the program.

Various systems using electronic money have been proposed in transactions in which goods and services are provided by paying consideration. In an electronic money system, instead of carrying cash in a wallet, it is associated with a portable device (corresponding to a wallet) and represented by electronic information or electronic value (corresponding to cash in the wallet) )) To make a payment. An electronic property such as electronic money or electronic value that is equivalent to real-world cash or other property and that represents the value electronically is called electronic property.
When paying with electronic money to purchase a product or service, the provider of the product or service inherits the amount equivalent to the payment amount of the electronic property owned by the payer.
Electronic contents such as documents, moving images, music, and personal information of owners are also a kind of electronic property. The owner of the electronic content can grant the right to use or refer to the electronic content to a person who has paid for the electronic content. This permission can be interpreted as succession of the electronic property.
Furthermore, when various events and entertainment tickets, various coupon tickets, cash vouchers, etc. are electronically traded, the electronic property representing the ticket, coupon ticket, or cash voucher is succeeded.

When paying electronic value, the payer moves the portable device close to the reader / writer operated by the provider of the goods or services, so that he / she only touches the portable device and the reader / writer. NFC (Near Field Communication) is established between them, and through this communication, the electronic value associated with the portable device is reduced by the amount of payment. In NFC, the portable device and the reader / writer do not need to be in contact with each other, but the distance typically needs to be close to several millimeters.

Portable devices that use NFC electronic circuits in cash cards and credit cards are widely used. This electronic circuit generally operates by electric power generated by electromagnetic induction by NFC radio waves emitted from a reader / writer.

On the other hand, mobile terminals such as mobile phones and smartphones are also widely used in the same way as above, which incorporates an NFC electronic circuit inside, as well as an NFC card in a SIM card for telephone communication (Subscriber Identity Card). A device provided with a communication function has also been proposed. In these cases, radio waves emitted from the reader / writer can be used as a power source, and power can be supplied from a battery included in the main body of the mobile terminal.

Here, an electronic circuit for NFC that can receive power supply from the mobile terminal main body includes (a) card emulation that works as a portable device to carry in and out electronic value in the account assigned to the electronic circuit Mode, (b) Reader / writer mode for processing information related to electronic value assigned to other portable devices and functioning as a reader / writer, (c) Various messages such as e-mail addresses between electronic circuits In many cases, it has a P2P (Peer To Peer) mode for sending and receiving.

That is, a mobile terminal such as a mobile phone or a smartphone can function as a wallet for electronic money, or can function as a reader / writer. Using this function, there is a technology for paying electronic value from an electronic money card by making the mobile terminal function as a reader / writer of an electronic money system and establishing communication by bringing the electronic money card close to the mobile terminal. It has been proposed (see Patent Document 1, paragraphs 0072 and 0073).

According to this function, at a privately-operated store, the mobile terminal used by the store owner for telephone calls can function as a reader / writer for the electronic money system, while reducing the cost of capital investment. Will be able to receive electronic value payments. At this time, the store owner downloads the program for the portable terminal from the distribution server or the like of the electronic money business operator and executes the program on the portable terminal.

In addition, in various amusement facilities such as a theater and a baseball stadium, a salesperson walks between spectator seats and sells food and drinks, pamphlets and the like. Therefore, if the seller purchases a large number of inexpensive smartphones of the old model, installs and operates the above program, and operates the seller, the audience can pay with electronic money.
In addition, various electronic tickets, electronic coupon tickets, electronic advance tickets, etc. are grasped as electronic property owned by the audience and users, and when actually seeing performance or receiving products or services, If the provider succeeds from the owner and disables it, it cannot be reused. Therefore, when it is possible to succeed an electronic ticket or the like by a smartphone, the electronic ticket or the like can be used in various scenes.

However, if various portable terminals can be used as various electronic property readers / writers, there is a possibility of easy unauthorized use. For example, a portable terminal that operates as a reader / writer is brought close to someone else's bag in a public transport such as a crowded city bus or train, and electronic property is stolen from a portable device in the bag. . In order to cope with this, Patent Document 2 proposes a technique for suppressing unauthorized use by referring to the position and inclination of the mobile terminal.

JP 2013-140453 Gazette Japanese Patent No. 5985103

However, there is a strong demand for new techniques for suppressing such unauthorized use.
The present invention is intended to solve the above-described problem, and is suitable for suppressing unauthorized use in a portable terminal presented to the owner by an operator who intends to succeed the electronic property from the owner of the electronic property. An object is to provide a portable terminal, a server for distributing a program executed on the portable terminal, a control method for the portable terminal, and the program.

In the present invention, the mobile terminal is presented to the owner of the electronic property by the operator and is a mobile terminal, and the mobile terminal executes a program,
Detecting the position of the mobile terminal;
From the history of the detected position, it is estimated whether the mobile terminal is moving,
If it is estimated that the portable terminal is moving, near field communication with a portable device used for succession of the electronic property from the owner to the operator is restricted.
The program can be distributed from the server to the mobile terminal via a temporary transmission medium, or recorded on a non-temporary computer-readable information recording medium, and the information recording medium is distributed, It can also be installed on a mobile terminal.

It is explanatory drawing which shows the outline | summary of the portable terminal which concerns on the Example of this invention. It is a flowchart which shows the flow of the process performed with the portable terminal which concerns on the Example of this invention. It is a display example of the input form for the provider to log in to the server for the thin client. It is a display example of a fingerprint registration form for an operator to register biometric information. It is explanatory drawing for demonstrating the aspect of the holding | maintenance part by which biometric information is hold | maintained. It is explanatory drawing for demonstrating the other aspect of the holding | maintenance part by which biometric information is hold | maintained. It is a display example of the outline | summary form for showing the outline | summary of login and registration. It is an example of a display of the amount form which requires input of the amount of electronic value concerning payment. It is a display example of a payment confirmation form that asks the payer to take an action to agree to payment. It is a display example of the communication form showing that it is going to start NFC with a portable device. It is explanatory drawing which shows the mode of the back side of terminal hardware. It is explanatory drawing which shows a mode that the portable device was brought close to terminal hardware. It is a display example of the message form showing that payment of electronic value was completed. It is a display example of the communication form showing that the balance of electronic value is insufficient. It is a display example of the payment confirmation form which asks a payer for a high level confirmation. It is a display example of the message form showing that electronic value cannot be paid.

Embodiments of the present invention will be described below. In addition, this embodiment is for description and does not limit the scope of the present invention. Therefore, those skilled in the art can employ embodiments in which each or all of these elements are replaced with equivalent ones, and these embodiments are also included in the scope of the present invention.
In particular, in the following, for ease of understanding, an electronic money system for paying electronic value (or electronic money) as an electronic property will be taken as an example. This example shows various electronic properties from the owner to others. It is obvious to those skilled in the art to apply to the inherited embodiment, and the embodiment is also included in the scope of the present invention.

電子 Electronic value in an electronic money system is an electronic property having a value similar to cash. Electronic value may be managed in the same currency unit so that it can be exchanged with cash or from one side to the other, or it may be converted at the time of exchange using an original unit. It is also possible to use various points given in accordance with user actions (purchasing products, answering questionnaires, visiting stores, etc.) as electronic value.

This embodiment can be applied to an electronic money system called a stored-value type. In a stored value system, electronic value (also called “balance”) that users can pay for in transactions is transferred to various portable devices such as cards, mobile phones, and smartphones that incorporate electronic circuits. Manage in association.

In a stored value type system, it is common to store a numerical value of available electronic value in an electronic circuit of a portable device. This aspect corresponds to a state where cash is in the wallet. Hereinafter, the value associated with the portable device will be referred to as “remaining value” in comparison with “cash remaining in the wallet”.

A product or service provider accepts payment for a user by using a reader / writer that can communicate with a portable device. When the user places the portable device on the reader / writer, communication between the portable device and the reader / writer becomes possible. When various commands are sent from the reader / writer to the portable device, the execution result of the command is available. Sent from the portable device to the reader / writer.

For example, by using an inquiry command, it is possible to acquire the numerical value of the remaining value currently associated with the portable device as the execution result.

In the wrinkle reduction command, the remaining value associated with the portable device is decreased by the electronic value specified in the command. This corresponds to taking out cash from the wallet. In other words, the decrease command is used when paying a consideration, that is, “billing” in a transaction for receiving provision of goods or services. Hereinafter, the electronic value specified in the decrease command is referred to as “price value”.

The heel increase command increases the remaining value associated with the portable device by the electronic value specified in the command. This corresponds to putting cash in the wallet. The increase command is used, for example, when a user charges a portable device with electronic value corresponding to the cash instead of paying cash to the store clerk at the store.

