Payment system, issuing machine, adjustment machine and payment device

Abstract

To provide a new technology regarding payment of products or services within a facility, which is a payment system in the specific facility.SOLUTION: A payment system 100 includes an issuing machine 1 on an entrance side of a commercial facility 200, a terminal device 2 in the commercial facility 200, and an adjustment machine 3 on an exit side of the commercial facility 200. The issuing machine 1 stores an ID of a user in association with payment information indicating a payment method when a valid payment method is input, and cancels the payment method when an invalid payment method is input. The terminal device 2 reads the ID of the user, identifies a product, and stores purchase information on the identified product in association with the ID if payment is possible using the payment method of the payment information associated with the ID. The adjustment machine 3 reads the ID of the user, acquires an adjustment amount based on the purchase information associated with the ID, and pays the adjustment amount using the payment method of the payment information associated with the ID.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The technical field disclosed in this specification relates to a payment system, an issuing machine, a settlement machine, and a payment device within a specific facility. [Background technology]

[0002] In various facilities such as shopping malls, amusement parks, and sports clubs, there are multiple stores such as retail stores and restaurants within the facility, and users who enter the facility can purchase goods or services at each store within the facility. Conventionally, in such facilities, a payment system has been put into practical use that allows users to settle the fees for use at each store within the facility all at once when they leave the facility.

[0003] An example of a document disclosing technology related to the aforementioned payment system is Patent Document 1. Patent Document 1 discloses technology in which a wristband with a unique barcode recorded thereon is loaned to a user upon entry to a facility, a barcode reader is provided on equipment in each store within the facility, and when a user uses a certain facility, the barcode on the wristband loaned to the user is read using the barcode reader provided on the facility, a data processing device calculates the usage fee and stores it as user data, and when the user leaves the facility, a payment machine is used to settle the payment based on the barcode and the user data. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Japanese Patent Application Publication No. 7-134784 Summary of the Invention [Problem to be solved by the invention]

[0005] In recent years, there has been an increasing demand for unmanned facilities. As described above, unmanned payment can be achieved by consolidating and managing the facility usage fees for each user in a data processing device, and having the user operate a payment machine to complete payment when leaving the facility. However, unmanned payment increases the risk of theft or non-payment, such as eating and drinking without paying. Therefore, there is room for improvement in the payment system in certain facilities. [Means for solving the problem]

[0006] A payment system devised to solve the above-mentioned problems comprises an issuing machine arranged at the entrance side of a specific facility, a settlement machine arranged at the exit side of the specific facility, and a terminal device arranged at the specific facility, wherein the issuing machine executes a payment method input process for inputting a payment method, and the payment methods that can be input in the payment method input process include a post-pay payment method and a pre-paid payment method, and when a valid payment method is input in the payment method input process, the issuing machine executes a registration process for storing a user's identification information in association with payment information indicating the payment method input in the payment method input process, and when an invalid payment method is input in the payment method input process, the issuing machine executes a cancellation process for canceling the input payment method, and the terminal device The device executes a terminal reading process to read the identification information, a specification process to identify a product to be provided to a user, and a provisional payment process to store purchase information based on the product identified in the specification process in association with the read identification information if the product identified in the specification process can be paid for using the payment method indicated in the payment information associated with the identification information read in the terminal reading process, and the settlement machine executes a settlement reading process to read the identification information, an acquisition process to acquire a settlement amount based on the purchase information associated with the identification information read in the settlement reading process, and a final payment process to settle the settlement amount acquired in the acquisition process using the payment method indicated in the payment information associated with the identification information read in the settlement reading process.

[0007] According to the payment system described in this specification, the issuing machine at the entrance of the facility accepts input of a payment method in advance, and when a valid payment method is input, the user's identification information is stored in association with the payment information indicating that payment method. Then, the terminal device of the store or the like in the facility accepts purchases of products in the facility to the extent that payment can be made based on that payment information, and stores purchase information based on the provided products in association with that identification information. Furthermore, the settlement machine at the exit of the facility automatically settles the settlement amount based on the purchase information associated with that identification information using the payment method indicated in the payment information associated with that identification information. As a result, if payment cannot be made using the payment method entered in advance, the product cannot be purchased. Furthermore, payment is ensured even after the product is provided at the store or the like in the facility. This reduces the risk of theft or non-payment due to eating and drinking without paying, etc.

[0008] Various devices for implementing the functions of the above-mentioned payment system, control methods thereof, computer programs, and computer-readable recording media storing the computer programs are also novel and useful. Effect of the Invention

[0009] The technology disclosed in this specification provides a payment system within a specific facility, and realizes a new technology related to payment for products or services within the facility. [Brief description of the drawings]

[0010] [Figure 1] FIG. 1 is an explanatory diagram showing a schematic configuration of a commercial facility. [Diagram 2] FIG. 1 is an explanatory diagram showing a schematic configuration of a payment system. [Diagram 3] FIG. 11 is a sequence diagram showing a procedure for issuing a recording medium. [Figure 4] FIG. 11 is an explanatory diagram showing an example of a user DB. [Diagram 5] FIG. 11 is a sequence diagram showing a provisional payment procedure using a recording medium. [Figure 6]FIG. 11 is a sequence diagram showing a return procedure using a recording medium. [Figure 7] FIG. 11 is a sequence diagram showing a payment procedure using a recording medium. [Figure 8] FIG. 11 is a sequence diagram showing a procedure for reissuing a recording medium. [Figure 9] FIG. 11 is a sequence diagram showing a procedure for registering biometric information. [Figure 10] FIG. 11 is an explanatory diagram showing an example of a registration DB. [Figure 11] FIG. 11 is a sequence diagram showing a procedure for using registered biometric information. [Figure 12] 13 is a flowchart showing a procedure for an automatic payment process. [Figure 13] FIG. 11 is an explanatory diagram showing a schematic configuration of a payment system according to a second embodiment. [Figure 14] FIG. 11 is a sequence diagram showing an issuing procedure in a second embodiment. [Figure 15] FIG. 11 is an explanatory diagram showing an example of a user DB. [Figure 16] FIG. 2 is an explanatory diagram showing a schematic configuration of a payment device. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0011] [First form] The payment system according to the first embodiment will be described in detail below with reference to the attached drawings. This embodiment is a system that is applied to a commercial facility and makes payments using a recording medium. In the following, a user who purchases products at the commercial facility is referred to as a "user," and a user who manages the commercial facility's store clerk or the payment system is referred to as an "administrator." In the following description and the attached drawings, the recording medium may be referred to simply as a "medium."

[0012] The payment system 100 of this embodiment is a system applied to a commercial facility 200 that has an entrance and an exit, as shown in Fig. 1. The commercial facility 200 is an example of a specific facility. The commercial facility 200 is composed of, for example, retail stores such as supermarkets and clothing stores, service stores such as sports gyms and medical facilities, and food and beverage stores such as restaurants and coffee shops, and may be a complex facility including multiple stores and vending machines.

[0013] The payment system 100 of this embodiment includes one or more of the following: an issuing machine 1 arranged at the entrance of a commercial facility 200, a terminal device 2 arranged in each store or the like inside the commercial facility 200, a settlement machine 3 arranged at the exit of the commercial facility 200, a server 4, a reissuing machine 5, and a registration machine 6. All of the issuing machines 1, terminal devices 2, settlement machines 3, reissuing machines 5, and registration machines 6 included in the payment system 100 are provided so as to be able to communicate with the server 4. The server 4 may be provided within the commercial facility 200, or may be an external device such as a cloud server on the Internet, or may be configured in cooperation with a plurality of devices.

[0014] The issuing machine 1 accepts input of payment information and issues a recording medium 300, for example, as shown in Fig. 2. The issuing machine 1 comprises an input means 10, an authentication information accepting means 14, and a medium output means 15. The input means 10 has at least one of a card information acquiring means 11, a money information acquiring means 12, and a cash accepting means 13. The terminal device 2 accepts the recording medium 300 and executes provisional payment. The terminal device 2 comprises a medium reading means 21, a user authentication means 22, and a product information acquiring means 23. The settlement machine 3 accepts the recording medium 300 and executes final payment. The settlement machine 3 comprises a medium reading means 31, a user authentication means 32, and a medium collecting means 33.

[0015] In this specification, the process in which actual payment is made, such as the process of sending information to a card company to request payment in a purchase procedure using a credit card, is referred to as "final payment," while the process in which information regarding purchases made within the commercial facility 200 is updated without an actual payment being made is referred to as "provisional payment."

[0016] The recording medium 300 used in the payment system 100 of this embodiment is a medium that has at least a function of recording information and is portable by a user. The recording medium 300 is, for example, a card or wristband including an IC chip, or a mobile terminal. The recording medium 300 may further have a communication function, for example, a function of acquiring location information by communicating with a beacon placed in the commercial facility 200. The recording medium 300 may also simply be a card or wristband to which code information such as a barcode or QR code (registered trademark) having predetermined information recorded therein is attached.

