Information processing device, information processing method and information processing program

Abstract

To provide an information processing device preventing unauthorized use of electronic money accounts from occurring.SOLUTION: An information processing device includes an acquisition part, a detection part and a restriction. The acquisition part acquires login information for an electronic money settlement service. The detection part detects logins to a same account by a plurality of terminal devices based on the login information acquired by the acquisition part. When the detection part detects logins to the same account by the plurality of terminal devices, the restriction part restricts a part of functions relating to the electronic money account by newly logged-in terminal devices.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present invention relates to an information processing device, an information processing method, and an information processing program. [Background technology]

[0002] Recently, the government has begun to consider introducing the so-called "digital salary payment" system, which would allow money transfer businesses operating in the money transfer industry to pay salaries using digital money such as the above-mentioned electronic money and virtual currency. In relation to this, technology related to the digital salary payment has also been proposed (for example, see Patent Document 1). [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2022-151873 A Summary of the Invention [Problem to be solved by the invention]

[0004] For example, digital payment of wages will increase the amount of assets held in electronic money accounts, which is expected to increase the damage caused by unauthorized use of accounts through spoofing, etc. For this reason, there is a need for technology development to prevent unauthorized use of electronic money accounts.

[0005] The present invention has been made in consideration of the above, and has an object to provide an information processing device, an information processing method, and an information processing program that can prevent unauthorized use of an electronic money account. [Means for solving the problem]

[0006] In order to solve the above-mentioned problems and achieve the object, an information processing device according to the present invention includes an acquisition unit, a detection unit, and a restriction unit. The acquisition unit acquires login information for an electronic money payment service. The detection unit detects logins to the same account by multiple terminal devices based on the login information acquired by the acquisition unit. When the detection unit detects logins to the same account by multiple terminal devices, the restriction unit restricts some of the functions related to the electronic money account by the newly logged-in terminal device. Effect of the Invention

[0007] According to the present invention, unauthorized use of electronic money can be prevented. [Brief description of the drawings]

[0008] [Figure 1] FIG. 1 is a diagram illustrating an example of information processing according to an embodiment. [Diagram 2] FIG. 2 is a block diagram illustrating an example of the configuration of the information processing device according to the embodiment. [Diagram 3] FIG. 3 is a diagram illustrating an example of a user information database according to the embodiment. [Figure 4] FIG. 4 is a flowchart illustrating an example of the restriction process according to the embodiment. [Diagram 5] FIG. 5 is a hardware configuration diagram showing an example of a computer that realizes the functions of the information processing device according to the embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0009] Hereinafter, the information processing device, the information processing method, and the information processing program according to the present application will be described in detail with reference to the drawings. Note that the information processing device, the information processing method, and the information processing program according to the present application are not limited to the embodiments.

[0010] [Embodiment] [1. Information Processing] First, an example of information processing according to the embodiment will be described with reference to Fig. 1. Fig. 1 is a diagram showing an example of information processing according to the embodiment. As shown in Fig. 1, the system according to the embodiment includes an information processing device 1 and a user terminal 100.

[0011] The information processing device 1 according to the embodiment is an information processing device that provides an electronic money payment service to a user. For example, the information processing device 1 is an information processing device that provides an electronic payment service related to electronic payment using a user terminal 100 and performs various payments. The information processing device 1 manages the accounts of providers (businesses) of transaction objects and users to whom transaction objects are provided, and realizes various payments by transferring electronic money between accounts in accordance with a payment request from a user.

[0012] The user terminals 100a and 100b shown in Fig. 1 are information processing devices used by the users Ua and Ub. In the following, when the user terminal 100a and the user terminal 100b are not distinguished from each other, they are referred to as "user terminal 100", and when the users Ua and Ub are not distinguished from each other, they are referred to as "user U".

[0013] The user terminal 100 is realized by, for example, a smartphone, a tablet terminal, a notebook PC (Personal Computer), a desktop PC, a mobile phone, a PDA (Personal Digital Assistant), etc. The user terminal 100 displays information distributed by the information processing device 1 using a web browser or an application. In the example shown in FIG. 1, the user terminal 100 is a smartphone.

