Communication system, communication method, and sensor unit

Abstract

The present invention provides a technology capable of remotely managing the sale of goods in a vending machine. The present invention relates to a sensor unit (500) assembled in a vending machine and unlocking the vending machine based on encrypted data sent from a terminal device, which includes: an encryption processing unit (501d) that generates a public key and a private key and encrypts an unlocking code with the public key; a hash generation unit (501e) that hashes sensor information including at least a sensor ID and sensor location information through a hash function and outputs a hash value; a management unit (501g) that stores and manages at least the public key and the hash value in a storage unit (503) in a corresponding manner; and an unlocking unit (501f) that determines the correctness of the encrypted data sent from the terminal device and unlocks the vending machine when the encrypted data matches the encrypted data generated by the encryption processing unit.

Description

Technical Field

[0001] The present invention relates to a communication system, a communication method, and a sensor unit. Background Art

[0002] In games using electric communication lines such as the Internet, a mechanism called a "gacha machine" is adopted to obtain special in-game items, game characters, etc. A "gacha machine" refers to a virtual vending machine that mimics a vending machine (so-called "capsule toy machine" or "crank-and-turn machine": see Patent Document 1) in which if a coin is inserted and the handle is turned, a capsule containing a toy will come out.

[0003] Prior Art Documents

[0004] Patent Documents

[0005] Patent Document 1: Japanese Patent Laid-Open No. 07-148358. Summary of the Invention

[0006] Problems to be Solved by the Invention

[0007] In games using a gacha machine, items, etc. can be obtained by inserting virtual coins distributed for free or for a fee into the gacha machine. In such games, the act of purchasing charged coins is called charging. In a gacha machine that requires charged coins, sometimes a powerful item or a rare character that cannot generally be obtained (or is difficult to obtain) can be obtained by paying several hundred yen in a single charge. Therefore, some users have difficulty paying the high charges before obtaining the desired items, etc. This is not only a problem in selling goods through a virtual vending machine, but also a common problem in selling goods through vending machines including "capsule toy machines", etc. This is because, unlike face-to-face sales where the seller directly faces the buyer, when selling goods through a vending machine, the seller cannot remind the buyer to pay attention. Hereinafter, in this specification, both physical vending machines such as "capsule toy machines" and virtual vending machines are referred to as "vending machines".

[0008] The present invention has been made in view of the above circumstances, and an object thereof is to provide a technique capable of remotely managing the sale of goods by a vending machine.

[0009] Means for Solving the Problems

[0010] To solve the above problems, the communication method according to the first aspect of the present invention includes a first step to a ninth step. In the first step, the terminal device captures a QR code attached to the vending machine to obtain the vending machine ID, obtains the location information, and sends the vending machine ID and the location information to the first server device, thereby requesting to obtain encrypted data related to unlocking the vending machine; in the second step, the first server device determines whether the vending machine ID and the location information match the stored information, and if they match, sends the product information to the terminal device; in the third step, the second server device receives a settlement request from the terminal device, performs settlement processing, and sends a settlement token to the first server device; in the fourth step, the first server device receives the settlement token, generates a hash value obtained by hashing the sensor information using a hash function, and sends it to the terminal device; in the fifth step, the terminal device makes a retrieval request to the virtual server device group that implements the hash pool based on the hash value; in the sixth step, the virtual server device group receives the retrieval request, confirms whether there is a hash value, and if there is a hash value, sends the public key to the third server device; in the seventh step, the third server device generates an unlocking code, encrypts the unlocking code using the public key, and sends the encrypted data to the terminal device; in the eighth step, the terminal device requests the unlocking of the vending machine by sending the encrypted data to the sensor unit of the vending machine; in the ninth step, the sensor unit determines whether the encrypted data is correct, and if it is determined to be correct, unlocks the vending machine.

[0011] Moreover, the communication system according to the second aspect of the present invention includes: a terminal device that captures a two-dimensional code attached to a vending machine to obtain a vending machine ID, obtains location information at the time of capture, sends the vending machine ID and the location information to a first server device, and requests a search of a group of virtual server devices that implement a hash pool based on a hash value sent from the first server device, and requests unlocking of the vending machine by sending encrypted data sent from a third server device to a sensor unit of the vending machine; a first server device that determines whether the vending machine ID and location information match stored information, and if they match, sends product information to the terminal device, and if a settlement token is received, generates the hash value obtained by hashing stored sensor information using a hash function and sends it to the terminal device; a group of virtual server devices that, if they receive a search request based on the hash value from the terminal device, confirm whether the hash value exists, and if the hash value exists, send a public key to a third server device; a third server device that generates an unlocking code, encrypts the unlocking code using the public key, and sends the encrypted data to the terminal device; and a sensor unit that generates the public key and sends it to the group of virtual server devices, and if it receives the encrypted data from the terminal device, determines whether the encrypted data is correct, and if it determines that it is correct, unlocks the vending machine.

[0012] Moreover, the sensor unit according to the third aspect of the present invention is a sensor unit assembled in a vending machine that unlocks the vending machine according to encrypted data sent from a terminal device, and includes: an encryption processing unit that generates a public key and a private key, and encrypts an unlocking code using the public key; a hash generation unit that hashes sensor information including at least a sensor ID and location information of the sensor using a hash function and outputs a hash value; a management unit that stores and manages at least the public key generated by the encryption processing unit and the hash value generated by the hash generation unit in a storage unit in a corresponding manner; and an unlocking unit that determines whether the encrypted data sent from the terminal device is correct, and if the encrypted data matches the encrypted data generated by the encryption processing unit, unlocks the vending machine.

[0013] Advantages of the Invention

[0014] According to the present invention, a technology capable of remotely managing the sale of products by a vending machine is provided. In particular, the sensor unit can be additionally assembled in an existing vending machine such as a gashapon machine, and in this case, the sale of existing vending machines and the like can be remotely managed. Brief Description of the Drawings

[0015] Figure 1 It is a block diagram showing a structural example of the wireless communication system 1 according to the first embodiment of the present invention.