When the portable device has a function of performing communication via a computer communication network such as the Internet, an application that operates in the portable device responds to a command sent via the computer communication network. It is also possible to acquire or increase / decrease the residual value associated with the portable device. In this case, it is possible to pay the price and charge the remaining value without using the reader / writer.

The fact that the electronic value is increased or decreased by a decrease command or an increase command means that a value transfer has occurred between the payer and the provider. The provider transmits this value transfer information to the electronic money management server. The electronic money management server is operated by an operator of the entire electronic money service. If the payment information stored in the electronic money management server is added up, the total amount of electronic value that the provider has obtained or lost within that period can be obtained.

If the provider has acquired electronic value, it can be obtained by exchanging cash from the operator. On the other hand, if the electronic value is lost, the provider is responsible for paying the operator cash or the like for the electronic value.

It should be noted that an intermediate trader may be interposed between the provider and the operator of the entire electronic money service. This company is called an electronic money service provider, and provides advice and support for the provision of infrastructure and handling of electronic value necessary for the provider to receive payment by electronic value. In this embodiment, in order to receive payment of electronic value, a mobile terminal such as a mobile phone or a smartphone prepared by a provider is used as a reader / writer, but a program for causing the mobile terminal to function as a reader / writer is A distribution server or the like prepared by an operator or business operator distributes it to mobile terminals.

In this embodiment, NFC is used for communication between a portable terminal functioning as a reader / writer and a portable device within the communicable range, but infrared communication or Bluetooth (registered trademark) is used. Also good.

Note that the present embodiment can also be applied to an electronic money system called a server value method. In the server value method, identification information of an account corresponding to a wallet of electronic value is acquired from a portable device, and the account and the remaining value in the account are managed in the server of the operator or operator. The That is, in the server value method, the portable device functions as an identification tag for identifying an account, but does not store the remaining value itself.

In the present embodiment, a so-called thin client method is assumed. In the thin client system, the mobile terminal functions as a user interface for exchanging various information with a reader / writer and a human, and transmission / reception of commands to / from the portable device is controlled by a thin client server. This thin client server may be prepared by the provider itself, or may be one in which the business operator has set a usage right for the provider. The thin client server plays a role of depositing and outputting electronic value in the provider. Management information is exchanged between the thin client server and the operator regularly, typically once a day, and the total amount of electronic value owned by the provider is required.

However, this embodiment can also be applied to a so-called rich client system. In the thin client method, the portable terminal relays communication between the portable device and the server and is responsible for interaction with the user. In the rich client method, the portable terminal further serves as a server. Become. That is, the mobile terminal examines command transmission / reception with the portable device, and also bears regular communication with the operator.

The mobile terminal of this embodiment can use hardware such as a smartphone or a mobile phone, can be configured by a dedicated electronic circuit, or can be realized by causing a computer to execute a program. Is possible. In addition, as an intermediate form between a computer and a dedicated electronic circuit, a technology such as FPGA (Field Programmable Gate Array) that compiles a program into an electronic circuit design script and dynamically configures the electronic circuit based on the design script. By applying, it is possible to configure the portable terminal of this embodiment.

In the portable terminal of the present embodiment, in order to prevent as much as possible unauthorized acts by the operator of the portable terminal (including the provider, the person hired by the provider, and the person who steals the portable terminal from the provider). Utilize various technologies. In the following, first, these techniques will be outlined.

The first technology uses the biometric information of electronic value payers. In general, in payment by electronic value, the payer is requested to take an action such as touching a predetermined part of the mobile terminal, and the intention to agree to the payment is confirmed. However, in the field of goods sales, it is extremely rare that the same payer agrees to pay continuously. On the other hand, it is considered that a fraudulent person repeatedly takes the above-mentioned action in order to steal another person's electronic value through fraud.

With this technology, it is determined that there is a possibility of fraudulent behavior for a person who is assumed to be the same person as the past payer by acquiring the payer's biometric information and cannot pay electronic money at all Or make it impossible to pay electronic money unless it passes other high-level checks.

The second technology uses the tilt of the mobile device. In general, when paying electronic value using a card-type portable device, the portable device is placed close to the NFC electronic circuit so that the payer can see the front or back of the card. It is common. On the other hand, mobile terminals such as mobile phones and smartphones often have a plate shape, and electronic circuits for NFC are arranged on the front or back surface of the plate.

Therefore, only when the front surface and the back surface of the mobile terminal are substantially parallel to the horizontal plane, the electronic value can be paid through the mobile terminal. According to this technology, when a fraudster approaches a portable terminal to another person's bag in order to steal electronic value, the portable terminal is moved closer to the bottom of the bag. The attitude of the fraudster at this time is unnatural and conspicuous. Therefore, it is considered that fraud can be suppressed.

The third technique is to notify a person around the portable terminal such as a payer by audible sound, visible light, or vibration when paying with electronic value. The notification performed here is desirably performed with the maximum volume, the maximum light amount, and the maximum vibration. By this notification, the owner of the portable device is warned that the electronic value will be paid from the account of the portable device. This notification can be sent before payment of electronic value (e.g. while prompting the payer for consent), during payment (e.g. while NFC chip searches for nearby portable devices), after payment (e.g. , After payment is successful and the portable device is ready to go.

In the fourth technology, place restrictions on payments via mobile devices. That is, if the mobile terminal is not in a specific area, the electronic value is not paid. Even if a mobile device is stolen by limiting the available area in the store at a privately managed store and limiting the available area in the facility at a theater or stadium, etc. If you leave, cheating is impossible. If you are away from the available area due to opening a store for various events, you can re-register the area or pass the high level check so that you can pay electronic money. good. Further, as will be clarified in an embodiment described later, even if the usable area is not set in advance, it is possible to prevent fraud based on the history of the position of the mobile terminal.

技術 These techniques may be used alone or in appropriate combination. In the following, details of these techniques will also be described in detail.

FIG. 1 is an explanatory diagram showing an outline of a mobile terminal according to an embodiment of the present invention. Hereinafter, a description will be given with reference to FIG.

The mobile terminal 101 according to the present embodiment is realized by downloading a program distributed from a server by an electronic money system operator or operator to terminal hardware such as a smartphone or a mobile phone.

Generally, programs executed on terminal hardware are compact disk, flexible disk, hard disk, magneto-optical disk, digital video disk, magnetic tape, ROM (Read (Only Memory), EEPROM (Electrically Erasable Programmable ROM), flash memory, semiconductor It can be recorded on a computer-readable non-transitory information recording medium such as a memory. This information recording medium can also be distributed and sold independently of the terminal hardware.

In terminal hardware, a program recorded in a non-transitory information recording medium such as a flash memory is read after being read into RAM (Random Access Memory), which is a temporary storage device. CPU (Central Processing Unit) executes the commands included in the program. However, in an architecture in which ROM and RAM can be mapped and executed in a single memory space, the CPU directly reads and executes instructions included in the program stored in ROM.

Further, the above-mentioned program may be connected to a terminal hardware from a distribution server or a management server managed by an operator via a transitory transmission medium such as a computer communication network independently of a computer on which the program is executed. It can be distributed and sold to etc.

携 帯 Here, the mobile terminal 101 includes an acquisition unit 102 and a control unit 103. Further, a prompt unit 104, a holding unit 105, an erasing unit 106, a notification unit 107, a setting unit 108, and a detection unit 109 are provided as optional elements. The operation of each part will be outlined below.

The bag acquisition unit 102 acquires biometric information of a payer who intends to pay electronic money. As the biometric information, a payer's fingerprint, voiceprint, face shape, retina shape, iris shape, or the like can be used. The biometric information is acquired using a fingerprint sensor, a touch panel, a microphone, a camera, or the like included in the terminal hardware.

Prompt unit 104 outputs a message prompting the payer to take an action to agree to the payment. The message is displayed on a display device such as a touch screen included in the terminal hardware under the control of the CPU included in the terminal hardware. However, the action may be urged by voice from a speaker or the like included in the terminal hardware.

As the action, it is possible to make the payer touch the button displayed on the touch screen, or to make the payer agree to the payment by voice. Here, if the biometric information is acquired from the action performed by the payer, it is considered that the psychological resistance of the payer is reduced and the transaction proceeds smoothly. Moreover, compared with the aspect which performs separately the process which acquires biometric information, and the process which calculates | requires an action, a payer's effort can be reduced.

For example, when fingerprints are adopted as biometric information, when consenting to payment, the payer is prompted to touch the fingerprint sensor of the terminal hardware, and the action can be taken when the fingerprint is acquired from the fingerprint sensor. It is considered that it was done. In addition, the payer's fingerprint may be acquired from a touch screen of the terminal hardware.

