Provision management method and provision management system

Abstract

To quickly provide an article even in an offline environment.SOLUTION: A provision management method includes: writing, when personal identification is verified based on an identity verification document, provision information regarding provision to a person in a writable region of an IC chip of the identity verification document; determining, when the person receives an article, whether the article can be provided to the person on the basis of information on the article and the provision information; and updating, when the article can be provided to the person, the provision information to be written in the writable region, as new provision information.SELECTED DRAWING: Figure 1

Description

Technical Field

[0001] The present disclosure relates to a payment management method and a payment management system.

Background Art

[0002] Conventionally, payment methods in an offline environment where communication lines such as the Internet are not available have been studied. For example, Patent Document 1 discloses a payment method during a communication failure in which, when there is a communication failure in a payment management server, payment is advanced by transmitting emergency payment data from a smartphone to a store terminal, and after the communication of the payment management server is restored, the amount is deducted from the balance of the smartphone and added to the balance of the store terminal.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] When it is desired to supply an article to a target person, it is required to confirm the identity of the target person and to confirm that the target person is able to receive the article. However, in an offline environment, compared to an online environment where a communication line such as the Internet is available, since the communication line cannot be used, it may take time to confirm the identity of the target person and to confirm that the target person is able to receive the article.

[0005] The present disclosure has been devised in view of the above-described conventional situation, and an object thereof is to promptly supply an article even in an offline environment.

Means for Solving the Problems

[0006] The present disclosure provides a payment management method, which, when the identity of a person can be confirmed based on identity verification documents, writes payment information regarding the payment to the person in a writable area of an IC chip of the identity verification documents, determines whether the payment of an item to the person is possible based on the information of the item and the payment information when the person attempts to receive the item, and if the payment of the item to the person is possible, updates the payment information and writes it as new payment information in the writable area.

[0007] Furthermore, the present disclosure provides a payment management system including an identity verification device that verifies the identity of a person having identity verification documents, and a terminal that is communicable with the identity verification device and includes a display device. The identity verification device writes payment information regarding the payment to the person in a writable area of an IC chip of the identity verification documents when the identity of the person can be verified based on the identity verification documents, determines whether the payment of an item to the person is possible based on the information of the item and the payment information when the person attempts to receive the item, and if the payment of the item to the person is possible, updates the payment information and writes it as new payment information in the writable area. The terminal receives an input of the information of the item by a user operation, displays the information of the item on the display device in response to the input, and displays the new payment information on the display device if the payment of the item to the person is possible.

[0008] In addition, any combination of the above components, and those obtained by converting the expression of the present disclosure among a method, a device, a system, a storage medium, a computer program, etc. are also effective as aspects of the present disclosure.

Advantages of the Invention

[0009] According to the present disclosure, an item can be promptly paid even in an offline environment.

Brief Description of the Drawings

[0010]

Figure 1

Figure 2

Figure 3

Figure 4

Figure 5

Figure 6

Figure 7

Figure 8

Figure 9

Figure 10

Figure 11

Figure 12

Figure 13

Figure 14

Figure 15

Figure 16

Figure 17

Figure 18

Mode for Carrying Out the Invention

[0011] Hereinafter, with appropriate reference to the drawings, embodiments specifically disclosing the payment management method and payment management system according to the present disclosure will be described in detail. However, a more detailed description than necessary may be omitted. For example, detailed descriptions of well-known matters and redundant descriptions of substantially the same configurations may be omitted. This is to avoid making the following description unnecessarily redundant and to facilitate the understanding of those skilled in the art. Note that the attached drawings and the following description are provided for those skilled in the art to fully understand the present disclosure, and it is not intended to limit the subject matter described in the claims thereby.

[0012] (Embodiment 1) [System Configuration] First, with reference to FIGS. 1 and 2, a configuration example of the payment management system according to Embodiment 1 will be described. FIG. 1 is a block diagram showing a configuration example of the payment management system 1 according to Embodiment 1.

[0013] The payment management system 1 and the payment management system 1A (see FIG. 2) are systems for appropriately supplying articles to a target person in an offline environment where the Internet is not available. Various modern systems may be constructed on the premise of an online environment where the Internet is available. However, for example, in the event of a disaster, etc., communication lines such as the Internet become unavailable, and it is conceivable that the online environment switches to an offline environment. In the description of the present embodiment, a situation where a disaster has occurred and the offline environment has thus been established is assumed. Also, the target person receiving the supply, in other words, the target person receiving, includes the target person purchasing an article and the target person receiving the distribution of the article. The payment management system 1 includes an identity verification device 10, a terminal 20, and a power source 30.

[0014] The personal identification document verification device 10 includes a document photographing camera 13, an Integrated Circuit (hereinafter referred to as "IC") card reader / writer 14, and a placement unit 16.

[0015] The placement unit 16 is a part where the personal identification document 50 is placed. In the present embodiment, the personal identification document 50 will be described as being a my number card 80 (see FIG. 4). However, the personal identification document 50 is not limited thereto. For example, the my number card 80 may be mounted on a medium such as a smartphone and treated as the personal identification document 50.

[0016] The personal identification document 50 is non-contact readable and has a secure IC chip 51. The IC chip 51 stores the personal information of the owner of the personal identification document 50. Details of the personal information will be described later with reference to FIG. 3. Also, the IC chip 51 stores "face image data" obtained by photographing the face of the owner of the personal identification document 50.