[0016] Figure 2 It is a front view of the vending machine 30 that performs short-range wireless communication with the wireless communication terminal 10.

[0017] Figure 3 It is a block diagram showing a structural example of the wireless communication terminal 10.

[0018] Figure 4 It is an example diagram showing the screen GO1 displayed on the display unit 110a of the wireless communication terminal 10.

[0019] Figure 5 It is an example diagram showing the search result screen G02 displayed on the display unit 110a of the wireless communication terminal 10.

[0020] Figure 6 It is an example diagram showing the settlement method selection screen GO3 displayed on the display unit 110a of the wireless communication terminal 10.

[0021] Figure 7 It is a flowchart showing the unlocking process flow executed by the control unit 100 of the wireless communication terminal 10 according to the procurement assistance program 144a.

[0022] Figure 8 It is a structural diagram of the communication system according to the second embodiment of the present invention.

[0023] Figure 9 It is a schematic diagram showing the processing sequence performed by this system.

[0024] Figure 10 It is a structural diagram of the first server device.

[0025] Figure 11 It is a structural diagram of the second server device.

[0026] Figure 12 It is a structural diagram of the third server device.

[0027] Figure 13 It is a structural diagram of the terminal device.

[0028] Figure 14 It is a structural diagram of the sensor unit.

[0029] Figure 15 It is a flowchart showing the processing sequence performed by this system. Detailed Embodiments

[0030] Hereinafter, embodiments of the present invention will be described with reference to the drawings.

[0031] <First Embodiment>

[0032] Figure 1 is a block diagram showing a structural example of a wireless communication system 1 according to the first embodiment of the present invention. As Figure 1 shown, the wireless communication system 1 includes a wireless communication terminal 10 and a server device 40 connected to a wireless communication network 20. Although Figure 1 detailed illustration is omitted, the wireless communication network 20 includes a wired communication network, and the server device 40 is connected to the wired communication network.

[0033] The wireless communication terminal 10 is, for example, a smart phone. The wireless communication terminal 10 is incorporated in the wireless communication network 20 and performs wireless communication according to a prescribed wireless communication standard (WI-FI in the present embodiment, but not limited thereto). In addition, the wireless communication terminal 10 has a function of performing short-range wireless communication with other devices according to a wireless communication standard different from the above-described wireless communication standard. Hereinafter, the latter wireless communication standard will be referred to as the "first wireless communication standard", and the former wireless communication standard will be referred to as the "second wireless communication standard". As described above, a specific example of the second wireless communication standard is WI-FI. On the other hand, specific examples of the first wireless communication standard include Bluetooth (registered trademark) or IrDA. In the present embodiment, the first wireless communication standard employs Bluetooth (registered trademark).

[0034] Figure 1 The vending machine 30 in Figure 1 is the aforementioned "gacha machine". The vending machine 30 has a function of performing short-range wireless communication with the wireless communication terminal 10 according to the first wireless communication standard. In Figure 2 only one vending machine 30 is illustrated, but the number of vending machines 30 may be two or more.

[0035] In the vending machine 30, it is in a locked state where the sale of goods is prohibited until a security code for lifting the sales prohibition of goods is received through short-range wireless communication. In a state where the security code has not been received, even if the handle 32 is turned, the capsule C will not come out. The security code is 256-byte one-time data randomly generated by the server device 40. Whenever the server device 40 receives an identifier uniquely representing the vending machine 30, it issues a security code corresponding to the identifier and returns it to the source of the identifier transmission.

[0036] As Figure 1 shown, the server device 40 is a computer device having a user DB and a vending machine management DB. In addition to issuing security codes and virtual coins, it also performs settlement of the issue price of virtual coins (in other words, settlement of the commodity price). In the vending machine management DB, position information indicating the installation location of the vending machine 30 (for example, information indicating the longitude and latitude of the installation location) and information for issuing security codes are stored corresponding to the identifier of the vending machine 30. When generating a security code according to a specified pseudo-random number generation algorithm, as a specific example of the information for issuing the security code, it may include the initial value in the algorithm (so-called pseudo-random number seed) and the just-issued security code.

[0037] The user DB is a database for managing users who want to purchase goods by using the wireless communication system 1 to lift the sales prohibition of goods in the vending machine 30. In the user DB, information indicating the purchase history of goods and the settlement history of commodity prices is stored corresponding to the identifier uniquely representing the user. As a specific example of the identifier uniquely identifying the user, it may include the user ID assigned to the user when signing the service use contract through the wireless communication system 1.

[0038] The settlement of the commodity price in this embodiment adopts a distributed ledger technology called blockchain. Blockchain refers to a database having a continuously increasing sorted record list called blocks. In this embodiment, each block in the blockchain corresponds to a settlement, and each block includes information related to the settlement, a timestamp indicating the settlement execution time, and a link to the previous block.

[0039] As described above, a printed matter 36 is pasted near the outlet 34 of the vending machine 30, and a matrix-type two-dimensional code corresponding to the identifier uniquely representing the vending machine 30 is printed on the printed matter 36. The user of the wireless communication terminal 10 reads the above matrix-type two-dimensional code using the wireless communication terminal 10 and sends the identifier obtained through the code to the server device 40, thereby being able to lift the locked state of the vending machine 30 (that is, lift the sales prohibition of goods). Hereinafter, the wireless communication terminal 10 that plays a core role in lifting the sales prohibition of goods in the vending machine 30 will be described.

[0040] Figure 3 is a block diagram showing a structural example of the wireless communication terminal 10. As Figure 3 shown, the wireless communication terminal 10 includes a control unit 100, a user interface unit 110, a first wireless communication unit 120, a second wireless communication unit 130, a storage unit 140, and a bus 150 that mediates data transmission and reception between these components. In addition, in Figure 3 , the user interface unit is abbreviated as the "UI unit". Hereinafter, the same abbreviation is used in this specification.

[0041] The control unit 100 is, for example, a computer such as a CPU (Central Processing Unit). The control unit 100 executes programs stored in the storage unit 140 (more precisely, the non-volatile storage unit 144) and functions as the control center of the wireless communication terminal 10.