[0014] Here, prior to the provision process executed by the information processing device 1, an example of payment (electronic payment) using the user terminal 100 will be described. In the following description, an example will be described in which a user makes a payment using the user terminal 100 by using a two-dimensional code (QR code (registered trademark)) placed in store A, which indicates store identification information for identifying store A, but the embodiment is not limited to this. The example of payment described below is also applicable to a case in which an arbitrary user makes a payment at an arbitrary store using an arbitrary user terminal 100. In addition, the store identification information may be not only a QR code, but also a barcode, a predetermined mark, a number, or the like.

[0015] For example, when a user makes a payment for using or purchasing a payment object (transaction object) such as various goods or services at store A, the user launches a payment app pre-installed on the user terminal 100. The user then photographs the store identification information installed in store A via the payment app. In such a case, the user terminal 100 displays a screen for inputting the price of the payment object, and accepts input of the payment amount from the user or a clerk at store A. The user terminal 100 then transmits to the information processing device 1 user identification information that identifies the user, store identification information (or information indicated by the store identification information, i.e., information indicating store A (or the operator of store A) (e.g., a store ID), and payment information indicating the payment amount.

[0016] In such a case, the information processing device 1 transfers electronic money in the amount indicated by the payment amount from the user's account indicated by the user identification information to the account of store A indicated by the store identification information. Then, the information processing device 1 transmits a notification that the payment has been completed to the user terminal 100. In such a case, the user terminal 100 notifies that the payment has been made with electronic money by outputting a screen or a predetermined sound indicating that the payment has been completed.

[0017] A more detailed example will be described. For example, the store identification information installed in the store A is a URL set for each store, and is linked to group identification information indicating a group to which the store A belongs and group store identification information identifying the store A in the group, and is managed so that the information processing device 1 can refer to it. The URL serving as the store identification information is a URL for accessing the information processing device 1. When the user terminal 100 photographs the store identification information, it accesses the URL indicated by the photographed store identification information and transmits the user identification information. In such a case, the information processing device 1 identifies the group identification information corresponding to the accessed URL, and identifies the electronic money account (sometimes displayed as a "wallet") associated with the identified group identification information. Next, the information processing device 1 causes the user terminal 100 to display an amount input screen and cause the user terminal 100 to input an amount. Then, the information processing device 1 identifies the group identification information from the wallet associated with the user identification information received from the user terminal 100, and transfers the input amount of electronic money to the wallet associated with the identified group identification information. The information processing device 1 may transfer the electronic money to a wallet associated with the group identification information and the group store identification information.

[0018] It should be noted that the payment using the user terminal 100 is not limited to the above-mentioned process. For example, the payment using the user terminal 100 may be made using a store terminal installed in store A. For example, the user terminal 100 displays user identification information for identifying the user on a screen. In such a case, the store terminal installed in store A reads the user identification information displayed on the user terminal 100, and transmits payment information indicating the user identification information (or information indicated by the user identification information, i.e., information indicating the user (e.g., user ID), the payment amount, and information identifying store A) to the information processing device 1. In such a case, the information processing device 1 transfers electronic money in an amount indicated by the payment amount from the user's account indicated by the user identification information to the account of store A, and may notify the store terminal of store A or the user terminal 100 that the payment has been completed by outputting a screen or a predetermined sound indicating that the payment has been completed.

[0019] More specifically, the user terminal 100 transmits a payment request to the information processing device 1 together with the user identification information. In such a case, the information processing device 1 generates a one-time code, links the generated one-time code to the user identification information, and transmits the one-time code to the user terminal 100. The user terminal 100 then displays the one-time code (i.e., information identifying the user) on the screen. In such a case, the store terminal reads the one-time code displayed on the user terminal 100 and transmits the read one-time code, group identification information, group store identification information, and payment amount to the information processing device 1. The information processing device 1 then transfers electronic money equivalent to the payment amount from the wallet linked to the user identification information linked to the one-time code to the wallet linked to the group identification information and group store identification information.

