JP3454785B2 - Card payment merchant terminal, card payment service system, and card validity display method in card payment - Google Patents

Description

Detailed Description of the Invention [Industrial applications]

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention uses a cashless card such as a credit card, a prepaid card or a debit card (hereinafter, these cards are collectively referred to as "cards"). The present invention relates to a card payment member store terminal for performing payment related to product sales (including provision of various services and sale of goods as goods), a card payment service system, and a card validity display method in card payment.

[0002]

2. Description of the Related Art Recently, consumers have come to the cash
A full-fledged cashless era, where payments are made post-payment or instant payments and electronic money on the WEB, is about to begin. In particular, services provided by debit cards (formally referred to as "J-DEBIT" cards in Japan (the acronym J is J for JAPAN), but hereinafter referred to simply as debit cards) are Expected to expand rapidly due to the convenience of being able to use it without any procedure, the service started in some areas in January 1999, and finally started full-scale operation in March 2000. It is expected that the card payment service will be available anytime, anywhere, 24 hours a day, 365 days a year.

In reality, there are financial institutions such as S Bank and DK Bank that can operate 24 hours a day, but in general,
All financial institutions are available from 8:00 to 21:00, and the time zone varies depending on the financial institution that issued the card (debit card).

[0004] Various retailers and various service providers prepare necessary facilities for handling cards such as credit cards, prepaid cards, debit cards, etc., and make payment through the network system corresponding to the cards. Collect the price of products and services offered. The above retailer that enables card payment using such a network system is referred to as "member store" below.
Called. Required equipment prepared by the member store is positioned as a terminal of a so-called network system. Further, in the following, “commercial product sales” will be described as including providing services. Similarly, “purchasing a product” includes providing a service. As a payment example using a card, the “post-payment method” using a credit card has been popular as described above. In this method, after a product is sold, a specified amount of money is deducted from the designated account of the credit card holder of the issuing financial institution that specifies the credit card that issued the credit card. To be paid in 2 months. On the other hand, payment using a prepaid card is to settle the price related to product sales by the "prepayment method".
By paying a predetermined amount of money to a member store in advance, the member store issues a prepaid card in which the predetermined amount of money is stored in the storage unit such as the magnetic or IC of the prepaid card,
Each time the product is sold, the amount of the product is reduced and updated from the predetermined amount stored in the prepaid card, and the payment is made. If the prepaid card balance is less than the price for receiving the service, a new predetermined amount is paid to the member store, and the prepaid card balance is updated.

Such a prepaid card is particularly effective for, for example, refueling at a gas station or payment of a toll on an expressway (in this case, it is particularly called a highway card), and the payer does not have to prepare cash every time. The price of purchase can be paid, the price of merchandise sale can be promptly recovered without preparing change as the member store side, and the funds can be effectively used by advance payment. The payment / collection of this consideration does not exceed the balance of the prepaid card. Therefore, even if the prepaid card is lost, the damage incurred by the owner will be suppressed by the balance of the prepaid card itself. as,
The balance of the card that is lost and not used can be managed as a non-refundable amount. A card called a debit card is positioned between these "prepayment method" and "post-payment method", and the so-called "immediate payment method" is used for payment of goods and services. A debit card is a card that has been issued by a financial institution for use in automated teller machines and enables payments to be made. The term "debit" means "immediate payment" and is called a debit card. Has been. The debit card itself is not issued (the debit card itself does not physically exist).
However, in the following explanation, for example, "financial institution that issued the debit card" may be used to treat the debit card as if it actually exists. It should be interpreted as a financial institution.

When a member store sells a product, a card held by a customer who wants to purchase the product is inserted into the terminal of the member store as a debit card, and the customer is delivered to the financial institution of the card. By entering the PIN number on the terminal and the price of the product sale on the member store side, the purchaser's financial institution account corresponding to the card can be immediately used within the limit of the balance or credit range of the account. The sales price will be deducted. Then, the deposit process is performed within 2 to 3 days at the latest to the financial institution account designated for each member store. From the point of view of the purchaser who is the user, it is possible to purchase products at any credit card or debit card member store without carrying cash, and for the debit card, there is no new card issuing procedure. However, there is an advantage that the card corresponding to the opened financial institution account can be easily used to pay for the purchase of the product within the range of the balance of the deposit in the financial institution account or the credit. At the above-mentioned member stores such as retailers and service providers, the payment price is transferred to the account specified immediately or after payment, so that it is possible to collect the price of the sold product promptly, reliably and efficiently, and to create an opportunity for sales. It has the advantage of making it hard to miss and increasing sales. Nikkei Internet BIZTECH NEWS dated August 28, 2000
Said, "6 major credit companies have tie-ups for mobile payment methods", "6 major credit companies will make secure payments using credit cards on mobile phones and game consoles on August 25. A consortium was established with the aim of popularizing the "PKICC" method. The consortium establishes operation rules for the credit companies to jointly use this settlement center. PKICC is a method that enhances payment security by issuing a digital certificate to devices such as mobile phones in advance and performing mutual authentication between the mobile phone, EC (electronic commerce) site, and payment center. Is. The digital certificate distributed to mobile phones is the same for all credit companies, but the consortium also creates an operating rule for the CA (certificate authority) system to distribute this certificate. PKICC cannot be used with existing mobile phones. To use, ACCESS
It is necessary to install the dedicated wallet software developed by the mobile phone. The article has been published, and there is an attempt to distribute digital certificates in advance to mobile phones, game consoles, etc. to improve the security of payment.