[0017] In addition, character information 53 indicating the personal information of the owner of the personal identification document 50 and a face photograph 52 of the owner are printed on the face of the personal identification document 50.

[0018] The IC card reader / writer 14 non-contact reads the data stored in the IC chip 51 of the personal identification document 50 placed on the placement unit 16. For example, the IC card reader / writer 14 reads the data stored in the IC chip 51 by Near Field Communication (hereinafter referred to as "NFC") method. Also, the IC card reader / writer 14 non-contact writes data to the IC chip 51 of the personal identification document 50 placed on the placement unit 16. The data stored or written in the IC chip 51 will be described later.

[0019] The document photographing camera 13 photographs the face of the personal identification document 50 placed on the placement unit 16 and generates a "document photographed image".

[0020] The terminal 20 includes a processor 21, a memory 22, a camera 23, a display device 24, an operating device 25, and an external interface device 26. Examples of the terminal 20 include a tablet or a smartphone.

[0021] The processor 21 realizes the functions of the terminal 20 by executing a computer program stored in the memory 22. For example, the processor 21 performs face verification on face image data and a face captured image described later. Further, the processor 21 controls the operation of the person authentication device 10. In other words, the person authentication device 10 operates based on an instruction from the terminal 20.

[0022] The memory 22 stores a computer program and data for realizing the functions of the terminal 20. The memory 22 may include a Read Only Memory (hereinafter referred to as "ROM") and a Random Access Memory (hereinafter referred to as "RAM"). Further, the memory 22 may include a volatile storage medium and a non-volatile storage medium.

[0023] The camera 23 captures the face of the target person 2 and generates a "face captured image".

[0024] The display device 24 is a device that displays information, images, etc. Examples of the display device 24 include a liquid crystal display or an organic Electro Luminescence (hereinafter referred to as "EL") display.

[0025] The operating device 25 is a device that receives an operation from the target person 2. The operating device 25 and the display device 24 may be configured as an integrated device. An example of the operating device 25 and the display device 24 configured as an integrated device is a touch panel display.

[0026] The external interface device 26 is an interface device for transmitting and receiving data with the personal authentication device 10. The external interface device 26 may be a hardware interface device or a wireless interface device. The personal authentication device 10 and the terminal 20 are connected so as to be able to communicate with each other. However, in the present embodiment, the personal authentication device 10 and the terminal 20 are connected to each other without going through a network such as the Internet. This is because an offline environment is assumed in the present embodiment. As an example of the external interface device 26, a Universal Serial Bus (hereinafter referred to as "USB") interface can be cited. In this case, the personal authentication device 10 and the terminal 20 are connected by, for example, USB-C. Although not shown in the figure, the personal authentication device 10 may also be provided with an interface device for communicating with the terminal 20 or the like.

[0027] The power supply 30 supplies power to the personal authentication device 10. The configuration of the power supply 30 is determined according to the personal authentication device 10. For example, the power supply 30 may be a portable power supply or a mobile battery.

[0028] The payment management system 1 may further include an edge Personal Computer (hereinafter referred to as "PC") 40. The edge PC 40 includes at least a processor and a memory, and various functions are realized by the cooperation of the processor and the memory. The edge PC 40 controls, for example, the operation of the personal authentication device 10. That is, the personal authentication device 10 operates in cooperation with the terminal 20 or the edge PC 40. In the payment management system 1, the edge PC 40 may be omitted. This is because even if the edge PC 40 is omitted, the terminal 20's processor 21 can control the personal authentication device 10.

[0029] When the target person 2 places the personal identification document 50 on the placement unit 16 of the personal identification device 10, the personal identification device 10 acquires face image data for personal identification from the IC chip 51 of the placed personal identification document 50. Also, the terminal 20 captures the face of the target person 2 with the camera 23 to generate a face captured image. The terminal 20 performs face verification on the face captured image and the face image data. The face verification may be a method of directly comparing the face image data and the face captured image for verification, or a method of generating face feature amounts from each of the face image data and the face captured image and comparing and verifying those face feature amounts. Note that the face verification only needs to be able to determine whether the person indicated by the face image data and the person indicated by the face captured image are the same person, and is not limited to a specific face verification method. When the face verification is successful, the terminal 20 determines that the target person 2 is the person indicated by the personal identification document 50. That is, the terminal 20 determines that the target person 2 is the person himself / herself. In this way, the identity verification of the target person 2 is performed. Hereinafter, the person indicated by the personal identification document 50 may be referred to as the "document person". When the face verification fails, the terminal 20 determines that the target person 2 is not the document person. That is, the terminal 20 determines that the target person 2 is not the person himself / herself.

[0030] Also, although details will be described later, when the terminal 20 determines that the target person 2 is the document person, the terminal 20 causes the personal identification device 10 to write data to the IC chip 51.

[0031] The personal identification device 10 shown in FIG. 1 includes a document photographing camera 13 for photographing the personal identification document 50, but does not include a camera for acquiring a face captured image necessary for face verification, and realizes a desired function by cooperating with the terminal 20 equipped with a camera 23 for acquiring a face captured image. That is, the personal identification device 10 is a so-called modular type device. On the other hand, a so-called integrated type personal identification device in which the personal identification device 10 and the terminal 20 are integrated may be used. With reference to FIG. 2, a payment management system 1A including an integrated type personal identification device 60 will be described.