[0020] Furthermore, the payment using the user terminal 100 may not only be a process of transferring electronic money from an account to which the user has previously charged electronic money to an account of store A, but may also be a payment using, for example, a credit card registered by the user in advance. In such a case, for example, the user terminal 100 may transfer electronic money of the payment amount to the account of store A, and may also bill the operating company (card company) of the user's credit card for the payment amount.

[0021] Meanwhile, the government has begun considering introducing a so-called "digital payment of wages" system, which would allow money transfer businesses operating in the money transfer industry to pay wages using digital money such as the above-mentioned electronic money and virtual currency.

[0022] With the digital payment of wages, the payee's transfer destination will change from a bank account to an electronic money account. As a result, it is expected that the balance of each user's electronic money account will increase more than before.

[0023] For this reason, there is an increased need to protect the balances of electronic money accounts. Specifically, there is a need to prevent fraudulent use of electronic money through, for example, account spoofing.

[0024] Therefore, when the information processing device 1 according to the embodiment detects login to the same account from multiple terminal devices, it restricts some of the functions of the newly logged-in terminal device.

[0025] 1, the information processing device 1 acquires login information from each user terminal 100 (step S1). The login information includes the account ID (user ID) of the account to be logged in and the terminal identification number of the user terminal 100. Note that, even for the same user terminal 100, different terminal identification numbers are assigned to the app and the web browser.

[0026] For example, the information processing device 1 acquires login information every time a user U who has already logged in opens a payment application on the user terminal 100. The information processing device 1 also acquires login information when the user U logs in to a new user terminal 100.

[0027] Next, the information processing device 1 detects logins to the same account by a plurality of user terminals 100 based on the login information acquired from each user terminal 100 (step S2).

[0028] For example, the information processing device 1 detects that a user Ub has logged in to the account of user Ua on a user terminal 100b while the user Ua is logged in on a user terminal 100a. Note that "logged in" here refers to a state in which the user has not logged out. In addition, hereinafter, the previously logged-in user terminal 100 may be referred to as a "terminal device of the old environment," and a user terminal 100 that newly logs in while the terminal device of the old environment is logged in may be referred to as a "terminal device of the new environment."

[0029] For example, the information processing device 1 detects logins to the same account by a plurality of user terminals 100 based on the terminal identification numbers of the user terminals 100 included in the login information acquired from the user terminals 100a and 100b.

[0030] Specifically, the information processing device 1 compares the terminal identification number of the already logged-in user terminal 100a with the terminal identification number of the newly logged-in user terminal 100b, and if the two terminal identification numbers are different, detects this as multiple user terminals 100 logging in to the same account.

[0031] More specifically, the information processing device 1 compares the terminal identification number of the already logged-in user terminal 100 (terminal device of the old environment) with the terminal identification number of the user terminal 100 (terminal device of the new environment) contained in the currently acquired login information, and if the two terminal identification numbers match, allows the login without any restrictions.

[0032] On the other hand, if the two terminal identification numbers do not match, the information processing device 1 restricts some of the functions of the newly logged-in user terminal 100 (terminal device of the new environment) as described below, and then permits the user to log in. Note that, if the two terminal identification numbers do not match, the information processing device 1 may not permit the newly logged-in user terminal 100 to log in.

[0033] That is, a login from the user terminal 100b with a different terminal identification number is highly likely to be an unauthorized login to the account of the user Ua, and the information processing device 1 detects such a duplicate login to the same account.

[0034] When the information processing device 1 detects login to the same account by multiple user terminals 100, it sends an alert to the user terminal 100a (terminal device of the old environment) that has already logged in (step S3), and restricts some of the functions of the newly logged-in user terminal 100b (terminal device of the new environment) (step S4).

[0035] For example, the information processing device 1 notifies the user terminal 100a (terminal device of the old environment) of the login by the user terminal 100b as an alert through the payment application. This allows the user Ua to recognize the login by the user terminal 100b.

