Program, information processing device, and information processing method

Abstract

To provide a program, an information processing device, and an information processing method that are capable of assisting in the detection of an illegal remittance transaction executed by the administrator of an electronic payment service.SOLUTION: A program makes an information process device execute a user information acquisition process, a network information acquisition process, and a display control process: the user information acquisition process acquires the user information including at least remittance history information during the target period between multiple users, where the user information comprises multiple pieces of user information related to multiple users on the basis of target users using an electronic payment service; the network information acquisition process acquires the network representing a money transfer relation between the multiple users in the electronic payment service by inputting the multiple pieces of user information into the model outputting the network representing the money transfer relation between the multiple users when the multiple pieces of user information are input; and the display control process displays the acquired network on the terminal device of the administrator of the electronic payment service.SELECTED DRAWING: Figure 7

Description

[Technical field]

[0001] The present invention relates to a program, an information processing device, and an information processing method. [Background technology]

[0002] Conventionally, there are known methods for detecting fraudulent remittance transactions via a network. For example, Patent Literature 1 describes a technology for detecting a remittance transaction sent to a blockchain network as a fraudulent remittance transaction when the remittance source address is the same as the customer address and the remittance destination address of the remittance transaction is not the same as the remittance destination address in the whitelist. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2019-139542 A Summary of the Invention [Problem to be solved by the invention]

[0004] The technology described in Patent Document 1 prepares a whitelist in advance to detect fraudulent remittance transactions. However, it is not realistic to prepare a whitelist for an electronic payment service that is generally used by a large number of users, and with the conventional technology, it was sometimes difficult for the operator of the electronic payment service to detect fraudulent remittance transactions.

[0005] The present invention has been made in consideration of the above circumstances, and one of its objects is to provide a program, an information processing device, and an information processing method that can assist operators of electronic payment services in detecting fraudulent remittance transactions. [Means for solving the problem]

[0006] One aspect of the present invention is a program for causing an information processing device to execute a user information acquisition process for acquiring multiple user information related to multiple users based on target users who use an electronic payment service, the user information including at least remittance history information between the multiple users for a target period; a network information acquisition process for acquiring a network representing the remittance and receipt relationships between the multiple users in the electronic payment service by inputting the multiple user information into a model that outputs a network representing the remittance and receipt relationships between the multiple users when the multiple user information is input; and a display control process for displaying the acquired network on a terminal device of the operator of the electronic payment service. Effect of the Invention

[0007] According to one aspect of the present invention, it is possible to provide a program, an information processing device, and an information processing method that can assist an operator of an electronic payment service in detecting fraudulent remittance transactions. [Brief description of the drawings]

[0008] [Figure 1] FIG. 1 is a diagram showing an example of a configuration for realizing an electronic payment service. [Diagram 2] This is a sequence diagram (part 1) illustrating the general flow of electronic payment. [Diagram 3] This is a sequence diagram (part 2) illustrating the general flow of electronic payment. [Figure 4] 1 is a configuration diagram of a payment server 100 according to a first embodiment. [Diagram 5] FIG. 13 is a diagram showing an example of the contents of user information 172. [Figure 6] FIG. 13 is a diagram showing an example of the contents of affiliated store / store information 176. [Figure 7] 1 is a diagram illustrating a configuration of an information processing device 200 according to a first embodiment. [Figure 8] 13 is a diagram showing an example of network information output by a network generation model 272 and displayed on an administrator terminal device 300. FIG. [Figure 9] 13 is a diagram showing another example of network information output by the network generation model 272 and displayed on the administrator terminal device 300. FIG. [Figure 10] 13 is a diagram showing another example of network information output by the network generation model 272 and displayed on the administrator terminal device 300. FIG. [Figure 11] 2A to 2C are diagrams showing an example of information and an interface screen provided by an information processing device 200. [Figure 12] 2 is a sequence diagram showing an example of a flow of processes executed by the payment server 100, the information processing device 200, and the administrator terminal device 300. FIG. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0009] Hereinafter, with reference to the drawings, an embodiment of the program, information processing device, and information processing method of the present invention will be described. Various devices for providing services to users and performing internal analysis, such as the "payment server" and "information processing device" that will appear below, may be realized by a group of distributed devices, and each device may be operated by a different business operator. Furthermore, the owner of the hardware of the device (the cloud server provider) and the business that actually operates the device may also be different. The application program and the payment server work together to provide an electronic payment service. In the following description, the application program is referred to as a payment application. The electronic payment service is a service that supports payments related to the purchase of goods and services at a store. The store is, for example, a physical store (real store) that exists in the real world, but may also include a virtual store for electronic commerce. The virtual store may include one provided by an entity different from the operator of the electronic payment service. In that case, when making a payment for shopping at the virtual store, the screen is controlled to transition to an interface screen of the electronic payment service. In the electronic payment service, the store is treated as belonging to, for example, an affiliated store (brand), and processing such as payment when a purchase is made at the store is mainly performed between the user and the affiliated store. Alternatively, processing such as payment may be carried out between the user and the store.