When voice is adopted as the biometric information, the utterance of the payer that consents to the payment is acquired by the microphone of the terminal hardware, and it is determined whether or not an action has been taken from the result of voice recognition of the utterance. At the same time, when an action is taken, a voiceprint is acquired from the utterance.

採用 When adopting a face shape, a retina shape, or an iris shape as biological information, a camera for self-photographing of terminal hardware can be used. In this aspect, the display device displays an image photographed by the camera, and also displays a figure of a frame that serves as a guide. And if you agree with payment, move the terminal hardware or payer's face so that the contour of the photographed payer's face and eyes almost match the border of the guide, then for a predetermined time Encourage the payer to take action to maintain that position (several seconds). When the action is completed, the shape of the face, retina, and iris are also acquired.

In this embodiment, image and sound information acquired by a sensor, a microphone, and a camera are not used as biometric information as they are, but feature values extracted from these pieces of information are used as biometric information. Thereby, a more suitable system is realized from the viewpoint of privacy. Note that the process of extracting feature quantities from the acquired image and audio information is performed using a CPU of the terminal hardware or a dedicated chip for biometric information processing. A known technique may be employed.

The bag holder 105 holds the payer's biometric information acquired in the past for a predetermined period or a predetermined number. In addition, the holding unit 105 may separately hold biological information of an operator who operates terminal hardware such as a store clerk or a salesperson. The holding unit 105 is realized by a nonvolatile non-transitory storage device, for example, a flash memory included in terminal hardware.

The bag control unit 103 controls payment by electronic value, and is realized by a CPU included in the terminal hardware. The control unit 103 determines the possibility of fraudulent activity and determines whether or not to accept payment of electronic value as it is according to the possibility. If the electronic value payment is accepted as it is, the NFC chip of the terminal hardware is controlled to search for a nearby portable device. If a portable device is detected, a decrease command is transmitted to the portable device, the result is received, and if the decrease command is successful, it is assumed that payment of electronic value is completed.

In other cases, the payment of the electronic value from the payer may be rejected, or the electronic value payment process may be started after passing another high-level check.

Among the simple aspects of determining whether or not there is fraudulent activity based on biometric information, each of the payer's biometric information acquired in past transactions and payments and the payer who is going to pay the electronic value this time are acquired. Some biometric information is collated. In this aspect, if any of the former matches the latter, that is, if it is determined that the past payer is also a payer this time, there is a high possibility of fraud, and the current payer If it is determined that it is different from any of the past payers, it is determined that the possibility of fraud is low.

When the electronic value is paid, the erasure unit 106 erases the biometric information acquired the oldest of the payer from the holding unit 105. That is, the holding unit 105 is realized by the CPU of the terminal hardware cooperating with the flash memory or the like. As described above, the holding unit 105 holds the biometric information of the payer acquired in the past for a predetermined period or a predetermined number.

Here, the holding unit 105 holds only one piece of payer's biometric information acquired in the past, or the deletion unit 106 deletes the oldest biometric information after payment of electronic value, and the payment completed this time In this aspect, the payer's biometric information held in the holding unit 105 is only the biometric information of the payer who has just been paid for electronic value, and the previous payer's biometric information. Information is not retained. For this reason, further consideration can be given to the payer's privacy.

If the biometric information acquired by the acquisition unit 102 matches the biometric information of the operator held in the holding unit 105, the payer's explicit consent has not been given, and the operator takes action instead. It is highly probable that he took In such a case, it is desirable that the electronic value is not paid unless a higher level check is passed, considering that there is a possibility of fraud.

The notification unit 107 emits audible sound, visible light, vibration, and the like to be paid for electronic value by a display device included in the terminal hardware, a speaker, a vibrator, an LED (Light Emitting Diode), a lamp, etc. Inform people in the vicinity of the terminal 101. In the terminal hardware, the operator can set the output intensity (brightness and blinking pattern, sound volume, vibration magnitude and pattern) of the display device, speaker, vibrator, LED and lamp via the setting unit 108. However, it is desirable that the notification that the electronic value is paid is output with the predetermined strength even if the operator setting is weaker than the predetermined strength. If the operator setting is greater than or equal to a predetermined strength, the output may be output at the predetermined strength, or may be performed according to the operator setting. By being noticeable, it is possible to suppress fraudulent acts such as crowds.

The eyelid detection unit 109 is realized by various sensors that detect various states of the terminal hardware. For example, according to the tilt sensor, the orientation or attitude of the terminal hardware can be acquired. Therefore, only when the angle formed by the horizontal plane and the surface where the front and rear surfaces of the plate-shaped terminal hardware are spread is smaller than a predetermined threshold value and approximately parallel, the control unit 103 is not connected to the portable device. If NFC is performed and the angle is outside the specified range, NFC can be restricted, so that the attitude of the operator when receiving payment of electronic money can be limited, and illegal activities such as crowding Action can be suppressed.

In addition, if a tilt sensor is used, a change in the tilt of the terminal hardware can be acquired. If a microphone is used, an audible sound around the terminal hardware can be acquired. In addition, in order to determine the necessity of flash photography using an LED or the like, there is a technique for acquiring the current ambient brightness based on an image photographed by a brightness sensor or a camera.

Therefore, the CPU or dedicated chip of the terminal hardware matches the change in voice, brightness, and tilt measured by the sensor with the pattern of change in notification by the notification unit 107, so that the notification is actually sent to the surrounding people. The size that is perceived by can be detected.

If the size of the detected notification is sufficiently large compared to the strength at the time of outputting the notification, unauthorized modification of the terminal hardware (for example, covering the speaker, covering the LED, removing the vibrator, etc.) ) Or failure. On the other hand, if the size of the detected notification is smaller than the strength at the time of outputting the notification according to a predetermined criterion, there is a possibility of unauthorized modification or failure of the terminal hardware. It can be determined that there is a possibility of fraud.

Furthermore, GPS (Global Positioning System) can be used to detect the location of the terminal hardware. In an aspect in which fraud is suppressed by restricting the use area of the mobile terminal 101, it can be determined whether or not the use area is within the use area based on the detection result of the GPS.

In addition, when the terminal hardware has a wireless LAN (Local Area Network) communication function, it is possible to detect the position of the terminal hardware based on the SSID (Service Set IDentifier) of the detected access point. .

Furthermore, investigate whether a specific node in the network connected via an access point (for example, a server for a thin client, a register, a network printer, etc.) can be reached from the terminal hardware by ping or the like, As a result, it is possible to detect whether the terminal hardware is in a specific area.

In the thin client method, a command for processing electronic value is exchanged between the portable device and the thin client server via the mobile terminal 101. Therefore, if the thin client server operates only within the LAN and cannot be reached from outside the LAN, and the physical area of the LAN is limited, the mobile terminal 101 communicates with the thin client server. If possible, it can also be determined to be within a specific region.

In the following, in the mobile terminal 101, the first technology (payers' biometric information), the second technology (terminal hardware inclination), the third technology (notification by audible sound, etc.), the fourth technology (location) The flow of processing in a mode in which all of the above restrictions are adopted will be described. The first to fourth techniques can be appropriately selected and omitted. In the following example, it is assumed that fingerprints are used as biometric information and fingerprints are obtained from a touch screen. However, as described above, various types of biometric information can be adopted. is there.

で は Also, in the following mode, it is assumed that a business operator assigns a shop code and a password to each provider when a contract related to an electronic money service is made with a plurality of providers (shops). Based on the shop code and password, the business operator manages the accounting of electronic value for each provider.

FIG. 2 is a flowchart showing a flow of processing executed by the mobile terminal according to the embodiment of the present invention. Hereinafter, a description will be given with reference to FIG. As described above, this process is started by executing a program on the terminal hardware, and the portable terminal 101 is realized by this process.

Now, when the process is started, the mobile terminal 101 first receives an input of a shop code and a password assigned in advance to the provider in order to associate the mobile terminal 101 with the provider (step S201). ).

In the process of step S201 in this embodiment, first, an input form is displayed on the touch screen arranged on the surface of the terminal hardware. FIG. 3 is a display example of an input form for the provider to log in to the thin client server. Hereinafter, a description will be given with reference to FIG.

As shown in this figure, a touch screen 252 is prepared on the surface of the terminal hardware 251, a camera 261 for photographing a person who is looking at the touch screen 252, a telephone call and In addition, a microphone 262 and a speaker 263 for inputting and outputting audio are also arranged. In this figure, an input form 301 is displayed on the touch screen 252.