[0017] The server 4 includes a user database (hereinafter referred to as "user DB") 41 and a registration database (hereinafter referred to as "registration DB") 42. The user DB 41 is a database for storing information on users currently using the commercial facility 200. The registration DB 42 is a database for storing information for re-entry into the commercial facility 200.

[0018] The reissue machine 5 reissues the recording medium 300 when it is lost. The reissue machine 5 comprises a user authentication means 51 and a medium output means 52. The reissue machine 5 is an example of an issuing machine. The registration machine 6 accepts an instruction to register biometric information. The registration machine 6 comprises a medium reading means 61 and a biometric information receiving means 62. Note that the reissue function of the reissue machine 5 and the registration function of the registration machine 6 may be performed by the issuing machine 1.

[0019] The card information acquisition means 11, money information acquisition means 12, and cash acceptance means 13 of the issuing machine 1 accept input of payment information from the user. The card information acquisition means 11 acquires card information such as credit cards and debit cards. The money information acquisition means 12 acquires information related to electronic money. The cash acceptance means 13 accepts input of cash.

[0020] The medium output means 15 of the issuing machine 1 and the medium output means 52 of the reissuing machine 5 issue the recording medium 300 on which the necessary information is recorded by ejecting it outside the machine based on the information received from the server 4. The medium reading means 21 of the terminal device 2, the medium reading means 31 of the settlement machine 3, and the medium reading means 61 of the registration machine 6 read the information recorded on the recording medium 300. The medium collection means 33 of the settlement machine 3 collects the recording medium 300 and deletes the information recorded on the collected recording medium 300.

[0021] The authentication information receiving means 14 of the issuing machine 1 receives input of authentication information, which is information for user authentication. The user authentication means 22 of the terminal device 2 and the user authentication means 32 of the settlement machine 3 receive the input of the authentication information, and use the information received by the authentication information receiving means 14 of the issuing machine 1 to authenticate the user.

[0022] Furthermore, the product information acquisition means 23 accepts purchase instructions from the user and identifies the purchased product and the purchase price. The biometric information acceptance means 62 of the registration device 6 accepts input of the user's biometric information and transmits the accepted information to the server 4. The authentication information and biometric information will be described later.

[0023] A user who uses commercial facility 200 enters commercial facility 200 carrying recording medium 300 issued by issuing machine 1, and when purchasing goods or receiving services at commercial facility 200, makes provisional payment at terminal device 2 using recording medium 300, and then makes final payment at settlement machine 3 using recording medium 300 before leaving commercial facility 200. It is preferable that issuing machine 1, terminal device 2, settlement machine 3, reissuing machine 5, and registration machine 6 are further equipped with a display and / or a voice generating device for conveying information to users.

[0024] Next, a procedure for settlement in the settlement system 100 will be described with reference to a sequence diagram. First, a procedure for issuing the recording medium 300 by the issuing machine 1 will be described with reference to the sequence diagram of FIG.

[0025] A user inputs an instruction to issue a recording medium 300 to the issuing machine 1 (A01). In response to the instruction of A01, the issuing machine 1 requests the user to input payment information (A02). The payment information may be, for example, card information, electronic money information, or cash, and the user inputs the payment information using one or more of the card information acquisition means 11, the money information acquisition means 12, and the cash acceptance means 13 (A03). A03 is an example of a payment method input process.

[0026] The issuing machine 1 checks whether the entered payment information is valid (A04). For example, when the issuing machine 1 acquires card information using the card information acquisition means 11, it inquires of the relevant card company, etc., and acquires information on whether the card is within its expiration date, and if it is valid, information on the current available credit limit. The issuing machine 1 may further accept the setting of a provisional available credit limit within the commercial facility 200.

[0027] Furthermore, for example, when the issuing machine 1 receives electronic money information via the money information acquisition means 12, it inquires of the relevant electronic money company and acquires information such as the usage limit or remaining charge amount of the electronic money. Furthermore, when the issuing machine 1 accepts payment information for a prepaid card or charge-type electronic money, it temporarily withdraws the entire amount charged and holds it as a deposit to be used within the commercial facility 200. The issuing machine 1 may also accept a designated amount of the deposit. Furthermore, when the issuing machine 1 accepts input of cash via the cash acceptance means 13, it holds the cash as a deposit and acquires information on the amount deposited.

[0028] The issuing machine 1 determines that the payment information is valid if the information of the presented credit card or post-pay type electronic money is valid. Alternatively, the issuing machine 1 may determine that the payment information is valid if there is a credit limit equal to or greater than a predetermined amount. Furthermore, the issuing machine 1 determines that the payment information is valid when it receives an input of a deposit equal to or greater than a predetermined amount.

[0029] If the input payment information is determined to be valid (alt: [valid]), the valid payment information and the available amount information for that payment information are sent to the server 4 (A11). The available amount is amount information corresponding to the input payment information, i.e., the credit limit of the card or electronic money, or the amount of the deposit.

[0030] When the server 4 receives payment information from the issuing machine 1, it determines an ID, which is identification information for identifying the user of the payment information (A12), and transmits information of the determined ID to the issuing machine 1 (A13). The server 4 associates the determined ID, payment information, and available amount with each other and stores them in the user DB 41 (A14). A14 is an example of a registration process.

[0031] In the user DB41, for example, as shown in Fig. 4, for each ID 410 determined in A12, an issue date and time 411, payment information 412, available amount 413, authentication information 414, and purchase information 415 are associated and stored as one record. The issue date and time 411 is information indicating the date and time when the recording medium 300 was issued. The payment information 412 and available amount 413 are information received from the issuing machine 1 in A11. The authentication information 414 and purchase information 415 will be described later.

[0032] The ID may be determined by the issuing machine 1. In that case, the issuing machine 1 transmits information on the determined ID together with other information to the server 4 at A11, and the server 4 stores the received information in the user DB 41.

[0033] The issuing machine 1 records the ID received from the server 4 at A13 on the recording medium 300 to be issued (A15). Furthermore, the issuing machine 1 inquires of the user whether or not to input authentication information (A16). The authentication information is information for authenticating the user when using the recording medium 300 within the commercial facility 200, and is, for example, the user's biometric information or a password that can be set by the user. If the authentication information is stored, provisional payment or actual payment will not be made unless authentication is successful, as will be described later. Note that in this embodiment, inputting authentication information is optional, and a user who does not wish to input the authentication information can skip inputting the authentication information.

[0034] The authentication information accepting means 14 of the issuing machine 1 can accept, as biometric information, for example, image information showing a part of a living body, such as a face, fingerprint, palm print, iris, or veins, or voiceprint information. The authentication information accepting means 14 of the issuing machine 1 can also accept, as personal identification information, for example, handwritten images such as a password, personal identification number, or signature. The issuing machine 1 accepts input of acceptable authentication information according to the functions possessed by the authentication information accepting means 14.

[0035] When input of information to the authentication information receiving means 14 is accepted (alt: [input present]), the issuing machine 1 acquires the information acquired by the authentication information receiving means 14 as the authentication information of the user (A21), and transmits the ID received in A13 and the acquired authentication information to the server 4 (A22). A21 is an example of an issuing authentication input process. The server 4 stores the received authentication information in the user DB 41 as authentication information 414 corresponding to the received ID (A23). A23 is an example of a registration process.

[0036] The issuing machine 1 of this embodiment may be capable of receiving multiple pieces of authentication information at A21. That is, the server 4 may be capable of storing multiple pieces of authentication information 414 in the user DB 41 in association with one ID 410. The multiple pieces of authentication information 414 may be, for example, multiple pieces of authentication information for authenticating one user, or may be authentication information for multiple users. When multiple pieces of authentication information are received, each device that performs authentication, which will be described later, may determine that authentication is successful if authentication is successful for all of the multiple pieces of authentication information 414 stored, or may determine that authentication is successful if authentication is successful for any one of the multiple pieces of authentication information 414. Also, it may be possible to select which authentication method to use.

[0037] The issuing machine 1 may also require the input of authentication information depending on the type of payment information received. Specifically, the issuing machine 1 may request the input of authentication information when postpaid information such as card information indicating a credit card is received, and may not request the input of authentication information when prepaid information such as cash or a prepaid card is received.

[0038] After sending A21, or if it is decided not to input authentication information, the issuing machine 1 issues the ID by ejecting the recording medium 300 on which the ID was recorded in A15 to the outside of the machine using the medium output means 15 (A31). A31 is an example of an issuing process. The user enters the commercial facility 200 carrying the ejected recording medium 300.

[0039] The issuing machine 1 may also function as an entrance gate. For example, the issuing machine 1 may open the entrance gate after the issued recording medium 300 is taken away from the issuing machine 1. Alternatively, the entrance gate may be opened by having the entrance gate read the recording medium 300 issued by the issuing machine 1. Furthermore, if the recording medium 300 is not taken away even after a predetermined waiting time has elapsed after issuing the recording medium 300, the issuing machine 1 may collect the recording medium 300 and not open the entrance gate. Also, the entrance gate may not be necessary. In other words, the user may be able to enter the commercial facility 200 regardless of whether the recording medium 300 has been issued or not.