[0007]

However, in the card settlement service system or the card business providing system which pays the price for the purchase of goods by the card as described above, the card owner himself holds various cards and System or business based on the assumption that the precondition that the payment price will be deducted from the financial institution account of the purchaser who is the owner of the card only when paying for the purchase of their own goods It is a provision method. Signature verification is generally used to claim that you are the owner of the card, as you can see on credit cards, but in addition to this, the credibility of the verification is increased to satisfy the above prerequisites. In order to do this, various innovations have been made as follows.

[0008] For example, the member store, CAFIS described later
Payment information transmitted between the centers and clearing centers is highly encrypted for security, and the PIN code is used by customers who purchase the product when paying for the product. When entering the password, measures such as making the terminal for settlement the size of the palm or attaching a separate terminal for entering the password are made so that the password entered by the purchaser cannot be seen from the member store side. ing. Furthermore, in Japanese Patent Publication No. 10-502195, each user has a personal terminal unit for authenticating his / her identity, and according to the input of the person and an algorithm stored therein, a system call is made. An invention is disclosed in which a response code is output in response and the provision of a service is permitted by determining whether or not the response code is acceptable. Further, in Japanese Patent Application Laid-Open No. 2000-59516, a "fused system of a mobile phone and a computer telephony" is used, and a caller number notification function of the mobile phone and attribute data such as a personal identification number to be input are used. An invention relating to credit settlement is disclosed in which those services are collated and a desired service can be received after identity verification. User ID can be automatically identified by computer system by calling number notification by mobile phone, and user can register attribute data by push dial and receive desired service by computer telephony voice response. It is a fusion of the telephone and computer telephony. Furthermore, there is also an attempt to confirm the identity of the purchaser without the card. For example, Japanese Patent Laid-Open No. 09
In JP-A-3304453 and JP-A-10-69463, a retina pattern peculiar to each purchaser is used, and the identity is confirmed by the retina pattern read from the retina pattern reader and the purchaser's ID number. An invention is disclosed in which a desired service can be received. Each of the above-mentioned devices for confirming the identity is intended to provide a means for confirming whether or not the person is the identity at the time of payment to pay for the purchase of the product by the card.

However, it is possible to snoop on the personal identification number,
Identification number held in the memory of the card (e.g., a number that confirms the identity of the card, the account number of the corresponding financial institution if it is a debit card, or the credit card if it is a credit card) (The credit number is indicated) or the personal identification number is decrypted with a dedicated system, so that the so-called personal identification number can be known to others very easily, so the personal identification number must be correct. It is premature to determine whether or not the person is who he / she is by only being able to input.

Even if an attempt is made to ensure security by highly encrypting the encryption, it is easy for an engineer having an encryption technology higher than the highly encrypted technology to decipher the encryption. In addition, there is a possibility that a crime will occur in which the card number or personal identification number left on the terminal of the retail business is abused to charge for the fictitious product price or the service provided. The purchaser who uses the card may use the card by a plurality of purchasers, such as one card being used by the family or the like, and thus the matching by the retina pattern may not be available. Especially for card payment services that pay the price of products and the price of services provided by debit cards, it is possible for customers who lost their cards to purchase due to the advantage that they can use the card of the financial institution account as a debit card without performing a new registration procedure. Serious problems can occur. The personal identification number of the card is often used for an anniversary such as the birthday of the person from the viewpoint of memorability, and it becomes clear by investigating the anniversary, or it may be simply guessed. Further, since it is a four-digit number, the personal identification number can be found by repeating trial and error at most 9999 times, and if it is a date, the personal identification number can be found on any of 365 days. Alternatively, the personal identification number can be easily found by reading the information stored on the card. It is not impossible to illegally reissue the card itself based on the various numbers printed on the transaction statement issued when the card is used to withdraw cash from a financial institution.
In this way, the advantage of instant payment for debit cards is that if you flip it over, you will not notice the loss of the card.
It is possible that the balance of deposits in the corresponding financial institution account will disappear after a lapse of days, and the above advantage can be regarded as a disadvantage including a great risk.

Further, in the method of issuing a digital certificate to the above-mentioned mobile phone, the card itself is not authenticated, so the corresponding mobile phone must always be held together with the card. If you hold it, it will be digitally authenticated, so there is a possibility that it will be illegally used for card payment for product purchase against the will of the cardholder. The present invention has been made in view of the above circumstances, and has been made for the purpose of providing a card payment member store terminal, a card payment service system, and a card validity display method in card payment as described below. Is. First, ID numbers for identifying various cards such as credit cards, prepaid cards, debit cards, etc. and the PIN code associated with the card are decrypted and illegally duplicated, or the decrypted PIN is entered and anyone other than the owner of the card To prevent unauthorized use by a third party.

Then, even if the user does not notice the loss or theft of the card, it is possible to avoid the situation where the designated account of the financial institution related to the card is out of deposit. Furthermore, in addition to preventing such unauthorized use, the cardholder himself also sets a limit on the use of card payments using cashless cards, and if the card payment amount exceeds a certain amount, the information terminal It is also possible to refrain from card payments by controlling the status itself.