[0032] FIG. 2 is a block diagram showing a configuration example of the payment management system 1A according to Embodiment 1. Note that, for the same matters as those described for the payment management system 1 shown in FIG. 1, the description thereof will be omitted or simplified.

[0033] The payment management system 1A includes a personal identification device 60, an input device 70, a power supply 30, and an edge PC 40. The payment management system 1A includes the personal identification device 60 in which the personal identification device 10 and the terminal 20 shown in FIG. 1 are integrated. Further, the payment management system 1A includes an input device 70 having the function of the operation device 25 shown in FIG. 1.

[0034] The personal identification device 60 includes a camera 63, a document photographing camera 64, an IC card reader / writer 65, a display device 66, and a mounting portion 68.

[0035] The document photographing camera 64, the IC card reader / writer 65, and the mounting portion 66 of the personal identification device 60 have the same functions as the document photographing camera 13, the IC card reader / writer 14, and the mounting portion 16 of the personal identification device 10, respectively. Further, the camera 63 and the display device 66 of the personal identification device 60 have the same functions as the camera 23 and the display device 24 of the terminal 20, respectively.

[0036] The input device 70 is a device that receives operations from the target person 2 and is a device that receives inputs such as numerical values from the target person 2. The input device 70 is connected to the edge PC 40. Examples of the input device 70 include a numeric keypad and the like. Note that, when the display device 66 is, for example, a touch panel display and has a function as an input device, a numeric keypad may be displayed on the touch panel display.

[0037] In the payment management system 1A, the operation of the personal identification device 60 is controlled by a processor (not shown) of the edge PC 40. In other words, various functions of the personal identification device 60 are realized by the edge PC 40. In the payment management system 1A, a processor (not shown) of the edge PC 40 performs face verification on the face image data and the face photographed image.

[0038] Note that the personal identification device 60 may include a processor 61. In this case, the processor 61 of the personal identification device 60 may perform face verification on the face image data and the face captured image.

[0039] When the target person 2 places the personal identification document 50 on the placement unit 68 of the personal identification device 60, the personal identification device 60 acquires face image data for personal identification from the IC chip 51 of the placed personal identification document 50. In addition, the personal identification device 60 captures an image of the face of the target person 2 with the camera 63 to generate a face captured image. The edge PC 40 performs face verification on the face captured image and the face image data. When the face verification is successful, the edge PC 40 determines that the target person 2 is the person of the document. That is, the edge PC 40 succeeds in verifying the identity of the target person 2. When the face verification fails, the edge PC 40 determines that the target person 2 is not the person of the document. When the edge PC 40 determines that the target person 2 is the person of the document, the edge PC 40 causes the personal identification device 60 to write data to the IC chip 51.

[0040] The payment management system 1 including the modular personal identification device 10 described with reference to FIG. 1, and the payment management system 1A including the integrated personal identification device 60 described with reference to FIG. 2 are systems for appropriately supplying articles to a person in an offline environment where the Internet is not available. In the following description, it is assumed that the payment management system 1, that is, the modular personal identification device 10, is installed in a retail store. On the other hand, it is assumed that the payment management system 1A, that is, the integrated personal identification device 60, is installed in a shelter or a local government facility. Hereinafter, the retail store may be referred to as a store. Also, hereinafter, the shelter or the local government facility may be collectively referred to as a shelter.

[0041] [Information possessed by the My Number card] As described above, in the present embodiment, the personal identification document 50 is the My Number card 80. With reference to FIGS. 3, 4, and 5, information and the like of the My Number card 80 will be described. FIG. 3 is a table diagram showing the information of the My Number card 80. FIG. 4 is a schematic diagram showing an example of the face (front and back) of the My Number card.

[0042] On the front surface of the My Number card 80, as shown in FIG. 3, at least the name, address, date of birth, gender, security code, and expiration date are printed as character information 53. The information including the name, address, date of birth, and gender is also called the four-information. In the present embodiment, the four-information may also be referred to as personal information. Further, a face photo 52 is printed on the front surface of the My Number card 80.

[0043] At least the name, address, date of birth, gender, face image data, and personal number are stored in the IC chip 51 of the My Number card 80. The face image data is image data obtained by photographing the face of the owner of the My Number card 80.

[0044] The My Number card 80 has at least a collation number A, a collation number B, an electronic certificate PIN for signature, a user certificate PIN, a face matter input assistance PIN, and a resident basic register PIN as information used for access control to the IC chip 51.

[0045] The collation number B is a number obtained by combining 6 digits of the date of birth, 4 digits of the Western calendar part of the expiration date, and 4 digits of the security code, which are printed on the front surface of the My Number card 80. By using the collation number B, access can be made to the four-information and the face image data stored in the IC chip 51 of the My Number card 80. That is, by obtaining the collation number B printed on the front surface of the My Number card 80, access can be made to the four-information and the face image data stored in the IC chip 51 of the My Number card 80.