[0042] The UI unit 110 is an aggregate of devices that provide a user interface for the user to use the wireless communication terminal 10. As Figure 1 shown, the UI unit 110 includes a display unit 110a, an operation unit 110b, and a photographing unit 110c.

[0043] In addition to these units, the UI unit 110 also includes a voice input / output unit that picks up the user's voice and outputs the voice represented by the voice data. However, since it has little relevance to the present invention, the illustration and detailed description of the voice input / output unit are omitted.

[0044] The display unit 110a is, for example, a liquid crystal display and its driving circuit. The display unit 110a displays images of various screens that remind the user to use the wireless communication terminal 10 under the control of the control unit 100. The photographing unit 110c is, for example, an image sensor. The photographing unit 110c photographs an image within the photographing field of view and outputs image data representing the photographing result to the control unit 100. The operation unit 110b is a transparent sheet-like touch sensor provided so as to cover the display area of the display unit 110a. The operation unit 110b and the display unit 110a together form a so-called touch panel. The user of the wireless communication terminal 10 can perform various inputs by performing a touch operation or a swipe operation on the operation unit 110b. If the user performs a touch operation or a swipe operation on the operation unit 110b, etc., the operation unit 110b outputs data representing the user's operation content to the control unit 100. Thus, the operation performed by the user is transmitted to the control unit 100.

[0045] The first wireless communication unit 120 is a communication circuit that performs wireless communication based on the first wireless communication standard. The first wireless communication unit 120 receives data sent from the other device of the wireless communication based on the first wireless communication standard and transfers it to the control unit 100. On the other hand, the first wireless communication unit 120 sends the data transferred from the control unit 100 to the other device. The second wireless communication unit 130 performs wireless communication with the base station of the wireless communication network 20 based on the second wireless communication standard. The second wireless communication unit 130 sends the data transferred from the control unit 100 to the wireless communication network 20, and receives the data sent from the wireless communication network 20, and transfers the received data to the control unit 100.

[0046] The storage unit 140 includes a volatile storage unit 142 and a non-volatile storage unit 144. The volatile storage unit 142 is, for example, a RAM (Random Access Memory). The volatile storage unit 142 is used by the control unit 100 as a working area when executing programs. The non-volatile storage unit 144 is, for example, a flash ROM (Read Only Memory). Various programs and various data are stored in the non-volatile storage unit 144. As a specific example of the programs stored in the non-volatile storage unit 144, there can be listed a kernel program that enables the control unit 100 to implement an OS (Operating System), various application programs such as a web browser or an email client, and a procurement assistance program 144a that enables the control unit 100 to execute an unlocking process highlighting the features of the present invention.

[0047] Among the programs stored in the non-volatile storage unit 144, the programs other than the procurement assistance program 144a are not particularly different from the programs installed in a general smartphone. For example, if the power supply of the wireless communication terminal 10 is turned on (the illustration is omitted in Figure 3 ), the control unit 100 reads the kernel program from the non-volatile storage unit 144 to the volatile storage unit 142 and starts executing the kernel program. The control unit 100 that operates according to the kernel program to implement the OS state can execute the procurement assistance program 144a or other application programs according to the instructions input by operating the operation unit 110b, and perform the work control of the components other than the control unit 100 such as the UI unit 110. In this way, since the programs other than the procurement assistance program 144a are not particularly different from the programs installed in a general smartphone, detailed descriptions are omitted, and the following will focus on the procurement assistance program 144a.

[0048] The control unit 100 that instructs the execution of the procurement assistance program 144a by operating the operation unit 110b reads the procurement assistance program 144a from the non-volatile storage unit 144 to the volatile storage unit 142 and starts executing the procurement assistance program 144a. The control unit 100 operating in accordance with the procurement assistance program 144a causes Figure 4 the screen G01 shown in the figure to be displayed on the display unit 110a.

[0049] The virtual operation element B01 in the screen G01 is a virtual operation element for retrieving the installation location of the vending machine 30. If a touch operation is performed on the virtual operation element B01, the control unit 100 transmits the location information indicating the current location of the wireless communication terminal 10 to the server device 40. In addition, the current location of the wireless communication terminal 10 can be determined using existing technologies such as GPS.

[0050] The server device 40 refers to the vending machine management DB to determine the vending machines 30 installed within a specified range (for example, a range with a radius of 100 meters) centered on the location indicated by the location information received from the wireless communication terminal 10. Then, the server device 40 returns the location information indicating the installation locations of the determined vending machines 30 to the wireless communication terminal 10.

[0051] If the location information returned from the server device 40 is received, the control unit 100 Figure 5 displays the retrieved result screen G02 shown in the figure on the display unit 110a. The image of the retrieved result screen GO2 is an image obtained by plotting an icon indicating the current location (a star icon in Figure 5 ) and an icon corresponding to the vending machine 30 (a black circle icon in Figure 5 ) on the map image of the above-mentioned specified range. The user visually confirming the retrieved result screen G02 can refer to the information displayed on the retrieved result screen G02 and go to the installation location of the nearest vending machine 30.

[0052] If a touch operation is performed on the virtual operation element B02 in the screen G01, the control unit 100 changes the display image of the display unit 110a to Figure 6 the settlement method selection screen GO3 shown in the figure. The settlement method selection screen GO3 is a screen for enabling the user to select the settlement method (such as a credit card) used in the settlement of virtual coins for purchasing goods. If a settlement method is selected by operating the operation unit 110b, the control unit 100 writes the information indicating the selected settlement method into the volatile storage unit 142 and changes the display image of the display unit 110a to the screen G01.

[0053] The captured image taken by the imaging unit 110c is displayed in the area A01 of the screen G01. The user of the wireless communication terminal 10 brings the wireless communication terminal 10 close to the vicinity of the outlet 34 of the vending machine 30 in such a way that the matrix-type two-dimensional code corresponding to the identification of the vending machine 30 is entirely displayed in the area A01, and at the same time adjusts the posture to capture an image of the matrix-type two-dimensional code. The control unit 100 obtains the identification of the vending machine 30 by analyzing the captured image.