[0036] Furthermore, examples of functions that the information processing device 1 restricts for the newly logged-in user terminal 100b include withdrawal and remittance. That is, the information processing device 1 restricts functions that involve a decrease in the balance of the electronic money account of the user Ua.

[0037] In this case, the information processing device 1 may not restrict the function for transferring money to the bank account of the user Ua. In other words, the function for transferring money to a bank account under a name other than that of the user Ua may be restricted, but the function for transferring money to the bank account of the user Ua may not be restricted. In other words, the information processing device 1 may not restrict the function for transferring money to the bank account of the user Ua, which does not substantially reduce the assets of the user Ua. For example, in this case, the information processing device 1 does not restrict the function for transferring money to the bank account of the user Ua by comparing the name registered in the user's account with the name of the bank account to which the money is to be transferred.

[0038] Also, for example, the information processing device 1 restricts some functions of the newly logged-in user terminal 100b for a certain period (for example, 24 hours), and releases the restriction on some functions after the certain period has elapsed.

[0039] As a result, for example, if a user Ua logs in from a new user terminal 100 after changing models and is logged in from the previous user terminal 100, after a certain period of time has passed, all functions can be used without restrictions.

[0040] The information processing device 1 may receive, together with the alert in step S3, from the user Ua, whether or not the login from the user terminal 100b is a login by the user Ua himself / herself. In this case, the information processing device 1 may release the function restriction of the user terminal 100b when the user Ua has logged in to the user terminal 100b.

[0041] In this way, the information processing device 1 according to the embodiment detects logins to the same account from multiple terminal devices and restricts some of the functions of the terminal device that has newly logged in. This allows the information processing device 1 according to the embodiment to prevent unauthorized use of electronic money. For example, the information processing device 1 according to the embodiment can prevent unauthorized use of electronic money accounts, such as money laundering.

[0042] [2. Example of payment server configuration] Next, a configuration example of the information processing device 1 will be described with reference to Fig. 2. Fig. 2 is a block diagram showing a configuration example of the information processing device 1 according to an embodiment. As shown in Fig. 2, the information processing device 1 has a communication unit 2, a storage unit 3, and a control unit 4.

[0043] The communication unit 2 is realized by, for example, a network interface card (NIC) etc. The communication unit 2 is connected to the network N by wire or wirelessly, and transmits and receives information to and from the user terminal 100 etc.

[0044] The storage unit 3 is realized by, for example, a semiconductor memory element such as a random access memory (RAM) or a flash memory, or a storage device such as a hard disk or an optical disk.

[0045] As shown in Fig. 2, the storage unit 3 has a user information database 31. The user information database 31 is a database that stores various information related to users. Fig. 3 is a diagram showing an example of the user information database 31 according to the embodiment.

[0046] As shown in FIG. 3, the user information database 31 according to the embodiment stores information items such as "user ID," "account information," "terminal identification number," and "login time" in association with one another.

[0047] The "User ID" item stores an identifier for identifying each user. The "Account Information" item stores the account information of a user identified by the corresponding user ID. The account information includes information on the user's name, age, address, and telephone number, as well as information on the electronic money account. The information on the electronic money account includes a wallet ID and information on the transaction history of the electronic money account.

[0048] The "Terminal Identification Number" item stores the identification number of the terminal device (user terminal 100) into which the user identified by the corresponding user ID has logged in. For example, the terminal identification number is an identifier unique to each user terminal 100, and even for the same terminal device, the identifier will be different depending on the payment app and the web browser.

[0049] The "login time" stores the login time of a user identified by the corresponding user ID. For example, the login time includes information on the time when a payment app is launched, or the time of payment using electronic money on various EC sites such as shopping sites.

[0050] Returning to the explanation of Fig. 2, the control unit 4 will be explained. The control unit 4 is a controller, and is realized, for example, by a CPU (Central Processing Unit) or an MPU (Micro Processing Unit) executing various programs stored in a storage device inside the information processing device 1 using a RAM as a working area. The control unit 4 is also realized, for example, by an integrated circuit such as an ASIC (Application Specific Integrated Circuit) or an FPGA (Field Programmable Gate Array).