[0046] Note that the above-mentioned My Number Card 80 is just an example. If the specifications of the My Number Card 80 are changed, various information possessed by the My Number Card 80 will be read based on the changed specifications. For example, the gender may not be described on the face of the My Number Card 80. In this case, three pieces of information excluding the gender and the face image data may be obtained from the IC chip 51. Also, the verification number B may be a number with a predetermined number of digits different from the 14-digit number obtained by combining the above-mentioned 6 digits of the date of birth, 4 digits of the AD part of the expiration date, and 4 digits of the security code. In this case, the number with the predetermined number of digits read based on the specifications of the My Number Card 80 may be used as the verification number B.

[0047] FIG. 5 is a table diagram for explaining the outline of the application of the My Number Card 80.

[0048] As shown in FIG. 5, the IC chip 51 of the My Number Card 80 has four applications roughly shown in the following (B1) to (B4). Also, there is an empty area in the IC chip 51 of the My Number Card 80 where an application can be installed.

[0049] (B1) Face Application (Face AP) In the Face AP, image data of surface information (four pieces of information (address, name, date of birth, gender) + face photo) and back information (personal number) are recorded.

[0050] (B2) Electronic Certificate Application by Public Personal Authentication Service (JPKI-AP) In the JPKI-AP, information on "electronic certificate for signature" and "electronic certificate for user" is recorded.

[0051] (B3) Face Matter Input Assistance Application (Face Matter Input Assistance AP) In the Face Matter Input Assistance AP, information for using the personal number and the four pieces of information as text data when conducting transactions using the personal number and the four pieces of information is recorded. The information to be recorded or used is as follows. (1) Personal number and four pieces of information (and their electronic signature data) (2) Personal number (and its electronic signature data) (3) Four pieces of information (and their electronic data)

[0052] (B4) Resident Basic Application (Resident Basic AP) In the Resident Basic AP, information for using the resident register code as text data is recorded during Resident Basic Network-related affairs.

[0053] Among the ticket surface AP and the ticket surface item input assistance AP, when using (2) or (3), it can be used by the collation number based on the information described on the ticket surface. However, for the two electronic certificates of the JPKI-AP, (1) among the ticket surface item input assistance APs, and when using the Resident Basic AP, the password set at the time of issuing the My Number Card 80 is used.

[0054] As shown in FIG. 5, the empty area includes an area for local residents and an extended use area. The area for local residents is an area available for municipalities. By installing an application in the area for local residents, municipalities can provide various services such as services related to local libraries. The extended use area is an area available for the national government, prefectures, municipalities, and private businesses, etc. The national government, prefectures, municipalities, and private businesses, etc. can provide various services by installing an application in the extended use area. The writing of data to the IC chip 51 by the personal identification device 10 or the personal identification device 60 is realized, for example, by a private business installing a predetermined application in the extended use area in advance. Hereinafter, the area in the IC chip 51 where data is written by the personal identification device 10 or the personal identification device 60 may be referred to as a writable area. Also, hereinafter, the data written to or read from the IC chip 51 may be referred to as information.

[0055] [Information written to the writable area] Next, referring to FIG. 6, the information written in the IC chip 51 of the My Number Card 80 will be described. FIG. 6 is a schematic diagram for explaining an example of the information written in the IC chip 51 according to the first embodiment. The various information included in the information 90A, the information 90B, and the information 90C shown in FIG. 6 is written by the personal identification device 10 or the personal identification device 60. Although it will be described later with reference to FIG. 10, these information are written, for example, at a shelter. Therefore, these information will be described assuming that they are written by the integrated personal identification device 60 installed at the shelter.

[0056] The information 90A includes various information about person A. The information 90A includes information on whether person A is an adult or a child. As shown in FIG. 6, person A is an adult.

[0057] Also, the information 90A includes disaster victim information 91A, purchase limit information 92A, and distribution times information 93A. Hereinafter, the purchase limit information and the distribution times information may be collectively referred to as payment information.

[0058] The disaster victim information 91A has "shelter", "disaster confirmation", and "family" as items. The shelter item indicates the evacuation destination of person A. In other words, the shelter item indicates shelter information. The disaster confirmation item indicates whether person A is a disaster victim. The family item indicates information regarding the family composition of person A.

[0059] When a disaster occurs, if person A evacuates to a shelter and the personal identification of person A by the payment management system 1A installed in the shelter is completed, the information of the shelter is written in the writable area of the IC chip 51 of the My Number Card 80 owned by person A. In the example of FIG. 6, as the shelter information of person A, "First Elementary School" is written in the shelter item. This indicates that person A has evacuated to the First Elementary School.

[0060] When the identity verification of Person A by the payment management system 1A is completed, the fact that Person A is a disaster victim is written in the writable area of the IC chip 51 of the My Number Card 80 owned by Person A. In the example of FIG. 6, "OK" is written in the disaster confirmation item. Note that the information indicating that a person is a disaster victim is not limited to "OK", and may be, for example, a character string such as "disaster confirmation", or a symbol such as a check mark.

[0061] When the identity verification of Person A by the payment management system 1A is completed, information regarding the family composition of Person A is written in the writable area of the IC chip 51 of the My Number Card 80 owned by Person A. In the example of FIG. 6, "Person C (child)" is written in the family item. This means that Person C is a child of Person A in Person A's family. Note that whether a certain person is written as information regarding Person A's family composition may be determined based on, for example, whether the said person is in the same household as Person A. In this case, for example, even if a certain person is a child of Person A, if the said person and Person A are not in the same household, the information of the said person is not written. If there is no person who is to be written in the family item of the disaster victim information 91A for Person A, nothing may be written in the family item and it may remain blank, or for example, a symbol such as a hyphen may be written.