[0054] If the identification of the vending machine 30 is obtained, the control unit 100 starts the unlocking process. Figure 7 It is a flowchart showing the process of the unlocking process. As Figure 7 shown, the control unit 100 first sends the identification obtained by the above method and the information indicating the settlement method selected in the settlement method selection screen G03 to the server device 40 through the second wireless communication unit 130 (step SA100).

[0055] If the server device 40 receives the identification sent from the wireless communication terminal 10 and the information indicating the settlement method, it refers to the stored content of the vending machine management DB, issues a security code corresponding to the identification, and issues virtual currency for purchasing goods, and settles the purchase price of the goods by the settlement method indicated by the above received information. Then, the server device 40 returns the issued security code and virtual currency to the sender of the above identification.

[0056] If the control unit 100 receives the security code and virtual currency returned from the server device 40, it sends the received security code and virtual currency to the vending machine 30 through the first wireless communication unit 120 (step SA110).

[0057] If the vending machine 30 receives the security code and virtual currency sent from the wireless communication terminal 10, it lifts the sales ban on the goods. Thus, it is possible to purchase the goods sold by the vending machine 30 (in this embodiment, execute the capsule toy). If the user of the wireless communication terminal 10 has completed the purchase of goods, the vending machine 30 returns to the locked state again.

[0058] As described above, according to the first embodiment, it is possible to remotely manage the sale of goods by vending machines by issuing security codes. For example, after the total purchase price of goods reaches a predetermined upper limit value within a specified period (for example, one month), new security codes are not issued during that period, thereby preventing excessive payment for the capsule toy machine.

[0059] The first embodiment of the present invention has been described above. Of course, the following modifications can be made to this embodiment.

[0060] (1) The vending machine 30 in the above-described embodiment is a "gacha machine", but of course it can also be a vending machine for soft drinks, alcoholic beverages, food, books, cigarettes, etc. Additionally, it can also be a virtual vending machine such as a "gacha machine" in a computer game. That is to say, the goods sold through the vending machine 30 are not limited to physical items such as toys, but can also be items in a game, data such as game character data, etc. Further, in the above-described embodiment, virtual currency is involved in the settlement of the sales price of the goods, but virtual currency may not be involved, and like an existing gacha machine, only real currency is used for settlement. In this case, only the security code needs to be returned to the server device 40.

[0061] (2) In the vending machine 30 of the above-described embodiment, a printed matter 36 is pasted, and a matrix-type two-dimensional code corresponding to the identifier uniquely representing the vending machine 30 is printed on the printed matter 36. However, a printed matter on which a string representing the identifier is printed may also be pasted. This is because the above-described identifier can be obtained by photographing the printed matter on which the string representing the identifier is printed using the photographing unit 110c and performing character recognition on the photographed image. Additionally, a user who has visually confirmed the string printed on the above-described printed matter may operate the operation unit 110b (for example, operate a virtual keyboard) to input the characters constituting the string one by one. In this case, the photographing unit 110c can be omitted.

[0062] (3) In the above-described embodiment, the wireless communication system 1 including the wireless communication terminal 10 has been described, but the wireless communication terminal 10 can also be manufactured or sold individually. Additionally, the wireless communication terminal 10 in the above-described embodiment is a smartphone, but it can also be a tablet terminal, a notebook personal computer, or a wearable computer, etc.

[0063] In summary, it is only necessary to provide a wireless communication terminal, which is characterized by including a control unit, a first wireless communication unit that performs short-range wireless communication according to a first wireless communication standard, and a second wireless communication unit that communicates according to a second wireless communication standard different from the first wireless communication standard. The vending machine performs short-range wireless communication with other devices according to the first wireless communication standard and prohibits the sale of goods until a security code for lifting the embargo on the goods is received. The server device issues the security code upon receiving, through communication according to the second wireless communication standard, an identifier attached to the vending machine for uniquely identifying the vending machine, and returns it to the source of the identifier transmission. The control unit transmits, upon input of the identifier, the input identifier to the server device through the second wireless communication unit, receives the security code returned from the server device through the second wireless communication unit, and transmits the received security code to the vending machine through the first wireless communication unit.

[0064] (4) In the above-described embodiment, the procurement assistance program 144a is pre-installed in the non-volatile storage unit 144 of the wireless communication terminal 10, and this procurement assistance program 144a causes the control unit 100 to execute the unlocking process that highlights the features of the present invention. However, the procurement assistance program 144a can also be manufactured or sold individually. In summary, it is only necessary to provide a program, which is characterized by causing a computer to execute the following first step and second step. The vending machine performs short-range wireless communication with other devices according to a first wireless communication standard and prohibits the sale of goods until a security code for lifting the embargo on the goods is received. The server device issues the security code upon receiving, through communication according to a second wireless communication standard different from the first wireless communication standard, the identifier, and returns it to the source of the identifier transmission. In the first step, upon input of an identifier attached to the vending machine for uniquely identifying the vending machine, the input identifier is transmitted to the server device according to the second wireless communication standard. In the second step, the security code returned from the server device is received, and the received security code is transmitted to the vending machine according to the first wireless communication standard.

[0065] This is because the above program can be installed in an existing wireless communication terminal, and the control unit (computer) of the wireless communication terminal can be operated according to the program, so that the wireless communication terminal functions as the wireless communication terminal 10 in the above-described embodiment. In addition, as a specific providing method of the above program, a method of publishing by writing on a computer-readable recording medium such as a flash ROM and a method of publishing by downloading through an electric communication line such as the Internet are considered.

[0066] <Second Embodiment>

[0067] According to the communication system, communication method, and sensor unit according to the second embodiment of the present invention, the sales lock of a vending machine such as a gashapon machine can be released by the terminal device of a user who has completed settlement, so that a product can be purchased. In particular, the sensor unit can be additionally assembled on an existing vending machine. In this case, the vending machine can be unlocked by the user's terminal device to purchase a product. In addition, in a digital virtual vending machine, a function equivalent to that of the sensor unit can be additionally assembled by a plug-in. This will be described in detail below.

