JP2006059040A - Vending machine system, vending machine and information management server used in the system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a new security technique for preventing unauthorized use of a data carrier in a vending machine that performs data carrier authentication.
A vending machine is connected to a server 200 via a network 108 and sells products using a medium 104. The vending machine accepts medium information of the medium 104 presented by a user 102 and is included in the medium information. The medium access unit 114 that acquires the medium identifier and the sequence number to be recorded and writes the sequence number to the medium 104 and the next sequence number obtained by a predetermined function from the acquired sequence number are generated, and the medium access unit 114 has the medium 104 The sequence number generation unit 132 to be written to the communication unit 116, the communication unit 116 that transmits the medium identifier and the sequence number to the server 200 and receives the verification result of the sequence number of the medium 104 from the server 200, and the use of the medium 104 from the verification result. An authentication result determination unit 136 for determining whether to permit, Is provided.
[Selection] Figure 1

Description

  The present invention relates to a vending machine system, and more particularly to a vending machine system that sells products using a data carrier, and a vending machine and an information management server used in the system.

  In recent years, vending machines that perform authentication and settlement using IC tags and IC cards, which are highly expected as data carriers responsible for the ubiquitous era, have been vigorously developed. In a system that sells products using such vending machines, it is an important technical problem to ensure sufficient security and prevent unauthorized use of data carriers.

  Conventionally, the following methods are known as security measures in this type of vending machine. That is, predetermined information is extracted from the data carrier by the vending machine, and the extracted information is transmitted to a server connected to the vending machine via a network. The server performs authentication and settlement based on the information, and transmits the result to the vending machine. When the vending machine receives the result of authentication or the like, it rewrites the information in the data carrier (Patent Document 1).

  In this method, authentication is performed by holding the data carrier for the first time, information in the data carrier is rewritten by holding the data carrier for the second time, and unauthorized use of the data carrier can be prevented through such steps.

  However, holding the data carrier twice has a problem in terms of convenience, and rewriting of data in the data carrier may fail. Therefore, it is desirable that the number of times the data carrier is held up is 1.

However, in the case of a method in which the holding is performed only once from the viewpoint of convenience improvement or the like, a new security method that replaces the conventional method is required. In other words, in order to complete the cover once, it is necessary to shorten the communication time between the vending machine and the server sufficiently or to eliminate the communication between the vending machine and the server. In addition, as the front end (data carrier) is diversified, it is required to ensure synchronization between the front end and the back end (server). In order to ensure the security in the system in which the cover is held only once, it is required to solve such technical problems.
JP 2004-46754 A

  The present invention has been made in view of the above circumstances, and an object of the present invention is to provide a novel security technique for preventing unauthorized use of a data carrier in a vending machine that performs authentication or the like using a data carrier.

  According to the present invention, there is a vending machine system having a configuration in which a vending machine and an information management server are connected via a network, and selling products using a data carrier including medium information, The vending machine receives the medium information of the data carrier presented by the user, acquires the medium identifier and sequence number included in the medium information, and the medium identifier acquired by the data carrier receiving unit And a transmission unit that transmits the sequence number to the information management server, a sequence number generation unit that generates a next sequence number obtained by a predetermined function from the sequence number acquired by the data carrier reception unit, and the sequence number generation A writing unit for writing the next sequence number generated by the unit to the data carrier; A receiving unit that receives the data carrier verification result from the information management server, and a determination unit that determines whether to permit use of the data carrier from the verification result received by the receiving unit, The information management server includes a receiving unit that receives the medium identifier and the sequence number transmitted from the vending machine, a sequence number that associates and stores the medium identifiers of all data carriers and the next sequence number of the data carrier. A storage unit and a collation unit that accesses the sequence number storage unit, obtains the sequence number of the medium identifier received by the reception unit, and collates the obtained sequence number with the sequence number received by the reception unit A transmission unit that transmits the verification result of the verification unit to the vending machine, and It generates the next sequence number from the sequence number obtained at the predetermined function, a vending machine system, characterized in that it and a sequence number generating unit to be stored in the sequence number storage section is provided.

  The data carrier in the present invention includes a non-contact IC card and a non-contact IC tag, as well as a non-contact type IC chip housed in a mobile phone or the like, and holds monetary value information (electronic money) inside. Settlement is based on information.

  The medium information of the data carrier includes, for example, a medium identifier, a use stop bit, a sequence number, an expiration date / time, and a balance. When the prepaid stop bit is valid, the card cannot be used.

  The “product” in the present invention includes various types of products. For example, cigarettes sold at vending machines, beverages, groceries, books, toys, boarding tickets, commuter passes, various tickets, postage stamps and postcards, or provision of services and information.

  The “user” in the present invention refers to a person who purchases a product using the vending machine according to the present invention.

  According to the present invention, a novel security technique for preventing unauthorized use of a data carrier is provided in a vending machine system that performs authentication or the like using a data carrier.

  In the vending machine system, the vending machine and the information management server transmit and receive the medium identifier, the sequence number, and the matching result asynchronously with the use of the data carrier, and the vending machine The receiving unit can include a matching result storage unit that stores the matching result received from the information management server in association with the medium identifier of the data carrier, and the determination unit of the vending machine includes the data carrier When the sequence number is acquired by the data carrier reception unit during use, the verification result storage unit is accessed, the verification result is acquired, and it is determined whether or not the data carrier is authenticated from the acquired verification result be able to.

  For example, it is possible to perform sequence number verification in batch processing when the user has not purchased a product or when the information management server has a low load such as at night.

  According to this configuration, since the data carrier can be authenticated when the load of the information management server is low, the time required for data carrier authentication at the time of product purchase can be shortened, and the response of the vending machine becomes faster, Convenience increases. In this case, the unauthorized data carrier is detected at the next use, but at that time, it is not necessary to exchange the verification result with the server, so that the unauthorized use of the data carrier can be detected quickly.

  In the vending machine system, the vending machine and the information management server can authenticate the data carrier by transmitting and receiving the sequence number and the verification result in real time when the data carrier is used.

  According to this configuration, the data carrier can be immediately verified at the time of product purchase, and unauthorized use of the data carrier can be prevented.

  According to the present invention, there is a vending machine system having a configuration in which a vending machine and an information management server are connected via a network, and selling products using a data carrier including medium information, The vending machine receives the medium information of the data carrier presented by the user, acquires the medium identifier and the sequence number included in the medium information, and the sequence number acquired by the data carrier receiving unit A sequence number generation unit for generating a next sequence number obtained by a predetermined function; the medium identifier and the sequence number acquired by the data carrier reception unit; and the next sequence number generated by the sequence number generation unit Generated by the transmission unit that transmits the information to the information management server and the sequence number generation unit A write unit that writes the next sequence number to the data carrier, a receiving unit that receives the collation result of the data carrier from the information management server, and the data carrier based on the collation result received by the receiving unit. A receiving unit that receives the medium identifier, the sequence number, and the next sequence number transmitted from the vending machine. A sequence number storage unit that associates and stores the medium identifiers of all data carriers and the next sequence number of the data carrier, and accesses the sequence number storage unit and receives the sequence of the medium identifiers received by the reception unit Number is obtained, and the obtained sequence number is referred to the sequence number received by the receiving unit. The collating unit, the transmitting unit that transmits the collation result of the collating unit to the vending machine, the collating unit collating the sequence number, and then receiving the next sequence number received by the receiving unit. There is provided a vending machine system including a sequence number update unit stored in a storage unit.