[0010] [Electronic payment service] Fig. 1 is a diagram showing an example of a configuration for realizing an electronic payment service. The electronic payment service is realized mainly by a payment server 100. The payment server 100 communicates with, for example, one or more user terminal devices 10, one or more first store terminal devices 50, and one or more second store terminal devices 70 via a network NW1. The network NW1 includes, for example, the Internet, a LAN (Local Area Network), a wireless base station, a provider device, and the like.

[0011] The user terminal device 10 is, for example, a portable terminal device such as a smartphone or a tablet terminal. The user terminal device 10 is a computer device having at least an optical reading function, a communication function, a display function, an input reception function, and a program execution function. In the following description, components for realizing these functions are referred to as a camera, a communication device, a touch panel, a CPU (Central Processing Unit), etc. In the user terminal device 10, a processor such as a CPU executes a payment application 20, thereby operating to provide an electronic payment service to a user in cooperation with a payment server 100. The payment application 20 is installed in the user terminal device 10 from, for example, an application store, and controls the camera, communication device, touch panel, etc.

[0012] The first store terminal device 50 is installed, for example, in a store. The first store terminal device 50 is a computer device having at least a product price acquisition function, an optical reading function, a program execution function, and a communication function. The first store terminal device 50 includes a so-called POS (Point of Sale) device, and the product price acquisition function and the optical reading function may be realized by the POS device. The store code image 60 is placed in the store, and is a code image such as a QR code (registered trademark) printed on a paper or plastic medium. The store code image 60 may be displayed on a display placed in the store (which may be the display of a terminal device such as a smartphone).

[0013] The second store terminal device 70 is used by the operator of the affiliated store. The second store terminal device 70 is a smartphone, a tablet terminal, a personal computer, or the like. An interface 72 for affiliated stores runs on the second store terminal device 70. The interface 72 for affiliated stores may be an app for affiliated stores or a browser. The interface 72 for affiliated stores accepts coupon settings and the like made by the operator of the affiliated store and transmits them to the payment server 100. The second store terminal device 70, which is a smartphone, has the function of displaying a code image corresponding to a store code image and reading a code image displayed by the user terminal device 10 by executing the app for affiliated stores.

[0014] The payment server 100 realizes electronic payment based on payment information received from the user terminal device 10 or the first store terminal device 50. The first store terminal device 50 may include a POS device and an affiliated store server, in which case the payment information is sent from the POS device via the affiliated store server to the payment server 100. In the following explanation, no distinction is made between these two and it is assumed that the payment information is sent from the first store terminal device 50.

[0015] 2 and 3 are sequence diagrams illustrating the general flow of electronic payment. There may be two patterns of electronic payment: pattern 1 and pattern 2.

[0016] In the case of pattern 1 (hereinafter referred to as user scan) shown in FIG. 2, the user terminal device 10 with the payment application 20 activated decodes the store code image 60 by the optical reading function (S1). The store code image 60 includes store URL (Uniform Resource Locator) information. This store URL is an electronic payment service domain to which store-identifying information is added, and is associated with an affiliated store ID, a store ID, etc. in the payment server 100 (described later). The payment application 20 transmits the first payment information including the store URL and the account ID to the payment server 100 (S2). The payment server 100 searches for store information (described later) from the affiliated store ID and the store ID corresponding to the store URL, acquires the affiliated store name and the store name information (S3), and transmits it to the payment application 20 (S4). The user inputs the payment amount into the user terminal device 10 on the screen on which the affiliated store name and the store name are displayed (S5). Then, the user terminal device 10 generates second payment information including at least the payment amount, and transmits it to the payment server 100 (S6). The payment server 100 performs electronic payment based on the received second payment information (S7). The payment server 100 then transmits a payment completion notice (information for displaying a payment completion screen) to the payment application 20 (S8), and the payment application 20 displays the payment completion screen (S9). Note that when the store code image 60 is displayed on a display installed in the store, the store code image 60 may include not only the store URL but also information on the payment amount. In this case, the step of the user inputting the payment amount is omitted, and the information on the payment amount is included in the first payment information and transmitted to the payment server 100. Information on the affiliated store name and the store name may be included in the payment completion screen and displayed.