[0068] In Figure 8 the structure of the communication system according to the second embodiment of the present invention is shown and described.

[0069] As Figure 8 shown, the communication system according to the present embodiment is composed of a first server device 200 composed of a database server device and the like, a second server device 300 equipped with a settlement method, a third server device 400, vending machines 800A to 800C... (hereinafter, the symbol 800 is used when collectively referred to), sensor units 500A to 500C... (hereinafter, the symbol 500 is used when collectively referred to) assembled on these vending machines 800A to 800C..., a user's terminal device 600, and a virtual server device group 700 that realizes a hash pool. Sometimes a communication system is realized by arbitrarily combining a part of these structures. As the user's terminal device 600, various devices such as a smart phone, a tablet terminal, and a notebook personal computer can be adopted.

[0070] Hereinafter, with reference to Figure 9 the schematic diagram, the processing sequence of the wireless communication system will be described. This also corresponds to the communication method according to the present embodiment.

[0071] The user's terminal device 600 captures a QR code attached to the vending machine 800, obtains the ID of the vending machine, obtains the position information at the time of capture, and sends this information to the first server device 200, thereby requesting to obtain encrypted data related to unlocking the vending machine 800. The first server device 200 determines whether the obtained vending machine ID and position information match the recorded information. If they match, the first server device 200 sends product information related to the product processed by the vending machine to the terminal device 600. In the user's terminal device 600, these product information are displayed in a selectable manner, the desired product is determined, and settlement procedures are performed.

[0072] A settlement request from the user's terminal device 600 is sent to the second server device 300 for implementing the selected settlement method. After the settlement process is executed on the second server device 300, a settlement token is sent to the first server device 200. If the second server device 300 receives the settlement token, it generates a hash value obtained by hashing the sensor information using a hash function and sends it to the user's terminal device 600. If the user's terminal device 600 receives the hash value, it sends a retrieval request based on the received hash value to the virtual server device group 700 that implements the hash pool. If the virtual server device group 700 accepts the retrieval request, it confirms whether there is a hash value. If there is, it sends a public key to the third server device 400. The third server device 400 generates an unlocking code, encrypts the unlocking code using the public key, and sends the encrypted data to the terminal device 600.

[0073] Then, the terminal device 600 performs wireless communication with the sensor unit 500 of the vending machine 800 via wireless means such as Bluetooth (registered trademark), and sends the encrypted data to the sensor unit 500, thereby requesting the vending machine to unlock. On the vending machine side, the sensor unit 500 determines whether the encrypted data is correct. If it is determined to be correct, the lock of the vending machine 800 is released. In this way, the user can obtain goods from the vending machine 800.

[0074] Here, Figure 10 the structure of the first server device is shown and described. The first server device is, for example, equivalent to a database server device or the like.

[0075] As Figure 10 shown, the first server device 200 has a control unit 201, a communication unit 202, and a storage unit 203. The control unit 201, the communication unit 202, and the storage unit 203 are connected via a bus in a communicable manner. In addition to these structures, it may also have an input unit such as a keyboard and a mouse, and a display unit such as a liquid crystal display for various displays.

[0076] The communication unit 202 is implemented, for example, by a network interface card (NIC; Network Interface Card) or the like, and is a communication interface that is connected to a communication network 900 such as the Internet via wired or wireless means and communicates with the terminal device 600 and the like.

[0077] Furthermore, the storage unit 203 is implemented by, for example, semiconductor memory elements such as RAM (Random Access Memory) and flash memory, hard disk drives (HDDs; Hard Disc Drives), or optical disc devices, and pre-stores programs to be executed by the control unit 201. Additionally, the storage unit 203 includes a vending machine information storage unit 204, a product information storage unit 205, and a sensor information storage unit 206.

[0078] More specifically, the vending machine information storage unit 204 stores, in an associated manner, the vending machine ID, location information related to the installation location of the vending machine, and product IDs of products to be processed. The product information storage unit 205 stores, in a corresponding manner, product IDs and detailed information related to the products (model number, unit price, quantity, etc.). Moreover, the sensor information storage unit 206 stores, in an associated manner, the sensor ID of the sensor unit 500, location information (positioning), the vending machine ID of the vending machine to which it is attached, etc.

[0079] The control unit 201 is implemented by a CPU (Central Processing Unit), MPU (Micro Processing Unit), etc., and functions as a transmission unit 201a, a reception unit 201b, a product information determination unit 201c, and a hash generation unit 201d by executing the programs stored in the storage unit 203. In addition, the control unit 201 may be constituted by an integrated circuit such as an ASIC (Application-Specific Integrated Circuit) or an FPGA (Field Programmable Array).

[0080] The transmission unit 201a transmits, for example, the product information in the product information storage unit 205 or the hash value generated by the hash generation unit 201d to the user's terminal device 600 via the communication unit 202. The reception unit 201b receives, via the communication unit 202, the vending machine ID, location information, settlement tokens sent from the second server device 300, etc., sent from the user's terminal device 600. Moreover, the product information determination unit 201c determines the product ID of the product to be processed with reference to the vending machine information storage unit 204 based on the vending machine ID sent from the user's terminal device 600, and determines the product information with reference to the product information storage unit 205 based on the product ID. The hash generation unit 201d hashes the sensor information stored in the sensor information storage unit 206 using a hash function to generate a hash value.

[0081] In Figure 11 the structure of the second server device is shown and described.

[0082] As Figure 11As shown, the second server device 300 includes a control unit 301, a communication unit 302, and a storage unit 303. The control unit 301, the communication unit 302, and the storage unit 203 are connected via a bus in a communicable manner. In addition to these structures, it may also include an input unit such as a keyboard and a mouse, and a display unit such as a liquid crystal display for various displays.