[0040] On the other hand, if the issuing machine 1 determines that the accepted payment information is invalid (alt:[invalid]), it notifies the user that the payment information is invalid (A41) and erases the accepted payment information (A42). A42 is an example of a cancellation process. In this case, the issuing machine 1 does not issue the recording medium 300.

[0041] The decision as to whether the payment information is valid may be made by the server 4 instead of the issuing machine 1. In that case, the issuing machine 1 transmits the payment information accepted at A03 instead of A04 to the server 4, and receives information on the result of the decision from the server 4 to determine the subsequent procedure. For example, when the server 4 accepts postpay information that is the same as a payment method already stored in the user DB 41, it may decide that the payment information is invalid.

[0042] Furthermore, the issuing machine 1 may be capable of accepting input of multiple pieces of payment information for one recording medium 300. When multiple pieces of valid payment information are input, the issuing machine 1 transmits all of the valid payment information to the server 4, and the server 4 stores the multiple pieces of payment information in association with one ID.

[0043] Furthermore, when multiple pieces of payment information are accepted, the issuing machine 1 may be capable of accepting authentication information for each piece of payment information. For example, the issuing machine 1 may be capable of accepting an instruction for a user who enters the commercial facility 200 together with a parent and child, to input the parent's authentication information only for the credit card payment so that only the parent can use the facility, and to input the authentication information of both the parent and the child for the cash payment so that both the parent and the child can use the facility.

[0044] Next, a procedure using the recording medium 300 by the terminal device 2 will be described. A user uses the terminal device 2 when making a provisional payment to purchase a product or service in the commercial facility 200, and when returning a product or service for which provisional payment has been made. First, a provisional payment procedure using the terminal device 2 will be described with reference to the sequence diagram of FIG.

[0045] A user instructs the terminal device 2 to read the recording medium 300 (B01). The medium reading means 21 of the terminal device 2 reads the ID recorded from the recording medium 300 (B02). B02 is an example of a terminal reading process. The terminal device 2 transmits the read ID to the server 4 (B03). The server 4 reads information stored in association with the ID transmitted from the terminal device 2 from the stored user DB 41 (B04).

[0046] The server 4 judges whether or not the ID transmitted from the terminal device 2 is valid based on the user DB 41. If information associated with the ID is stored in the user DB 41, the server 4 judges that the ID is valid (alt: [ID valid]), and transmits at least the payment information 412, available amount 413, authentication information 414, and purchase information 415 of the information stored in association with the ID to the terminal device 2 (B11).

[0047] The terminal device 2 determines whether or not multiple payment methods are stored as the payment information 412 based on the information received from the server 4. If multiple payment methods are stored (opt:[multiple payment methods]), the terminal device 2 inquires of the user which payment method to use for this purchase (B12). Then, based on the user's instruction, the terminal device 2 selects a payment method to be used for payment from the multiple payment methods (B13). B13 is an example of the selection process. If only one payment method is stored, the terminal device 2 decides to use that payment method.

[0048] When multiple payment methods are stored as the payment information 412, the terminal device 2 may be able to accept selection of multiple payment methods and setting of payment ratios for the selected multiple payment methods at B13. The terminal device 2 may be able to accept, for example, an instruction to pay equally using multiple payment methods, so-called splitting. The terminal device 2 may also be able to accept designation of the payment amount for each of the selected multiple payment methods. This can increase the flexibility of payment.

[0049] The terminal device 2 judges whether or not authentication information 414 is set for the determined payment method. When it is judged that authentication information 414 is set (opt: [authentication information present]), the terminal device 2 requests the user to input authentication information (B15). Furthermore, the terminal device 2 accepts the input of authentication information by the user via the user authentication means 22 (B16) and performs authentication based on the authentication information 414 included in the information acquired in B11 (B17). B16 is an example of a terminal authentication input process. By accepting the input of authentication information and checking it against the information in the user DB 41, the risk of the recording medium 300 being stolen by a third party is reduced.

[0050] If it is determined that the authentication has been successful, or if it is determined that the authentication information 414 has not been set (alt: [authentication OK or no authentication information]), the terminal device 2 becomes able to accept user instructions such as a purchase instruction (B21). The user uses the terminal device 2 to specify the product or service to be purchased and input a purchase instruction (B22). This allows the terminal device 2 to identify the product or service to be purchased. B22 is an example of an identification process. A purchase instruction is issued, for example, by reading a product tag, touching a menu screen, or specifying a shopping cart.

[0051] The terminal device 2 acquires purchase information based on a purchase instruction from the user (B23). The purchase information preferably includes at least information on the purchase price of the product or service, and information on identifying the product or service and the number of items purchased. In addition, if there are multiple stores in the commercial facility 200, the purchase information preferably also includes information indicating the store from which the purchase was made.

[0052] Then, the terminal device 2 determines whether provisional payment is possible based on the available amount 413 included in the information acquired in B11. Specifically, the terminal device 2 determines whether provisional payment is possible based on the purchase amount in the purchase information and the available amount 413 associated with the selected payment method. If it is determined that provisional payment is possible (alt:[Provisional payment possible]), the terminal device 2 transmits the purchase information and the ID to the server 4 (B24). If a payment method has been selected, the terminal device 2 also transmits information indicating the selected payment method to the server 4.

[0053] The selection of the payment method at the time of provisional payment may be arbitrary. In other words, even if multiple payment methods are stored, the terminal device 2 may be able to accept an instruction to make provisional payment without selecting a payment method. In this case, the terminal device 2 may determine whether provisional payment is possible, for example, based on the total amount of multiple available amounts 413. If a payment method has not been selected, the payment system 100 accepts the selection of a payment method at the time of actual payment, which will be described later. Alternatively, for example, when the terminal device 2 accepts input of authentication information without accepting the selection of a payment method, it may be able to automatically determine the payment method based on the input authentication information.

[0054] The server 4 updates the user DB 41 based on the information received from the terminal device 2 (B25). B25 is an example of provisional payment processing. Specifically, the server 4 adds the information received from the terminal device 2 as purchase information 415 associated with the received ID, and changes the available amount 413 to an amount obtained by subtracting the amount of the purchase information 415. At this point, only the amount to be paid is stored in the user DB 41, and the actual payment has not been made. After updating the user DB 41, the server 4 notifies the terminal device 2 that the provisional payment has been completed (B26). Upon receiving the notification of B26, the terminal device 2 notifies the user that the provisional payment has been completed (B27).

[0055] If it is determined that provisional payment is not possible based on the available amount 413 associated with the selected payment method (alt: [provisional payment not possible]), the terminal device 2 notifies the user that provisional payment is not possible (B28). The terminal device 2 may be able to accept an instruction to select another payment method or to input additional cash.

[0056] On the other hand, if it is determined that the authentication in B17 has failed (alt: [Authentication NG]), the terminal device 2 notifies the user of the authentication failure (B31). The terminal device 2 may be able to accept re-entry of authentication information. After receiving any of the notifications in B27, B28, or B31, the terminal device 2 returns the recording medium 300 accepted in B01 to the user (B32).

[0057] Furthermore, if the user DB 41 read in B04 does not store information associated with the ID sent from the terminal device 2, the server 4 determines that the ID is invalid (alt:[ID invalid]) and notifies the terminal device 2 that the recording medium 300 is invalid (B41). The ID recorded on the recording medium 300 becomes invalid when, for example, a reissue of the recording medium 300 is accepted or the expiration date of the recording medium 300 has passed. Details of when an ID becomes invalid will be described later.

[0058] Upon receiving the notification of B41, the terminal device 2 notifies the user that the recording medium 300 is invalid (B42). The terminal device 2 may collect or return the recording medium 300. The terminal device 2 may also report to an administrator that the invalid recording medium 300 has been used.

[0059] The process of authenticating the user and the determination as to whether provisional payment is possible may be performed by the server 4 instead of the terminal device 2. In this case, the terminal device 2 transmits the authentication information accepted in B16 to the server 4 and receives information on the authentication result from the server 4. The terminal device 2 also transmits purchase information based on a purchase instruction from the user to the server 4 and receives information on the determination result as to whether provisional payment is possible from the server 4. In addition, the server 4 transmits only information on whether the ID is valid or not to the terminal device 2 in B11.

[0060] Next, the procedure for returning a product after provisional payment using the terminal device 2 will be described with reference to the sequence diagram of Fig. 6. Note that, below, the same steps as those in the provisional payment procedure shown in Fig. 5 are given the same reference numerals as in Fig. 5, and the description will be simplified.