[0017] In the case of pattern 2 (hereinafter referred to as store scan) shown in FIG. 3, when the payment application 20 is started, when a payment operation is performed in the payment application 20, when an automatic update timing (e.g., every minute) occurs, and at other timings, the payment application 20 transmits a request for issuing a one-time code to the payment server 100 (S11). The payment server 100 generates a one-time code (S12) and transmits it to the payment application 20 (S13). The payment application 20 displays a code image such as a QR code or a barcode generated based on the one-time code (S14). The user holds (presents) the display surface of the user terminal device 10 over the first store terminal device 50, and the first store terminal device 50 decodes the code image by an optical reading function and obtains the one-time code, etc. (S15). The first store terminal device 50 then generates payment information including the one-time code, payment amount, affiliated store ID, store ID, etc., and transmits it to the payment server 100 (S16). The payment amount information is acquired in advance by reading a barcode or manually entering it. The payment server 100 identifies the user corresponding to the one-time code based on the received information and performs electronic payment (S17). The payment server 100 then transmits a payment completion notice to the payment application 20 (S18), and the payment application 20 displays a payment completion screen (S19).

[0018] Note that electronic payment may be performed using only one of the above patterns. Furthermore, the "account ID" described in FIG. 2 may be other information (e.g., a phone number) that can be used as user identification information. Furthermore, issuance of a one-time code may be omitted in the store scan, and the payment application 20 may display a code image generated based on the user's account ID. In this case, the payment server 100 identifies the user corresponding to the account ID instead of identifying the user corresponding to the one-time code.

[0019] The payment server 100 further communicates with each of the information processing device 200 and the administrator terminal device 300 via a network NW2. The network NW2 is an internal network (intranet) of an administrator (organization) that provides electronic payment services. Alternatively, the payment server 100 may communicate with each of the information processing device 200 and the administrator terminal device 300 via a network NW1.

[0020] The information processing device 200 acquires at least remittance history information from the user information 172 from the payment server 100, and generates a three-dimensional network model representing remittance and receipt relationships between multiple users in the electronic payment service during a target period. The information processing device 200 transmits the generated three-dimensional network model to the administrator terminal device 300.

[0021] The administrator terminal device 300 is, for example, a terminal device used by an operator of an electronic payment service. The administrator terminal device 300 displays the three-dimensional network model received from the information processing device 200 on a display. The operator of the electronic payment service can identify users suspected of conducting fraudulent remittances by viewing the three-dimensional network model displayed on the administrator terminal device 300.

[0022] [Payment server] FIG. 4 is a configuration diagram of the payment server 100 according to the first embodiment. The payment server 100 includes, for example, a communication unit 110, a payment content providing unit 120, a payment processing unit 130, an information management unit 140, and a storage unit 170. The components other than the communication unit 110 and the storage unit 170 are realized by, for example, a hardware processor such as a CPU executing a program (software). Some or all of these components may be realized by hardware (including circuitry) such as an LSI (Large Scale Integration), an ASIC (Application Specific Integrated Circuit), an FPGA (Field-Programmable Gate Array), or a GPU (Graphics Processing Unit), or may be realized by cooperation between software and hardware. The program may be stored in advance in a storage device (storage device having a non-transient storage medium) such as an HDD (Hard Disk Drive) or a flash memory, or may be stored in a removable storage medium (non-transient storage medium) such as a DVD or a CD-ROM, and may be installed in the storage device by mounting the storage medium in a drive device.

[0023] The storage unit 170 is a HDD, a flash memory, a RAM (Random Access Memory), etc. The storage unit 170 may be a NAS (Network Attached Storage) device that the payment server 100 can access via a network. The storage unit 170 stores information such as user information 172, payment content information 174, and affiliated store / shop information 176.