In the bag input form 301, a shop code field 302 and a password field 303 are prepared. When the operator inputs information into these using the terminal hardware software keyboard (not shown) and taps the next button 304, the entered shop code and password, and identification of the terminal hardware are displayed. Information (manufacturing number, MAC address, etc.) is transmitted to the thin client server via the wireless LAN, and the portable terminal 101 and the provider are linked (step S202).

Note that if there is an input error in the shop code or password and the authentication in the thin client server fails, the process returns to step S201 to request another input (not shown in the flowchart).

Now, after the portable terminal 101 and the provider are linked, the portable terminal 101 acquires the biological information of the operator (step S203). In this embodiment, a fingerprint registration form is displayed on the touch screen of the terminal hardware. FIG. 4 is a display example of a fingerprint registration form for an operator to register biometric information. Hereinafter, a description will be given with reference to FIG.

The fingerprint registration form 401 is provided with an elliptical touch area 402 for touching a finger. If the operator's finger touches the touch area 402 according to “touch the operator's (seller) 's finger on an ellipse” displayed in the message field 405 and the fingerprint feature information can be acquired from the touch state on the touch screen, the message field 405 Will display "Tap registration to register this fingerprint" (not shown).

に し た が っ て According to this, when the operator taps the registration button 403, the mobile terminal 101 holds the biometric information of the operator in the holding unit 105 by writing the feature information in a flash memory or the like (step S204). When it is desired to register a plurality of fingerprints of one operator or when there are a plurality of operators, the processing of steps S203 to S204 is repeated. FIG. 5A is an explanatory diagram for explaining an aspect of a holding unit that holds biological information. FIG. 5B is an explanatory diagram for explaining another aspect of the holding unit that holds the biological information. Hereinafter, description will be given with reference to these drawings.

The heel holding unit 105 is provided with an operator area 451 for holding the operator's biometric information and a payer area 471 for holding the payer's biometric information as will be described later.

The operator area 451 of the present embodiment holds the biological information of the operator as an array, and “none” is recorded in each element in the initial state. When biometric information is to be registered in step S204, first, an element in which “none” is recorded is searched from the array, and the new operator's biometric information is written in the found element. There is an upper limit (5 in the figure) for the number of elements in the array, and when the upper limit is reached, no further biometric information of the operator can be registered. This figure shows a state in which only one operator's biological information is recorded.

The payer area 471 is an area for recording the payer's biological information, and details thereof will be described later.

When all the fingerprints of the operator have been registered, when the operator taps the next button 404, an overview form is displayed on the touch screen (step S205). FIG. 6 is a display example of an outline form for showing an outline of login and registration. Hereinafter, a description will be given with reference to FIG.

In the outline form 501, the shop code accepted in steps S 201 -S 204 and the number of registered fingerprints are displayed in the outline column 502. When it is possible to proceed to accept payment of electronic value with this content, the operator taps the next button 503. Then, the process proceeds to step S206.

On the other hand, when it is desired to redo registration, the operator taps the button 504 from the beginning. Then, the process returns to step S201 (not shown in the flowchart).

If the shop code, password, and operator fingerprint feature information are stored in a non-volatile manner in a flash memory, etc., the explicit provider information entry and operator fingerprint registration will be omitted at the next program startup. Is possible. That is, the processing of steps S201 and S203-S204 is omitted, and the portable terminal 101 is associated with the provider in the thin client server by using the already stored shop code and password, and the process proceeds to step S205.

Now, when the initialization of the mobile terminal 101 is completed in steps S201 to S205, the detection unit 109 detects the current position of the mobile terminal 101 (step S206). For this detection, GPS can be used outdoors. Also, in situations where GPS accuracy is a problem, GPS is not available because payment is made inside the building, GPS positioning time and battery consumption are problems, nearby wireless LAN access points It is also possible to acquire the SSID and detect the current position from the information.

判定 す る Then, it is determined whether or not the detected current position is within an available area allocated in advance to the shop code (step S207). Here, in the aspect in which the available area is allocated to the shop code in the thin client server, the available area information is downloaded from the thin client server to the mobile terminal 101 when the association is performed.

ほ か In addition, it is possible to adopt a mode of collecting SSIDs of neighboring wireless LAN access points at the time of operator's fingerprint registration. While any one of the collected SSIDs or a predetermined percentage of the collected SSIDs can be detected by the wireless LAN, it is determined that it is within the usable area.

In addition, after detecting the physical current position (step S206), it is not determined whether the position is within the usable range (step S207), but a specific node in the LAN (for example, in the LAN) Whether or not the current position is within the available area may be determined based on whether communication with a POS register, a management computer, a network printer, or the like is possible.

た ら If it is found that the mobile terminal 101 is in an available area by these methods (step S207; Yes), acceptance of payment of electronic value is started. On the other hand, if the mobile terminal 101 is not in the available area (step S207; No), in this aspect, the process returns to step S201 and is initialized again. However, after issuing a warning to the operator, the process may return to step S206, or the program itself may be terminated.

Now, when acceptance of electronic value payment is started, an amount form is first displayed on the touch screen (step S208). FIG. 7 is a display example of an amount form that requests input of the amount of electronic value related to payment. Hereinafter, a description will be given with reference to FIG.

In the money amount form 601, a value field 602 for displaying the amount of electronic value for which payment is required and a software keyboard 603 are arranged. When the operator taps a number key on the software keyboard 603, the number assigned to the key is added to the value field 602. If the operator taps the delete key, the value in the value field 602 is deleted from the end.

When the amount of electronic value for which payment is requested is input in the value column 602, the operator taps the next button 604. Then, a payment confirmation form is displayed on the touch screen, prompting the payer to take an action to agree to the payment (step S209). FIG. 8 is a display example of a payment confirmation form that asks the payer to take an action to agree to the payment. Hereinafter, a description will be given with reference to FIG.

In the message field 702 of the payment confirmation form 701, the amount of electronic value to be paid by the payer entered in the amount form 601 and a message “Touch an ellipse if you agree to payment” are displayed. If there is an error in the amount, for example, if the return button 705 is tapped, it is possible to return to step S208 to re-enter the amount (not shown in the flowchart).

In addition, the payment confirmation form 701 is provided with an elliptical touch area 703 for the payer to touch his / her finger. When the payer touches the touch area 703 as an action to agree to the payment of the electronic value, the acquisition unit 102 of the mobile terminal 101 uses the fingerprint feature information as the payer's biometric information based on the contact status with respect to the touch screen. Obtain (step S210).

Then, the control unit 103 checks whether the payer's biometric information acquired in step S210 matches any of the operator's biometric information held in the holding unit 105 (step S211). As described above, the biological information of the operator is recorded in the biological information column of each element of the array of the operator area 451 of the holding unit 105, and each element whose value is not “none” and the biological information of the payer Match information.

If any of them matches (step S211; Yes), the payment by the payer has not been agreed, and the process returns to step S209. At this time, a warning or a message may be presented as appropriate.

If neither matches (step S211; No), it is checked whether the payer's biometric information acquired in step S210 matches any of the past payer's biometric information held in the holding unit 105 (step S212). ). As will be described later, the payer's biometric information acquired in step S210 is registered in the holding unit 105 after payment is completed, and used as past payer's biometric information.

The biometric information of the payer is recorded in the biometric information column of each element of the array of the payer area 471 of the holding unit 105, and each of those whose value is not “None” is collated with the biometric information of the payer. .

If no match is found (step S212; No), the biometric information check is passed, and processing for receiving payment of electronic value from the payer's portable device is started.

First, the notification unit 107 outputs a notification indicating that a portable device is being detected at a predetermined intensity by using an audible sound, visible light, vibration, etc., so as to let the surrounding people know (step S214). The mobile terminal 101 displays a communication form related to NFC with the portable device on the touch screen 252 (step S215). FIG. 9 is a display example of a communication form indicating that NFC with a portable device is to be started. Hereinafter, a description will be given with reference to FIG.

In the message field 802 of the communication form 801, “Please turn the terminal over and bring the portable device closer to the mark” is displayed. This prompts the operator to turn over the terminal hardware 251 so that the payer can easily approach the portable device. FIG. 10 is an explanatory diagram showing a state of the back side of the terminal hardware. Hereinafter, a description will be given with reference to FIG.

On the back surface of the terminal hardware 251, a camera 264 for photographing landscapes and other people is arranged, and a mark 253 indicating a place where the NFC chip is arranged is affixed. When the payer brings the portable device close to the mark 253, the NFC chip detects the portable device.

Note that when the return button 803 of the communication form 801 is tapped, the control returns to step S208 and starts again from the input of the amount (not shown in the flowchart). Thereby, acceptance of payment of electronic value by the present amount can be canceled.