[0061] In the return procedure, the terminal device 2 also receives an instruction to read the recording medium 300 (B01), reads the ID from the recording medium 300 (B02), and transmits it to the server 4 (B03). Furthermore, the terminal device 2 acquires information (B04) read by the server 4 from the user DB 41 (B11), and performs authentication if necessary (B15 to B17).

[0062] If it is determined that the authentication has been successful, or if it is determined that the authentication information 414 has not been set (alt: [authentication OK or no authentication information]), the terminal device 2 becomes capable of accepting instructions from the user (B21).

[0063] If the received instruction is for a return procedure (C01), the terminal device 2 displays a list of products for which provisional payment has been made based on the purchase information received from the server 4 at B11 (C02), and receives the user's selection of the product to be returned. The user selects the product to be returned from the list of returnable products displayed on the terminal device 2, and issues a return instruction (C11).

[0064] The terminal device 2 displays returnable products in a selectable manner in C02, but does not display non-returnable products. Alternatively, the terminal device 2 may display non-returnable products in a manner that makes them unselectable. In other words, the terminal device 2 does not accept a return instruction for a non-returnable product.

[0065] For this purpose, the server 4 stores, as the purchase information 415, information to which information for distinguishing between returnable and non-returnable products is added. Specifically, the payment system 100 of this embodiment does not accept the return of food, drink, or services that have already been provided. For example, when providing food, drink, or services, an administrator inputs the provided information into a dedicated device and causes the server 4 to transmit the information, so that the server 4 can obtain information on non-returnable products. In B11, the server 4 may transmit only information on returnable products as purchase information and not on non-returnable products, or may transmit purchase information to which information on whether or not the product is returnable is added. By not accepting returns of products that cannot be returned, it is possible to operate in a way that suits the characteristics of the products.

[0066] The terminal device 2 accepts the return instruction for each product, and transmits return information including information on the selected product and the ID to the server 4 (C12). The server 4 updates the user DB 41 based on the received information (C13). C13 is an example of return processing. Specifically, the server 4 deletes information on the returned product from the purchase information 415 associated with the ID, and adds the price of the product to the available amount 413. After updating the user DB 41, the server 4 notifies the terminal device 2 that the return is complete (C14). Upon receiving the notification of C14, the terminal device 2 notifies the user that the return is complete (C15).

[0067] In this embodiment of the payment system 100, the provisional payment procedure at the terminal device 2 only updates the purchase information 415 in the user DB 41, and the actual payment is not completed. If the terminal device 2 accepts a return instruction and re-updates the purchase information 415, the product return procedure is simplified compared to when a product that has already been paid for is returned, since no procedures with the card company or electronic money company are required.

[0068] The terminal device 2 may transmit return information to the server 4 after the manager has confirmed that the product selected for return has been properly returned. Alternatively, the terminal device 2 may accept the product into a return box or the like, and the return box or the like may confirm the returned product.

[0069] In the return procedure, if the authentication fails, the terminal device 2 notifies the user of the authentication failure (B31) and does not accept the return instruction. After the notification of C15 or after B31, the terminal device 2 returns the recording medium 300 accepted in B01 (B32). If the ID of the recording medium 300 instructed to be read is invalid (B41), the terminal device 2 notifies the user that the ID is invalid (B42). The terminal device 2 may collect the recording medium 300 or may return it.

[0070] Next, the procedure for the main payment by the settlement machine 3 will be described with reference to the sequence diagram of Fig. 7. When the user has finished shopping and eating in the commercial facility 200 and is leaving the commercial facility 200, the user uses the settlement machine 3 to make the main payment.

[0071] A user instructs the settlement machine 3 to read the recording medium 300 (D01). The medium reading means 31 of the settlement machine 3 reads the ID recorded from the instructed recording medium 300 (D02). D02 is an example of a settlement reading process. The settlement machine 3 transmits the read ID to the server 4 (D03). The server 4 reads information stored in association with the ID transmitted from the settlement machine 3 from the stored user DB 41 (D04).

[0072] The server 4 judges whether the ID sent from the settlement machine 3 is valid or not based on the user DB 41. If the ID is valid (alt:[ID valid]), the server 4 transmits at least the payment information 412, available amount 413, authentication information 414, and purchase information 415, among the various information associated with that ID, to the settlement machine 3 (D11). D01 to D04 and D11 are the same processes as B01 to B04 and B11 by the terminal device 2 (FIGS. 5 and 6).

[0073] If the settlement machine 3 determines that the information received from the server 4 includes the authentication information 414 (opt: [authentication information present]), it requests the user to input the authentication information (D15). Furthermore, the settlement machine 3 accepts the input of the authentication information by the user using the user authentication means 32 (D16), and performs authentication based on the authentication information 414 included in the information acquired in D11 (D17). D16 is an example of settlement authentication input processing. D15 to D17 are similar processes to B15 to B17 by the terminal device 2.

[0074] If it is determined that the authentication was successful, or if it is determined that the authentication information 414 has not been set (alt: [Authentication OK or No Authentication Information]), the settlement machine 3 checks the purchase information 415. Then, if the settlement machine 3 determines that multiple payment methods are stored and that there is purchase information 415 for which a payment method has not been selected (alt: [Payment method not selected]), it requests selection of a payment method for each purchase information (D21) and accepts the selection of a payment method (D22). D22 is an example of the selection process.

[0075] The settlement machine 3 may be capable of accepting the selection of multiple payment methods and the setting of payment ratios for each selected payment method for one piece of purchase information, similar to the terminal device 2. Furthermore, even if the terminal device 2 has already accepted the designation of a payment method, the settlement machine 3 may be capable of accepting an instruction to change the payment method.

[0076] In the payment system 100 of this embodiment, multiple payment methods can be input at the issuing machine 1, and the selection of the payment method is accepted at the terminal device 2 or the settlement machine 3, so there is a high degree of freedom in the payment method. For example, it is possible to select a prepaid payment method for purchase information 415 that can be paid for with a prepaid payment method, and to select a postpaid payment method for purchase information 415 that cannot be paid for with a prepaid payment method.

[0077] Then, the settlement machine 3 acquires and displays the settlement amount for each payment method based on the purchase information 415 received from the server 4 in D11 and the payment method information accepted in D22 (D31). D31 is an example of the acquisition process.

[0078] When the settlement machine 3 receives an instruction for the main payment from the user (D32), it executes the main payment (D33). D33 is an example of the main payment process. For example, if the payment method used is a credit card or electronic money, the settlement machine 3 sends information to the card company or the like to complete the payment. If the payment method used is a prepaid card, the settlement machine 3 accepts the input of the card and performs a process of deducting the settlement amount from the accepted deposit and returning the remaining amount to the card. If the payment method used is cash, the settlement machine 3 refunds the remaining amount after deducting the settlement amount from the accepted cash.

[0079] When the final payment is completed, the settlement machine 3 transmits the final payment information to the server 4 (D34). When the final payment is completed for all purchase information 415, the server 4 deletes the information associated with the ID from the user DB 41 and updates the user DB 41 (D35). Note that the server 4 may not delete the information of the user for whom the final payment has been completed, but may add information indicating the completion of the final payment and store it in the user DB 41, or may store it in a database separate from the user DB 41.

[0080] Note that authentication, calculation of the settlement amount, and processing of the actual payment may be performed by the server 4 instead of the settlement machine 3. In that case, the settlement machine 3 transmits the authentication information input by the user and information on the specified payment method to the server 4, and the server 4 transmits the authentication result and settlement result to the settlement machine 3.

[0081] The settlement machine 3 prints out a receipt for the purchasing information 415 for which the final payment has been completed (D36), and issues the printed receipt (D37). Furthermore, when the final payment has been completed for all of the purchasing information 415, the settlement machine 3 collects the recording medium 300 using the medium collection means 33 (D38). Note that the settlement machine 3 may be able to accept an instruction to make the final payment for only a portion of the purchasing information 415, or an instruction to cancel the final payment, in which case the settlement machine 3 returns the recording medium 300.

[0082] The settlement machine 3 may also function as an exit gate. For example, the settlement machine 3 may open the exit gate after the final settlement is completed for all purchase information 415 and the recording medium 300 is collected. The settlement machine 3 may also have a function to detect the passage of the recording medium 300, and may close the exit gate when the passage of the recording medium 300 is detected, thereby restricting the taking out of the recording medium 300.

[0083] On the other hand, if it is determined that the authentication of D17 has failed (alt: [Authentication NG]), the settlement machine 3 notifies the settlement machine 3 of the authentication failure (D41) and returns the recording medium 300 (D42). Furthermore, if the server 4 determines that the ID received from the settlement machine 3 is invalid (alt: [ID invalid]), it notifies the settlement machine 3 that the recording medium 300 is invalid (D51). Upon receiving the notification of D51, the settlement machine 3 notifies the user that the recording medium 300 is invalid (D52). The settlement machine 3 may collect the recording medium 300 or may return it to the user. The settlement machine 3 may report to an administrator that an invalid recording medium 300 has been used.