[0051] 2, the control unit 4 has an acquisition unit 41, a detection unit 42, a restriction unit 43, and a notification unit 44. The acquisition unit 41 acquires login information for an electronic money payment service. For example, the acquisition unit 41 acquires login information when a payment application is opened on the user terminal 100 or when a user makes a payment using electronic money on various EC sites such as a shopping site or a flea market site.

[0052] The login information includes a user ID, a wallet ID, a terminal identification number, etc. Note that the login information may include other information, such as location information of the user terminal 100, an IP address, etc.

[0053] The detection unit 42 detects logins to the same account by multiple terminal devices based on the login information acquired by the acquisition unit 41. For example, the detection unit 42 checks the account and the terminal identification number every time login information is acquired.

[0054] Then, when the detection unit 42 detects a login by another terminal device having a different terminal identification number to an account already logged in, the detection unit 42 detects login to the same account by a plurality of terminal devices.

[0055] That is, when login to the same account is performed from a plurality of terminal devices having different terminal identification numbers, the detection unit 42 detects this as login to the same account from a plurality of terminal devices.

[0056] As described above, different terminal identification numbers are assigned to the app and the web browser even for the same terminal device. Therefore, even if login to the same account is performed from the same terminal device using the app and the web browser, the detection unit 42 detects this as login to the same account from multiple terminal devices.

[0057] When the detection unit 42 detects logins to the same account from multiple terminal devices, the restriction unit 43 restricts part of the functions of the payment application of the newly logged-in terminal device (user terminal 100b in FIG. 1).

[0058] For example, the limiting unit 43 limits the withdrawal and transfer of electronic money among the functions of the payment application. That is, the limiting unit 43 limits functions that involve a decrease in the account balance of an electronic money account. Note that the limiting unit 43 may not limit when the withdrawal destination or transfer destination of electronic money is the user's own account. That is, the limiting unit 43 may limit the function of withdrawing or transferring money from the user's electronic money account to an electronic money account or bank account under another person's name. Note that the determination as to whether or not the account is the user's own account is not particularly limited to a process of confirming whether or not the name on the bank account is the same as the registered name on the user's account, a process of confirming whether or not the account is an account registered in advance in the payment service after authentication by the bank of the account to be registered, or any other process that can confirm the user's own account.

[0059] In this case, the restriction unit 43 may permit transfers to other accounts or remittances to other accounts that have a history of withdrawals or remittances made within a certain period of time in the past, while restricting only other withdrawals and remittances. In other words, the restriction unit 43 may restrict the functions of withdrawals and remittances to withdrawal destinations and remittance destinations newly registered after logging in with the terminal device of the old environment.

[0060] Furthermore, the restriction unit 43 may permit all remittances and withdrawals, but require authentication processing using a one-time password using SMS (Short Message Service) or the like. That is, in this case, the restriction unit 43 restricts the functions related to the withdrawal and transfer of electronic money to those that require authentication using a one-time password or the like. In this case, authentication using a one-time password is not required for withdrawals and transfers of electronic money from a terminal device in the old environment, but authentication using a one-time password is required for withdrawals and transfers of electronic money from a terminal device in the new environment.

[0061] This makes it possible to appropriately protect the assets in the user's electronic money account if a login from a terminal device in the new environment is an unauthorized login. Note that such restrictions may be lifted, for example, by notifying the terminal device in the old environment of the contents of the withdrawal or remittance requested by the terminal device in the new environment, and the withdrawal or remittance may be permitted on the terminal device in the old environment.

[0062] The restriction unit 43 may restrict, for example, a payment function using electronic money in addition to the functions related to withdrawal and remittance of electronic money. For example, in this case, the restriction unit 43 may select an affiliated store for which payment using electronic money is restricted based on the payment history of the user.