The status for judging the validity of the card is determined by the validity of the card in the card settlement when a predetermined time has passed after the final information is received from the information terminal or the card has been settled a predetermined number of times. The status is changed to deny sex.

[0014]

The present invention provides a credit card.
Card, prepaid card or debit card
Make payments for merchandise sales using a cashless card.
It is a card payment service system related to Konu service.
Is connected to the network and has a mail communication function.
The information terminal corresponding to the card and the network.
A server which is connected and has a mail communication function,
Information transmitted by the information terminal and a predetermined secret code for each information terminal
Status management server for storing the number M and each information terminal
Then, in the email received from the information terminal, enter the PIN
The accompanying email sent is the personal identification number M of the information terminal.
If the email matches
As a master mail for the terminal, and also sent by the information terminal
Emails sent without a password
Status as the current mail of the relevant information terminal.
Mail storage means stored in the server
In the data management server, by the mail storage means
The master mail and current mail for each stored information terminal
Each information terminal that compares the
Status storage means for creating and storing the status of
Installed in a member store that is connected to the network and handles cards
A terminal that has been used for payment of product sales using a card
Member terminals used in
The status management server remembers the
If the status of the information terminal corresponding to the card is
Received from the status management server and the status is master
In status that indicates a mismatch with the mail and the current mail
In some cases, a message denying the validity of the card.
It has a card validity display means for displaying the di, a, e-mail
Credit card and prepaid card with communication function
Or you can play with cashless cards such as debit cards.
The information terminal that has a corresponding information terminal and a mail communication function.
The information transmitted by the user and the predetermined personal identification number M for each information terminal.
A status management server for each information terminal and a network
Decision to sell products connected to the network and using the card
The terminal of the member store installed at the member store that handles the
Connected by network and has a card related to the above service
A method of displaying the efficacy on the terminal of the member store, comprising:
The status management server receives the message received from the information terminal.
E-mail sent with a PIN is
If the email matches the password M of the information terminal,
As the master mail of the information terminal,
Attach the PIN in the email sent by the information terminal.
The mail sent without the current mail of the relevant information terminal.
The master mail and the call
Information that indicates the match / mismatch by comparing with the email
The status for each terminal is created and stored.
Alliance store terminals use the card to settle when selling products.
The status of the information terminal corresponding to the card is
Received from the master management server and the status
If there is a mismatch between the email and the current email,
Provided is a card validity display method in card payment , which displays a message denying the validity of a card.

Furthermore, credit cards and prepaid cars
Cashless cards such as debit or debit cards
Responsible for the service of using the
Before connecting to the network and having mail communication function
The information terminal that supports the
Store a predetermined personal identification number M for each information terminal for each information terminal
Status management server that receives information from the information terminal.
The email sent with the PIN code attached
It is a friend of Le coincides with PIN M of the data terminal
In that case, the email is regarded as the master email of the information terminal.
Also, in the email sent by the information terminal, the security code
The email sent without the
It is recorded on the status management server as a rent mail.
Remember, the master mail and current mail of each information terminal
For each information terminal that compares the
Status management server that creates and stores status
And the status management service
Server stores the information terminal corresponding to the card.
The status is received from the status management server and the status
The master mail and the current mail do not match
If so, a message denying the validity of the card.
Card validity display means for displaying
Providing a terminal for a member store. In this way, the statuses managed by the status management server are the current mail sent from the information terminal and indicating the current status of the cardholder, and the mail sent from the information terminal to determine the validity. It is composed of the master mail used for verification. In addition, the status for judging the validity of the card is that the validity of the card in the card payment is determined by the lapse of a predetermined time after the final information is received from the information terminal or the card has been settled a predetermined number of times. The status is changed to deny. In addition, especially the information terminal that sends information to the status management server,
It is a computer connected to a network and uses free mail on the Internet. The “status” used above is a combination of the words “code” and “name” such as a status code and a status name, and in the present invention, it generally indicates the state of a certain thing. It is used as a broad word to represent.

[0016]

BEST MODE FOR CARRYING OUT THE INVENTION The "CA" used in the following examples
FIS Center "is Credit And AndFinan
CE Information System, which stands for a shared-use network provided by NTT DATA Corporation, and is used for nationwide ON-LI such as card companies, distribution companies, financial institutions, and affiliated stores.
Connected by NE, it is mainly used for credit inquiry (also called credit) and sales management. Also, the "clearing center" receives transaction information regarding credits and debits from the "CAFIS center" as settlement information, and centrally manages the settlement information for the purpose of smoothing the flow of funds based on this information, so-called centralized information. It is the center, receives the transfer result deducted from the user's account at the card issuing financial institution, aggregates and offsets the data, and sends the data after deducting the fee of the financial institution to the settlement financial institution. . For this reason, it is called a clearing center (because it has the function of offsetting and totalizing payment information). FIG. 1 is a block diagram showing a wide area network configuration according to an embodiment of the present invention.