[0083] The communication unit 302 is implemented, for example, by a NIC or the like, and is a communication interface that is connected to a communication network 900 such as the Internet by wire or wirelessly and communicates with the terminal device 600 and the like. The storage unit 303 is implemented, for example, by a semiconductor memory element such as a RAM or a flash memory, an HDD, or an optical disc device, and pre-stores a program executed by the control unit 301. Moreover, the storage unit 303 stores settlement information. The control unit 301 is implemented by a CPU, an MPU, or the like, and functions as a transmission unit 301a, a reception unit 301b, and a settlement processing unit 301c by executing the program stored in the storage unit 303. The control unit 301 may also be constituted by an integrated circuit such as an ASIC or an FPGA.

[0084] The transmission unit 301a transmits, for example, a settlement token to the first server device 200 via the communication unit 302. The reception unit 301b receives a settlement request transmitted from the user's terminal device 600 via the communication unit 202. The settlement processing unit 301c performs settlement processing based on the settlement request. The result of the settlement processing is stored in the storage unit 303 as settlement information.

[0085] In Figure 12 the structure of the third server device is shown and described.

[0086] As Figure 12 shown, the third server device 400 includes a control unit 401, a communication unit 402, and a storage unit 403. The control unit 401, the communication unit 402, and the storage unit 403 are connected via a bus in a communicable manner. In addition to these structures, it may also include an input unit such as a keyboard and a mouse, and a display unit such as a liquid crystal display for various displays.

[0087] The communication unit 402 is implemented, for example, by a NIC or the like, and is a communication interface that is connected to a communication network 900 such as the Internet by wire or wirelessly and communicates with the terminal device 600 and the like. The storage unit 403 is implemented, for example, by a semiconductor memory element such as a RAM or a flash memory, an HDD, or an optical disc device, and pre-stores a program executed by the control unit 401. The control unit 401 is implemented by a CPU, an MPU, or the like, and functions as a transmission unit 401a, a reception unit 401b, a code generation unit 401c, and an encryption processing unit 401d by executing the program in the storage unit 403. The control unit 401 may also be constituted by an integrated circuit such as an ASIC or an FPGA.

[0088] The transmitting unit 401a transmits, for example, the encrypted data generated by the encryption processing unit 401d to the user's terminal device 600 via the communication unit 402. The receiving unit 401b receives the public key transmitted from the virtual server device group 700 via the communication unit 402. The code generation unit 401c generates an unlocking code. Further, the encryption processing unit 401d encrypts the unlocking code with the public key to generate encrypted data.

[0089] In Figure 13 the structure of the terminal device is shown and described.

[0090] As Figure 13 shown, the terminal device 600 includes a control unit 601, a communication unit 602, an operation unit 603, a display unit 604, a photographing unit 605, and a storage unit 606. Each of the units 601 to 606 is connected via a control bus so as to be able to communicate with each other. The communication unit 602 is implemented by, for example, a NIC or the like, and is a communication interface that communicates with a communication network 4 such as the Internet by wire or wirelessly and communicates with the first server device 200 or the like.

[0091] The operation unit 603 is implemented by a mouse, a keyboard, or the like, and accepts various operation inputs from the user. The display unit 604 is implemented by a liquid crystal display or the like, and performs various displays. Further, the operation unit 603 and the display unit 604 may be integrally formed as a touch panel. The photographing unit 605 photographs a two-dimensional code or the like attached to the vending machine 800. The storage unit 606 is implemented by, for example, a semiconductor memory element such as a RAM or a flash memory, an HDD, or an optical disk device, and stores programs executed by the control unit 601.

[0092] The control unit 601 is implemented by a CPU, an MPU, or the like, and functions as a transmitting unit 601a, a receiving unit 601b, a code analysis unit 601c, a position information acquisition unit 601d, and a request unit 601e by executing programs stored in the storage unit 606. Further, the control unit 11 may be configured by an integrated circuit such as an ASIC or an FPGA.

[0093] More specifically, the transmitting unit 601a transmits the vending machine ID obtained by photographing the QR code attached to the vending machine 800 by the photographing unit 605 and further analyzed by the code analysis unit 601c, and the position information obtained by the position information acquisition unit 601d to the first server device 200 via the communication unit 602. The receiving unit 601b receives encrypted data and the like transmitted from the third server device 400 via the communication unit 602. The code analysis unit 601c analyzes the QR code photographed by the photographing unit 605 to obtain the vending machine ID. The position information acquisition unit 601d acquires the position information of the terminal device 600 (or the vending machine 800) at the photographing time by means of GPS (Global Positioning System), BLE (Bluetooth (registered trademark) Low Energy), etc. Moreover, the request unit 601e makes a request related to unlocking to the sensor unit 500 according to the operation of the operation unit 603.

[0094] In Figure 14 FIG. shows and describes the structure of the sensor unit. The sensor unit is a module assembled to the vending machine 800.

[0095] As Figure 14 shown, the sensor unit 500 assembled to the vending machine 800 includes a control unit 501 that controls the overall operation, a communication unit 502, and a storage unit 503. The communication unit 502 is, for example, a communication interface that communicates with a communication network 4 such as the Internet by wire or wirelessly, or communicates with the user's terminal device 600 or the first server device 200 by short-range wireless communication such as Bluetooth (registered trademark). The storage unit 503 is implemented by, for example, semiconductor memory elements such as RAM and flash memory, and stores programs executed by the control unit 501. Moreover, the storage unit 503 stores generated codes, encrypted encrypted data, generated hashes, etc.

[0096] The control unit 501 is implemented by a CPU or the like, and by executing the program stored in the storage unit 503, functions as a transmitting unit 501a, a receiving unit 501b, a code generation unit 501c, an encryption processing unit 501d, a hash generation unit 501e, an unlocking unit 501f, and a management unit 501g.

[0097] The transmitting unit 501a transmits the generated public key to the virtual server device group 700 that implements the hash pool via the communication unit 502. The receiving unit 501b receives the encrypted data transmitted from the user's terminal device 600 via the communication unit 502. The code generation unit 501c generates a variable unlocking code. Here, the variable means that the code generated according to a specified algorithm changes each time.