  According to the present invention, a novel security technique for preventing unauthorized use of a data carrier is provided in a vending machine system that performs authentication or the like using a data carrier.

  According to the present invention, a vending machine connected to an information management server via a network and selling products using a data carrier including medium information, the medium information of the data carrier presented by the user A data carrier reception unit that acquires a medium identifier and a sequence number included in the medium information, and a transmission unit that transmits the medium identifier and the sequence number acquired by the data carrier reception unit to the information management server; A sequence number generation unit that generates a next sequence number obtained by a predetermined function from a sequence number acquired by the data carrier reception unit, and writes the next sequence number generated by the sequence number generation unit to the data carrier The verification result of the data carrier is received from the writing unit and the information management server. A reception unit for an automatic vending machine, characterized in that it and a determination section for determining whether or not to allow the use of the data carrier from the verification result received by the receiving portion is provided.

  According to the present invention, there is provided a new security technique for preventing unauthorized use of a data carrier in a vending machine that performs authentication or the like using the data carrier.

  According to the present invention, the information management server has a configuration connected to a vending machine via a network, and manages a vending machine that sells products using a data carrier including medium information, A receiving unit for receiving the medium identifier and sequence number of the data carrier transmitted from the vending machine; and a sequence number storage unit for storing the medium identifier of all data carriers and the next sequence number of the data carrier in association with each other. A collating unit that accesses the sequence number storage unit, obtains the sequence number of the medium identifier received by the receiving unit, and collates the obtained sequence number with the sequence number received by the receiving unit; The transmission unit that transmits the verification result of the verification unit to the vending machine, and the sequence number received by the reception unit It generates the next sequence number obtained in al the predetermined function, the information management server, characterized in that it and a sequence number generating unit to be stored in the sequence number storage section is provided.

  According to the present invention, there is provided an information management server capable of improving the security of a medium and preventing unauthorized use.

  Although the configuration of the present invention has been described above, any combination of these configurations, or a conversion of the expression of the present invention between a method, an apparatus, a system, a recording medium, a computer program, and the like is also applicable to the present invention. It is effective as an embodiment.

  ADVANTAGE OF THE INVENTION According to this invention, the novel security technique which prevents the unauthorized use of a data carrier is provided in the vending machine which authenticates using a data carrier.

Hereinafter, embodiments of the present invention will be described with reference to the drawings. In all the drawings, the same reference numerals are given to the same components, and the description will be omitted as appropriate.
(First embodiment)
FIG. 1 is a schematic block diagram showing a configuration of a vending machine system according to an embodiment of the present invention. The vending machine system according to the present embodiment includes a vending machine 100 and a server 200 connected via a network 108. The vending machine 100 acquires predetermined information from the medium 104 having an electronic money function such as a prepaid function, and transmits authentication information to the server 200 via the network 108.

  The server 200 authenticates the validity of the medium 104 based on the authentication information, and transmits the authentication result to the vending machine 100 via the network 108. When the vending machine 100 recognizes that the medium 104 has been authenticated from the authentication result received from the server 200, the vending machine 100 performs payment processing and pays out the merchandise.

  In this embodiment, an example in which a non-contact IC card is used as the medium 104 will be described. The non-contact type IC card includes an antenna (not shown) that transmits and receives data using a weak radio wave transmitted from an external terminal, and a semiconductor integrated circuit (IC chip) (not shown).

  FIG. 2 is a front view showing an example of the appearance of the vending machine 100 according to the present embodiment. In this vending machine, a sample sample 301 is provided on the front panel, and product samples are displayed. This vending machine can not only purchase products with IC cards, but also purchase products with cash, and it is also possible to purchase products by using the cash shortage balance of IC cards. is there. For this purpose, a bill slot 302, a change return lever 303, and a coin slot 304 are provided on the front panel together with the IC card reader 305. And the change mouth 308 for taking out the change at the time of using cash is provided. The purchased product is taken out from the product exit 309. Note that the IC card use procedure and the like are navigated by the liquid crystal display unit 306.

  Hereinafter, the function of the vending machine 100 will be described with reference to FIG.

  The vending machine 100 includes a product purchase acceptance unit 112, a medium access unit 114, a communication unit 116, a payout unit 118, a display unit 120, a speaker unit 122, a notification unit 124, a settlement unit 126, information A check unit 130, a sequence number generation unit 132, and an authentication result determination unit 136 are included.

  The product purchase acceptance unit 112 accepts a product purchase request from the user 102. The purchase request is made by pressing a product button provided on the sample sample 301 in FIG. The accepted purchase request is sent to the communication unit 116.

  The medium access unit 114 has a function of communicating with the medium 104 presented by the user 102. In the present embodiment, medium access unit 114 and medium 104 communicate in a non-contact manner with a weak current. The medium access unit 114 acquires predetermined information from the medium 104 and sends it to the information check unit 130.

  The medium access unit 114 can be configured as shown in FIG. 3, for example. The medium access unit 114 includes a medium reading unit 160 and a medium update unit 162. When the communication unit 116 establishes communication with the server 200, the medium reading unit 160 accesses the medium 104 presented by the user 102, acquires medium information to be described later from the medium 104, and acquires the information check unit 130 and the sequence number. The data is sent to the generation unit 132. The medium update unit 162 writes the medium information received from the sequence number generation unit 132 and the settlement unit 126 to the medium 104. Alternatively, when the vending machine 100 or the server 200 determines to stop using the medium 104, a use stop bit is written to the medium 104.

In the present embodiment, the following medium information is stored in the medium 104, and the medium reading unit 160 and the medium updating unit 162 read and write these information.
(i) Media ID
(ii) Usage stop bit
(iii) Prepaid sequence number
(iv) Expiration date
(v) Balance

  Returning to FIG. 1, the communication unit 116 controls communication between the vending machine 100 and the server 200 via the network 108. When the communication unit 116 receives a product purchase request acceptance notification from the product purchase acceptance unit 112, the communication unit 116 makes a connection request to the server 200 via the network 108. Thereafter, the communication unit 116 determines whether or not communication with the server 200 has been established, and sends the result to the information check unit 130. In addition, the communication unit 116 transmits the medium information received from the information check unit 130 to the server 200 to the server 200. Further, the communication unit 116 receives the authentication result and the collation result from the server 200 and sends them to the authentication result determination unit 136. The medium information transmitted from the communication unit 116 to the server 200 in this embodiment includes a medium ID and a sequence number.

  The payout unit 118 pays out the product to the user 102 when it is determined that the product can be sold as a result of the determination by the authentication result determination unit 136. The display unit 120 requests the user 102 for a predetermined process or displays a message indicating that purchase is not permitted via a predetermined display screen. In addition, monetary value information included in the medium 104 such as a shortage of balance is also displayed as appropriate. In the present embodiment, such a message is displayed on the liquid crystal display unit 306 in FIG. The speaker unit 122 outputs a predetermined message.

  The notification unit 124 notifies the user 102 that purchase by the prepaid card of the vending machine 100 is not possible, or outputs a message that notifies the user that the prepaid function of the medium 104 is not available, and the display unit 120 and the speaker unit 122. To instruct. For example, if communication with the server 200 cannot be established, purchase using a prepaid card is not possible. Further, if the validity of the medium 104 is not authenticated, the prepaid function of the medium 104 cannot be used. In addition, the notification unit 124 instructs the display unit 120 and the speaker unit 122 to output a message requesting the user 102 to present the medium 104.