The member store terminal 1 has a card reader for reading the card contents such as an identification number and a personal identification number stored on the card, and a key input section for inputting a personal identification number and a sales amount, and a communication line (wired, The authentication and credit server 2 such as a CAFIS center is accessible to obtain information on credit or debit card authentication or credit via wireless. In addition, the member store terminal 1
Is a status management server 3 described later via a communication line.
It is also configured to be accessible. Authentication credit server 2
Is a database server 501, 502, 50 of the clearing center 4 and the credit company via the communication line.
3, ... (Representatively referred to as a credit company DB server 5) is configured to be accessible. General subscriber phone,
A communication terminal such as a mobile terminal (including a mobile phone, a PHS, or a PDA such as a mobile or a palm (not shown)) and a personal computer (NWPC) connected to a network is typically referred to as an information terminal 6. The status management server 3 is a server that manages information unique to the owner of the card for each information terminal, a card number as a card identification ID, a personal identification number, and the like, and particularly the sender number and mail address of the information terminal 6. The mail information transmitted from the information terminal 6 is stored for each information terminal 6 (the mail information to be stored may be plural according to its type). The card number of each information terminal 6 is registered and changed and managed as part of the card management system at the time of card creation and thereafter. A method of changing registration by operating the information terminal 6 is also possible, but from the viewpoint of improving security, such an easy method of changing registration is not preferable unless security measures such as changing with a personal identification number are taken. Absent. In other words, it is desirable to use it with the support of appropriate security measures.

FIG. 2A is a status management table for each information terminal 6 managed as a database in the status management server 3. In FIG. 2A, in addition to the information terminal number, the card number, the master mail and the current mail,
A card number password used when changing the card number and a master mail password used when changing the contents of the master mail are managed. Also, the status indicating whether the corresponding card can be used or not is managed. This status may be created and stored for each information terminal each time either the master mail or the current mail is changed. Also, this status is created when the master mail and the current mail are compared and judged to send the status. Good. It is possible to independently change the registration of this status from the information terminal 6, but security measures are required as with the card number.

The status management server 3 may be included in the authentication and credit server 2, the clearing center 4, or each credit company DB server 5. Alternatively, by utilizing the fact that the member store terminal 1 can access the status management server 3, “from the member store terminal 1 to the authentication and credit server 2
Access to the “authentication and credit server 2 from the status management server 3” on behalf of the “access to the authentication management server 3”. By using the status management server 3 as an “intermediate server to the authentication and credit server 2 in charge of”, there is an effect of decentralizing centralized access from the member store terminals to the authentication and credit server 2. Information terminal 6
The email information sent from is the information of the owner of the information terminal 6, for example, "I will go shopping now" or "I'm sleepy now, so I'll sleep!"
Or, it is an email that you can freely compose, such as "I'm visiting you right now", and there is no particular restriction on the content. These pieces of mail information are stored in the status management server 3 as a current mail each time a mail is received. Regarding the storage of the mail information, it is confirmed using the caller number notification function of the information terminal 6 whether or not it matches the number of the unique information terminal 6, and if they do not match, the mail information is not stored. In addition, a personal identification number (which does not necessarily have to be the same as the personal identification number delivered to the issuing financial institution of the card) is attached to the e-mail information and sent by e-mail to check whether it matches the pre-registered personal identification number. It is so arranged that the mail information is stored as the current mail when there is a mismatch or when the personal identification number is not added.

The contents of the stored mail information are stored in a distinguishable manner as a status for each card holder.
If the personal identification number is added and the personal identification number matches the pre-registered personal identification number, the mail is stored as a master mail. The master mail is compared with the current mail and is respected as the cardholder's will for the corresponding card, so that the validity of the card is judged, and for this reason it is called the master mail. The mail information stored in the status management server 3 may be short information (not necessarily in the form of mail) such as two or more types of distinguishable code information transmitted from the information terminal 6. . In this case, by judging such information (for example, it may be judged whether it is the same or the same kind as the previously designated information,
Furthermore, the information designated in advance may be common to all cards and may be changed at any time), and the status of the cardholder is distinguished. The information transmitted from the information terminal 6 is the same information, and each time the status management server receives the same information, the stored status is switched, for example, ON / OFF to manage the status for each cardholder. You may do it. When the information terminal 6 is an internet mail using computer communication, the mail number of the information terminal 6 handles the mail address related to the internet mail as the sender number of the information terminal 6, and the information terminal 6 Check the sender of. The email address is not necessarily limited to a paid email address provided by an internet provider. Various D
It is also possible to use the free mail address assigned to an individual in the free mail service provided on the WEB by a telecommunications carrier who manages the B server and the search engine and operated on the WEB.

The free mail address is used as the information terminal 6
The caller may be confirmed by considering it as the caller's number. In particular, do not use free email addresses as email addresses for sending and receiving email, and distribute the information that you want to collect and check via the Internet from the provider (from the information terminal 6 side of NWPC, only the email is received from the provider). The status management server 3 can very safely control the status of its own information terminal because the free mail address is not known to anyone other than the provider because it can be opened with the main purpose of being . By the way, the status of this card holder means the holder of the card (the person who holds (possessess) the card so as to make a card payment when purchasing a product. Strictly speaking, the owner of the card issues the card. There are financial institutions and credit companies that do, but those who have the exclusive right to use the card are the cardholder) and are not necessarily in status. This status is a status that has been set by the person who owns the card and the information terminal 6 at the same time until now, and by sending information from the information terminal 6 of the card holder to the status management server 3. It is configured to be changeable at any time. The status is set to "state in which the card is not used", and the status management server 3
By confirming the status, even if an unauthorized use of the related card is attempted, the use of the card is prohibited at the stage before the inquiry of the authentication credit information to the authentication credit server 2.