[0024] The communication unit 110 is a communication interface for connecting to the network NW. The communication unit 110 is, for example, a network interface card.

[0025] The payment content providing unit 120 has, for example, a function of a Web server, and provides information (content) for displaying various screens of the electronic payment service to the user terminal device 10. The payment content providing unit 120 appropriately reads necessary content from the payment content information 174 and provides it to the user terminal device 10. The user terminal device 10 accepts various inputs by the user while the content is being played by the payment application 20, and transmits the above-mentioned payment information and the like to the payment server 100.

[0026] The payment processing unit 130 performs payment processing based on the payment information transmitted by the user terminal device 10 or the first store terminal device 50. The payment processing unit 130 performs payment processing while referring to the user information 172.

[0027] FIG. 5 is a diagram showing an example of the contents of the user information 172. The user information 172 is an example of the registration information of a user. The user information 172 is information associated with, for example, a user URL, an account ID, a telephone number, a password, an email address, a user ID, a name, an address, a date of birth, a registration date, a status, a charge balance, a post-payment setting, a post-payment limit, a post-payment usage amount, a post-payment available amount, a payment method setting, an identity verification, a bank account, a credit card number, a charge history information, a payment history information, and a remittance history information. The user URL is used for remittance processing between users. When registering for the electronic payment service, it is necessary to register a telephone number and a password. The account ID is issued to the user by the payment server 100, and the user ID is an ID that can be set by the user at will (does not have to be set). Similarly, the email address, and the name, address, and date of birth are information that can be set by the user at will (does not have to be set). The registration date is the date on which the user registered for the electronic payment service (the date on which the account was created). The status is information indicating whether the user's account is enabled or not. In this embodiment, when the status indicates "active," it indicates that the user's use of the payment app 20 is enabled, whereas when the status indicates "suspended," it indicates that the user's use of the payment app 20 is disabled. For example, when the payment server 100 detects something suspicious about the user's use of the payment app 20 (for example, when a user has received remittances of a predetermined number of times or a predetermined amount or more from a predetermined number of other users in a day), it changes the status of the user from "active" to "suspended."

[0028] The charge balance is information indicating the balance of electronic money that is set by a user by transferring money to an account in advance. The means of transfer include transfer from an ATM (Automatic Teller Machine) of a designated company (bank) and transfer from a registered bank account. The deferred payment setting is information indicating whether or not the setting for enabling electronic payment by deferred payment has been completed, and is set to either "completed" or "not completed." The deferred payment limit is the limit of deferred payment that can be used each month, the deferred payment usage amount is the amount of deferred payment that has already been used in the current month, and the deferred payment available amount is the amount of deferred payment that can be used in the current month, which is calculated by subtracting the deferred payment usage amount from the deferred payment limit. Although only one deferred payment limit is shown in the figure, in reality, there is also a daily upper limit, and the lower of these may be set as the deferred payment limit. Further details of deferred payment will be described later. The payment method setting is setting information indicating whether the user will perform electronic payment using the charge balance or payment by deferred payment at that time. The identity verification is information indicating whether or not the identity verification of the user has been completed by the user submitting an identity verification document such as a driver's license to the payment server 100. When the identity verification of the user has been completed, the payment server 100 permits the user to register a bank account, permits the user to withdraw the charge balance to the bank account, and permits the user to transfer the charge balance to another user. The bank account and credit card number are information (account number, card number) of a bank account or credit card number that can be deposited into the electronic payment service. The charge history information is a history of the user transferring money to the electronic payment service in advance to increase the charge balance. The payment history information is information indicating the breakdown of the payment made by the user (date and time, store ID of the store where the purchase was made, payment amount, payment method, etc.) for each payment. The remittance history information is information indicating the details of the remittance of the charge balance from one user to another user (date and time, remittance amount, remittance source account ID, remittance destination account ID).

[0029] 6 is a diagram showing an example of the contents of affiliated store / store information 176. The affiliated store / store information 176 includes, for example, a first table 176A in which an affiliated store ID, a store ID, and a location are associated with a store URL, a second table 176B in which an affiliated store name, sales amount (described above), and a category are associated with an affiliated store ID, and a third table 176C in which a store ID is associated with a store name. In addition to this information, the affiliated store / store information 176 may also include information such as payment patterns available at a store.