  The settlement unit 126 performs the settlement of the fee when the purchase is possible according to the determination of the information check unit 130 and the authentication result determination unit 136. After the settlement from the cash and the prepaid card, the settlement unit 126 notifies the medium update unit 162 of the medium access unit 114 of the balance of the medium 104 and instructs the medium information of the medium 104 to be written.

  FIG. 4 is a functional block diagram showing details of the information check unit 130 of the vending machine 100 in FIG. The information check unit 130 includes a use stop bit check unit 140, a card use availability determination unit 142, a medium type determination unit 144, a balance determination unit 146, and a timing unit 148.

  In addition, the information check unit 130 acquires the date of birth information of the user 102 stored in the medium 104, and compares this with the current date and time obtained from the time measuring unit 148 to perform adult authentication. (Not shown) can also be included.

  The use stop bit check unit 140 determines whether or not the use stop bit is included in the medium information received from the medium reading unit 160 of the medium access unit 114. Here, the use stop bit refers to information prohibiting purchase written in the medium 104. If the vending machine 100 or the server 200 determines that the purchase is not possible, the vending machine 100 writes a use stop bit to the medium 104. When the use stop bit check unit 140 determines that the use stop bit is included, the purchase using the prepaid function is not possible. Therefore, when the use stop bit check unit 140 determines that the use stop bit is included, the use stop bit check unit 140 notifies the notification unit 124 of the fact.

  The card availability determination unit 142 acquires information related to the expiration date (expiration date / time) of the medium 104 and determines whether the medium can be used. At that time, the timer unit 148 is referenced to compare the current date and time with the expiration date and time. If it is determined by the card availability determination unit 142 that the expiration date has expired, the purchase using the prepaid function is disabled. Accordingly, when the card availability determination unit 142 determines that the expiration date of the card has expired, it notifies the notification unit 124 of the fact.

  The medium type determination unit 144 determines the type of the medium 104. That is, it is determined whether or not the medium 104 has a settlement function. Since the processing flow by the balance determination unit 146 differs depending on the type of the medium 104, the medium type determination unit 144 notifies the balance determination unit 146 of the determination result after determining the medium type.

  The balance determination unit 146 determines the value (prepaid balance) stored in the medium 104. Further, the balance determination unit 146 compares the price of the product requested for purchase received by the product purchase reception unit 112 with the balance of the medium 104 received from the medium reading unit 160 of the medium access unit 114 to determine whether the sale is possible. Judging. When the balance determination unit 146 determines that the sale is not possible, the balance determination unit 146 notifies the notification unit 124 of the fact. On the other hand, when it is determined that the sale is possible, the balance determination unit 146 instructs the settlement unit 126 to settle the fee.

  The timer unit 148 has a function of measuring the date and time. The card availability determination unit 142 refers to the measured date and time to determine whether or not the card can be used according to the expiration date.

  Returning to FIG. 1, the sequence number generation unit 132 generates the next sequence number obtained by a predetermined function from the sequence number received from the medium reading unit 160 of the medium access unit 114, and the medium update unit 162 of the medium access unit 114. To send.

Here, as the predetermined function, for example, the (n + 1) th sequence number _{Xn + 1} is generated based on the _nth sequence number Xn, as shown in the following equation (1). The function f (x) is a function for generating a random number, for example.
X _{n + 1} = f (X _n ) (1)
Here, n is a natural number.

For example, X ₁ = 11, X ₂ = f (11) = 30, X ₃ = f (30) = 22, etc.

  The authentication result determination unit 136 receives the authentication result and the verification result received from the server 200 by the communication unit 116, and determines whether or not the medium 104 has been authenticated. When the authentication result is authentication OK and the verification result is verification OK, the authentication result determination unit 136 determines that the medium 104 has been authenticated, instructs the settlement unit 126 to settle the fee, and issues a payout unit. Instruct 118 to pay out the product. Further, when the received authentication result is authentication NG or the verification result is verification NG, the authentication result determination unit 136 determines that the medium 104 has not been authenticated and notifies the notification unit 124 to that effect. In addition, the medium update unit 162 of the medium access unit 114 is instructed to write a use stop bit to the medium 104.

  Next, the function of the server 200 will be described with reference to FIG.

  Server 200 includes a communication unit 202, an authentication unit 206, a matching unit 208, a sequence number generation unit 210, a result notification unit 212, and an information storage unit 220.

  The communication unit 202 controls communication between the server 200 and the vending machine 100 via the network 108. The communication unit 202 establishes a connection via the network 108 in response to a connection request from the vending machine 100. The server 200 can be connected to a plurality of vending machines 100, establishes a connection with each vending machine 100 via the network 108, and communicates with each vending machine 100.

  The communication unit 202 receives medium information including the medium ID and sequence number of the medium 104 from the vending machine 100. The communication unit 202 sends the medium ID to the authentication unit 206, the collation unit 208, and the sequence number generation unit 210, and sends the sequence number to the collation unit 208 and the sequence number generation unit 210.

  The information storage unit 220 includes a black list 222 (shown as “BL” in the figure) and a sequence number list 224. The black list 222 includes medium IDs of media whose use is prohibited. The sequence number list 224 stores the medium identifiers of all the media 104 and the next sequence numbers of the media 104 in association with each other.

  The authentication unit 206 accesses the information storage unit 220, refers to the black list 222, and determines whether or not the medium ID of the medium 104 received from the vending machine 100 via the communication unit 202 is included in the black list 222. judge. When the medium ID is not included in the black list 222, the medium 104 corresponding to the medium ID is set as authentication OK. When the medium ID is included in the black list 222, the medium 104 corresponding to the medium ID is set as authentication NG. This result is sent to the result notification unit 212 as an authentication result.

  The collation unit 208 accesses the information storage unit 220, refers to the sequence number list 224, and obtains the sequence number corresponding to the medium ID of the medium 104 received from the vending machine 100 via the communication unit 202 from the sequence number list 224. The obtained sequence number is compared with the sequence number of the medium 104 received from the vending machine 100 via the communication unit 202. If they are the same, the verification is OK, and if they are different, the verification is NG. As a result, the result is sent to the result notification unit 212.

  The sequence number generation unit 210 receives a sequence number verification end notification from the verification unit 208, and generates a next sequence number as a trigger. That is, the next sequence number obtained by a predetermined function is generated from the sequence number of the medium 104 received from the vending machine 100 via the communication unit 202, and the corresponding medium ID in the sequence number list 224 of the information storage unit 220 is generated. Update the sequence number. The predetermined function used in the sequence number generation unit 210 is the same as the function used in the sequence number generation unit 132 of the vending machine 100, and the same function is used simultaneously in both the vending machine 100 and the server 200. The next sequence number can be generated. In this way, the same number as the sequence number written on the medium 104 by the vending machine 100 can be held in the sequence number list 224 of the information storage unit 220 of the server 200.

  The result notification unit 212 transmits the authentication result and the verification result received from the authentication unit 206 and the verification unit 208 to the communication unit 202, and causes the communication unit 202 to transmit to the vending machine 100 via the network 108. At this time, the transmission destination vending machine 100 is the transmission source vending machine 100 of the medium information of the medium 104.