[0084] So far, we have explained the procedure from issuing recording medium 300 to settlement by payment system 100. Next, we will explain the procedure for reissuing recording medium 300 when recording medium 300 before settlement is lost within commercial facility 200. The reissuing procedure of recording medium 300 by reissuing machine 5 will be explained with reference to the sequence diagram of FIG.

[0085] The user inputs an instruction to reissue the recording medium 300 to the reissue machine 5 (E01). In response to the instruction of E01, the reissue machine 5 requests the user to input authentication information (E02). The authentication information is information acquired by A21 when the issuing machine 1 issues the recording medium 300, and is information stored in the user DB 41 of the server 4. The user inputs the authentication information to the user authentication means 51 (E03). The authentication information in this case is an example of user information, and E03 is an example of a user input process.

[0086] The reissuer 5 transmits the input authentication information to the server 4 (E04). The server 4 searches the user DB 41 and determines whether or not there is an ID in which authentication information 414 corresponding to the received authentication information is stored (E05).

[0087] In the payment system 100 of this embodiment, authentication information is input when the recording medium 300 is issued, and the recording medium 300 can be reissued on the condition that the input authentication information is stored in the server 4. In other words, a user whose authentication information 414 is not stored in the user DB 41 cannot have the recording medium 300 reissued even if the user loses the recording medium 300.

[0088] Furthermore, an instruction to reissue the recording medium 300 may be accepted only when the biometric information of the user is stored as the authentication information 414. In order to reissue the recording medium 300, the authentication information 414 is required to be information that can identify the user. For example, if the authentication information 414 is a PIN or the like, the user cannot necessarily be identified, so the instruction to reissue may not be accepted.

[0089] If it is determined that a corresponding ID exists (alt: [ID exists]), the server 4 determines a new ID (E11) and rewrites the ID in the user DB 41 to the new ID (E12). E12 is an example of a rewrite process.

[0090] In other words, when the server 4 reissues the recording medium 300, it associates each piece of information associated with the original ID with a new ID and deletes the original ID. This makes the original ID an invalid ID, and the original recording medium 300 cannot be used even if it is found later, preventing unauthorized use of the lost recording medium 300. On the other hand, each piece of information associated with the original ID, such as the purchase information 415, is stored in association with the new ID, reducing the risk of non-payment.

[0091] Furthermore, the server 4 transmits the new ID determined in E11 to the reissue machine 5 (E13). The reissue machine 5 records the received ID on a new recording medium 300 (E14), and issues the recording medium 300 by ejecting it outside the machine using the medium output means 52 (E15). E15 is an example of a reissue process. The user can carry the reissued recording medium 300 and continue to use the commercial facility 200. In other words, even if the user loses the recording medium 300, the recording medium 300 can be reissued based on the authentication information, and the user can continue to use each piece of information registered before the loss.

[0092] On the other hand, if authentication information 414 corresponding to the received authentication information is not found in the user DB 41 (alt: [No ID]), the server 4 notifies the reissuer 5 of the no ID (E21). The reissuer 5 notifies the user that reissue is not possible (E22) and does not issue the recording medium 300. The reissuer 5 may prompt the user to re-enter the authentication information.

[0093] So far, we have described the procedure for inputting payment information and issuing a recording medium 300 each time entering the commercial facility 200, and using the commercial facility 200 while carrying the issued recording medium 300. In the payment system 100 of this embodiment, after issuing a recording medium 300 with the issuing machine 1 and entering the commercial facility 200, the registration machine 6 is used to associate and register the payment information with the biometric information of the user, thereby eliminating the need to input payment information the next time the user enters the facility. The procedure for registering biometric information using the registration machine 6 will be described with reference to the sequence diagram of FIG. 9.

[0094] A user instructs a registration machine 6 installed in a commercial facility 200 to read the recording medium 300 issued by an issuing machine 1 (F01), thereby instructing the start of a registration procedure. A medium reading means 61 of the registration machine 6 reads the ID from the recording medium 300 (F02). F02 is an example of a registration reading process. The registration machine 6 transmits the read ID to the server 4 (F03). The server 4 reads information stored in association with the ID transmitted from the registration machine 6 from the stored user DB 41 (F04). F01 to F04 are the same processes as B01 to B04 by the terminal device 2 (FIGS. 5 and 6).

[0095] The server 4 judges whether or not appropriate payment information 412 is stored in the user DB 41 in association with the ID transmitted from the registration machine 6. For example, the server 4 may judge that the payment information 412 is appropriate when the available amount 413 is equal to or greater than a predetermined amount.

[0096] When it is determined that appropriate payment information 412 is stored (alt: [payment information present]), the server 4 notifies the registration machine 6 that the information is present (F11). Upon receiving the notification of F11, the registration machine 6 requests the user to input biometric information (F12). The user inputs the biometric information using the biometric information receiving means 62 of the registration machine 6 (F13). F13 is an example of a biometric input process.

[0097] The registration machine 6 transmits the input biometric information and ID to the server 4 (F14). The server 4 associates the received biometric information with the payment information 412 included in the information of the user DB 41 read in F04, and stores the information in the registration DB 42 (F15). F15 is an example of a biometric registration process.

[0098] 10, the registration DB 42 stores a registration date and time 421, biometric information 422, payment information 423, and ID 424 as one record in association with a unique registration number 420. The registration date and time 421 is information indicating the date and time when a registration instruction was accepted and registration was performed. The biometric information 422 is information input in F13. The payment information 423 may be the same information as the payment information 412 read in F04, or may be a part of the payment information 412 when a plurality of pieces of information are stored as the payment information 412. The ID 424 is information for association with the user DB 41, and is the information received from the registration machine 6 in F03 in this case.

[0099] When issuing the recording medium 300, the issuing machine 1 can accept biometric information at the authentication information accepting means 14 (A21 in FIG. 3). When biometric information is stored as the authentication information 414 in the user DB 41, the registration machine 6 may be able to accept an instruction to register the authentication information 414 inputted to the issuing machine 1 as biometric information. When an instruction to set the authentication information 414 as biometric information is accepted, the registration machine 6 does not perform the input in F13, but simply transmits information indicating that the authentication information 414 is to be biometric information to the server 4 in F14. The server 4 stores the authentication information 414 in the registration DB 42 as biometric information 422.

[0100] When the server 4 has completed storing the information in the registration DB 42, it notifies the registration device 6 of the completion of registration (F16). The registration device 6 notifies the user of the completion of registration (F17). The registration device 6 may, for example, notify the user of the registered registration number 420.

[0101] On the other hand, if it is determined that the appropriate payment information 412 is not stored in the information of the user DB 41 read in F04 (alt: [no payment information]), the server 4 notifies the registration machine 6 that there is no appropriate payment information (F21). The registration machine 6 notifies the user that biometric information cannot be registered because appropriate payment information has not been entered (F22). The registration machine 6 may be capable of accepting additional input of payment information.

[0102] After receiving the notification of F17 or F22, the registration machine 6 returns the recording medium 300 accepted in F01 (F31). Even after the biometric information is registered, a user who carries the issued recording medium 300 can make provisional payments or settle accounts using the recording medium 300 by following the procedure described above.

[0103] Since a user who has registered biometric information can use the terminal device 2 and the settlement machine 3 using the biometric information, the registration machine 6 may collect the recording medium 300 when the registration of the biometric information is completed. The registration machine 6 may also be capable of receiving an instruction to collect the recording medium 300 and an instruction to change the registered biometric information and payment information.

[0104] A user who has registered his / her biometric information can thereafter use the commercial facility 200 by using the registered biometric information without using the recording medium 300. In other words, the user may enter the facility without issuing the recording medium 300 by the issuing machine 1. Next, a procedure for a user whose biometric information has been registered to make a provisional payment or settle the account by using the biometric information will be described with reference to the sequence diagram of FIG.

[0105] In the procedure using biometric information, the terminal device 2 and the settlement machine 3 accept an instruction to authenticate using biometric information (G01) instead of an instruction to read the recording medium 300 (B01 in Figs. 5 and 6, D01 in Fig. 7). The terminal device 2 and the settlement machine 3 then accept the input of biometric information (G02) and transmit the accepted biometric information to the server 4 (G03). G02 by the terminal device 2 is an example of a terminal detection process, and G02 by the settlement machine 3 is an example of a settlement detection process.

[0106] The server 4 performs biometric authentication using the biometric information 422 in the registration DB 42, and judges whether or not the biometric information of the user is registered (G04). Specifically, the server 4 judges whether or not the registered biometric information 422 contains information that can be judged to match the information received in G03. By identifying the user through biometric authentication, the user can be identified with high accuracy without reading the recording medium 300.

[0107] If it is determined that the biometric information 422 is registered (alt: [Registered]), the server 4 determines (G11) whether or not an ID 424 is stored in the registration DB 42 in association with the registered biometric information 422. If it is determined that an ID has been issued (alt: [ID issued]), the server 4 reads out a record associated with the same ID 410 as the ID 424 from the user DB 41 (G12).