[0030] The information management unit 140 manages user information 172 and affiliated store / store information 176 based on information acquired from the user terminal device 10 and the second store terminal device 70. The information management unit 140 adds new records to, edits, and deletes the user information 172 and affiliated store / store information 176.

[0031] [Electronic payment] When payment information is acquired from the user terminal device 10 or the first store terminal device 50, the payment processing unit 130 refers to the user information 172 to acquire the "payment method setting" of the user. For a user whose "payment method setting" is set to "charge balance", the payment processing unit 130 performs electronic payment as follows. For example, the payment processing unit 130 performs electronic payment by decreasing the charge balance managed in association with the user ID and increasing the item value of the affiliated store's sales. The item value of the affiliated store's sales is not used as electronic money itself, for example, and an amount corresponding to the item value of the sales is transferred to a bank account in a cycle according to an agreement between the affiliated store and the electronic payment service.

[0032] The payment processing unit 130 performs electronic payment for users whose "setting information" is set to "deferred payment" as follows. Deferred payment is set separately from "credit payment" in cooperation with a credit card company, which is a separate entity from the operator of the electronic payment service, and the operator of the electronic payment service acts as a creditor and allows electronic payment that is not dependent on the charge balance within the deferred payment limit. In order to receive the deferred payment service, a credit card provided by the operator of the electronic payment service may be required. The amount used for deferred payment is settled on the payment date of the following month, for example, by debiting from a bank account, for one month. In this case, the payment processing unit 130 performs provisional payment by adding the payment amount to the deferred payment amount and subtracting the same amount from the available deferred payment amount, and when the closing date comes, it performs processing to debit the payment for the current month on the payment date of the following month as described above, or requests the operator of the credit card company to perform such processing. In addition, if the payment amount exceeds the available deferred payment amount at the time of provisional payment, an error notification is returned to the payment application 20.

[0033] [Information processing device] FIG. 7 is a configuration diagram of the information processing device 200 according to the first embodiment. The information processing device 200 includes, for example, a user information acquisition unit 210, a network information acquisition unit 220, a display control unit 230, and a storage unit 270. The components other than the storage unit 270 are realized by, for example, a hardware processor such as a CPU executing a program (software). Some or all of these components may be realized by hardware (including circuitry) such as an LSI (Large Scale Integration), an ASIC (Application Specific Integrated Circuit), an FPGA (Field-Programmable Gate Array), or a GPU (Graphics Processing Unit), or may be realized by cooperation between software and hardware. The program may be stored in advance in a storage device (a storage device having a non-transient storage medium) such as an HDD (Hard Disk Drive) or a flash memory, or may be stored in a removable storage medium (non-transient storage medium) such as a DVD or a CD-ROM, and installed in the storage device by mounting the storage medium in a drive device.

[0034] The storage unit 270 is a HDD, a flash memory, a RAM (Random Access Memory), etc. The storage unit 270 may be a NAS (Network Attached Storage) device that the information processing device 200 can access via a network. The storage unit 270 stores information such as a network generation model 272.

[0035] The user information acquisition unit 210 acquires from the payment server 100 a plurality of pieces of user information 172 relating to a plurality of users who use the electronic payment service, the user information including at least remittance history information between the plurality of users during a target period. More specifically, the user information acquisition unit 210 acquires user information of users who have a remittance / receive relationship of two layers before and after the target account ID (target user) input by the operator of the electronic payment service on the administrator terminal device 300. Here, "users who have a remittance / receive relationship of two layers before and after" refers to a user who has remitted money to the target user (user one layer before), a user who has remitted money to the user one layer before (user two layers before), a user who is the destination of the remittance made by the target user (user one layer later), and a user who is the destination of the remittance made by the user one layer later (user two layers later). In this embodiment, as an example, user information of a user having a money transfer relationship spanning two layers is obtained, but the present invention is not limited to such a configuration, and user information of a user having a money transfer relationship spanning one layer may be obtained, or user information of a user having a money transfer relationship spanning three or more layers.