  In the vending machine system configured as described above, an outline of a flow from product purchase to payout will be described with reference to FIG.

  When the user 102 makes a product purchase request (S101), the vending machine 100 makes a connection request to the server 200 (S103). The server 200 responds to the vending machine 100 (S105), and communication is established. When communication is established, the vending machine 100 requests the user to present the medium 104 (S107), and when the user presents the medium 104 (S109), the vending machine 100 stores the medium information acquired from the medium 104 as a server. 200 (S111). If communication with the server 200 cannot be established, the user 102 is notified that the medium 104 cannot be used (S107).

  The server 200 performs authentication and verification of the medium 104 based on the received medium information, and transmits the result to the vending machine 100 (S115). Meanwhile, the vending machine 100 generates the next sequence number and writes it in the medium 104 (S113). Upon receiving the authentication result from the server 200, the vending machine 100 issues a product payout or purchase impossibility notification to the user 102 based on the result (S117).

  In the above description, a case has been described in which only one vending machine 100 is connected to the server 200 and a series of processing is performed. However, a plurality of vending machines 100 may be connected at the same time. At each time, the vending machine 100 and the server 200 perform processing of receiving media information, authenticating and collating, and transmitting the results in parallel.

  Further, in the present embodiment, triggered by a product purchase request (S101) by the user 102, a sequence number is transmitted to the server 200 (S111), the server 200 collates the sequence number of the medium 104, and appropriately stores the information storage unit 220. The sequence number list 224 is updated and the collation result is transmitted from the server 200 to the vending machine 100 (S115), but is not limited thereto. In another embodiment to be described later, transmission of a sequence number to the server 200 (S111), verification in the server 200, update of the sequence number list 224, and transmission of the verification result from the server 200 to the vending machine 100 (S115). ) Can be transmitted as appropriate. For example, it can be performed by batch processing in a time zone where the load on the server 200 is low, such as at night.

  Next, the operation of the vending machine system according to this embodiment will be described. First, the operation of the vending machine 100 at the time of product sales of the vending machine system according to the present embodiment will be described. FIG. 6 is a flowchart showing an example of the operation of the vending machine 100 according to the present embodiment. Hereinafter, a description will be given with reference to FIG. 1 and FIG.

  First, when a product purchase request is made by the user 102, the product purchase acceptance unit 112 accepts a product purchase request (S11), and the communication unit 116 makes a connection request to the server 200 (S13). At this time, the vending machine 100 switches from the standby mode to the product sales mode.

  The communication unit 116 determines whether communication with the server 200 has been established (S15). When communication with the server 200 is not established (NO in S15), the notification unit 124 notifies the notification unit 124 via the display unit 120 and the speaker unit 122 that the vending machine 100 cannot currently use the prepaid card. To the user 102 (S17).

  On the other hand, when communication with the server 200 is established (YES in S15), the notification unit 124 is notified that communication has been established. The notification unit 124 outputs a message requesting the user 102 to present the medium 104 via the display unit 120 and the speaker unit 122, and the medium reading unit 160 of the medium access unit 114 for the medium 104 presented by the user 102. Accesses the media information from the media 104 and sends it to the information check unit 130 (S19).

  Subsequently, the use stop bit check unit 140 of the information check unit 130 determines whether or not the use stop bit acquired from the medium 104 is included (S21). When it is determined that the use stop bit is included (YES in S21), the notification unit 124 is notified, and the notification unit 124 indicates that the purchase by the prepaid function of the medium 104 is not possible and the speaker unit 122. The user 102 is notified via (S23).

  In step S21, the expiration date of the medium 104 is also determined by the card availability determination unit 142. When it is determined that the expiration date of the medium 104 has expired (YES in S21), the card availability determination unit 142 notifies the notification unit 124. The notification unit 124 notifies the user 102 that the purchase by the prepaid function of the medium 104 is not possible via the display unit 120 and the speaker unit 122 (S23). Further, in step S21, the medium type determination unit 144 determines the medium type and determines whether the medium 104 has a settlement function. When determining that the medium 104 does not have a settlement function (YES in S21), the medium type determination unit 144 notifies the notification unit 124. The notification unit 124 notifies the user 102 that the purchase by the prepaid function of the medium 104 is not possible via the display unit 120 and the speaker unit 122 (S23).

  On the other hand, when the use stop bit check unit 140 determines that the use stop bit is not included, the card use availability determination unit 142 determines that it is within the expiration date, and the medium type determination unit 144 determines that it has a settlement function ( NO of S21), the communication unit 116 is notified. The communication unit 116 transmits the medium information including the medium ID and the sequence number of the medium 104 to the server 200 via the network 108 (S25).

  Subsequently, the sequence number generation unit 132 generates the next sequence number obtained by a predetermined function from the sequence number received from the medium reading unit 160 of the medium access unit 114 and sends it to the medium update unit 162 of the medium access unit 114. (S27). The medium update unit 162 of the medium access unit 114 writes the next sequence number received from the sequence number generation unit 132 in the medium information of the medium 104 (S29).

  Between step S15 and step S29, the server 200 performs the above authentication and verification process based on the medium information transmitted from the vending machine 100, and transmits the authentication result and the verification result to the vending machine 100. When the communication unit 116 receives the authentication result and the verification result from the server 200 (S31), these results are sent to the authentication result determination unit 136. The authentication result determination unit 136 determines whether the medium 104 has been authenticated from the received authentication result and collation result (S33).

  That is, the authentication result determination unit 136 determines that the medium 104 has been authenticated when the received authentication result is authentication OK and the verification result is verification OK. On the other hand, when the received authentication result is authentication NG or the verification result is verification NG, it is determined that the medium 104 has not been authenticated.

  When it determines with having been authenticated (YES of S33), the adjustment part 126 performs the adjustment of a charge (S35). If necessary, the user 102 is requested to add cash, and after the fee is settled, the medium update unit 162 of the medium access unit 114 is instructed to write the balance to the medium 104. The payout unit 118 pays out the product (S37).

  On the other hand, if it is determined in step S33 that authentication has not been performed (NO in S33), the process proceeds to step S23, where the notification unit 124 is notified, and the notification unit 124 indicates that purchase by the prepaid function of the medium 104 is not possible. The user 102 is notified via 120 and the speaker unit 122. Further, the authentication result determination unit 136 may instruct the medium update unit 162 of the medium access unit 114 to write the use stop bit of the medium 104.

  Next, an authentication operation in the server 200 at the time of product sales of the vending machine system according to the present embodiment will be described. FIG. 7 is a flowchart showing an example of the authentication operation of the server 200 in the present embodiment. Hereinafter, a description will be given with reference to FIGS. 1 and 7.

  First, when the communication unit 202 receives a connection request from the vending machine 100 via the network 108 (S51), the communication unit 202 responds to the vending machine 100 and communicates with the vending machine 100. Establish (S53). Subsequently, the communication unit 202 waits for reception of the medium information of the medium 104 from the vending machine 100 via the network 108 (NO in S55). When the communication unit 202 receives the medium information of the medium 104 from the vending machine 100 (YES in S55), the medium ID included in the medium information is sent to the authentication unit 206. In addition, the communication unit 202 sends the sequence number included in the medium information to the collation unit 208 and the sequence number generation unit 210.