When the mail is transmitted from the information terminal by Internet mail, it may be an information terminal of another person such as a member store terminal or an office NWPC.
Therefore, when the address is an email address, it is particularly easy to change the status setting. In such a case, hereinafter, the cardholder's information terminal 6 is treated as meaning an information terminal operated by the cardholder.

On the other hand, by transmitting information from the information terminal 6 of the card holder to the status management server 3,
Since the status can be set again so that the related card can be used at any time, when the product is purchased by the card, the status is set to the card usable state immediately before the product purchase, and the status is again set after the product purchase. If you reset the card to a card unusable state,
Even if the card is left at the member store where the product is purchased after the product is purchased, the card can be prevented from being used illegally. In addition to the above mail information, the status management server 3 stores a master mail in the information terminal 6 of the cardholder. The content of the master mail is, for example, a mail that is initially set and registered together with the master mail password. The content of the master mail can be set and registered again by retransmitting the mail using the master mail PIN. In the present embodiment, the status of the card is created by comparing the current mail information and the master mail information set for communication from the information terminal 6 corresponding to each card. In the comparison,
You can create a status by perfect match comparison and compare it, or there is a method to extract words that become keywords and compare by matching them, or compare by the ratio of matching characters. A comparison method is possible. Which comparison method is used is a matter related to the reliability level of the created status. Comparing the final current mail information and the master mail as a mail is much more difficult for a third party to create the same mail than the comparison as simple code information because of the diversity of mails. By chance, it is difficult for the same email to match, and it can be considered that the reliability level of the status is quite high. Next, the procedure for registering or setting the master mail and the current mail in the status management server 3 will be described with reference to the flowcharts of FIGS. 3 and 4. Each STEP indicating a procedure shall proceed to the STEP described immediately below unless otherwise indicated. As shown in FIG. 2b, the mail information from the information terminal 6 is at least a sender number (information terminal 6 is N
In the case of WPC, it is a mail address, but in the following description, it will be described simply as a sender number), a mail ID indicating the type of mail, and a mail body. The value of the mail ID is, for example, "M" to indicate that the master mail password is transmitted and the current mail to be transmitted thereafter is the master mail, and "C" indicates to send the current mail. That is, the current mail sent under certain conditions becomes the master mail. These pieces of mail information are individually buffered to correspond to reception from a plurality of information terminals 6, and the corresponding application programs also have a reentrant structure. First, the flowchart of FIG. 4 is a schematic diagram showing that a timer monitors the time when the mail transmitted from the corresponding information terminal 6 is regarded as the master mail. The flow chart is activated in the flow chart of FIG. 3 which will be described later, and in this flow chart, the timer is operated to monitor the lapse of a predetermined time, and the master mail reception permission is maintained until before the lapse of the time. . After the lapse of the time, the flag indicating that the master mail is requested to be transmitted is reset to OFF, so that the master mail reception permission is not maintained. That is, while the flag is OFF, the master mail registration is controlled not to be changed in the flowchart of FIG. The flowchart of FIG. 3 is a schematic diagram for explaining the procedure for controlling the reception of the mail transmitted from the information terminal 6 in the status management server 3, which is started by the reception of the mail from the information terminal 6. After starting, the sender number is acquired from the contents of the received mail (STEP 301). Then, based on the content of the mail ID in the received mail, it is determined whether the received mail is a mail for changing the master mail (STEP 30
2) If not (in the present embodiment, if the mail ID is not "M", it is determined that the received mail is not a mail for changing the master mail, that is, it is not), the process proceeds to STEP 306. In STEP 303, the status management table of FIG. 2A is searched for the number of the information terminal 6 in FIG. 2A corresponding to the caller number acquired in STEP 301, and the master mail password of the corresponding information terminal 6 is acquired. . At STEP 304, it is determined whether the password of the master mail matches the mail text of the received mail. If not, NACK (negative acknowledgment) is transmitted to the information terminal 6 and the processing of this flowchart ends. STEP
Even if the corresponding caller number is not found in 303, or if the password for the master mail cannot be obtained, NACK (negative acknowledgment) is transmitted to the information terminal 6 in the same manner as in the case of “No”. Ends the process. In STEP 305, ACK (acknowledgement) is transmitted to the information terminal 6 to request the master mail transmission, and in the status management server, the information terminal 6 is transmitted.
The flag of the number is turned ON, and the OFF timer of the transmission request flag is set, and the processing of this flowchart ends.

By setting the OFF timer of the transmission request flag, if the master mail is not transmitted within the predetermined time, the master mail cannot be received after the predetermined time has elapsed. That is, when the OFF timer of the transmission request flag is set, the task corresponding to the flowchart of FIG.
The F-timer resets the transmission request flag of the corresponding information terminal 6 number to OFF after a predetermined time has elapsed.