[0108] When a user completes the issuance procedure for the recording medium 300 at the issuing machine 1 and enters the commercial facility 200, an ID is determined when the recording medium 300 is issued, and the ID is stored in the user DB 41 and the registration DB 42. On the other hand, when the user completes the actual payment at the settlement machine 3, as described above, the server 4 updates the user DB 41 and deletes the ID 410 (D35 in FIG. 7). If the user's information is also registered in the registration DB 42, the server 4 also deletes the information of the ID 424 from the registration DB 42. If the user has not subsequently completed the issuance procedure for the recording medium 300 at the issuing machine 1, the user's ID is not stored in either the user DB 41 or the registration DB 42.

[0109] If it is determined that the ID has not been issued (alt: [ID not issued]), the server 4 determines a new ID (G13). Furthermore, the server 4 stores the determined ID in ID 424 of the registration DB 42, sets the ID as ID 410 in the user DB 41, and creates a record in the user DB 41 that stores each piece of information based on the information in the registration DB 42 (G14). In other words, even if a user enters the commercial facility 200 without carrying out a procedure for issuing the recording medium 300 at the issuing machine 1, the payment information is identified using the registered biometric information when the user uses the terminal device 2 for the first time after entering, and a new ID is issued.

[0110] The server 4 transmits the information read from the user DB 41 in G12 or the information stored in the user DB 41 in G14 to the terminal device 2 or the settlement machine 3 that transmitted the information in G03 (G21). G21 is the same process as B11 in Figures 5 and 6 and D11 in Figure 7. As a result, the terminal device 2 or the settlement machine 3 receives instructions from the user (G22) and performs the same process as described above based on the received instructions (ref).

[0111] For example, the terminal device 2 performs processes B12 to B13 and B22 to B28 of the provisional payment procedure (FIG. 5) described above, or C01 to C17 of the return procedure (FIG. 6) described above. B25 in this case is an example of a biometric provisional payment process. In other words, a user who has registered biometric information can use the commercial facility 200 using his / her biometric information without the need to carry the recording medium 300.

[0112] The settlement machine 3 also performs the processes D21 to D37 of the above-mentioned main payment procedure (FIG. 7). In this case, D31 is an example of a biometric acquisition process, and D33 is an example of a biometric main payment process. When the server 4 completes the main payment and deletes the record of the main payment from the user DB41, it deletes only the ID424 corresponding to the ID410 to be deleted from the registration DB42, and does not delete other information from the registration DB42.

[0113] On the other hand, if information matching the biometric information received in G03 cannot be found among the biometric information 422 in the registration DB 42 (alt: [no registration]), the server 4 notifies the terminal device 2 or settlement machine 3 of the lack of registration (G31). When the terminal device 2 or settlement machine 3 receives the notification of G31, it notifies the user that provisional payment or settlement using the biometric information is not possible (G32). The terminal device 2 or settlement machine 3 may accept re-input of the biometric information.

[0114] As a result, a user who has registered his / her biometric information can use the commercial facility 200 using the biometric information without having to take the time to enter payment information to have the recording medium 300 issued the next time or thereafter.

[0115] When gates are provided at the entrance and exit sides, the payment system 100 may require even a user who has registered biometric information to go through the entrance procedure at the issuing machine 1. For example, when the issuing machine 1 receives an instruction to go through the entrance procedure from a user who has registered biometric information, it may carry out the same procedures as G01 to G04 in FIG. 11, and open the gate if the server 4 determines that the user is registered. In this case, the server 4 determines the ID of the user and stores it in the user DB 41. The terminal device 2 and the settlement machine 3 may also accept the instruction on the condition that an ID has already been issued.

[0116] Next, the procedure of the automatic payment process executed by the server 4 will be described with reference to the flowchart in Fig. 12. The automatic payment process is a process for automatically carrying out a final payment based on information of a user who is assumed to have left the commercial facility 200 without carrying out a final payment with the settlement machine 3. The automatic payment process is executed by the server 4 periodically, such as after the end of business hours each day, or based on an execution instruction from an administrator.

[0117] When the automatic payment process is started, the server 4 reads the user DB 41 (H01), and extracts information on IDs whose validity has expired without the actual payment being completed from the user DB 41 (H02). H02 is an example of the extraction process.

[0118] For example, if the validity period of the recording medium 300 is the same day and the automatic payment process is executed after the business hours of the day, the server 4 extracts, in H02, information on the ID that remains stored in the user DB 41. As described above, when storing in the user DB 41, the server 4 stores the issue date and time 411 in association with the issued ID 410. If the time elapsed since the issue date and time 411 stored in the user DB 41 read in H01 exceeds a predetermined validity period, the server 4 extracts that ID 410 in H02. In this case, the issue date and time 411 is an example of expiration information.

[0119] Then, the server 4 judges whether or not there is an extracted ID (H03). If it is judged that there is an extracted ID (H03: YES), the server 4 performs a final settlement for one of the extracted IDs (H05). H05 is an example of a forced settlement process.

[0120] If the stored payment method is post-paid information such as credit card or electronic money, the server 4 sends the information to the card company, etc., to complete the payment. If the stored payment method is prepaid information or cash, the server 4 decides to hold the remaining amount, which is the amount obtained by subtracting the settlement amount from the accepted deposit, as the post-payment deposit. If the user's address, email address, etc. are known, the receipt information, etc. may be sent by mail or email.

[0121] The server 4 sets the ID for which the final payment has been completed as an invalid ID (H06). The server 4 may delete information associated with the ID from the user DB 41, may update the user DB 41 by adding automatic payment completion information associated with the ID, or may store the ID in a database other than the user DB 41 as an ID for which automatic payment has been performed.

[0122] The server 4 judges whether or not there are other IDs extracted in H02 (H11). If it is judged that there are other IDs (H11: YES), the server 4 proceeds to H05 and performs the final payment for the other IDs. If it is judged that no IDs were extracted in H02 (H03: NO) or if it is judged that the processing of all extracted IDs has been completed (H11: NO), the server 4 ends the automatic payment processing.

[0123] For example, if a user loses the recording medium 300 and leaves the commercial facility 200 without having it reissued, there is a high possibility that the settlement has not been made at the settlement machine 3. The payment system 100 of this embodiment stores provisional payment information in the user DB 41 and automatically makes a final settlement for an expired ID, so that the final settlement can be made automatically even after the user has left the commercial facility 200, preventing non-payment.

[0124] As described above in detail, according to the payment system 100 of this embodiment, when a valid payment method is input to the issuing machine 1 at the entrance of the commercial facility 200, the user's ID 410 is registered in association with the payment information 412 indicating the payment method. Then, in the terminal device 2 arranged in a store or the like in the commercial facility 200, purchase information 415 based on purchase instructions for products and the like within the range that can be paid based on the payment information 412 is stored in association with the ID 410. Furthermore, in the settlement machine 3 at the exit of the commercial facility 200, the settlement amount based on the purchase information 415 associated with the ID 410 is automatically settled using the payment method associated with the ID 410. As a result, settlement is reliably performed even after products are provided in the commercial facility 200 based on the pre-registered payment information 412, so that a reduction in the risk of non-payment due to theft or eating and drinking without paying can be expected.

[0125] Furthermore, in this embodiment of the payment system 100, the user DB41 is stored in the server 4, and the issuing machine 1, the terminal device 2, and the settlement machine 3 execute various processes using information received from the server 4. Storing various pieces of information in the server 4 reduces the amount of information recorded on the recording medium 300 compared to when all information is recorded on the recording medium 300, making it possible to use a recording medium 300 with a simple configuration. Furthermore, using the server 4 increases the security of information such as the payment information 412, and even if the recording medium 300 is lost, reissuance and automatic payment are possible.

[0126] [Second Form] Next, a payment system according to the second embodiment will be described in detail with reference to the attached drawings. This embodiment requires input of biometric information from the beginning and does not use the recording medium 300. In this respect, it differs from the first embodiment in that the recording medium 300 is used the first time, and when registration of biometric information is accepted, the biometric information can be used from the next time onwards without issuing the recording medium 300. The same steps as those in the first embodiment are denoted by the same reference numerals and description thereof is omitted.

[0127] As shown in Fig. 13, the payment system 500 of this embodiment includes an issuing machine 501, a terminal device 502, a settlement machine 503, and a server 504. The issuing machine 501, like the issuing machine 1 of the first embodiment, has an input means 10 having at least one of a card information acquisition means 11, a money information acquisition means 12, and a cash acceptance means 13. Furthermore, the issuing machine 1 has a biometric information acceptance means 514 for accepting biometric information. The terminal device 502 has a biometric information acceptance means 521 and a product information acquisition means 23 similar to the terminal device 2 of the first embodiment. The settlement machine 503 has a biometric information acceptance means 531. The server 504, like the server 4 of the first embodiment, stores a user DB 41 and a registration DB 42.