  Subsequently, the authentication unit 206 accesses the information storage unit 220, refers to the black list 222, determines whether or not the medium ID of the medium 104 received in step S55 is included. The medium 104 corresponding to the medium ID is authenticated OK, and if included, it is authenticated NG, and this result is sent to the result notification unit 212 as an authentication result (S57).

  Subsequently, the collation unit 208 accesses the information storage unit 220, refers to the sequence number list 224, acquires the sequence number corresponding to the medium ID received in step S55 from the sequence number list 224, The sequence number received by the communication unit 202 in step S55 is compared. If they are the same, collation is OK, and if they are different, the collation is NG, and the result is sent to the result notification unit 212 as a collation result (S59).

  Subsequently, the result notification unit 212 transmits the authentication result and the collation result received from the authentication unit 206 and the collation unit 208 to the vending machine 100 via the communication unit 202 (S61).

  Subsequently, the sequence number generation unit 210 generates the next sequence number obtained by a predetermined function from the sequence number received in step S55, and sets the sequence number of the corresponding medium ID in the sequence number list 224 of the information storage unit 220. Update (S63).

  In the vending machine system according to the present embodiment configured as described above, an operation at the time of authentication of the medium 104 when the medium 104 is illegally copied and the medium 104 having the same medium ID is simultaneously used will be described. . Hereinafter, a description will be given with reference to FIGS. 1 and 8.

  As shown in FIG. 8, when the medium 104 having the medium ID “XX002” is used in the vending machine 100, the sequence number generation unit 132 of the vending machine 100 performs the sequence number of the medium 104 according to a predetermined function. The next sequence number “XX378” is generated from “XX032”.

  The next sequence number is sent from the sequence number generation unit 132 to the medium access unit 114, and the medium access unit 114 of the vending machine 100 rewrites the sequence number of the medium 104 to “XX378”.

  On the other hand, the medium information of the medium 104 is transmitted from the vending machine 100 to the server 200 via the network 108. In the server 200, the collation unit 208 refers to the sequence number list 224 of the information storage unit 220, and the medium ID “ The sequence number “XX032” of “XX002” is acquired. The collation unit 208 compares the sequence number “XX032” with the received sequence number “XX032” and determines that the collation is OK because they are the same. Thereafter, the sequence number generation unit 210 generates the next sequence number “XX378” obtained from the sequence number “XX032” by a predetermined function, and the sequence number of the medium ID “XX002” in the sequence number list 224 of the information storage unit 220 “XX032” is updated with the newly generated sequence number “XX378”.

  In this state, if the medium 104 with the second medium ID “XX002” and the sequence number “XX032” copied illegally is used, the vending machine 100 sends the server 200 to the server 200 via the network 108. The transmitted medium information has the medium ID “XX002” and the sequence number “XX032”. The collation unit 208 of the server 200 collates the received sequence number. Here, since the sequence number of the medium ID “XX002” in the sequence number list 224 of the information storage unit 220 has already been updated to “XX378”, the collation unit 208 determines the sequence number “XX378” and the received sequence number. Since “XX032” is compared and is different, it is determined to be collation NG.

  The verification result is transmitted from the server 200 to the vending machine 100. In the vending machine 100, the authentication result determination unit 136 determines from the received verification result that the medium 104 has not been authenticated, and the notifying unit 124 prepaid the medium 104. The user 102 is notified via the display unit 120 and the speaker unit 122 that the purchase by the function is not possible.

As described above, according to the vending machine system of the embodiment of the present invention, there is provided a vending machine system capable of improving the security of the medium and preventing unauthorized use.
(Second embodiment)
FIG. 9 is a schematic block diagram showing the configuration of the vending machine system according to the embodiment of the present invention. The vending machine system according to this embodiment differs from the above-described embodiment of FIG. 1 in that the server 400 replaces the sequence number generation unit 210 that generates the next sequence number with the next vending machine 310. The difference is that a sequence number update unit 410 that updates the sequence number list 224 with the sequence numbers is provided. That is, in this embodiment, only the vending machine 310 has a function for generating a sequence number, the server 400 does not include the function, and the next sequence number generated by the vending machine 310 is notified to the server 400. The

  The vending machine system according to the present embodiment transmits the next sequence number generated by the sequence number generation unit 132 of the vending machine 310 to the server 400, and the server 400 uses the received next sequence number as the information storage unit. The sequence number list 224 of 220 is updated.

  The communication unit 316 of the vending machine 310 controls communication between the vending machine 310 and the server 400 via the network 108. When the communication unit 316 receives a product purchase request acceptance notification from the product purchase acceptance unit 112, the communication unit 316 makes a connection request to the server 400 via the network 108. Thereafter, the communication unit 316 determines whether or not communication with the server 400 has been established, and sends the result to the information check unit 130. In addition, the communication unit 316 transmits the medium information received from the information check unit 130 to the server 400 to the server 400. Further, the communication unit 316 receives the authentication result and the collation result from the server 400 and sends them to the authentication result determination unit 136.

  In the present embodiment, the medium information transmitted from the communication unit 316 to the server 400 includes a medium ID and a sequence number. Further, the communication unit 316 transmits the next sequence number generated by the sequence number generation unit 132 to the server 400.

  The communication unit 402 of the server 400 controls communication between the server 400 and the vending machine 310 via the network 108. The communication unit 402 establishes a connection via the network 108 in response to a connection request from the vending machine 310. The server 400 can be connected to a plurality of vending machines 310, establishes a connection with each vending machine 310 via the network 108, and communicates with each vending machine 310. The communication unit 402 receives medium information including the medium ID and sequence number of the medium 104 from the vending machine 310. Further, the communication unit 402 also receives the next sequence number from the vending machine 310. Communication unit 402 sends the medium ID to authentication unit 206, collation unit 208 and sequence number generation unit 210, sends the sequence number to collation unit 208, and sends the next sequence number to sequence number update unit 410.

  The sequence number update unit 410 uses the sequence number list in the information storage unit 220 with the next sequence number of the medium 104 received from the vending machine 310 via the communication unit 402 after the collation unit 208 finishes collating the sequence numbers. The sequence number of the corresponding medium ID of 224 is updated. In this way, the same number as the sequence number written on the medium 104 by the vending machine 310 can be held in the sequence number list 224 of the information storage unit 220 of the server 400.

  Next, the operation of the vending machine system according to this embodiment will be described.

  FIG. 10 is a flowchart showing an example of the operation of the vending machine 310 according to the present embodiment. The operation of the vending machine 310 according to the present embodiment is different from the operation of the vending machine 100 of the above-described embodiment of FIG. 6 in that step S25 of transmitting medium information to the server writes the next sequence number in the medium 104. It is different in that it is provided as step S71 which moves after S29 and transmits to the server the medium information including the next sequence number.

  That is, in step S21, the information check unit 130 determines whether or not the use of the medium 104 is stopped. When it is determined that the medium 104 can be used (NO in S21), the sequence number generation unit 132 sets the medium access unit 114. A next sequence number obtained by a predetermined function is generated from the sequence number received from the medium reading unit 160, and is sent to the medium update unit 162 of the medium access unit 114 (S27). The medium update unit 162 of the medium access unit 114 writes the next sequence number received from the sequence number generation unit 132 in the medium information of the medium 104 (S29).