Now, after prompting the mobile terminal 101 to be turned over by the communication form 801, the detection unit 109 detects the tilt of the terminal hardware 251 by the tilt sensor (step S217). Then, it is checked whether or not the detected inclination and the target inclination are within a predetermined error range (step S218). In the present embodiment, the direction of the outward normal on the surface is detected and used as the inclination of the terminal, and the target inclination is set as the direction of gravity.

If both are not within the predetermined error range (step S218; No), the process returns to step S214. At this time, the message may be displayed in the message field 802 of the communication form 801 so that the inclination is correct. Therefore, even if the NFC chip and the portable device are close enough to enable NFC, the electronic value is not paid.

On the other hand, if it is within the predetermined error range (step S218; Yes), the back surface of the terminal hardware 251 is facing upward, and the payer can visually recognize the mark 253. Therefore, the NFC chip of the mobile terminal 101 tries to detect whether or not NFC with a nearby portable device is possible (step S219). FIG. 11 is an explanatory diagram showing a state in which the portable device is brought close to the terminal hardware. Hereinafter, a description will be given with reference to FIG.

As shown in this figure, when the payer brings the portable device 254 close to the back of the terminal hardware 251 so that it overlaps the mark 253 of the terminal hardware 251, the NFC chip detects the portable device and both Communication becomes possible.

な け れ ば Here, if the portable device is not detected (step S219; No), the process returns to step S214. Therefore, while the mobile terminal 101 is trying to detect the portable device, the notification is repeatedly output.

In this aspect, when the payer tries to bring the portable device 254 closer to the mobile terminal 101, the mobile terminal 101 is turned over, and the display on the touch screen is not visible to either the payer or the operator. Therefore, the notification pattern is changed depending on whether or not the inclination of the mobile terminal 101 is correct, that is, whether or not the outward normal vector of the touch screen surface and the direction of gravity are within a predetermined error range. Is desirable. For example, if the pitch, tone, and melody of the notification sound that is emitted are different between the correct inclination and the incorrect inclination, or if the correct inclination is obtained by continuously vibrating during the incorrect inclination If the vibration patterns are different, such as intermittent vibration, the operator can know the current state of the mobile terminal 101 without displaying on the touch screen.

In this aspect, the detection of the portable device is attempted only while the inclination in which the back surface of the portable device 254 is disposed substantially horizontally on the upper side is detected, but the inclination for attempting the detection is determined by the terminal hardware. Changes can be made as appropriate according to the shape of the wear and the operation at the store.

When it is detected that NFC with the portable device is possible (step S219; Yes), the mobile terminal 101 transmits the amount to be paid to the thin client server via the wireless LAN (step S220). ). Then, the communication relay between the portable device and the thin client server is started. When the thin client server receives the amount to be paid from the mobile terminal 101, the thin client server confirms whether or not the mobile terminal 101 is the mobile terminal 101 linked in step S202. If the mobile terminal is not linked, the payment may be rejected. In this case, the mobile terminal 101 may report an error and end the process, or return to step S201 and log in to the thin client server again (not shown in the flowchart). .

Specifically, the mobile terminal 101 receives the decrease command transmitted from the thin client server via the wireless LAN (step S221), and transmits the received decrease command to the portable device via the NFC chip ( Step S222).

The mobile terminal 101 receives the execution result of the decrease command transmitted from the portable device (step S223), and transmits the received execution result to the thin client server (step S224).

電子 If the electronic value remaining in the account assigned to the portable device is greater than or equal to the payment amount, the decrease command is successful and payment settlement is completed. The execution result in this case includes the amount of electronic value remaining in the portable device after payment.

The mobile terminal 101 receives the instruction transmitted from the thin client server (step S225). If this instruction specifies the completion of payment and the amount of remaining electronic value (step S226; Yes), the mobile terminal 101 determines the number of biometric information of past payers held in the holding unit 105. Is less than or equal to a predetermined upper limit (step S227). If the upper limit is exceeded (step S227; No), the erasure unit 106 erases one of the oldest payer's biometric information (step S228), and proceeds to step S229. On the other hand, if it is equal to or less than the upper limit (step S227; Yes), the latest biometric information acquired in step S210, that is, the biometric information of the payer related to the current payment is held in the holding unit 105 (step S229).

Thus, the number of pieces of biological information held in the holding unit 105 is controlled to be a predetermined number or less. When this upper limit is set to 1, the holding unit 105 holds at least one past payer's biometric information. For this reason, it is possible to minimize the period during which the biometric information of past payers is stored in the mobile terminal 101, and it is possible to operate in consideration of privacy.

生 体 Here, the payer's biometric information is recorded in the payer area 471 of the holding unit 105. The payer area 471 is realized by an array, and in the example shown in FIG. 5A, a biometric information field and a time stamp field are prepared for each element, and the payer area 471 has a plurality of elements (this figure). Then 4). The biometric information column of each element records the payer's biometric information, and the time stamp column records the date and time when the biometric information was acquired or the date and time when the payment was completed.

On the other hand, in the example shown in FIG. 5B, the payer area 471 has only one element and a biometric information field is prepared, but there is no time stamp field.

In the biometric information field 473 and the time stamp field 474 in each element 472 of the payer area 471, “none” is recorded if nothing is registered, as in the operator area 451. In the example shown in FIG. 5A, in order to delete the oldest biometric information, the element 472 with the oldest date and time recorded in the time stamp field 474 is searched, and the biometric information field 473 and the time stamp field 474 of the element 472 are searched. You can write "None" in In the example shown in FIG. 5B, in order to delete the oldest biometric information, only the element 472 has the oldest biometric information, so simply write “None” in the biometric information field 473 of the element 472. Good.

In the above description, in step S228, the oldest biometric information is deleted and then the current biometric information is held. On the other hand, the living person information and the acquisition date / time or payment completion date / time of the current payer may be overwritten.

Note that in the situation where electronic money is to be paid for the first time after the association between the portable terminal 101 and the provider is finished, the holding unit 105 does not hold the biometric information of the past payer. However, the last registered biometric information of the operator can be adopted as the initial value of the biometric information of the past payer in the holding unit 105. In this case, verification with the operator's biometric information (step S211) may be omitted as appropriate.

Then, the notification unit 107 outputs a payment completion notification by audible sound, visible light, vibration, or the like (step S230). The notification here preferably has a different output pattern from the notification while the portable device is being detected.

The operator knows that the payment of the electronic value has been completed from the output pattern of the notification, turns the mobile terminal 101 over and makes the touch screen visible.

On the other hand, the mobile terminal 101 displays a message form on the touch screen (step S231). FIG. 12 is a display example of a message form indicating that payment of electronic value has been completed. Hereinafter, a description will be given with reference to FIG.

As shown in this figure, in the message field 902 of the message form 901, the amount of electronic value paid, the amount of electronic value remaining in the account of the portable device, and a greeting are displayed. When the next button 903 of the message form 901 is tapped, control returns to step S208, and acceptance of payment for the next electronic value is started.

When the electronic value cannot be paid from the account of the portable device, the thin client server transmits an instruction indicating that the payment is not completed. Therefore, if the instruction received by the mobile terminal 101 does not specify that payment is complete (step S226; No), the notification unit 107 outputs a notification of payment failure using audible sound, visible light, vibration, or the like. (Step S232). It is desirable that the notification here also has a different output pattern from other notifications. Then, the operator can know from the notification output pattern that the payment of the electronic value has failed.

If the settlement has failed (step S226; No), the mobile terminal 101 changes the display in the message field 802 of the communication form 801 to indicate that the remaining amount is insufficient (step S233), and returns to step S215. FIG. 13 is a display example of a communication form indicating that the remaining amount of electronic value is insufficient. Hereinafter, a description will be given with reference to FIG.

In the message field 802 of the communication form 801, the message “Balance is insufficient. Please bring another portable device close” is displayed, so the operator must turn over the mobile device 101 and confirm that. Can do. If it is desired to stop paying itself, the operator or the like may tap the return button 803 of the communication form 801 as described above.

In the present embodiment, when the biometric information of the past payer and the biometric information of the present payer match (step S212; Yes), the electronic money is obtained by performing a high level confirmation by the operator. Allow payment. Since this confirmation requires time and effort, it is possible to suppress repeated fraud.

That is, the mobile terminal 101 displays the payment confirmation form 701 on the touch screen (step S234). FIG. 14 is a display example of a payment confirmation form that asks the payer for a high level confirmation. Hereinafter, a description will be given with reference to FIG.

In the payment confirmation form 701, unlike step S209, “Confirm by operator touching ellipse” is described in the message field 702, prompting the operator to take an action.