[0062] The purchase limit information 92A has "upper limit amount" as an item. The upper limit amount item indicates the upper limit of the amount that Person A can use for purchasing goods. When the identity verification of Person A by the payment management system 1A is completed, the upper limit amount that Person A can use for purchasing goods is written in the writable area of the IC chip 51 of the My Number Card 80 owned by Person A. In the example of FIG. 6, "30,000 yen" is written in the upper limit amount item. This means that Person A can purchase goods up to 30,000 yen.

[0063] The distribution frequency information 93A has "distribution frequency" as an item. The item of the distribution frequency indicates the number of times person A can receive the distribution of goods. When the identity verification of person A by the payment management system 1A is completed, the number of times person A can receive the distribution of goods is written into the writable area of the IC chip 51 of the My Number card 80 owned by person A. In the example of FIG. 6, "5 times" is written in the item of the distribution frequency. This means that person A can receive the distribution up to 5 times.

[0064] Regarding the descriptions of the following information 90B and information 90C, for the matters similar to those described for information 90A, the descriptions will be omitted or simplified.

[0065] The information 90B includes the disaster victim information 91B, the purchase limit information 92B, and the distribution frequency information 93B regarding person B. As shown in FIG. 6, person B is an adult.

[0066] When the identity verification of person B by the payment management system 1A is completed, various information is written into the writable area of the IC chip 51 of the My Number card 80 owned by person B. In the example of FIG. 6, as the disaster victim information 91B, "Third Elementary School" is written in the item of the evacuation shelter. Also, "OK" is written in the item of the disaster confirmation. Also, "Person D (child)" is written in the item of the family.

[0067] Also, in the example of FIG. 6, as the purchase limit information 92B, "30,000 yen" is written in the item of the upper limit amount. Also, in the example of FIG. 6, as the distribution frequency information 93B, "5 times" is written in the item of the distribution frequency.

[0068] The information 90C includes the disaster victim information 91C, the purchase limit information 92C, and the distribution frequency information 93C regarding person C. As shown in FIG. 6, person B is a child.

[0069] When the identity verification of Person C is completed by the payment management system 1A, various types of information are written into the writable area of the IC chip 51 of the My Number Card 80 owned by Person C. In the example of FIG. 6, as the disaster victim information 91C, "Second City Hall" is written in the evacuation shelter item. Also, "OK" is written in the disaster confirmation item. Also, "Person A (father)" is written in the family item. This means that Person A is the father of Person C. Note that the information of the parent of the child written in the family item in the writable area of the IC chip 51 of the My Number Card 80 owned by the child does not necessarily have to include the gender. In FIG. 6, it is written as "Person A (father)" as an example, but for example, it may be written as "Person A (parent)".

[0070] Also, in the example of FIG. 6, as the purchase limit amount information 92C, "5,000 yen" is written in the upper limit amount item. Also, in the example of FIG. 6, as the distribution times information 93C, "10 times" is written in the distribution times item.

[0071] In the example of FIG. 6, Person A and Person B are adults, and Person C is a child. Whether a person is an adult or not, in other words, whether an adult or a child, may be determined based on, for example, the date of birth of the person. For example, whether a person is an adult or not may be determined based on whether the person has reached adulthood.

[0072] In the example of FIG. 6, the upper limit amount that Person A and Person B can use for purchasing items is 30,000 yen, while the upper limit amount that Person C can use for purchasing items is 5,000 yen. The upper limit amount may be determined based on, for example, whether the person who owns the My Number Card 80 in which the upper limit amount is written, in other words, the person to whom the upper limit amount is granted, is an adult or not. Alternatively, the upper limit amount may be determined based on, for example, the family composition of the person to whom the upper limit amount is granted. Similarly, the distribution times may also be determined based on whether the person who owns the My Number Card 80 in which the distribution times are written is an adult or not, or based on the family composition of the person.

[0073] The number of distributions may be determined for each type of item to be distributed, for example. For example, the types of items to be distributed may be predetermined, such as water, rice balls, etc. In this case, for example, the number of times water can be received may be determined to be 5 times, and the number of times rice balls can be received may be determined to be 5 times. The distribution frequency information may also include the number of distributions for each type of item to be distributed. For example, when the identity verification of person A by the payment management system 1A is completed, information indicating that the number of water distributions is 5 times and the number of rice ball distributions is 5 times may be written as distribution frequency information 93A in the writable area of the IC chip 51 of the My Number card 80 owned by person A.

[0074] With reference to FIG. 6, the information written in the writable area was described. A frame, in other words, a form, for these information to be written by the identity verification device 10 or the identity verification device 60 may be written in advance in the writable area of the IC chip 51. The timing at which such a form is written into the IC chip 51 is not limited. For example, when a certain person visits the city hall to change the address stored in the IC chip 51, the form may be written together with the address change.

[0075] Also, the information included in the information 90A is not limited to the disaster victim information 91A, the purchase limit information 92A, and the distribution frequency information 93A. This is the same for the information 90B and the information 90C. The information included in the payment information is also not limited to the purchase limit information and the distribution frequency information.