The master mail from the information terminal 6 in this after transmission request time is expected to be transmitted, the processing shown again the flow chart of FIG. 3 by the incoming call starts. In STEP 306, the information terminal 6
It is determined whether or not the transmission request flag of the number is ON, and if not, the process proceeds to STEP 307. Even if the master mail is sent from the information terminal 6 after the master mail password is sent, the transmission request flag is set to O.
If the master mail is not transmitted within the predetermined time until it is reset to FF, the transmitted mail is regarded as the current mail, and therefore, there is a possibility that the process proceeds to STEP 307 as negative.

If it is ON, the mail body of the received mail is stored as a master mail in the master mail of the number of the corresponding information terminal 6 and the transmission request flag is reset to OFF, and the flowchart of this flowchart is executed. The process ends. In STEP 307, the body of the received mail is stored as the current mail in the current mail of the corresponding information terminal 6 number, and the processing of this flowchart ends. Next, the process on the information terminal 6 side corresponding to the process on the status management server 3 side in changing the registration of the current mail and the master mail will be described with reference to the flowchart of FIG.

This flow chart is started when the information terminal 6 tries to start the registration update of the master mail. In STEP 501, the master mail password for registering and updating the master mail is sent as a mail to the status management server 3 together with the mail ID "indicating that the master mail password is sent". In STEP 502, the reception response from the status management server 3 is waited for, and if it is timed out, the process of this flowchart ends. There is a reception response and the content is NA
If CK (negative response), the process returns to STEP 501. If the content is ACK (acknowledgement), the process proceeds to STEP 503, but if it is neither ACK nor NACK, the reception response is kept waiting again.

In STEP 503, since a master mail transmission request has been made, the master mail is input within a predetermined time and the mail is transmitted to the status management server 3. The mail thus sent within the predetermined time is registered and updated in the status management server 3 as a master mail of the information terminal 6. The above flowcharts FIGS. 3, 4 and 5 make it possible to change the registration of the master mail and the current mail for each information terminal 6 to the status management server from the information terminal 6 at any time.

Next, a procedure for making a cashless product purchase by a cardholder using the master mail and the current mail to make a credit card payment will be described with reference to the flowchart of FIG. In STEP 601, the card number and the personal identification number of the card are read through the card through the card reader of the member store terminal 1. In STEP 602, a personal identification number is manually input in addition to the personal identification number of the card read from the card reader by the card holder. If the manually entered personal identification number and the personal identification number read from the card reader match, STEP60
Go to 3. The process of the member store terminal 1 cannot be exited until they match.

In this flow chart, it is assumed that the personal identification number is read or manually input, but instead of the personal identification number, the person holding the card confirms the person himself / herself and the home telephone number is used. In some cases, confirmation methods such as verifying the person by verbal verification are used. In STEP 603, the member store terminal 1 makes an inquiry to the status management server 3 to confirm the intention of the cardholder. That is, the current mail of the card stored in the status management server 3 is compared with the master mail to determine whether they match (as described above, there is no need for an exact match, partial match or keyword). It may be judged by agreement), and it is judged whether the card holder is permitted to use the card.

The decision to confirm the intention of the cardholder in this STEP is normally made in the status management server 3 in response to an inquiry from the member store terminal 1 to the status management server 3, but in response to the inquiry. Alternatively, the current mail and the master mail of the card, which are the determination criteria, may be transmitted to the member store terminal 1, and the member store terminal 1 may make the determination. The degree of freedom on the side of the member store increases by making the judgment at the member store terminal 1, and if it is convinced that the member store can be trusted because the card holder is a good customer or an acquaintance, the master If the difference between the mail and the current mail is trivial to the extent that it can be approved, it is also possible to accept the card payment at the member store terminal regardless of the judgment result. However, as compared with the case where the status management server 3 makes the determination,
The transmission amount increases, and the load on the communication and member store terminal 1 increases because the member store has a judgment program. ST
In EP604, when the status of the cardholder (the content that the owner of the card finally sent as current mail) matches with the content of the master mail, the cardholder's intention makes payment by card. If so, the process proceeds to STEP 606. In this embodiment,
Although it is to compare with the content sent as the current mail in the end, it can be compared with any or predetermined mail even if it is not the final mail (however, it is complicated for the owner to change the owner's intention). It is possible to create the status as the owner's intention even if it is not the final current mail.

In STEP 605, since it is determined that the cardholder who is the cardholder does not make a payment with the card, the member store terminal 1 "cannot use this card", "This card is not allowed". A message to the effect that the card payment is rejected is displayed, and the processing of this flowchart ends. In STEP606,
The member store terminal 1 inquires of the authentication credit server 2 about the credit information such as the passbook balance and the lending limit of the card, and the authentication credit server 2 further confirms with the corresponding credit company according to the card. In STEP 607,
The result of the inquiry in STEP 606 is judged, and if credit is possible, the process proceeds to STEP 608.
Go to P605.