When the operator touches the touch area 703, the acquisition unit 102 of the mobile terminal 101 acquires the biological information of the operator from the contact state with respect to the touch screen (step S235).

Then, the control unit 103 of the terminal device 101 checks whether the operator's biometric information acquired in step S235 matches any of the operator's biometric information held in the holding unit 105 (step S236). If it matches any one (step S236; Yes), it is determined that the operator has confirmed that the payer has agreed to the payment, and the process proceeds to step S214.

If no match is found (step S236; No), if the acquisition of the biological information of the operator in step S234 has not reached the predetermined number of retries (step S237; No), the process returns to step S235.

If the number of retries has been reached (step S237; Yes), the portable terminal 101 displays a message form 901 on the touch screen to notify that payment cannot be settled (step S238). This situation may be caused by mistakes caused by the work procedure on the provider side or a failure of the fingerprint sensor, or when the portable terminal 101 is stolen. FIG. 15 is a display example of a message form indicating that electronic value cannot be paid. Hereinafter, a description will be given with reference to FIG.

The message field 902 of the e-mail message form 901 describes that an electronic value payment cannot be settled, an error code, a contact phone number of a business operator, and the like, and induces an inquiry from the provider.

Here, when the next button 903 is tapped, in this aspect, the process returns to step S208, and the input of the payment amount of the electronic value is resumed. However, the program itself may be stopped or the provider may be re-registered by returning to step S201.

Note that the touch area 402, 703 displayed in the touch screen is not touched by the operator or payer, but the action of touching the fingerprint sensor prepared in the terminal hardware is adopted, thereby allowing the operator or payer to touch. It is good also as an action of a payer's consent while acquiring a living person's biometric information.

In order to be able to pay with electronic money in stores with an electronic money system, in principle, it is necessary to introduce a CCT (Credit Center Terminal) connection type or POS (Point of Sale) direct connection type payment terminal, Especially for small stores, the cost of introducing a payment terminal cannot be ignored. Therefore, one of the important keys for the spread of the electronic money system is to reduce the cost required for introducing a payment terminal. According to the present embodiment, by using inexpensive terminal hardware such as a smartphone or a mobile phone, the cost for introducing the payment function of the electronic money system is reduced, and it is easy to introduce electronic money payment to a small store. can do.

In addition, according to the present embodiment, fraudulent acts relating to payment of electronic value occur by appropriately adopting technology related to payer's biometric information, terminal hardware tilt, audible sound notification, and location restrictions. When it is considered that there is a high possibility, the control flow is advanced so as not to pay, and the NFC with the portable device is restricted, so that fraud can be effectively suppressed.

Generally, whether or not two pieces of biological information are acquired from the same person is determined by whether or not the similarity between the two pieces of information exceeds a predetermined threshold. That is, the similarity is high if there are many matches of the biometric information, and the similarity is low if there are many mismatches.

Therefore, in the present embodiment, when comparing each of the past payer's biometric information held in the holding unit 105 with the current payer's biometric information, the similarity between the two is used.

In the above embodiment, in a situation where one payer pays at a store, it is rare to purchase a certain item, leave the cash register, and return to the cash register to purchase another product. Thus, when the biometric information of the previous payer matches the biometric information of the current payer, the NFC for payment is limited as requiring confirmation by the operator.

However, it is often the case that an article is purchased again at the store the day after the article is purchased one day. That is, when one payer makes payment at the store, the possibility that the payer will make another payment is considered to change depending on the elapsed time between the previous payment and the current payment.

Therefore, in the present embodiment, when collating biometric information, the similarity threshold for determining whether or not to match is changed according to the elapsed time since biometric information of a past payer is acquired, thereby obtaining biometric information. Will be properly verified.

As mentioned above, if a long time elapses from the previous payment, the possibility that the same payer will pay again increases. Therefore, even if the degree of similarity between past biometric information and current biometric information is high, it is considered that the restriction on payment may be released if a long time has elapsed since the previous payment.

In the present embodiment, a threshold is associated with each biometric information of a past payer held in the holding unit 105. And the threshold value matched with the said biometric information is increased, so that the elapsed time after a payer's biometric information is acquired becomes long.

Then, when the control unit 103 obtains the similarity between the biometric information of the past payer and the biometric information of the current payer, the control unit 103 sets the similarity to a threshold associated with the biometric information of the past payer. In comparison, if the degree of similarity exceeds the threshold value, both are matched and the payment of electronic value is restricted. If the similarity is less than or equal to the threshold value, it is determined that the two do not match.

It should be noted that, instead of the elapsed time after the payer's biometric information is acquired, the elapsed time after the payment related to the payer's biometric information is completed may be employed. For example, after a product has been purchased at a store cash register, it is an action that can be taken by a general consumer to purchase an item placed next to the cash register. In this case, after completing the previous payment, tell the store clerk that you want to purchase additional items, check and enter the amount of the item, and wait until the consumer agrees to pay It is thought that it takes about 10 seconds.

On the other hand, it is considered that a person who tries to steal electronic value continuously by fraudulent attempts to acquire the next fraud immediately after the previous fraudulent acquisition succeeds. Therefore, it is considered that the time from when the unauthorized acquirer completes the previous payment (scheme) to input the amount of the next payment and to obtain the biometric information is about several seconds.

考慮 In consideration of this situation, the threshold may be changed as follows according to the elapsed time since the last payment was completed. That is, if the elapsed time is about several seconds, the threshold value is kept low, and the threshold value is raised for about several tens of seconds. Thereafter, the threshold value is rapidly decreased and then gradually increased.

閾 値 The threshold value corresponding to the elapsed time may be changed as appropriate according to the behavior pattern of the customer layer of the provider and the behavior pattern of the unauthorized user.

It should be noted that it is desirable to maintain a constant value for the similarity threshold when collating the biometric information of the operator with the biometric information of the current payer. This is because the operator does not change while accepting payment by electronic value.

According to the present embodiment, it is possible to appropriately perform the biometric information collation determination according to the payer's action.

In the above aspect, the electronic value has been paid through the check by the payer's biometric information. In this aspect, however, the operator is further confirmed from the viewpoint of further suppressing unauthorized use. To do.

That is, in the above aspect, every time the payment amount is transmitted to the thin client server, it is confirmed whether or not the mobile terminal 101 is associated with the provider. In this aspect, the operator checks each time payment is made.

For example, in addition to registering the biological information of the operator in steps S203 to S204, the operator is further required to register a settlement password.

ほ か In addition, there is also a mode in which the thin client server generates a payment password with an expiration date (typically only today). In this aspect, when the portable terminal 101 and the provider are linked, the thin client server generates a payment password and notifies the portable terminal 101 when the login is successful. The portable terminal 101 displays the settlement password notified from the thin client server in the overview form 501 in step S205 to make the operator know.

Then, instead of tapping the next button 604 on the amount form 601, the operator inputs the payment password again, or the operator inputs the payment password again before and after detecting the payment consent action by the payer. This is a method of confirming the identity of the operator by, for example.

In addition, in steps S203 to S204, there is a method in which the portable device owned by the operator is detected and the operator's identity is confirmed by the identification number of the portable device. In this aspect, the operator (seller) can put his / her portable device on the portable terminal 101 to show the payer a sample of the payment method, and at the same time can authenticate the operator using the portable device. .

In this aspect, at the time of registration of the operator, by depositing a fixed amount (about the amount of sales per day) from the portable device prepared by the operator, by deceiving the same portable device after the end of business, It is also possible to take the procedure of returning the deposited electronic value.

Note that the identity of the operator may be confirmed by the thin client server, or may be determined by the portable terminal 101 based on the settlement password stored in the portable terminal 101.

In the above aspect, the payer has obtained payment consent by the action of touching the touch screen or the fingerprint sensor. However, in this aspect, in addition to or in addition to this, a smartphone or the like owned by the payer Use.

That is, the operator's mobile terminal 101 to which the amount of payment has been input by the operator generates a one-time password for settlement. The one-time password may be randomly generated each time, or a prepared one may be used as appropriate.

Then, the mobile terminal 101 of the operator sends the payment amount and the one-time password to the display terminal such as the payer's smart phone or mobile phone by short-range communication such as Bluetooth (registered trademark) or infrared communication.

The payer's display terminal displays the received payment amount and the one-time password on the screen. Thereafter, if the payer agrees to pay the displayed amount, the payer performs an action of inputting the displayed one-time password into the mobile terminal 101 of the operator.

In this aspect, the check by the payer's biometric information can be used in the same manner as in the above aspect, but the identification information (MAC address, serial number, etc.) assigned to the payer's smartphone or mobile phone is used in the above aspect. It can also be used in place of the payer's biometric information.