  Subsequently, the communication unit 316 transmits the next sequence number of the medium 104 to the server 400 via the network 108 in addition to the medium information including the medium ID and the sequence number of the medium 104 (S71). Thereafter, the operations after step S31 are the same as in FIG.

  FIG. 11 is a flowchart illustrating an example of the operation of the server 400 according to the present embodiment. The operation of the server 400 of this embodiment is different from the operation of the server 200 of the above embodiment of FIG. 7 in that the next sequence number is generated by using a function and the sequence number list 224 is updated in step S63. The difference is that step S81 for updating the sequence number list 224 with the next sequence number received from the vending machine 310 is provided.

  That is, after step S61, the sequence number update unit 410 updates the sequence number of the corresponding medium ID in the sequence number list 224 of the information storage unit 220 with the next sequence number received in step S55 (S81).

Since the vending machine system according to this embodiment configured as described above does not have a function for generating the next sequence number in the server 400, in addition to the effects described in the above embodiment, the following There is an effect. For security reasons, it is desirable to update the function that generates the sequence number as appropriate, but at that time, the server manages the function update for each of the plurality of vending machines, and there is no need to synchronize the function in the server. As a result, the system configuration is simplified and maintainability is improved.
(Third embodiment)
FIG. 12 is a schematic block diagram showing the main configuration of the vending machine system according to the embodiment of the present invention. The vending machine system according to the present embodiment is based on the comparison result of the sequence number of the medium 104 that is collated by the server 600 asynchronously with the merchandise purchase request in the vending machine 500 from the above-described embodiment of FIG. The updated black list is received, and when the product purchase request is made in the vending machine 500, the black list in the black list storage unit 542 is immediately stored in the vending machine 500 without making an inquiry to the server 600. The difference is that the medium 104 is authenticated. Note that FIG. 12 shows only the main configuration of the present embodiment, and other components are omitted.

  In the vending machine system according to the present embodiment, the vending machine 500 and the server 600 transmit and receive sequence numbers and verification results asynchronously with the use of the medium 104.

  In the vending machine 500, the communication unit 516 controls communication between the vending machine 500 and the server 600 via the network 108. The communication unit 516 makes a connection request to the server 600 at the timing of a product purchase request from the user 102 as with the communication unit 116 of the above embodiment, and notifies the information check unit 130 that communication has been established. In addition, the communication unit 516 transmits the medium information received from the information check unit 130 to the server 600. Here, at least the medium ID is included. Further, the communication unit 516 receives the authentication result from the server 600 and sends it to the authentication result determination unit 136. In addition, the communication unit 516 may transmit the sequence number of the medium 104 to the server 600 at a timing different from the product purchase request. The collation unit 608 of the server 600 can appropriately collate the sequence numbers of the medium 104.

  Further, the communication unit 516 periodically issues a connection request to the server 600 via the network 108 at a timing different from the product purchase request, and when communication with the server 600 is established, Request to send The black list will be described later.

  When the communication unit 516 receives the black list from the server 600, it passes the black list to the black list update unit 540, and the black list update unit 540 stores the black list in the black list storage unit 542.

  The authentication result determination unit 536 receives the authentication result received from the server 600 by the communication unit 516, accesses the black list storage unit 542, refers to the black list, and determines whether the medium 104 has been authenticated. The authentication result determination unit 536 authenticates the medium 104 when the received authentication result is authentication OK and the collation result of the medium ID of the medium 104 in the black list of the black list storage unit 542 is collation OK. The payment unit 126 is instructed to settle the fee, and the dispensing unit 118 is instructed to pay out the product. Also, the authentication result determination unit 536 determines that the medium 104 is authenticated when the received authentication result is authentication NG or the medium ID verification result of the medium 104 is verification NG in the black list of the black list storage unit 542. It determines with not having been carried out, and notifies the notification part 124 of that.

  In the server 600, the communication unit 602 controls communication between the server 600 and the vending machine 500 via the network 108. The communication unit 602 establishes a connection via the network 108 in response to a connection request from the vending machine 500. The communication unit 602 receives medium information including the medium ID or sequence number of the medium 104 from the vending machine 500. The communication unit 602 sends the medium ID to the authentication unit 206, the collation unit 608, and the sequence number generation unit 210, and sends the sequence number to the collation unit 608 and the sequence number generation unit 210 (see FIG. 1).

  The communication unit 602 instructs the black list transmission unit 614 to transmit the black list 222 in response to a black list transmission request from the vending machine 500.

  The collation unit 608 accesses the information storage unit 220, refers to the sequence number list 224, and obtains the sequence number corresponding to the medium ID of the medium 104 received from the vending machine 500 via the communication unit 602 from the sequence number list 224. The acquired sequence number is compared with the sequence number of the medium 104 received from the vending machine 500 via the communication unit 602. If the comparison results are the same, the collation is OK, and if the comparison results are different, the medium ID of the medium 104 that is the collation NG is added to the black list 222.

  The black list transmission unit 614 receives a black list transmission request from the vending machine 500 from the communication unit 602 and transmits the black list 222 of the information storage unit 220 to the vending machine 500 via the communication unit 602.

  Alternatively, the black list transmission unit 614 may transmit the black list 222 to all the vending machines 500 on the network 108 when the black list 222 of the information storage unit 220 is updated by the collation unit 608 or periodically. it can.

  Next, the operation of the vending machine system according to this embodiment will be described. FIG. 13 is a diagram illustrating an example of an operation when updating the black list in the vending machine 500 according to the present embodiment.

  First, the communication unit 516 makes a connection request to the server 600 (S91). When communication with the server 600 is established (YES in S93), the server 600 is requested to transmit a black list (S95). On the other hand, if communication with the server 600 is not established, the process is terminated.

  Subsequently, the communication unit 516 receives the black list from the server 600 (S97) and sends it to the black list update unit 540. The black list update unit 540 updates the black list stored in the black list storage unit 542 by replacing it with the black list received in step S97 (S99).

  FIG. 14 is a flowchart showing an example of the operation at the time of product purchase in the vending machine 500 according to the present embodiment. The operation of the vending machine 500 according to this embodiment is different from the operation of the vending machine 100 of the above embodiment of FIG. 6 in that the authentication of the medium 104 is performed based on the collation result collated by the server. Instead of S33, Steps S121 and S123 are provided in which the blacklist in the blacklist storage unit 542 is accessed to obtain a collation result and the medium 104 is authenticated.

  That is, when the communication unit 516 receives the authentication result from the server 600 after the medium update unit 162 of the medium access unit 114 writes the next sequence number received from the sequence number generation unit 132 in the medium information of the medium 104 in step S29. (S121), and sent to the authentication result determination unit 536. The authentication result determination unit 536 determines whether the medium 104 has been authenticated from the authentication result received in step S121 and the black list in the black list storage unit 542 (S123).

Specifically, the authentication result determination unit 536 accesses the black list storage unit 542 when the authentication result received in step S121 is OK, refers to the black list, and stores the medium ID of the medium 104 in the black list. When it does not exist, it is determined that the medium 104 has been authenticated. On the other hand, when the received authentication result is authentication NG or the medium ID of the medium 104 exists in the black list, it is determined that the medium 104 has not been authenticated.