[0036] Furthermore, when the target user or a user having a remittance / receiver relationship with the target user for two layers before and after the target user has made an electronic payment, the user information acquisition unit 210 acquires payment history information of the user information 172 related to the electronic payment, and information on the affiliated store and shop where the electronic payment was made (including, for example, the affiliated store name, shop name, category, and location from the affiliated store / shop information 176). That is, the user information acquisition unit 210 acquires detailed information of the made electronic payment from the payment server 100.

[0037] The network information acquisition unit 220 acquires network information representing the remittance and receipt relationships between the multiple users by inputting the acquired multiple user information, payment history information, and information on affiliated stores and shops into the network generation model 272. The display control unit 230 transmits the network information acquired by the network information acquisition unit 220 to the administrator terminal device 300 via the network NW2, and displays it on the display of the administrator terminal device 300.

[0038] Fig. 8 is a diagram showing an example of network information output by the network generation model 272 and displayed on the administrator terminal device 300. In Fig. 8, the symbol TP represents a target user designated on the administrator terminal device 300 by the operator of the electronic settlement service, the symbols TP_1 and TP_2 represent users (users one level back) who have made a remittance to the target user TP, the symbols TP_1_1, TP_1_2, and TP_1_3 represent users (users two levels back) who have made a remittance to the user TP_1 one level back, the symbols TP_2_1, TP_2_2, TP_2_3, and TP_2_4 represent users (users two levels back) who have made a remittance to the user TP_2 one level back, the symbol TP_3 represents a user (user one level back) who is the destination of the remittance made by the target user TP, and the symbol TP_3_1 represents a user (user two levels back) who is the destination of the remittance made by the user one level back.

[0039] In the network information of FIG. 8, the direction of the arrow indicates the direction of remittance, and the thickness of the arrow indicates the size of the remittance amount. For example, in the case of FIG. 8, the thickness of the arrow from user TP_1 to user TP is equal to the sum of the thickness of the arrow from user TP_1_1 to user TP_1, the thickness of the arrow from user TP_1_2 to user TP_1, and the thickness of the arrow from user TP_1_3 to user TP_1. This indicates that user TP_1 remits all the amounts remitted from users TP_1_1, TP_1_2, and TP_1_3 to user TP. In this way, the network generation model 272 expresses the direction of remittance as the direction of the network and the size of the remittance amount as the thickness of the network, so that the operator of the electronic payment service can easily identify users who are making fraudulent remittances.

[0040] Furthermore, as shown in the legend of FIG. 8, a circle symbol represents a user who has been verified, a triangle symbol represents a user who has not been verified, and a square symbol represents a store. Furthermore, a black symbol represents a user whose status is active, and a gray symbol represents a user whose status is suspended. For example, an operator of an electronic payment service may investigate a user who has a money transfer relationship with a user whose status is suspended, assuming that the user may be conducting fraudulent money transfers. Also, for example, an operator of an electronic payment service may investigate a user who has a money transfer relationship with a user whose identity has not been verified, assuming that the user may be conducting fraudulent money transfers. In this way, the network generation model 272 can assist the operator of an electronic payment service in monitoring money transfers by displaying the status information of each user in the electronic payment service together with the money transfer relationship between users.

[0041] Furthermore, in FIG. 8, the symbol CUR represents a cursor operated by the operator of the electronic payment service on the administrator terminal device 300. For example, when the operator of the electronic payment service places the cursor CUR on a symbol (circle or triangle) representing a user in the network information, the display control unit 230 displays detailed information about the user (for example, account ID, status, total number of receipts, total amount of receipts, total number of remittances, total amount of remittances, total number of withdrawals and total amount of withdrawals to a bank account, total number of store purchases by electronic payment and total amount of store purchases). The operator of the electronic payment service investigates, for example, a user whose statistics on receipts, remittances, withdrawals, and store purchases are excessive, assuming that the user may be conducting fraudulent remittances. In this way, the network generation model 272 can assist the operator of the electronic payment service in monitoring remittances by displaying detailed information about the user in response to the operation of the cursor CUR.