Note that in the comparison of the identification information, it is determined whether or not they match, that is, whether the similarity is 0% or 100%. So, even if the elapsed time is up to several tens of seconds, payment is possible even with the same identification information, but after that it is impossible to pay once, and after several hours, payment is possible again, etc. Even if it is information, it is good also as switching whether payment is accepted or refused according to elapsed time. This mode corresponds to the above-described mode in which the matching threshold is changed according to the elapsed time.

According to the aspect in which the identification information of the payer's smart phone or the like is used instead of the payer's biometric information, an unauthorized user must use a large amount of equipment corresponding to the “payer's smart phone or the like” to obtain an unauthorized withdrawal. Cannot be repeated. Therefore, unauthorized use can be suppressed.

It is also possible to determine whether or not the electronic property can be inherited through the mobile terminal based on whether or not the mobile terminal is currently moving. In this aspect, it is not necessary to set the available area of the mobile terminal in advance. In addition, this aspect can also be utilized independently and can also be combined with the said Example suitably.

不正 In general, fraudsters who try to steal electronic property with people often do cheating while moving rather than staying in the same place to prevent the acts from being revealed. In addition, when a cheating person works in a crowded train or bus, the cheating person moves with the train or bus.

On the other hand, shops that open stores in various events, flea markets, flea markets, etc., move from their original bases, but do not move from the section allocated for opening stores when they actually buy or sell.

Therefore, it is estimated whether or not the mobile terminal 101 is currently moving, and if it is estimated that it is currently moving, by suppressing the inheritance of electronic property, the above fraudulent acts are suppressed. can do.

In this aspect, the detection unit 109 of the mobile terminal 101 is not only for starting the program (step S206) but also for identifying the electronic property to be succeeded (step S208), and for consenting to the inheritance to the owner of the electronic property. At the stage of obtaining an action (step S209), the current position of the mobile terminal 101 is detected.

Then, the history of the detected position is stored in a recording medium inside the mobile terminal 101. It is to be noted that the history of these locations is accumulated on the thin client server, the location where the electronic property is taken over is specified and recorded, and is transmitted to the distribution server or management server of the electronic money business operator. , Can increase the safety of electronic transactions.

In the following, a set of positions accumulated in the mobile terminal 101 and times when the positions are detected is recorded up to a predetermined upper limit.

For example, the portable terminal 101, the position p ₀ which is detected in time t _0, the position p _1, which is detected in time t _1, time t ₂ position p _2, which is detected, ..., are detected in time t _N-1 in a state where the position p _N-1 is recorded, consider the situation where the position p _N to the current one o'clock t _N is detected. Then, when the upper limit of sets that can be recorded in the history is N, it is necessary to delete one set of unnecessary information.

日 時 Here, the date and position set that can be approximated from the date and position set before and after that is considered to be unnecessary information. For example, a pair detected when the mobile terminal 101 is moving or stopped at a constant speed can be approximated from a pair of date and time and position before and after.

Then, the speed of movement just before the i-th set v _i = | p _i -p _i-1 | / (t _i -t _i-1 )
And the speed of the next movement v _{i + 1} = | p _{i + 1} -p _i | / (t _{i + 1} -t _i )
And are almost equal, that is, the speed difference a _i = v _{i + 1} -v _i
If it is approximately 0, the set t _i, p _i would less useful as a history. Here, the difference in speed can be considered as an error when approximating the speed of the immediately following movement by the speed of the immediately preceding movement.

Therefore, based on the above definition, the portable terminal 101, the speed difference _{a 1, a 2, ...,} a N-1
Subscript k = argmin _{i = 1, 2,…, N-1} | a _i |
Select.

Then, based on the selected k, the mobile terminal 101 deletes the time t _k and the position _{p k, t k + 1,} t k + 2, ..., t N and _{p k + 1, t k +} 2 , ..., a t _N, a new _{t k, t k + 1,} ..., t N-1 and _{p k, t k + 1,} ..., and t _N-1. By this replacement processing, the number of sets stored in the mobile terminal 101 can be suppressed to a predetermined upper limit number or less.

Note that the values of v ₁ , v ₂ ,…, v _k-1 and a ₁ , a ₂ ,…, a _k-2 do not change before and after the replacement process. It can be reused in subsequent work.

In addition, there is a method using a four-dimensional vector for determining whether the speed is almost constant or stopped. That is,
and _{(p i-1, t i} -1) 4 -dimensional position vector associated with the, and four-dimensional straight line passing through the, and four-dimensional position vector associated with the _{(p i + 1, t i} + 1),
a four-dimensional position vector associated with (p _i , t _i ),
This distance may be used in place of the above speed difference. This is because the smaller this distance is, the closer (p _i , t _i ) can be approximated by (p _i−1 , t _i−1 ) and (p _{i + 1} , t _{i + 1} ).

In this case, the physical unit of each element at the position p _i represented by a three-dimensional vector is a length (m, km, mile, etc.), and the physical unit of the date and time t _i that is the added dimension is time ( In order to obtain the distance between the 4D position vector and the 4D line, it is necessary to align the units.

Therefore, in the present embodiment, the physical unit of each element of the four-dimensional vector is aligned with the length by multiplying the date / time element by a moving speed threshold c described later. For example,
p _i = (x _i , y _i , z _i )
When the component notation is as follows, the four-dimensional position vector w _i associated with (p _i , t _i ) is
w _i = (x _i , y _i , z _i , c ・ t _i )
The component notation can be expressed as follows.

A point located position vector w _i, a straight line passing through the two points located at the position vector _{w i-1, w i +} 1, the distance h can be calculated as follows. Hereinafter, in order to facilitate understanding, a point is appropriately described by a position vector of the point.

First, the area S of the triangle having vertices at three points w _i-1 , w _i , w _{i + 1} is the angle between two vectors w _i-1 -w _i , w _{i + 1} -w _i as θ. When
2S = | w _i-1 -w _i | ・ | w _{i + 1} -w _i | ・ sinθ
Can be written.

On the other hand, if a line segment connecting the points w _i−1 and w _{i + 1} is viewed as the base, the height from the line segment to the point w _i corresponds to the distance h. Therefore,
2S = | w _{i + 1} -w _i-1 | ・ h

From these, the distance h is
h = | w _i-1 -w _i | ・ | w _{i + 1} -w _i | ・ sinθ / | w _{i + 1} -w _i-1 |

On the other hand, if the operation for calculating the inner product of vectors is expressed as inp,
inp (w _i-1 -w _i , w _{i + 1} -w _i ) = | w _i-1 -w _i | ・ | w _{i + 1} -w _i | ・ cosθ
Because
cosθ = inp (w _i-1 -w _i , w _{i + 1} -w _i ) / (| w _i-1 -w _i | ・ | w _{i + 1} -w _i |)
It is.

And
sinθ = (1-cos ² θ) ^1/2
Sinθ can be obtained by
h = | w _i-1 -w _i | ・ | w _{i + 1} -w _i | ・ sinθ / | w _{i + 1} -w _i-1 |
It can be calculated as follows.

In this way, the error due to approximation is expressed by the distance in the four dimensions, and by eliminating the set with the smallest error, the usefulness of the information in the history can be increased with an error that matches the assumed threshold of the moving speed. To be able to identify.

Note that when the number of pairs stored in the mobile terminal 101 reaches the upper limit, a plurality of sets may be deleted. For example, the mobile terminal 101 selects one with the smallest speed difference in the first half of the date, selects one with the smallest speed difference in the second half of the date, and erases the selected two, etc. It is an aspect.

In this way, the mobile terminal 101 calculates the latest moving speed of the mobile terminal 101 after limiting the number of records of the position recorded on the mobile terminal 101 and the history of the date and time when the position was detected to a predetermined upper limit number. To do.

Here, when M sets of date / time and position are recorded as history in the mobile terminal 101, v _M-1 = | p _M-1 -p _{M- 2} | / (t _M-1 -t _M-2 )
Can be adopted.

Also, among times before a predetermined threshold time (for example, 5 minutes before the threshold time D) before the time t _M-1 , the time t _L closest to the present time is L = max (i | i = 1, 2 ,…, M-2; t _M-1 -t _i ≧ D}
Based on the latest moving speed v _recent = | p _M-1 -p _L | / (t _M-1 -t _L )
May be calculated.

In addition, the latest average speed (v _L + v _{L + 1} +… + v _M-1 ) / (ML)
Or the latest maximum speed max {v _L , v _{L + 1} ,…, v _M-1 }
Etc. may be the latest movement speed v _recent .

Now, humans walk and move at a speed of about 4 km / h. In addition, the Yamanote Line train that runs in a circle in Tokyo travels 34.5 km in one hour.