[0128] In this embodiment, since recording medium 300 is not used, there is no need for a means for writing information to recording medium 300 or a means for reading information from recording medium 300. In addition, payment system 500 of this embodiment does not include reissue machine 5 or registration machine 6.

[0129] Next, the procedure for payment in payment system 500 of this embodiment will be described with reference to a sequence diagram. In this embodiment as well, before entering commercial facility 200, the user determines an ID for identifying the user by issuing machine 501 and performs a procedure for registering the ID in user DB 41. The procedure for issuing an ID by issuing machine 501 of this embodiment will be described with reference to the sequence diagram of FIG.

[0130] The user inputs an instruction to start the issuance procedure to the issuing machine 501 (J01). In response to the instruction of J01, the issuing machine 501 requests payment information from the user (J02). The user inputs the payment information using one or more of the card information acquisition means 11, the money information acquisition means 12, and the cash acceptance means 13 (J03). The issuing machine 501 checks whether the input payment information is valid or not (J04). J02 to J04 are the same processes as A02 to A04 (FIG. 3) in the first embodiment.

[0131] If it is determined that the entered payment information is valid (alt: [valid]), the issuing machine 501 requests the input of the user's biometric information associated with this payment information (J11). The user uses the biometric information receiving means 514 of the issuing machine 501 to input the biometric information (J12). J12 is an example of an issuing biometric input process. The biometric information input at J12 is an example of biometric information of a first attribute. The issuing machine 501 transmits the payment information received at J03 and the biometric information input at J12 to the server 504, and requests the determination of an ID and registration in the user DB 41 (J13).

[0132] When the server 504 receives the payment information and biometric information from the issuing machine 501, it determines a new ID (J14) and stores it in the user DB 41 (J15). J15 is an example of a registration process. In the user DB 41 of this embodiment, the biometric information is stored as the authentication information 414. Furthermore, the server 504 transmits information of the determined ID to the issuing machine 501 (J16). Note that the server 504 may determine an ID when it is confirmed that the received biometric information does not match the biometric information that has already been registered.

[0133] After J16, the issuing machine 501 becomes able to receive an instruction to register additional biometric information in association with the one registered biometric information, and an instruction to end the procedure. When an instruction to register additional biometric information is received (opt:[addition request], J21), the issuing machine 501 receives input of biometric information (J22) and transmits the input biometric information and the ID information received in J16 to the server 504 (J23). J22 is an example of an issuing biometric input process, and the biometric information input in J22 is an example of biometric information of a second attribute.

[0134] When the server 504 receives the biometric information together with the ID information, it stores the biometric information in the user DB 41 in association with the ID (J24). J24 is an example of a registration process. That is, in the user DB 41 of this embodiment, as shown in FIG. 15, for example, an issue date and time 411, payment information 412, available amount 413, and purchase information 415 are associated with each ID 410 and stored as one record, similar to the first embodiment. Furthermore, the record stores first biometric information 451, which is the biometric information accepted in J13, and second biometric information 452, which is the biometric information accepted in J23. The issuing machine 501 may be capable of accepting multiple pieces of second biometric information.

[0135] For example, one user can register multiple types of biometric information. In addition, for example, when multiple people such as a parent and a child enter the commercial facility 200, the parent's biometric information is registered as first biometric information 451, and the parent's payment information and the parent's biometric information are associated with each other, and the child's biometric information is registered as second biometric information 452 in association with the parent's biometric information, thereby enabling a product purchase procedure to be performed using the child's biometric information. Note that when the second biometric information is accepted, it may be possible to accept designation of payment information that allows the use of the second biometric information. In addition, for example, the payment information that can be used with the second biometric information may be only prepaid payment information and may not include postpaid payment information.

[0136] When an instruction to end the procedure is received (J31), the issuing machine 501 notifies the user that the procedure has been completed (J32) and ends the process. On the other hand, when the issuing machine 501 determines that the payment information entered in J03 is invalid (alt:[invalid]), the issuing machine 501 notifies the user that the information is invalid (J41) and ends the process.

[0137] In this embodiment, the issuing machine 501 may also function as the registration machine 6 in the first embodiment. For example, the user may be able to select whether to use the input biometric information only for the current visit to the commercial facility 200, or to register the biometric information so that it can be used from the next visit onward. If registration is selected, the issuing machine 501 can transmit a registration instruction for the biometric information to the server 504, thereby storing the biometric information as the biometric information 422 in the registration DB 42. If multiple pieces of biometric information are registered in association with one ID, the server 504 may register all of the biometric information, or may register only the first biometric information. On the other hand, a user who selects not to register must use the issuing machine 501 to input payment information and biometric information the next time he or she enters the facility.

[0138] Also in this embodiment, a device similar to the registration device 6 in the first embodiment may be provided in addition to the issuing device 501. In this case, the registration device 6 receives an instruction to register biometric information stored in the user DB 41, as in the first embodiment, and transmits information indicating the registration instruction to the server 504.

[0139] Next, a procedure for using the terminal device 502 and the settlement machine 503 will be described. The terminal device 502 and the settlement machine 503 in this embodiment execute the same process as that in the first embodiment (FIG. 11) when a user whose biometric information has been registered uses the terminal device 2 and the settlement machine 3 using the biometric information. A brief description will be given below with reference to the sequence diagram in FIG. 11.

[0140] The user issues an instruction to start use on the terminal device 502 or the payment machine 503 (G01), and inputs biometric information using the biometric information receiving means 521 or the biometric information receiving means 531 (G02). The terminal device 502 or the payment machine 503 transmits the input biometric information to the server 504 and requests biometric authentication (G03). Upon receiving the biometric information, the server 504 performs biometric authentication using each piece of biometric information stored in the user DB 41 or the registration DB 42 (G04). In other words, the server 504 searches the user DB 41 or the registration DB 42 for information that can be determined to match the received biometric information.

[0141] Then, when it is determined that there is matching information in any of the DBs (alt: [Registered]), the server 504 determines whether or not an ID indicating this entry has been issued in association with the biometric information (G11). Specifically, the server 504 determines whether or not the biometric information received in G03 is stored in the user DB 41. Note that the server 504 may first search the user DB 41 for the received biometric information, and if matching biometric information is not found in the user DB 41, search the registration DB 42.

[0142] When it is determined that an ID has been issued (alt: [ID issued]), the server 504 reads out each piece of information associated with that ID from the user DB 41 (G12). A user who has been issued an ID by the issuing machine 501 can use the terminal device 502 and the settlement machine 503 by using biometric information.

[0143] On the other hand, if it is determined that the received biometric information is stored in the registration DB 42 but not in the user DB 41 (alt: [ID not issued]), the server 504 determines an ID (G13) and stores it in the user DB 41 (G14). Even if the user enters without going through the procedure for issuing an ID at the issuing machine 501, an ID will be determined when the user uses the terminal device 502 for the first time if the biometric information is registered in the registration DB 42.

[0144] Based on the user DB 41, the server 504 transmits each piece of information associated with the biometric information to the terminal device 502 or the settlement machine 503 that transmitted the biometric information in G03 (G21). The terminal device 502 or the settlement machine 503 becomes capable of receiving instructions from the user (G22). If the biometric information received in G03 is information stored in the user DB 41 as second biometric information 452, the server 504 transmits in G21 payment information that is set as available in the second biometric information 452.

[0145] The terminal device 502 or the settlement machine 503 performs the same process as in the first form based on the user's instructions (ref). Specifically, the terminal device 502 performs the same process as B12 to B13 and B22 to B28 of the provisional payment procedure by the terminal device 2 in the first form (Fig. 5) or C01 to C17 of the return procedure (Fig. 6). B25 in this case is an example of provisional payment processing. The settlement machine 503 performs the same process as D21 to D37 of the final payment procedure by the settlement machine 3 in the first form (Fig. 7). D31 in this case is an example of acquisition processing, and D33 is an example of final payment processing.

[0146] On the other hand, if it is determined that there is no information matching the received biometric information in either the user DB 41 or the registration DB 42 (alt: [not registered]), the server 504 transmits to the device that transmitted the information of G03 that the biometric information is not registered (G31). As a result, the terminal device 502 or the settlement machine 503 notifies the user that use is not possible (G32). The terminal device 502 or the settlement machine 503 may prompt the user to input the payment information and biometric information into the issuing machine 501. Furthermore, the server 504 of this embodiment appropriately executes automatic payment processing in the same manner as the server 4 of the first embodiment.

[0147] As described above in detail, according to the second embodiment of the payment system 500, the first biometric information 451 is stored as identification information in the user DB 41 in association with the payment information 412, so that the terminal device 502 and the settlement machine 503 can identify the user with high accuracy by the biometric information. Therefore, as in the first embodiment, payment is ensured even after the product is provided in the facility, and the risk of theft or non-payment due to eating and drinking without paying can be reduced.