[0098] The encryption processing unit 501d generates a public key and a private key according to, for example, the public-key cryptography method, and associates the hash value described later with the public key as needed. Moreover, as needed, the change amount unlocking code is encrypted with the public key. Here, generally, in the public-key cryptography method, the public key is made public, the receiver holds the private key paired with the public key, and the received content is decoded using the private key as needed. However, in this embodiment, the sensor unit 500 is both a transmitter and a receiver. In addition, there are three algorithms in the public-key cryptography method: a key generation algorithm, an encryption algorithm, and a decoding algorithm. Key generation, encryption, and decoding are performed based on these algorithms.

[0099] More specifically, in the key generation algorithm, a public key-private key pair is generated and output. In the encryption algorithm, bit strings called the public key and the plaintext (in this example, the change amount unlocking code) are input, and a ciphertext (encrypted data) is generated and output. Then, in the decoding algorithm, the private key and the ciphertext (encrypted data) are input, and the plaintext (in this example, the change amount unlocking code) is generated and output.

[0100] The hash generation unit 501e hashes the sensor information (sensor ID, location information, etc.) through a hash function and outputs a hash value. The unlocking unit 501f determines the correctness of the encrypted data sent from the user's terminal device 600, and unlocks (unlocks) when the encrypted data matches the held encrypted data (or the change amount unlocking code). Here, the unlocking refers to, for example, when the vending machine is a capsule toy machine, unlocking the drive system related to the product output and outputting the product. The management unit 501h stores and manages the public key generated by the encryption processing unit 501d and the hash value generated by the hash generation unit 501e in the storage unit 503 in a corresponding manner.

[0101] Hereinafter, Figure 15 With reference to the flowchart, the processing sequence of the wireless communication system will be described in detail. This also corresponds to the communication method according to this embodiment.

[0102] The user's terminal device 600 captures the QR code attached to the vending machine 800 through the imaging unit 605, and the code analysis unit 601c analyzes the image to obtain the vending machine ID of the vending machine (S1). The location information acquisition unit 601d acquires the location information at the time of capture through GPS, GLE, etc. (S2). The transmission unit 601a sends the vending machine ID and the location information to the first server device via the communication unit 602, thereby requesting to obtain the encrypted data related to unlocking the vending machine 800 (S3).

[0103] The receiving unit 201b of the first server device 200 receives these vending machine IDs and location information via the communication unit 202 (S4). The product information determination unit 201c determines whether the acquired vending machine IDs and location information match the information recorded in the vending machine information storage unit 204. If they match, the product information related to the products handled by the vending machine is read from the product information storage unit 205 (S5). The sending unit 201a sends the product information to the user's terminal device 600 in the form of HTML or the like via the communication unit 202 (S6).

[0104] In the user's terminal device 600, if the receiving unit 601b receives the product information via the communication unit 602 (S7), the product information and the settlement method are displayed on the display unit 604 in a selectable manner. If the desired product is determined by operating the operation unit 603, the request unit 601e sends a settlement request to the second server device 300 via the communication unit 602 (S8).

[0105] If the receiving unit 301b of the second server device 300 receives the settlement request via the communication unit 302 (S9), the settlement processing unit 301c performs the settlement processing related to the electronic settlement (S10). The sending unit 301a sends a settlement token proving the end of the electronic settlement to the first server device 200 via the communication unit 302 (S11).

[0106] If the receiving unit 201b of the first server device 200 receives the settlement token via the communication unit 202 (S12), the hash generation unit 201d generates a hash value obtained by hashing the sensor information (such as sensor ID or sensor location) stored in the sensor information storage unit 206 using a hash function, and the sending unit 201a sends it to the user's terminal device 600 via the communication unit 202 (S13). In addition, the hash function used for hashing in the hash generation unit 201d is the same as the hash function used in the hash generation unit 501e of the sensor unit 500, and the sensor information used as the hashing target is also the same, so the same hash value as that on the sensor unit 500 side can be generated.

[0107] If the receiving unit 601b of the user's terminal device 600 receives the hash value via the communication unit 602 (S14), the request unit 601e sends a retrieval request based on the received hash value to the virtual server device group 700 that implements the hash pool via the communication unit 602 (SS15). If the virtual server device group 700 accepts this retrieval request, it confirms whether there is a hash value. If the hash value exists, it sends the public key to the third server device 400 (S16).

[0108] If the receiving unit 401b of the third server device 400 receives the public key (S17) via the communication unit 402, the code generation unit 401c generates a variable unlocking code, and the encryption processing unit 401d encrypts the unlocking code with the public key based on the encryption logic. The sending unit 401a sends the encrypted data to the terminal device 600 via the communication unit 402 (S18). In addition, the encryption logic used for encryption processing in the third server device 400 is the same as the encryption logic used in the sensor unit 500. Also, the code generation logic used in the code generation unit 401c is the same as the logic used in the sensor unit 500.

[0109] If the receiving unit 601b of the user's terminal device 600 receives the encrypted data (S19) via the communication unit 602, the requesting unit 601e sends the encrypted data to the sensor unit 500 installed in the vending machine 800 via the communication unit 602 by short-range wireless communication such as Bluetooth (registered trademark), thereby requesting sensor unlocking (S20).

[0110] On the side of the vending machine 800, if the sending unit 501a of the sensor unit 500 receives the encrypted data (S21) via the communication unit 502, the unlocking unit 501f determines the correctness of the encrypted data. If the encrypted data is determined to be correct, the locking of the vending machine 800 is released (S22). In this way, the user obtains a product from the vending machine 800.

[0111] In addition, for the determination of the correctness of the encrypted data, in the sensor unit 500, it is also possible to generate a variable unlocking code by the code generation unit 501c, and compare the encrypted data obtained by encrypting the variable unlocking code with the received encrypted data by the encryption processing unit 501d using the encryption logic. Or it is also possible to decode the received encrypted data through the decoding logic of the encryption processing unit 501d to obtain the variable unlocking code, and compare it with the variable unlocking code generated by the code generation unit 501c for determination.

[0112] As described above, according to the second embodiment, only the hash value and the encrypted data generated based on the sensor information are output to the user's terminal device, so that the leakage of the variable unlocking code to the Web can be prevented, and a more secure transaction is achieved.