Considering these, if the most recent moving speed is equal to or lower than the moving speed threshold c (for example, 1 km / h), it can be estimated that the mobile terminal 101 is not moving. The moving speed threshold value c for determination can be appropriately determined according to the application field.

When it is estimated that the mobile terminal 101 is moving, it is only necessary to restrict the succession of electronic property such as payment of electronic value as in the above embodiment.

In this aspect, if the shop opens at a destination such as an event, if the program is started at a time before the threshold time D or more before the actual start of accounting, and the current position is detected, It is determined that the mobile terminal 101 is not moving. Even if it is determined that the mobile terminal 101 is moving, if the retry is repeated several times while taking time, the detection position and time are registered in the history. The restriction on payment by electronic value will be lifted.

Therefore, even if the area where the mobile terminal 101 can be used is not explicitly set in advance, the area where the mobile terminal 101 can be used can be easily limited based on the moving speed even at a store opening place such as an event.

(Summary)
Thus, the mobile terminal according to the embodiment of the present invention is a mobile terminal presented by the operator to the owner of the electronic property, and the mobile terminal executes the program,
A detection unit for detecting the position of the mobile terminal;
From the history of the detected position, it is estimated whether or not the mobile terminal is moving, and if it is estimated that the mobile terminal is moving, the electronic property from the owner to the operator It can be configured to include a control unit that restricts near-field communication with a portable device used for succession.

In the mobile terminal according to the present embodiment,
The set of the detected position and the date and time when the position is detected is accumulated up to a predetermined upper limit number in the mobile terminal,
When a new position is detected by the detection unit, among the accumulated sets, the set with the smallest error approximated from the sets detected before and after the set is deleted, and the new position and the new position are deleted. It can be configured to store the date and time when a correct position was detected.

In the mobile terminal according to the present embodiment,
The accumulated pairs are arranged in the order of the date and time relating to the pair (p ₀ , t ₀ ), (p ₁ , t ₁ ), (p ₂ , t ₂ ), ..., (p _N-1 , t _{N- 1} )
The speed of movement for each of the integers i = 1, 2,…, N-1 in the order of the date and time related to the pair v _i = | p _i -p _i-1 | / (t _i -t _i-1 )
And the difference in the speed of movement for each of the integers i = 1, 2,…, N-2 a _i = | v _{i + 1} -v {i} |
And
The error for the i-th set can be configured to be a _i .

In the mobile terminal according to the present embodiment,
The controller is
Whether or not the portable terminal is moving is calculated from the history of the detected position by calculating the latest moving speed of the portable terminal and comparing the estimated latest moving speed with a predetermined threshold. Estimate
The date and time according to the accumulated set by multiplying the threshold value, respectively, the stored set, in order of date according to that set, four-dimensional position vector _{w 0, w 1, w 2} , ..., w N _-1 , _map each
Among the integers i = 1, 2,..., N−2, the distance between the straight line connecting w _i−1 and w _{i + 1} and w _i is the error for the set associated with the integer i. It can be constituted as follows.

In the mobile terminal according to the present embodiment,
When the electronic property is succeeded from the owner to the operator, the detected position and the date and time when the position is detected are transmitted to the server as the succeeded position and the date and time. Can be configured.

The server according to this embodiment is
A server that distributes a program to a mobile terminal presented by an operator to an owner of electronic property, and the mobile terminal executes the program,
Detecting the position of the mobile terminal;
From the history of the detected position, it is estimated whether the mobile terminal is moving,
If it is estimated that the mobile terminal is moving, it can be configured to limit near-field communication with a portable device that is used for succession of the electronic property from the owner to the operator. .

In the control method according to the present embodiment, the portable terminal presented by the operator to the owner of the electronic property executes the program,
Detecting the position of the mobile terminal;
From the history of the detected position, it is estimated whether the mobile terminal is moving,
If it is estimated that the mobile terminal is moving, it can be configured to limit near-field communication with a portable device that is used for succession of the electronic property from the owner to the operator. .

The program according to this embodiment is a portable terminal presented by an operator to an owner of electronic property.
A detection unit for detecting the position of the mobile terminal;
From the history of the detected position, it is estimated whether or not the mobile terminal is moving, and if it is estimated that the mobile terminal is moving, the electronic property from the owner to the operator It can be configured to function as a control unit that restricts near-field communication with portable devices that are used for succession.

According to the present invention, in a portable terminal presented to the owner by an operator who intends to inherit the electronic property from the owner of the electronic property, the portable terminal suitable for suppressing unauthorized use is executed on the portable terminal. The server for distributing the program to be executed, the method for controlling the portable terminal, and the program can be provided.

101 Mobile terminal 102 Acquisition unit 103 Control unit 104 Prompt unit 105 Holding unit 106 Deletion unit 107 Notification unit 108 Setting unit 109 Detection unit 251 Terminal hardware 252 Touch screen 253 Mark 254 Portable device 301 Input form 302 Shop code field 303 Password field 304 Next button 401 Fingerprint registration form 402 Touch area 403 Registration button 404 Next button 501 Overview form 502 Overview field 503 Next button 504 Start button 601 Amount form 602 Value field 603 Software keyboard 604 Next button 701 Payment confirmation form 702 Message field 703 Touch area 705 Back button 801 Communication form 802 Message field 803 Back button 901 Message form 902 Message field 903 Next button

Claims (8)

1. A portable terminal presented by an operator to the owner of the electronic property, the portable terminal executing a program,
   A detection unit for detecting the position of the mobile terminal;
   From the history of the detected position, it is estimated whether or not the mobile terminal is moving, and if it is estimated that the mobile terminal is moving, the electronic property from the owner to the operator A portable terminal comprising: a control unit that restricts near-field communication with a portable device that is used for succession of a mobile phone.
2. The set of the detected position and the date and time when the position is detected is accumulated up to a predetermined upper limit number in the mobile terminal,
   When a new position is detected by the detection unit, among the accumulated sets, the set with the smallest error approximated from the sets detected before and after the set is deleted, and the new position and the new position are deleted. 2. The mobile terminal according to claim 1, wherein the date and time when the correct position is detected is accumulated.
3. The accumulated pairs are arranged in the order of the date and time relating to the pair (p ₀ , t ₀ ), (p ₁ , t ₁ ), (p ₂ , t ₂ ), ..., (p _N-1 , t _{N- 1} )
   The speed of movement for each of the integers i = 1, 2,…, N-1 in the order of the date and time related to the pair v _i = | p _i -p _i-1 | / (t _i -t _i-1 )
   And the difference in the speed of movement for each of the integers i = 1, 2,…, N-2 a _i = | v _{i + 1} -v {i} |
   And
   3. The mobile terminal according to claim 2, wherein the error with respect to the i-th set is a _i .
4. The controller is
   Whether or not the portable terminal is moving is calculated from the history of the detected position by calculating the latest moving speed of the portable terminal and comparing the estimated latest moving speed with a predetermined threshold. Estimate
   By multiplying the date and time related to the stored set by the threshold value, the stored sets are converted into four-dimensional position vectors w ₀ , w ₁ , w _{2 ,. -1,} corresponding with,
   Among the integers i = 1, 2,..., N−2, the distance between the straight line connecting w _i−1 and w _{i + 1} and w _i is the error for the set associated with the integer i. 3. The mobile terminal according to claim 2, wherein
5. When the electronic property is succeeded from the owner to the operator, the detected position and the date and time when the position is detected are transmitted to the server as the succeeded position and the date and time. 2. The mobile terminal according to claim 1, wherein the mobile terminal is characterized.
6. A server that distributes a program to a mobile terminal presented by an operator to an owner of electronic property, and the mobile terminal executes the program,
   Detecting the position of the mobile terminal;
   From the history of the detected position, it is estimated whether the mobile terminal is moving,
   If it is estimated that the portable terminal is moving, near-field communication with a portable device used for succession of the electronic property from the owner to the operator is limited.
7. When the mobile terminal presented by the operator to the owner of the electronic property executes the program,
   Detecting the position of the mobile terminal;
   From the history of the detected position, it is estimated whether the mobile terminal is moving,
   If it is estimated that the portable terminal is moving, the near field communication with the portable device used for the succession of the electronic property from the owner to the operator is limited. .
8. The mobile device presented by the operator to the owner of the electronic property
   A detection unit for detecting the position of the mobile terminal;
   From the history of the detected position, it is estimated whether or not the mobile terminal is moving, and if it is estimated that the mobile terminal is moving, the electronic property from the owner to the operator A program that functions as a control unit that restricts near-field communication with a portable device that is used for succession.

Images