[0063] For example, the restriction unit 43 permits payments at affiliated stores where the user has made electronic money payments within a certain period of time in the past, and restricts payments at other affiliated stores. In other words, in this case, the restriction unit 43 can restrict the behavior of electronic money payments by the terminal device in the new environment that differs from that of the terminal device in the old environment.

[0064] The restriction unit 43 also releases the function restriction on the newly logged-in terminal device after a certain period of time has elapsed. That is, the restriction unit 43 restricts the function of the newly logged-in terminal device for a certain period of time only. At this time, the restriction unit 43 may notify the terminal device of the old environment of information regarding the period during which the function is restricted.

[0065] The limiting unit 43 may set the period for limiting the function depending on the user. For example, the limiting unit 43 may set a shorter limiting period for a user who logs in frequently, and a longer limiting period for a user who logs in infrequently. The limiting unit 43 may also determine the limiting period based on, for example, the usage history of electronic money payments, instead of the frequency of logins. In this case, for example, the limiting unit 43 sets a shorter limiting period for a user who logs in frequently.

[0066] In addition, the restriction unit 43 may compare the time period during which a newly logged-in terminal device logs in with the time period during which logins are made by terminal devices that have already logged in, and restrict some of the electronic money functions of the newly logged-in terminal device.

[0067] For example, the restriction unit 43 may be configured to restrict some of the functions of the payment application of the newly logged-in terminal device when the time zone of login by the newly logged-in terminal device is different from the time zone of login by a terminal device that has already logged in. That is, the restriction unit 43 may be configured to restrict some of the functions of the payment application of the newly logged-in terminal device when the time zone of login by the newly logged-in user is different from the tendency of the already logged-in user, that is, when there is a high possibility that both users are different persons.

[0068] In addition, the restriction unit 43 may acquire location information of each user terminal 100 as login information, and restrict some of the functions of the payment application of the newly logged-in terminal device of the new environment according to the result of comparing the location information. If the restriction unit 43 cannot acquire location information from the terminal device of the old environment, the restriction unit 43 may estimate the location of the terminal device of the old environment based on the history of electronic money payments made by the terminal device of the old environment. In this case, the restriction unit 43 estimates the location information of the terminal device of the old environment based on the most recent payment date and time and the location of the affiliated store to which the payment is made from the payment history of the terminal device of the old environment, and restricts the functions of the terminal device of the new environment only when the terminal device of the old environment and the terminal device of the new environment are outside a certain range.

[0069] When the detection unit 42 detects logins to the same account from multiple terminal devices, the notification unit 44 notifies an alert to a terminal device that has already logged in. For example, the notification unit 44 notifies a login from another terminal device through a payment application installed in the terminal device.

[0070] For example, in this case, the notification unit 44 may perform a notification that can be received from the user as to whether or not the newly logged-in user is the user himself / herself. For example, when it is confirmed by such a notification that the user himself / herself has logged in on another terminal device, the notification unit 44 may instruct the restriction unit 43 to release the restriction on the function.

[0071] [3. Processing flow] Next, a process procedure executed by the information processing device 1 according to the embodiment will be described with reference to Fig. 4. Fig. 4 is a flowchart showing an example of the restriction process according to the embodiment.

[0072] As shown in FIG. 4, when the information processing device 1 acquires login information from each user terminal 100 (step S101), it determines whether or not a new login is a login to the same account (step S102).

[0073] When it is determined that the login is to the same account (step S102; Yes), the information processing device 1 restricts the functions of the newly logged-in terminal device (user terminal 100) (step S103).

[0074] Then, the information processing device 1 notifies the terminal device (user terminal 100) that is already logged in of an alert (step S104), and ends the process. If the information processing device 1 determines in step S102 that the login is not to the same account (step S102; No), it skips the processes of steps S103 and S104 and ends the process.

[0075] 4. Modifications In the above embodiment, when login to the same account from multiple terminal devices is detected, the newly logged-in terminal device is permitted to log in and some of the functions are restricted, but the present invention is not limited to this. In other words, login from the newly logged-in terminal device itself may not be permitted.