  15 and 16 are flowcharts showing an example of the operation of the server 600 of this embodiment. The operation of the server 600 of this embodiment is different from the operation of the server 200 of the above embodiment of FIG. 7 in that the medium ID authentication process and the verification process are separated.

  FIG. 15 shows that when the vending machine 500 according to the present embodiment receives a product purchase request, the medium information is transmitted to the server 600, the server 600 performs authentication processing, and the authentication result is transmitted to the vending machine 500. When the operation is shown. On the other hand, FIG. 16 shows that the sequence number is transmitted from the vending machine 500 to the server 600 at a timing different from the product purchase request in the vending machine 500 according to the present embodiment. The operation when updating is shown. Hereinafter, a description will be given with reference to FIG.

  As shown in FIG. 15, first, when the communication unit 602 receives a connection request from the vending machine 500 via the network 108 (S131), the communication unit 602 responds to the vending machine 500 and automatically Communication with the vending machine 500 is established (S133). Subsequently, the communication unit 602 waits for reception of the medium information of the medium 104 from the vending machine 500 via the network 108 (NO in S135). When the communication unit 602 receives the medium information of the medium 104 from the vending machine 500 (YES in S135), the medium ID included in the medium information is sent to the authentication unit 206.

  Subsequently, the authentication unit 206 accesses the information storage unit 220, refers to the black list 222, determines whether or not the medium ID of the medium 104 received in step S135 is included, and if not included, The medium 104 corresponding to the medium ID is authenticated OK. If included, the medium 104 is authenticated NG, and the result is sent to the result notifying unit 212 as an authentication result (S137). Subsequently, the result notification unit 212 transmits the authentication result received from the authentication unit 206 to the vending machine 500 via the communication unit 602 (S139).

  As shown in FIG. 16, when the communication unit 602 receives a connection request from the vending machine 500 via the network 108 (S141), the communication unit 602 responds to the vending machine 500 and automatically Communication with the vending machine 500 is established (S143). Subsequently, the communication unit 602 waits for reception of the medium information of the medium 104 from the vending machine 500 via the network 108 (NO in S145). When the communication unit 602 receives the medium information of the medium 104 from the vending machine 500 (YES in S145), the sequence number included in the medium information is sent to the collation unit 608 and the sequence number generation unit 210.

  Subsequently, the collation unit 608 accesses the information storage unit 220, refers to the sequence number list 224, acquires the sequence number corresponding to the medium ID received in step S145 from the sequence number list 224, The sequence number received by the communication unit 602 in step S145 is compared (S147).

  Subsequently, the collation unit 608 adds the medium ID of the medium 104 that is the collation NG to the black list 222 of the information storage unit 220 as the collation NG when the sequence number comparison results are the same, and as the collation NG when they are different. (S149). If the collation result is OK, the black list 222 is left as it is.

  Subsequently, the sequence number generation unit 210 generates the next sequence number obtained by a predetermined function from the sequence number received in step S145, and obtains the sequence number of the corresponding medium ID in the sequence number list 224 of the information storage unit 220. Update (S151).

  According to the vending machine system according to the present embodiment configured as described above, the same effect as the above-described embodiment can be obtained, and the data carrier can be authenticated when the load on the information management server is low. As a result, the time required for authentication of the medium 104 at the time of product purchase can be shortened, the response of the vending machine is quickened, and convenience is increased. In this case, the unauthorized medium 104 is detected at the next use, but at that time, it is not necessary to exchange the verification result with the server, so that the unauthorized use of the data carrier can be detected quickly.

  Although this embodiment has been described as a modification of the above-described embodiment shown in FIG. 1, it can also be a modification of the above-described embodiment shown in FIG. is there.

  As mentioned above, although embodiment of this invention was described with reference to drawings, these are the illustrations of this invention, Various structures other than the above are also employable. In addition, when acquiring and using the information regarding a user in this invention, this shall be done legally.

  For example, in the above embodiment, the case where the authentication process of the data carrier is performed at the time of paying out the product has been described. However, the present invention is not limited to this. For example, it is possible to determine the validity of the medium 104 by performing the same sequence number update and verification processing when the prepaid balance of the data carrier is charged.

  In the above embodiment, the authentication unit accesses the information storage unit 220 and authenticates the medium 104 based on whether or not the medium ID of the medium 104 is included in the black list 222. However, the present invention is not limited to this. For example, the information storage unit 220 may include a white list (not shown) that includes medium IDs of media that are permitted to be used.

  In the above embodiment, the vending machine 500 requests the server 600 to transmit the black list 222. However, the present invention is not limited to this. In the server 600, when the black list 222 is changed, the black list transmission unit 614 may transmit the black list 222 to the vending machine 500. Further, instead of transmitting the black list 222 from the server 600, the black list transmission unit 614 accesses the black list 222, and only the medium ID included in the black list 222 or the medium ID newly added to the black list 222 is displayed. It may be extracted and transmitted to the vending machine 500. In these configurations, the black list 222 or the medium ID is broadcasted from the server 600 to all the vending machines 500 via the network 108.

  Further, in the above embodiment of FIG. 14, step S25 for transmitting the medium ID to the server 600 and step S121 for receiving the authentication result from the server 600 can be omitted. That is, the authentication of the medium ID in the server 600 can be appropriately performed at a timing different from the product purchase request. In this case, the authentication of the medium 104 in the server 600 can be omitted, and the authentication of the medium 104 can be performed only by checking the sequence number in the vending machine 500. According to this configuration, since it is not necessary to communicate with the server 600 when the medium 104 is authenticated, the medium 104 can be authenticated at a higher speed.

It is a schematic block diagram which shows the structure of the vending machine system which concerns on embodiment of this invention. It is a front view which shows an example of the external appearance of the vending machine of FIG. It is a functional block diagram which shows the detail of the medium access part of the vending machine of FIG. It is a functional block diagram which shows the detail of the information check part of the vending machine of FIG. It is a figure which shows the outline of the flow from goods purchase of the vending machine system of FIG. It is a flowchart which shows an example of operation | movement of the vending machine of FIG. It is a flowchart which shows an example of the authentication operation | movement of the server of FIG. It is a figure for demonstrating the detection of an unauthorized copy medium in the vending machine system of FIG. It is a schematic block diagram which shows the structure of the vending machine system which concerns on embodiment of this invention. It is a flowchart which shows an example of operation | movement of the vending machine of FIG. It is a flowchart which shows an example of operation | movement of the server of FIG. It is a schematic block diagram which shows the principal part structure of the vending machine system of embodiment of this invention. It is a flowchart which shows an example of the operation | movement at the time of the black list update of the vending machine of FIG. It is a flowchart which shows an example of the operation | movement at the time of goods purchase of the vending machine of FIG. It is a flowchart which shows an example of the operation | movement at the time of the authentication process of the server of FIG. It is a flowchart which shows an example of the operation | movement at the time of the collation process of the server of FIG.