[0113] In addition, in the first server device composed of a database server or the like and the third server device that generates encrypted data, the same logic as that of the sensor unit is used when generating the hash and the encrypted data. Therefore, it is not necessary to transmit and receive the variable unlocking code or the hash, and in this regard, a more secure transaction is also achieved.

[0114] In addition, the encrypted data is generated by a third server device that receives the public key from the hash pool and uses the public key to decrypt the change amount unlocking code, so that the leakage of the encrypted data can be prevented. That is, the advantage in suppressing the encrypted data leakage event can be guaranteed.

[0115] Moreover, the hash value is generated by the first server device and sent to the user's terminal device, and the encrypted data is generated by the third server device and sent to the user's terminal device, etc. By decentralizing information, the attack target is expanded, so it also helps to suppress attacks.

[0116] Moreover, since the hash pool manages the public key, in the event of an attack, the area can be immediately transferred for reconstruction, so the public key can be managed more securely.

[0117] Moreover, since the encrypted data generated by the third server device is updated in a short time, even in the event of an attack, the probability of its being deciphered is zero in probability.

[0118] In addition, since it is based on hash management, it can be said that the larger the system, the higher the security in probability.

[0119] Even assuming that the sensor unit installed in the vending machine is physically attacked, only the vending machine is damaged and it will not affect other parts, so it can be processed immediately.

[0120] The second embodiment of the present invention has been described above, but this embodiment is not limited thereto, and various improvements and changes can be made. For example, the sensor units installed in each vending machine can of course form a sensor network in accordance with a specified unit, and the sensor units with sufficient remaining power uniformly upload the public key, etc. to the hash pool to achieve power saving.

[0121] Description of Reference Numerals

[0122] 1... Wireless communication system, 10... Wireless communication terminal, 20... Wireless communication network, 30... Vending machine, 40... Server device, 100... Control unit, 110... UI unit, 110a... Display unit, 110b... Operation unit, 110c... Photographing unit, 120... First wireless communication unit, 130... Second wireless communication unit, 140... Storage unit, 142... Volatile storage unit, 144... Non-volatile storage unit, 144a... Purchase assistance program, 150... Bus, 200... First server device, 300... Second server device, 400... Third server device, 500... Sensor unit, 600... Terminal device, 700... Virtual server device group, 800... Vending machine.

Claims

1. A communication method, wherein, This communication method has a first step to a ninth step. In the first step, the terminal device captures the QR code attached to the vending machine to obtain the vending machine ID, obtains location information, and sends the vending machine ID and the location information to the first server device, thereby requesting to obtain encrypted data related to unlocking the vending machine. In the second step, the first server device determines whether the vending machine ID and location information match the stored information. If they match, the first server device sends product information to the terminal device. In the third step, the second server device receives a settlement request from the terminal device, performs settlement processing, and sends a settlement token to the first server device. In the fourth step, the first server device receives the settlement token, generates a hash value obtained by hashing sensor information through a hash function, and sends it to the terminal device. In the fifth step, the terminal device makes a retrieval request to the virtual server device group that implements the hash pool based on the hash value. In the sixth step, the virtual server device group receives the retrieval request, confirms whether there is a hash value. If there is a hash value, the virtual server device group sends a public key to the third server device. In the seventh step, the third server device generates an unlocking code, encrypts the unlocking code with the public key, and sends the encrypted data to the terminal device. In the eighth step, the terminal device requests the unlocking of the vending machine by sending the encrypted data to the sensor unit of the vending machine. In the ninth step, the sensor unit determines whether the encrypted data is correct. If it is determined to be correct, the sensor unit unlocks the vending machine.

2. The communication method according to claim 1, wherein in the ninth step, in the sensor unit, an unlocking code is generated, the unlocking code is encrypted, and the encrypted data is compared with the encrypted data sent from the terminal device to determine whether the encrypted data is correct.

3. The communication method according to claim 1 or 2, wherein the unlocking code refers to a variable unlocking code.

4. A communication system, wherein, This communication system includes: A terminal device that captures the QR code attached to the vending machine to obtain the vending machine ID, obtains location information at the time of capture, sends the vending machine ID and the location information to the first server device, makes a retrieval request to the virtual server device group that implements the hash pool based on the hash value sent from the first server device, and requests the unlocking of the vending machine by sending the encrypted data sent from the third server device to the sensor unit of the vending machine. A first server device that determines whether the vending machine ID and location information match the stored information. If they match, the first server device sends product information to the terminal device. If the first server device receives a settlement token, the first server device generates the hash value obtained by hashing the stored sensor information through a hash function and sends it to the terminal device. A group of virtual server devices that, when receiving a retrieval request based on the hash value from the terminal device, confirm the existence of the hash value and, if the hash value exists, send a public key to a third server device; A third server device that generates an unlocking code, encrypts the unlocking code with the public key, and sends the encrypted data to the terminal device; And A sensor unit that generates the public key and sends it to the group of virtual server devices, and if the encrypted data is received from the terminal device, determines the correctness of the encrypted data and, if it is determined to be correct, unlocks the vending machine.

5. The communication system according to claim 4, wherein In the sensor unit, an unlocking code is generated, the unlocking code is encrypted, and the encrypted data is compared with the encrypted data sent from the terminal device to thereby determine the correctness of the encrypted data.

6. The communication system according to claim 4 or 5, wherein The unlocking code refers to a variable unlocking code.

7. A sensor unit in a communication system as claimed in claim 4, wherein, The sensor unit is assembled in a vending machine and unlocks the vending machine according to the encrypted data sent from a terminal device, and includes: An encryption processing unit that generates a public key and a private key and encrypts an unlocking code with the public key; A hash generation unit that hashes sensor information including at least a sensor ID and sensor location information through a hash function and outputs a hash value; A management unit that stores and manages at least the public key generated by the encryption processing unit and the hash value generated by the hash generation unit in a storage unit in a corresponding manner; and An unlocking unit that determines the correctness of the encrypted data sent from the terminal device and unlocks the vending machine if the encrypted data matches the encrypted data generated by the encryption processing unit.

Images