[0076] In the above embodiment, the case where the login target is an electronic money account has been described, but the present invention is not limited to this. That is, the present invention may also be applied to a bank account such as an online banking account.

[0077] 5. Effects The information processing device 1 according to the embodiment described above includes an acquisition unit 41 that acquires login information for an electronic money payment service, a detection unit 42 that detects logins to the same account by multiple terminal devices based on the login information acquired by the acquisition unit 41, and a restriction unit that, when the detection unit 42 detects logins to the same account by multiple terminal devices, restricts some of the functions related to the electronic money account of the newly logged-in terminal device.

[0078] The restriction unit 43 removes the restriction after a certain period of time has elapsed. The acquisition unit 41 acquires login information including the terminal identification number of the terminal device, and the detection unit 42 detects login to the same account by multiple terminal devices based on the terminal identification number.

[0079] The information processing device 1 also includes a notification unit 44 that, when the detection unit 42 detects logins to the same account from multiple terminal devices, issues an alert to terminal devices that have already logged in.

[0080] Furthermore, when withdrawing electronic money from an electronic money account, the restriction unit 43 permits transfer to the user's own account but restricts transfer to an account under another person's name. Furthermore, the restriction unit 43 permits transfer to an account under another person's name that has been withdrawn or transferred from the electronic money account within a certain period of time from an already logged-in terminal device, and restricts transfer to other accounts under another person's name. Furthermore, each time electronic money is transferred or withdrawn from an electronic money account using a newly logged-in terminal device, the restriction unit 43 restricts the transfer or withdrawal to one that requires authentication processing using a one-time password.

[0081] Furthermore, the restriction unit 43 restricts some of the functions as a result of a comparison between the login time period of a newly logged-in terminal device and the login time period of terminal devices that have already logged in.

[0082] By performing any one or a combination of the above-mentioned processes, the information processing device according to the present application can prevent unauthorized use of electronic money.

[0083] [6. Hardware Configuration] The information processing device 1 according to the embodiment described above is realized by a computer 1000 having a configuration as shown in Fig. 5. Fig. 5 is a hardware configuration diagram showing an example of a computer that realizes the functions of the information processing device 1 according to the embodiment. The computer 1000 has a CPU 1100, a RAM 1200, a ROM 1300, a HDD 1400, a communication interface (I / F) 1500, an input / output interface (I / F) 1600, and a media interface (I / F) 1700.

[0084] The CPU 1100 operates and controls each unit based on a program stored in the ROM 1300 or the HDD 1400. The ROM 1300 stores a boot program executed by the CPU 1100 when the computer 1000 is started up, programs that depend on the hardware of the computer 1000, and the like.

[0085] The HDD 1400 stores programs executed by the CPU 1100, data used by such programs, etc. The communication interface 1500 receives data from other devices via a network (communication network) N and sends the data to the CPU 1100, and transmits data generated by the CPU 1100 to other devices via the network N.

[0086] The CPU 1100 controls output devices such as a display and a printer, and input devices such as a keyboard and a mouse (in FIG. 5, the output devices and the input devices are collectively referred to as "input / output devices") via an input / output interface 1600. The CPU 1100 acquires data from the input devices via the input / output interface 1600. The CPU 1100 also outputs generated data to the output devices via the input / output interface 1600.

[0087] The media interface 1700 reads a program or data stored in the recording medium 1800 and provides it to the CPU 1100 via the RAM 1200. The CPU 1100 loads the program from the recording medium 1800 onto the RAM 1200 via the media interface 1700 and executes the loaded program. The recording medium 1800 is, for example, an optical recording medium such as a DVD (Digital Versatile Disc) or a PD (Phase change rewritable Disc), a magneto-optical recording medium such as an MO (Magneto-Optical disk), a tape medium, a magnetic recording medium, or a semiconductor memory.

[0088] For example, when the computer 1000 functions as the information processing device 1 according to the embodiment, the CPU 1100 of the computer 1000 executes programs loaded onto the RAM 1200 to realize the functions of the control unit 4. The CPU 1100 of the computer 1000 reads and executes these programs from the recording medium 1800, but as another example, the CPU 1100 may obtain these programs from another device via the network N.