[0076] [Specific Example of Information Update] The information written in the writable area of the IC chip 51 is sequentially updated for the proper distribution of items. With reference to FIGS. 7, 8, and 9, specific examples of information update will be described. FIG. 7 is a schematic diagram for explaining an example of the information written in the IC chip 51 before and after item distribution according to Embodiment 1.

[0077] Referring to FIG. 7, information 90A1 after Person A purchases an item will be described. Note that, from the information 90A shown in FIG. 7, the family item among the disaster victim information 91A and the distribution count information 93A are omitted. Also, the processing flow related to the purchase of the item will be described later.

[0078] Information 100 includes a plurality of items that Person A is considering purchasing, the price of each of the plurality of items, and the total price. Specifically, Person A is attempting to purchase 500 yen worth of drinking water, 1000 yen worth of rice balls, and 200 yen worth of soap. The total price of the drinking water, rice balls, and soap that Person A plans to purchase is 1700 yen.

[0079] As shown by the purchase limit information 92A, the upper limit amount that Person A can use to purchase an item is 30000 yen. And the total price of the plurality of items that Person A is considering purchasing is 1700 yen. Since the available upper limit amount is greater than the total price of the plurality of items planned for purchase, Person A can purchase the plurality of items. Although the detailed processing flow will be described later, when Person A purchases an item, the information 90A is updated to become information 90A1. More precisely, among the information 90A, the purchase limit information 92A is updated to the purchase limit information 92A1. As shown in FIG. 7, among the information 90A, the disaster victim information 91A is included in the information 90A1 without being updated. In the upper limit amount item included in the purchase limit information 92A1, 28300 yen is written. This is the balance obtained by subtracting 1700 yen from 30000 yen. When Person A purchases a plurality of items, 28300 yen, which is the balance obtained by subtracting the total price of the plurality of items, 1700 yen, from the upper limit amount of 30000 yen, becomes the new upper limit amount and is written in the writable area of the IC chip 51.

[0080] In the example of FIG. 7, the case where the available upper limit amount is greater than or equal to the total price of the items planned for purchase has been described. In the example of FIG. 8, the case where the available upper limit amount is less than the total price of the items planned for purchase will be described. FIG. 8 is a schematic diagram for explaining an example of the information written in the IC chip 51 before and after the item distribution according to Embodiment 1.

[0081] Referring to FIG. 8, information 90B1 after Person B purchased an item will be described. Note that in the information 90B shown in FIG. 8, the family item among the disaster victim information 91B and the distribution count information 93B are omitted.

[0082] Information 110 includes a plurality of items that Person B is considering purchasing, the price of each of the plurality of items, and the total price. Specifically, Person B is attempting to purchase bento worth 3,000 yen, toilet paper worth 10,000 yen, diapers for a baby worth 15,000 yen, and milk for a baby worth 5,000 yen. The total price of the bento, toilet paper, diapers for a baby, and milk for a baby that Person B plans to purchase is 33,000 yen.

[0083] As shown by the purchase limit information 92B, the maximum amount of money that Person B can use to purchase items is 30,000 yen. And the total price of the plurality of items that Person B is considering purchasing is 33,000 yen. Since the available maximum amount is less than the total price of the plurality of items planned for purchase, Person B cannot purchase the plurality of items. However, for example, if Person B returns 3,000 yen worth of milk for a baby, that is, decides not to purchase it, the total price of the plurality of items that Person B plans to purchase will be 30,000 yen. In this case, since the available maximum amount is equal to the total price of the plurality of items planned for purchase, Person B can purchase the plurality of items. After Person B purchases a plurality of items, the information 90B is updated to become information 90B1. More precisely, among the information 90B, the purchase limit information 92B is updated to the purchase limit information 92B1. In the item of the maximum amount included in the purchase limit information 92B1, 0 yen is written. This is the balance obtained by subtracting the total price of the plurality of purchased items, which is 30,000 yen, from the available maximum amount of 30,000 yen. Due to Person B purchasing a plurality of items, 0 yen, which is the balance obtained by subtracting the total price of the plurality of items, which is 30,000 yen, from the maximum amount of 30,000 yen, becomes the new maximum amount and is written into the writable area of the IC chip 51.

[0084] In the examples of FIGS. 7 and 8, the case where Person A or Person B purchases an item was described. In the example of FIG. 9, the case where Person C receives a distribution will be described. FIG. 9 is a schematic diagram for explaining an example of information written in the IC chip 51 before and after the item distribution according to Embodiment 1.

[0085] Referring to FIG. 9, information 90C1 after Person C receives the item distribution will be described.

[0086] Information 120 includes a plurality of items that Person C is scheduled to receive and the number of times of distribution for each of the plurality of items. Specifically, Person C intends to receive water and rice each once.

[0087] As shown by the distribution number information 93C, Person C can receive the item distribution 10 times. In the example of the distribution number information 93C, the number of times Person C can receive the distribution is not distinguished by item.