[0042] FIG. 9 is a diagram showing another example of network information output by the network generation model 272 and displayed on the administrator terminal device 300. FIG. 9 shows a screen displayed when the operator of the electronic payment service places the cursor CUR on the symbol S representing a store in the network information shown in FIG. 8. First, as shown in FIG. 9, when a user makes an electronic payment to a certain store, the network information expresses the relationship between the user and the store by connecting them with a straight line instead of an arrow. Furthermore, when the user places the cursor CUR on the symbol S representing a store, for example, the display control unit 230 displays detailed information about the store (for example, the affiliated store name, store name, category, location, number of purchases by the user, and total purchase amount). For example, in the case of FIG. 9, the operator of the electronic payment service can see that the user TP_3_1, whose identity has not yet been verified, has spent the entire amount transferred from the target user TP via user TP_3 on purchasing goods at a precious metals store. In this case, the operator of the electronic payment service can grasp the fact that user TP_3_1 has not verified his / her identity, that he / she has received a large amount of remittance, and further that he / she has used the entire amount of the remittance to purchase goods that are easily convertible into cash, and can take appropriate measures (such as reporting to a public institution or suspending user TP_3_1).In this way, when a user makes an electronic payment at a store, the network generation model 272 can assist the operator of the electronic payment service in monitoring the remittance by displaying the payment information and the store information in addition to the remittance / receive relationship.

[0043] Fig. 10 is a diagram showing another example of network information output by the network generation model 272 and displayed on the administrator terminal device 300. Fig. 10 shows an example in which a user P1 and another user P2 are transferring money to each other. When a user P1 and another user P2 are transferring money to each other, the network generation model 272 expresses the transfer relationship by simultaneously displaying an arrow from user P1 to user P2 and an arrow from user P2 to user P1, as shown in Fig. 10. In this way, the network generation model 272 expresses the transfer relationship using curved arrows, thereby making it possible to show the relationship in which multiple users are transferring money to each other in a manner that is easy for the operator of the electronic payment service to understand.

[0044] [Administrator terminal device] In this way, the information processing device 200 uses the network generation model 272 to output network information representing a remittance / receive relationship between a target user and users who have a remittance / receive relationship of two layers before and after the target user. However, since there are generally many users who register with an electronic payment service, it is difficult for the operator of the electronic payment service to designate a user who may be performing fraudulent remittance as a target user without any clue and input the user into the network generation model 272. Therefore, the information processing device 200 acquires and displays information useful for designating a target user to be input into the network generation model 272 from the payment server 100 in advance, and the operator of the electronic payment service designates a target user to be input into the network generation model 272 based on the provided information.

[0045] Fig. 11 is a diagram showing an example of information and an interface screen displayed by the information processing device 200. In Fig. 11, symbol A1 represents an area for selecting an information item that the information processing device 200 acquires from the payment server 100, symbol A2 represents an area for acquiring the selected information and specifying a target period for generating network information, symbol A3 represents an area for specifying a target user for generating network information, and symbol B1 represents an instruction button for generating a network for the target user specified in region A3.

[0046] As shown in FIG. 11, for example, the information processing device 200 acquires information such as the amount of receipt, the amount of remittance, the amount of purchase, the number of receipts, and the number of remittances from the payment server 100 for the target period designated in the area A2, in accordance with the designation by the operator of the electronic payment service. For example, when the amount of receipt is designated, the payment server 100 aggregates the remittance history information of the user information 172, thereby linking the account ID and the amount of receipt for the target period and transmitting them to the information processing device 200. The information processing device 200 displays the account IDs in descending order of the amount of receipt, for example. This enables the operator of the electronic payment service to identify users who have received a large amount of money during the target period, and can designate such users as target users for which network information is to be generated. When the operator of the electronic payment service inputs the account ID of the target user in the area A4 and presses the button B1, the administrator terminal device 300 transmits the input account ID to the information processing device 200, and the information processing device 200 inputs the received account ID into the network generation model 272 to acquire network information. The display control unit 230 transmits the acquired network information to the administrator terminal device 300 and displays it on the display. In addition to the input items shown in Fig. 11, for example, an area for specifying the number of hierarchical layers for generating the network information may also be displayed.

[0047] [Processing flow] 12 is a sequence diagram showing an example of the flow of processing executed by the payment server 100, the information processing device 200, and the administrator terminal device 300. First, the administrator terminal device 300 transmits the account ID of the target user and the target period input by the operator of the electronic payment service to the information processing device 200 (S31). Next, the information processing device 200 requests the payment server 100 to send user information for the target period for two hierarchical levels before and after the received account ID (S32).