At STEP 608, the information necessary for the transaction is transmitted to the authentication / credit server 2 to proceed the sales process. In addition, necessary information is transmitted to the relevant credit company 5 and clearing center 4. In STEP 609, the settlement financial institution of the card issuing financial institution issues a contact instruction to transfer the corresponding amount to the designated financial institution of the member store. Transfers will be on the same day or post-payment depending on the type of the card. The process of this flowchart is completed. According to the flow chart of FIG. 6 above, when the card holder purchases a product without cash and makes a card payment, the cardholder's willingness to use the card always uses the current mail and the master mail. Will be confirmed. Therefore, unless the cardholder finally sends a mail matching the master mail as the current mail to the status management server 3, it will not be used for card settlement against the cardholder's will. Even if the cardholder does not have the card, the above operation can be performed by sending an email from the information terminal 6, and depending on the will of the owner of the card, whether or not to use it for card payment is determined. I can decide. Here, suppose that the customer specifically intends to purchase a product with a card (assuming that the card number is "123456"), the process of product purchase will be traced.

The number of the card owned by the user at the time of subscribing to the card or purchasing the mobile phone (here, the information terminal 6 is assumed to be a mobile phone, and the phone number is "09056781234") "123456"
And a password (for example, “ABCDEF”) for registering and changing the master mail are registered in the status management server. And after that, FIGS.
In accordance with the flowchart of, enter the master mail password "ABCDEF" from the mobile phone and register the master mail "Dad today is a day off". Since then, multiple current mails other than the master mail have been sent. At this time, the caller number “090567” is stored in the status management server 3.
Corresponding to 81234 ", the card number" 123456 ",
Master mail "Father today is a day off", password for changing master mail "ABCDEF", current mail of the final mail "I'll play late tonight, so I'll be late"
Is stored. In this state, when the product is purchased using the card, the master mail and the current mail do not match according to the flowchart of FIG. 6, so the status management server 3 is accessed before accessing the authentication and credit server 2 at the member store terminal. Will be paid in front of you.

Therefore, just before the card payment is made at the member store terminal, the mobile phone "09056781234" sends an email to the status management server 3 "Dad today is closed". After that, after purchasing the product with the card, he returns home and realizes that he has lost the card. But don't panic, take out your mobile phone, send a current mail saying "Good night" to the status management server, and sleep tonight with peace of mind.
The next day, carefully remember the whereabouts of the card. If you can't remember it, don't panic, and if it doesn't come out, you can just reissue a card with a different number and it won't be used illegally by others, so there is no harm. However, the damage is only the reissue fee. This fee can be eliminated if the card company is changed. As a function not described in the above embodiment, the status management server 3
It is easily realized that the status managed by is changed to a status that negates the validity of the card in the card settlement after a lapse of a predetermined time after receiving the final information from the information terminal. Status management server
A status change timer for each information terminal is provided within 3.
The corresponding status may be changed to deny the validity of the card after a lapse of a predetermined time. In addition, the status managed by the status management server 3 is changed to a status that denies the validity of the card in the card payment due to the fact that the card payment has been performed a predetermined number of times after receiving the final information from the information terminal. It is also easy to implement the setting. Status management server
There is a counter for each information terminal in 3 and it counts up each time the card is settled a predetermined number of times, resets when the final mail is received, and when the counter reaches the predetermined number, the corresponding status is displayed. It can be changed to deny the validity of the card.

[0037]

As described above, according to the present invention, the card holder, not the card holder, can change his or her intention in the status management server at any time, and the credit card company or the card issuing financial institution will not lose the card. It is possible to easily control one's willingness to make a card payment from an information terminal without the need to submit a notification, and the card is used for product purchase payment only when the card payment is indicated by one's own will. Therefore, it is possible to always maintain a sense of security that the card will not be used by others without permission. Therefore, it is expected that the amount of insurance for unauthorized use of the card will be kept low and that it will contribute to the rapid expansion of the card. Furthermore, even the cardholder himself sets a limit on the use of card payment using cashless cards, and when the card payment amount reaches a certain amount or more, the status is controlled from the information terminal by himself and the card payment is performed. It also has the effect of making it possible to self-restrain. In addition, the status to judge the validity of the card, after receiving the final information from the information terminal,
After a certain amount of time has passed or the card has been settled a certain number of times, the status will be changed to deny the validity of the card in card settlement.
Even if the validity of the card is not intentionally denied, the illegal use of the card is prevented after a predetermined time or a predetermined number of times of card payment.

By setting the information terminal for transmitting information to the status management server as a personal computer connected to a network and using free mail on the Internet,
Even if it is not the information terminal of the cardholder, there is an effect that the status of the status management server can be easily and at any time changed by the card settlement member store terminal or the network PC at work.

[Brief description of drawings]

FIG. 1 is a block diagram showing a wide area network configuration of the present invention.

FIG. 2 is a schematic diagram showing an example of mail information including a status management table for each information terminal managed as a database of the present invention and a sender number of the information terminal, a mail ID, and a mail text.

FIG. 3 is a flowchart showing that a timer monitors the time when a mail sent from the information terminal of the present invention is regarded as a master mail.

FIG. 4 is a flowchart showing that a timer monitors the time when an outgoing mail from the information terminal of the present invention is regarded as a master mail.

FIG. 5 is a flowchart showing the processing on the information terminal side corresponding to the processing on the status management server side in the registration change of the current mail and the master mail according to the present invention.

FIG. 6 is a flowchart showing a procedure in which a card holder uses a master mail and a current mail according to the present invention to purchase a product without cash and make a credit card payment.