[0088] Person C intends to receive water and rice each once. Considering without distinguishing the items, Person C intends to receive a total of 2 distributions. Since the number of distributions that Person C can receive is 10 times, Person C can receive 2 distributions. After Person C receives the distribution, information 90C is updated to information 90C1. More precisely, among information 90C, the distribution number information 93C is updated to distribution number information 93C1. As shown in FIG. 9, among information 90C, the disaster victim information 91C and the purchase limit information 92C are included in information 90C1 without being updated. In the item of the number of distributions included in the distribution number information 93C1, 8 is written. This is the remaining number after subtracting 2, the number of distributions received this time, from 10, the number of distributions before receiving the distribution. Due to Person C receiving the item distribution, 8, the remaining number after subtracting 2, the total number of distributions of the received items, from 10, the number of distributions before receiving the distribution, becomes the new number of distributions and is written in the writable area of the IC chip 51.

[0089] Although not shown in FIG. 9, a case will be described in which the item of the number of distributions included in the distribution number information 93C is distinguished by the article. For example, a case will be described in which the distribution number information 93C includes an item of the number of water distributions and an item of the number of rice bowl distributions. In this case, it is assumed that the number of water distributions and the number of rice bowl distributions that person C can receive are each 5 times. When person C tries to receive one water distribution and one rice bowl distribution each, since the number of water distributions and the number of rice bowl distributions that person C can receive are each greater than or equal to the number of distributions scheduled to be received, person C can receive each of the water and rice bowl distributions. When person C receives one water distribution and one rice bowl distribution each, the number of water distributions and the number of rice bowl distributions that person C can receive become 4 times each. In this case, the distribution number information 93C is updated to the distribution number information 93C1 indicating that the number of water distributions is 4 times and the number of rice bowl distributions is 4 times.

[0090] [Processing Flow] Next, the operations of the payment management system 1 and the payment management system 1A will be described. When a disaster occurs, the disaster victims take refuge in a shelter. In the shelter, an integrated personal identification device 60, that is, the payment management system 1A, is installed. When the personal identification of a person who has taken refuge in the shelter is completed, the payment management system 1A writes various types of information described with reference to FIG. 6, for example, in the writable area of the IC chip 51 of the My Number card 80 owned by the person. With reference to FIG. 10, the operation of the payment management system 1A will be described.

[0091] FIG. 10 is a flowchart showing an operation example of the payment management system 1A according to Embodiment 1. Each process in the flowchart shown in FIG. 10 is executed by the edge PC 40 or the personal identification device 60. Which of the edge PC 40 and the personal identification device 60 performs each process will be described for each process. The operation of the personal identification device 60 is executed based on the control of the edge PC 40, but for simplicity of explanation, the description to that effect is omitted in the description of each process. At the start point of the flowchart shown in FIG. 10, it is assumed that the target person 2 has placed the personal identification document 50 on the placement unit 68. Also, the personal identification document 50 described in the flowchart shown in FIG. 10 is the My Number card 80.

[0092] The document photographing camera 64 of the personal identification device 60 photographs the front (face) of the My Number card 80 and generates a document photographing image (St130).

[0093] The personal identification device 60 performs Optical Character Recognition (hereinafter referred to as "OCR") on the document photographing image generated in step St130 to obtain character information 53, and obtains a collation number B from the character information 53 (St131). Specifically, the personal identification device 60 obtains the 6-digit date of birth, the 4-digit Gregorian calendar part of the expiration date, and the 4-digit security code printed on the front of the My Number card 80, and combines them to obtain the collation number B.

[0094] The personal identification device 60 determines whether or not the collation number B could be obtained in step St131 (St132). For example, if the face of the card is dirty, or if the face of the card photographed in step St130 is the opposite face to the face on which the collation number B is printed, that is, the back face, it may not be possible to obtain the collation number B.

[0095] When the personal identification device 60 has obtained the collation number B (St132; YES), the process proceeds to step St133, and when the collation number B could not be obtained (St132; NO), the process proceeds to step St141.

[0096] First, the case where the verification number B can be obtained (St132; YES) will be described.

[0097] The personal identification device 60 accesses the IC chip 51 using the verification number B as a key (St133). Then, the personal identification device 60 determines whether it can access the IC chip 51 (St134).

[0098] If the personal identification device 60 cannot access the IC chip 51 (St134; NO), the process proceeds to step St141.

[0099] If the personal identification device 60 can access the IC chip 51 (St134; YES), it reads out the face image data stored in the IC chip 51 and also reads out the personal information stored in the IC chip 51 (St135).

[0100] The camera 63 of the personal identification device 60 captures the face of the target person 2 and generates a face captured image (St136). The personal identification device 60 transmits the face image data read in step St135 and the face captured image generated in step St136 to the edge PC 40.

[0101] The edge PC 40 receives the face captured image and the face image data of the target person 2 transmitted from the personal identification device 60 and performs face verification on them (St137). The face verification may be realized using a known face image matching technique.

[0102] The edge PC 40 determines whether the person can be identified (St138). That is, the edge PC 40 determines whether the face verification in step St137 is successful to determine whether the target person 2 is the document person.

[0103] If the edge PC 40 cannot identify the person (St138; NO), the process proceeds to step St141.

[0104] When the edge PC 40 can confirm the identity of the person (St134; YES), it causes the identity confirmation device 60 to write various types of information to the writable area of the IC chip 51 of the My Number card 80 (St139). The various types of information include disaster victim information and payment information. The disaster victim information includes information about the evacuation shelter, information indicating that the disaster has been confirmed, and information about the family composition. Also, the payment information includes purchase limit information and distribution frequency information.