[0048] Next, the payment server 100 transmits the user information and the store information where the user made the payment to the information processing device 200 for the target period (S33). Next, the information processing device 200 inputs the received user information and store information into the network generation model 272 to acquire network information (S34). Next, the information processing device 200 transmits the acquired network information to the administrator terminal device 300 (S35). Next, the administrator terminal device 300 displays the received network information (S36). This ends the processing of this sequence diagram.

[0049] According to the embodiment described above, the system executes a process of acquiring user information relating to a plurality of users who use an electronic payment service, the user information including at least remittance history information between the plurality of users, a process of acquiring a network representing the remittance and receipt relationships between the plurality of users in the electronic payment service by inputting the plurality of user information into a model that outputs a network representing the remittance and receipt relationships between the plurality of users when the plurality of user information is input, and a process of displaying the acquired network on a terminal device of the operator of the electronic payment service, thereby assisting the operator of the electronic payment service in detecting fraudulent remittance transactions.

[0050] The above describes the form for carrying out the present invention using an embodiment, but the present invention is not limited to such an embodiment, and various modifications and substitutions can be made within the scope that does not deviate from the gist of the present invention. [Explanation of symbols]

[0051] 10 User terminal device 20. Payment App 100 Payment Server 120 Payment Contents Provider 130 Payment processing unit 140 Information Management Department 170 Storage section 200 Information processing device 300 Administrator terminal device

Claims

1. In the information processing device, a user information acquisition process for acquiring a plurality of pieces of user information relating to a plurality of users based on target users who use an electronic payment service, the user information including at least remittance history information between the plurality of users during a target period; a network information acquisition process for acquiring a network representing the remittance and receipt relationships between the plurality of users in the electronic payment service by inputting the plurality of user information into a model that outputs a network representing the remittance and receipt relationships between the plurality of users when the plurality of user information is input; a display control process for displaying the acquired network on a terminal device of the operator of the electronic payment service; A program for executing the above.

2. The user information acquisition process acquires a plurality of pieces of user information relating to a plurality of users having a remittance / receiver relationship of two layers before and after the target user, The network information acquisition process acquires a network representing a remittance / receive relationship between the plurality of users having a remittance / receive relationship of two layers before and after the target user. The program according to claim 1.

3. The user information acquisition process acquires the plurality of pieces of user information and store information regarding a store where any one of the plurality of users has made an electronic payment, the network information acquisition process acquires a network representing a money transfer relationship between the plurality of users and a store where the user has made an electronic payment; The program according to claim 1.

4. the network information acquisition process acquires a network representing the money transfer relationship by arrows from a user who has made a remittance to a user who has received the remittance, among the plurality of users; The program according to any one of claims 1 to 3.

5. the network information acquisition process displays the arrow thicker the greater the amount of the remittance; The program according to claim 4.

6. the network information acquisition process acquires a network representing the money transfer relationship including status information of the plurality of users in the electronic payment service; The program according to any one of claims 1 to 3.

7. the status information includes information indicating whether each of the plurality of users has performed identity verification in the electronic payment service; The program according to claim 6.

8. the status information includes information indicating whether or not each of the plurality of users has been forcibly suspended from using the electronic payment service; The program according to claim 6.

9. a user information acquiring unit that acquires a plurality of pieces of user information relating to a plurality of users based on target users who use an electronic payment service, the user information including at least remittance history information between the plurality of users during a target period; a network information acquisition unit that acquires network information representing the remittance and receipt relationships between the plurality of users in the electronic payment service by inputting the plurality of user information into a model that outputs a network representing the remittance and receipt relationships between the plurality of users when the plurality of user information is input; and a display control unit that displays the acquired network information on a terminal device of the operator of the electronic payment service. Information processing device.

10. An information processing device, a user information acquisition process for acquiring a plurality of pieces of user information relating to a plurality of users based on target users who use an electronic payment service, the user information including at least remittance history information between the plurality of users during a target period; a network information acquisition process for acquiring a network representing the remittance and receipt relationships between the plurality of users in the electronic payment service by inputting the plurality of user information into a model that outputs a network representing the remittance and receipt relationships between the plurality of users when the plurality of user information is input; a display control process for displaying the acquired network on a terminal device of the operator of the electronic payment service; An information processing method for performing the above.

Images