─────────────────────────────────────────────────── --- Continuation of the front page (56) References JP-A-8-263567 (JP, A) JP-A-8-317467 (JP, A) JP-A-10-143587 (JP, A) JP-A-10- 63721 (JP, A) JP 2000-200378 (JP, A) JP 6-215233 (JP, A) JP 10-111727 (JP, A) (58) Fields investigated (Int. Cl. ⁷⁾ , DB name) G06F 17/60 G07F 7/08 JISST file (JOIS)

Claims (12)

(57) [Claims] [Claim 1] Credit card, prepaid card
Or cashless cards such as debit cards
Cars related to services for payment in product sales
A payment service system, which is connected to a network and has a mail communication function,
An information terminal that supports cards and a server that is connected to the network and has a mail communication function
And the information transmitted by the information terminal and each information terminal
A predetermined personal identification number M of each station is stored in each information terminal.
Attach the password in the email received from the status management server and the information terminal.
The email sent with the password matches the password M of the information terminal.
If the email is a matching email, send the email to the relevant information terminal.
Sent by the information terminal as a master mail of
Emails sent without a PIN attached to the email
As the current mail of the information terminal
The mail storage means stored in the management server and the mail storage means in the status management server.
Master mail and current for each information terminal stored by
Information edges that compare emails to show their match / mismatch
Status creation memory that creates and remembers the status for each end
And installed in the merchants that are connected to the network and handle cards
It is a terminal that can be used for payment of product sales using a card.
And the status of the member store terminal used at the time of the payment at the member store terminal.
The information terminal corresponding to the card stored in the server
The status is received from the status management server and the status
Status does not match master mail and current mail
If the status indicates that the validity of the card
Card validity display means for displaying a message denying
And a card payment service system. 2. A credit car having a mail communication function.
De, cache, such as pre-paid card or debit card
Information terminal compatible with shrew cards and mail communication device
Information that each information terminal has
A stator that stores a predetermined personal identification number M for each information terminal
Management server and the card connected to the network
It is installed at a member store that handles settlement services for the products used.
Connected to the member store terminal via a network,
Display the validity of the card related to the service on the member store terminal
The status management server receives the information from the information terminal.
The email sent with a PIN is
If the email matches the password M of the information terminal
The email as the master email of the information terminal
Also, in the email sent by the information terminal, the security code
The mail sent without the
It is stored as an email and the master mail for each information terminal is
And the current mail, and match / mismatch between them
Create and memorize the status for each information terminal
In the previous term, the merchant terminal uses the card to settle product sales.
The status of the information terminal corresponding to the card
Received from the status management server and the status is
When showing a mismatch between the target email and the current email
Displays a message denying the validity of the card.
A method of displaying card validity in card payment . 3. Credit card, prepaid card
Or cashless cards such as debit cards
Related to a service for payment in product sales, which is connected to the network and has a mail communication function.
The information terminal that supports the
A predetermined personal identification number M for each terminal is stored in each information terminal.
It is a status management server, and the password is attached to the email received from the information terminal.
The email sent with the password matches the password M of the information terminal.
If the email is a matching email, send the email to the relevant information terminal.
Sent by the information terminal as a master mail of
Emails sent without a PIN attached to the email
As the current mail of the information terminal
It is stored in the management server and the master memory for each information terminal is stored.
Their match / mismatch by comparing Lumpur and mosquitoes Rent-mail
The status for each information terminal is displayed and stored.
This card is connected to the status management server via a network and supports the card stored in the status management server.
Status management server
Received from, and the status is Master Mail and Current
If the card does not match the email, the card is valid.
Card validity display hand displaying a message denying sex
A card payment member store terminal having a dan . 4. The status for judging the validity of the card according to claim 1 , is changed to a status for denying the validity of the card in the card settlement after a lapse of a predetermined time after receiving the final information from the information terminal. Card payment service system. 5. The status for judging the validity of the card according to claim 2 , is changed to a status for denying the validity of the card in the card settlement after a lapse of a predetermined time after receiving the final information from the information terminal. A method of displaying card validity in card payment. 6. The status for judging validity of a card according to claim 3 , is changed to a status for denying the validity of the card in the card settlement after a predetermined time has elapsed after the final information is received from the information terminal. Card payment merchant terminal. 7. The method of claim 1, 4, the status to determine the validity of the card, after receiving the last information from the information terminal, by card payment of a predetermined number of times by the card is performed, the card payment A card payment service system that changes the status to deny card validity. 8. The status for judging the validity of a card according to claim 2 , wherein the card is settled a predetermined number of times after the final information is received from the information terminal, A card validity display method for card settlement, which is changed to a status that denies the validity of the card for card settlement. 9. The status for judging validity of a card according to claim 3 or 6 , when the card is settled a predetermined number of times after the final information is received from the information terminal, A card payment member store terminal that is changed to a status that denies the validity of the card. 10. The card payment service system according to claim 1 , wherein the information terminal that transmits information to the status management server is a network-connected personal computer and uses free mail on the Internet. 11. The card valid for card payment according to claim 2 , 5 or 8 , wherein the information terminal for transmitting information to the status management server is a personal computer connected to a network and uses free mail on the Internet. Sex display method. 12. The card payment member store terminal according to claim 3 , wherein the information terminal for transmitting information to the status management server is a personal computer connected to a network and uses free mail on the Internet. .