[0089] Although some of the embodiments of the present application have been described in detail above with reference to the drawings, these are merely examples, and the present invention can be embodied in other forms that incorporate various modifications and improvements based on the knowledge of those skilled in the art, including the aspects described in the Disclosure of the Invention section.

[0090] [7. Other] Furthermore, among the processes described in the above embodiments and modifications, all or part of the processes described as being performed automatically can be performed manually, or all or part of the processes described as being performed manually can be performed automatically by a known method. In addition, the information including the processing procedures, specific names, various data and parameters shown in the above documents and drawings can be changed arbitrarily unless otherwise specified. For example, the various information shown in each drawing is not limited to the illustrated information.

[0091] In addition, each component of each device shown in the figure is a functional concept, and does not necessarily have to be physically configured as shown in the figure. In other words, the specific form of distribution and integration of each device is not limited to that shown in the figure, and all or part of them can be functionally or physically distributed and integrated in any unit according to various loads, usage conditions, etc.

[0092] Furthermore, the above-described embodiments and modifications can be appropriately combined as long as the processing contents are not contradictory.

[0093] Furthermore, the above-mentioned "section, module, unit" can be read as "means" or "circuit", etc. For example, an acquisition section can be read as an acquisition means or an acquisition circuit. [Explanation of symbols]

[0094] 1. Information processing device 2. Communications Department 3 Storage section 4. Control Unit 31 User Information Database 41 Acquisition Department 42 Detection unit 43 Restrictions 44 Notification Department 100 user terminals

Claims

1. an acquisition unit for acquiring login information for an electronic money payment service; a detection unit that detects a login by another terminal device to an account to which a terminal device is already logged in based on the login information acquired by the acquisition unit; a restriction unit that, when the detection unit detects login by the other terminal device, restricts the other terminal device from functions that result in a decrease in assets of the account; An information processing device comprising:

2. The limiting portion is Not to restrict functions that do not result in a decrease in assets of the account 2. The information processing apparatus according to claim 1,

3. The assets of the account are: The assets are those of an electronic money account opened through the electronic money payment service.

2. The information processing apparatus according to claim 1,

4. The limiting portion is Restricting transfers between said electronic money accounts, withdrawals from said electronic money accounts to bank accounts, and settlements using said electronic money accounts 4. The information processing apparatus according to claim 3,

5. The limiting portion is When a restriction period set for the other terminal device has elapsed, the restriction is lifted.

2. The information processing apparatus according to claim 1,

6. The limiting portion is Setting the restriction period depending on the login status of the account 6. The information processing device according to claim 5,

7. The limiting portion is When the account into which the other terminal device has logged in is an account that is frequently logged in, the restriction period is set to be short. The information processing device according to claim 6 .

8. The limiting portion is determining whether or not to impose restrictions on the other terminal device based on location information of the other terminal device that has newly logged in and location information of the terminal device that has previously logged in; 2. The information processing apparatus according to claim 1,

9. The limiting portion is Estimating location information of the other terminal device from the payment history of the newly logged-in other terminal device, and restricting the other terminal device when both terminals are outside a certain range. The information processing device according to claim 8 .

10. 1. A computer-implemented information processing method, comprising: An acquisition step of acquiring login information for an electronic money payment service; a detection step of detecting a login by another terminal device to an account in which a terminal device is already logged in based on the login information acquired by the acquisition step; a limiting step of limiting a function of the other terminal device that involves a decrease in assets of the account when the detection step detects a login by the other terminal device; 13. An information processing method comprising:

11. An acquisition procedure for acquiring login information for an electronic money payment service; a detection step of detecting a login by another terminal device to an account to which a terminal device is already logged in, based on the login information acquired by the acquisition step; a restriction step of restricting a function of the other terminal device that involves a decrease in assets of the account when a login by the other terminal device is detected by the detection step; An information processing program characterized by causing a computer to execute the above.

Images