Explanation of symbols

DESCRIPTION OF SYMBOLS 100 Vending machine 102 User 104 Medium 108 Network 112 Goods purchase reception part 114 Medium access part 116 Communication part 118 Delivery part 120 Display part 122 Speaker part 124 Notification part 126 Checkout part 130 Information check part 132 Sequence number generation part 136 Authentication result determination Unit 140 use stop bit check unit 142 card use availability determination unit 144 medium type determination unit 146 balance determination unit 148 timing unit 160 medium reading unit 162 medium update unit 200 server 202 communication unit 206 authentication unit 208 verification unit 210 sequence number generation unit 212 Result notification unit 220 Information storage unit 220 Information storage unit 222 Black list 224 Sequence number list 301 Sample sample 302 Bill slot 303 Lever 304 Coin slot 305 Card reader 306 Liquid crystal display 08 Change port 309 Commodity carry-out port 310 Vending machine 316 Communication unit 400 Server 402 Communication unit 410 Sequence number update unit 500 Vending machine 516 Communication unit 536 Authentication result determination unit 540 Blacklist update unit 542 Blacklist storage unit 600 Server 602 Communication Part 608 collation part 614 black list transmission part

Claims (12)

A vending machine system having a configuration in which a vending machine and an information management server are connected via a network, and selling products using a data carrier including medium information,
The vending machine is
A data carrier receiving unit that receives medium information of a data carrier presented by a user and acquires a medium identifier and a sequence number included in the medium information;
A transmission unit that transmits the medium identifier and the sequence number acquired by the data carrier reception unit to the information management server;
A sequence number generation unit that generates a next sequence number obtained by a predetermined function from the sequence number acquired by the data carrier reception unit;
A writing unit for writing the next sequence number generated by the sequence number generation unit to the data carrier;
A receiving unit for receiving the data carrier verification result from the information management server;
A determination unit that determines whether to permit use of the data carrier from the collation result received by the reception unit;
The information management server
A receiving unit for receiving the medium identifier and the sequence number transmitted from the vending machine;
A sequence number storage unit for storing the medium identifiers of all the data carriers and the next sequence number of the data carrier in association with each other;
A collating unit that accesses the sequence number storage unit, obtains the sequence number of the medium identifier received by the receiving unit, and collates the obtained sequence number with the sequence number received by the receiving unit;
A transmission unit for transmitting the verification result of the verification unit to the vending machine;
A sequence number generation unit that generates a next sequence number obtained by the predetermined function from the sequence number received by the reception unit, and stores the sequence number in the sequence number storage unit;
Vending machine system characterized by comprising In the vending machine system according to claim 1,
The vending machine and the information management server transmit and receive the medium identifier, the sequence number, and the verification result asynchronously with the use of the data carrier,
The vending machine includes a matching result storage unit that stores the matching result received by the receiving unit from the information management server in association with the medium identifier of the data carrier,
The determination unit of the vending machine accesses the verification result storage unit when acquiring the sequence number at the data carrier reception unit when using the data carrier, acquires the verification result, and acquires the verification A vending machine system that determines whether or not the data carrier has been authenticated from a result. The vending machine system according to claim 1 or 2,
The vending machine system, wherein the vending machine and the information management server authenticate the data carrier by transmitting and receiving the sequence number and the verification result in real time when the data carrier is used. A vending machine system having a configuration in which a vending machine and an information management server are connected via a network, and selling products using a data carrier including medium information,
The vending machine is
A data carrier receiving unit that receives medium information of a data carrier presented by a user and acquires a medium identifier and a sequence number included in the medium information;
A sequence number generation unit that generates a next sequence number obtained by a predetermined function from the sequence number acquired by the data carrier reception unit;
A transmission unit that transmits the medium identifier and the sequence number acquired by the data carrier reception unit, and the next sequence number generated by the sequence number generation unit to the information management server;
A writing unit for writing the next sequence number generated by the sequence number generation unit to the data carrier;
A receiving unit for receiving the data carrier verification result from the information management server;
A determination unit that determines whether to permit use of the data carrier from the collation result received by the reception unit;
The information management server
A receiving unit for receiving the medium identifier, the sequence number, and the next sequence number transmitted from the vending machine;
A sequence number storage unit for storing the medium identifiers of all the data carriers and the next sequence number of the data carrier in association with each other;
A collation unit that accesses the sequence number storage unit, obtains the sequence number of the medium identifier received by the reception unit, and collates the sequence number received by the reception unit with the obtained sequence number;
A transmission unit for transmitting the verification result of the verification unit to the vending machine;
A sequence number update unit that stores the next sequence number received by the receiving unit in the sequence number storage unit after the sequence number is verified by the verification unit;
Vending machine system characterized by comprising In the vending machine system according to claim 4,
The vending machine and the information management server transmit and receive the medium identifier, the sequence number, the next sequence number, and the verification result asynchronously with the use of the data carrier,
The vending machine includes a matching result storage unit that stores the matching result received by the receiving unit from the information management server in association with the medium identifier of the data carrier,
The determination unit of the vending machine accesses the verification result storage unit when acquiring the sequence number at the data carrier reception unit when using the data carrier, acquires the verification result, and acquires the verification A vending machine system that determines whether or not the data carrier has been authenticated from a result. The vending machine system according to claim 4 or 5,
The vending machine and the information management server transmit and receive the sequence number, the next sequence number, and the verification result in real time when the data carrier is used, and authenticate the data carrier. Vending machine system. A vending machine connected to an information management server via a network and selling products using a data carrier including medium information,
A data carrier receiving unit that receives medium information of a data carrier presented by a user and acquires a medium identifier and a sequence number included in the medium information;
A transmission unit that transmits the medium identifier and the sequence number acquired by the data carrier reception unit to the information management server;
A sequence number generation unit that generates a next sequence number obtained by a predetermined function from the sequence number acquired by the data carrier reception unit;
A writing unit for writing the next sequence number generated by the sequence number generation unit to the data carrier;
A receiving unit for receiving the data carrier verification result from the information management server;
A vending machine comprising: a determination unit that determines whether to permit use of the data carrier based on the collation result received by the reception unit. The vending machine according to claim 7,
Asynchronously with the use of the data carrier, the medium identifier, the sequence number, and the verification result are transmitted to and received from the information management server,
A verification result storage unit that stores the verification result received from the information management server by the reception unit in association with the medium identifier of the data carrier;
The determination unit, when using the data carrier, when the data carrier receiving unit acquires the sequence number, accesses the verification result storage unit, acquires the verification result, and acquires the data carrier from the acquired verification result. A vending machine characterized by determining whether or not the product has been authenticated. In the vending machine according to claim 7 or 8,
An automatic vending machine that authenticates the data carrier by transmitting and receiving the sequence number and the verification result to and from the information management server in real time when the data carrier is used. An information management server having a configuration connected to a vending machine via a network and managing a vending machine that sells products using a data carrier including medium information,
A receiving unit for receiving a medium identifier and a sequence number of the data carrier transmitted from the vending machine;
A sequence number storage unit for storing the medium identifiers of all the data carriers and the next sequence number of the data carrier in association with each other;
A collating unit that accesses the sequence number storage unit, obtains the sequence number of the medium identifier received by the receiving unit, and collates the obtained sequence number with the sequence number received by the receiving unit;
A transmission unit for transmitting the verification result of the verification unit to the vending machine;
A sequence number generation unit that generates a next sequence number obtained by the predetermined function from the sequence number received by the reception unit, and stores the sequence number in the sequence number storage unit;
An information management server comprising: In the information management server according to claim 10,
An information management server that transmits / receives the medium identifier, the sequence number, and the verification result to / from the vending machine asynchronously with the use of the data carrier. In the information management server according to claim 10 or 11,
An information management server that transmits and receives the sequence number and the verification result to and from the vending machine in real time when the data carrier is used.

Images