[0148] In addition, the first and second forms of the payment systems 100 and 500 enable unmanned settlement, reducing labor costs and resolving labor shortages. In addition, the issuing machine 1, 501, terminal device 2, 502, and settlement machine 3, 503 can be made multilingual, eliminating the need to secure personnel who can speak each language.

[0149] In particular, in the second embodiment of the payment system 500, biometric information is requested to be input at the entrance and registered, so that the recording medium 300 is not required, and the risk of theft of payment information due to loss of the recording medium 300 is reduced. On the other hand, in the first embodiment of the payment system 100, the configuration for biometric authentication is not essential because the recording medium 300 is used, so that the system configuration is simplified and it is highly likely that the processing time in each device will be short.

[0150] It should be noted that the first and second embodiments are merely examples and do not limit the present invention in any way. Naturally, the present invention can be modified and changed in various ways without departing from the spirit and scope of the present invention.

[0151] For example, in the first embodiment, the issuing machine 1 and the settlement machine 3 are separate devices, but as shown in FIG. 16, for example, a payment device 8 having both the functions of the issuing machine 1 and the settlement machine 3 may be provided. In addition to the means 11-15 of the issuing machine 1 and the means 31-33 of the settlement machine, the payment device 8 includes a selection receiving means 81 that receives a user's selection. When the payment device 8 receives an instruction to start using the payment device 8, the selection receiving means 81 first receives a selection of whether to process entry or settlement, and executes either a procedure similar to that of the issuing machine 1 or a procedure similar to that of the settlement machine 3 based on the user's selection. The selection of the procedure based on the instruction received by the selection receiving means 81 is an example of a function selection process. That is, the payment device 8 executes a process similar to either the provisional payment procedure shown in FIG. 5 or the return procedure shown in FIG. 6 on the condition that entry is selected. Furthermore, the payment device 8 executes a process similar to the main payment procedure shown in FIG. 7 on the condition that settlement is selected. It should be noted that there may be a settlement device that combines the functions of the issuing device 501 and the settlement device 503 of the second embodiment.

[0152] Also, for example, the server 4, 504 does not have to be a specific device included in the payment system 100, 500. For example, one or more of the issuing machine 1, 501 and the settlement machine 3, 503 may cooperate to perform the functions of the server 4, 504. For example, instead of storing the information in a single database as the user DB 41, the authentication information, payment information, and purchase information may each be stored in separate devices.

[0153] Also, in the first embodiment, for example, instead of storing the user DB 41 in the server 4, information about each user may be stored in the recording medium 300 issued to that user. In other words, not only the ID but also other information such as payment information and purchase information may be written to the recording medium 300, and a system may be established in which the user cannot leave the commercial facility 200 unless the settlement is completed by the settlement machine 3. However, in order to ensure the safety of the information and to realize automatic settlement, it is preferable to manage this information centrally in the server 4 or the like.

[0154] Also, in the first embodiment, authentication information may not be used. That is, the authentication information receiving means 14 of the issuing machine 1, the user authentication means 22 of the terminal device 2, and the user authentication means 32 of the settlement machine 3 may all be omitted. In that case, reissuance is not possible if the recording medium 300 is lost, but there is no need to provide the terminal device 2 or the settlement machine 3 with the functions required for authentication, and there is a high possibility that processing in the terminal device 2 and the settlement machine 3 will be simplified.

[0155] Furthermore, in the first and second embodiments, registration of biometric information may not be accepted. In other words, a system may be used in which input of payment information is accepted every time a user enters the commercial facility 200. Furthermore, there may be no expiration date for the issued ID. In this case, the server 4, 504 does not need to execute an automatic payment process. For example, a gate may be provided at the exit side, making it difficult to leave the commercial facility 200 without making a final payment at the settlement machine 3, 503.

[0156] In the first and second embodiments, it is stated that multiple payment methods can be input as payment information, but it may be only one payment method. For example, it may be configured to determine an ID for each payment method. In addition, it is stated that when multiple payment methods are registered, it is possible to set authentication information for each payment method, but this does not have to be the case. In addition, it is stated that multiple payment methods can be used for one piece of purchase information, but this does not have to be the case. In addition, it is not necessary to set a payment ratio when multiple payment methods are selected. In addition, it is stated that multiple pieces of authentication information and biometric information can be registered in association with one payment method, but this does not have to be the case.

[0157] In addition, in any of the sequence diagrams or flowcharts disclosed in the first and second embodiments, the execution order of multiple processes in any of the procedures or steps can be changed as desired or the processes can be executed in parallel as long as no contradictions occur in the processing content.

[0158] The processes disclosed in the first and second embodiments may be executed by a single CPU, multiple CPUs, hardware such as ASIC, or a combination of these. The processes disclosed in the first and second embodiments may be realized in various forms, such as a recording medium having a program for executing the processes recorded thereon, or a method. [Explanation of symbols]

[0159] 1,501 issuing machine 2,502 Terminal Equipment 3, 503 payment machine 4,504 servers 6 Registration Machine 8 Payment Device 100, 500 payment system 200 Commercial facilities 300 Recording media

Claims

1. A settlement system having an issuer disposed on the entrance side of a specific facility, a cashier disposed on the exit side of the specific facility, and a terminal device disposed in the specific facility, wherein: The issuer:[[]] Executes a settlement method input process for inputting a settlement method, and the settlement methods that can be input in the settlement method input process include a post-payment settlement method and a prepaid settlement method. Furthermore, the issuer:[[]] When a valid settlement method is input in the settlement method input process, executes a registration process of storing the identification information of the user in association with settlement information indicating the settlement method input in the settlement method input process; when an invalid settlement method is input in the settlement method input process, executes a cancellation process of canceling the input settlement method. The terminal device:[[]] Executes a terminal reading process for reading the identification information; Executes a specifying process for specifying a product provided to the user; If the product specified in the specifying process can be settled using the settlement method indicated in the settlement information associated with the identification information read in the terminal reading process, executes a provisional settlement process of storing purchase information based on the product specified in the specifying process in association with the read identification information. The cashier:[[]] Executes a cashier reading process for reading the identification information; Executes an acquisition process of acquiring a settlement amount based on the purchase information associated with the identification information read in the cashier reading process; Executes a final settlement process of settling the settlement amount acquired in the acquisition process using the settlement method indicated in the settlement information associated with the identification information read in the cashier reading process. A settlement system characterized by the above.

2. In the settlement system according to Claim 1, The issuer:[[]] Executes an issuer biometric input process for inputting the biometric information of the user. In the issuer biometric input process, there are cases where the biometric information is input as a first attribute and cases where it is input as a second attribute. The second attribute can be input when the biometric information of the first attribute is selected. In the registration process:[[]] Stores the biometric information input as the first attribute in the issuer biometric input process as the identification information in association with settlement information indicating the settlement method input in the settlement method input process. ​ ​ Store the biometric information input as the second attribute in the issuance biometric input process in association with the biometric information of the selected first attribute. The terminal device, In the terminal reading process, the identification information is read by detecting the biometric information. In the provisional settlement process, When the biometric information of the first attribute is detected in the terminal reading process, if the product specified in the specifying process can be settled using the settlement method indicated in the settlement information associated with the detected biometric information of the first attribute, store the purchase information based on the product specified in the specifying process in association with the detected biometric information of the first attribute. When the biometric information of the second attribute is detected in the terminal reading process, if the product specified in the specifying process can be settled using the settlement method indicated in the settlement information associated with the biometric information of the first attribute associated with the detected biometric information of the second attribute, store the purchase information based on the product specified in the specifying process in association with the biometric information of the first attribute associated with the detected biometric information of the second attribute. The cash register, In the cash register reading process, the identification information is read by detecting the biometric information. In the acquisition process, When the biometric information of the first attribute is detected in the cash register reading process, in the acquisition process, acquire the settlement amount based on the purchase information associated with the detected biometric information of the first attribute. When the biometric information of the second attribute is detected in the cash register reading process, acquire the settlement amount based on the purchase information associated with the biometric information of the first attribute associated with the detected biometric information of the second attribute. A settlement system characterized by the above.

3. In the settlement system according to claim 1 or claim 2, The terminal device, Based on the purchase information associated with the identification information read in the terminal reading process, accept a return instruction for each provided product, and when the return instruction is accepted, execute a return process to update the purchase information so as to cancel the product to be returned. A settlement system characterized by the above.

4. In the settlement system according to claim 3, The provided products include returnable products and non-returnable products. The terminal device, In the return processing, among the provided products, the return instruction is accepted for the returnable products, and the return instruction is not accepted for the non-returnable products. A settlement system characterized by the above.

5. In the settlement system according to Claim 1 or Claim 2, An expiration date is associated with the identification information registered in the registration processing. When there is identification information with an expired expiration date, an amount to be settled based on the purchase information associated with the identification information with the expired expiration date is obtained, and the obtained amount to be settled is settled using the settlement method indicated in the settlement information associated with the identification information with the expired expiration date. It has an automatic settlement means. A settlement system characterized by the above.

Images