[0105] The display device 66 of the identity confirmation device 60 displays the information written in step St139 (St140). Examples of the information displayed on the display device 66 include the information 90A, information 90B, or information 90C shown in FIG. 6. More specifically, for example, the name of the target person 2 is displayed on the display device 66. Also, for example, if the target person 2 is an adult, that fact is displayed on the display device 66, and if the target person 2 is a child, that fact is displayed. Also, for example, the evacuation shelter where the target person 2 has taken shelter, the fact that the disaster confirmation for the target person 2 has been completed, the family composition of the target person 2, the upper limit amount that the target person 2 can use for purchasing items, and the number of times the target person 2 can receive item distributions are displayed on the display device 66. These pieces of information may be displayed on the display device 66 in a prescribed format. The prescribed format may be, for example, a table format or the like. Thereby, for example, the target person 2 can confirm the upper limit amount for purchasing items or the number of times of receiving item distributions. Then, the identity confirmation device 60 ends this processing flow.

[0106] Next, the case where the collation number B cannot be obtained (St132; NO), the case where the IC chip 51 cannot be accessed (St134; NO), or the case where the identity of the person cannot be confirmed (St138; NO) will be described.

[0107] The personal identification device 60 notifies the staff of whether to execute error processing, that the collation number B could not be obtained, that the IC chip 51 could not be accessed, or that personal identification could not be performed (St141). By executing error processing, the personal identification device 60, for example, returns the processing to be executed to step St130, further displays the fact on the display device 66, and notifies the target person 2 to re-perform the processing. Note that the content of the error processing is not limited to this. The content of the error processing may be set by the staff in advance, for example. The staff is, for example, the administrator of the evacuation shelter or the administrator of the payment management system 1A, etc. The personal identification device 60 notifies the staff by, for example, displaying on the display device 66 that the collation number B could not be obtained, that the IC chip 51 could not be accessed, or that personal identification could not be performed. For example, the staff may visually identify the target person 2, and the staff may operate the personal identification device 60 to write various information into the writable area of the IC chip 51 of the my number card 80 of the target person 2. The personal identification device 60 may have a function that allows the staff to manually write various information into the my number card 80. Then, the personal identification device 60 ends this processing flow.

[0108] Note that the processing in step St141 may be executed by the edge PC 40.

[0109] The disaster victim information and the benefit information are written into the writable area of the IC chip 51 of the My Number card 80 owned by the target person 2 by the benefit management system 1A installed in the shelter. As a result, the target person 2 can purchase items, for example, within the range of the upper limit amount written on the My Number card 80. Further, the target person 2 can receive the distribution of items, for example, by using the My Number card 80. That is, the target person 2 can receive the provision of items by using the My Number card 80. For example, the target person 2 can purchase items in the store by using the benefit management system 1 installed in the store. With reference to FIGS. 11 and 12, the operation of the benefit management system 1 when the target person 2 purchases items will be described.

[0110] FIG. 11 is a flowchart showing an operation example of the benefit management system 1 according to Embodiment 1. Each process in the flowchart shown in FIG. 11 is executed by the terminal 20 or the personal identification device 10. Which of the terminal 20 and the personal identification device 10 performs each process will be described for each process. The operation of the personal identification device 10 is executed based on the control of the terminal 20, but for the sake of simplicity of explanation, the description to that effect is omitted in the description of each process. At the start point of the flowchart shown in FIG. 11, it is assumed that the target person 2 has placed the personal identification document 50, that is, the My Number card 80, on the placement unit 16. Further, the target person 2 intends to purchase one or more items.

[0111] The document photographing camera 13 of the personal identification device 10 photographs the face (front surface) of the My Number card 80 and generates a document photographing image (St150).

[0112] The personal identification device 10 performs OCR on the document photographing image generated in step St150 to obtain the character information 53, and obtains the collation number B from the character information 53 (St151). Specifically, the personal identification device 10 obtains the 6-digit date of birth, the 4-digit Gregorian calendar part of the expiration date, and the 4-digit security code printed on the front surface of the My Number card 80, and combines them to obtain the collation number B.

[0113] The personal verification device 10 determines whether the collation number B can be obtained in step St151 (St152). For example, if the ticket surface is dirty, or if the ticket surface photographed in step St150 is the reverse side of the surface on which the collation number B is printed, that is, the back side, there is a possibility that the collation number B cannot be obtained.

[0114] When the personal verification device 10 can obtain the collation number B (St152; YES), the process proceeds to step St153, and when the collation number B cannot be obtained (St152; NO), the process proceeds to step St173.

[0115] First, the case where the personal verification device 10 can obtain the collation number B (St152; YES) will be described. The personal verification device 10 accesses the IC chip 51 using the collation number B as a key (Stch153). Then, the personal verification device 10 determines whether it can access the IC chip 51 (St154).

[0116] When the personal verification device 10 can access the IC chip 51 (St154; YES), the process proceeds to step St155, and when the personal verification device 10 cannot access the IC chip 51 (St154; NO), the process proceeds to step St173.

[0117] First, the case where the personal verification device 10 can access the IC chip 51 (St154; YES) will be described. The personal verification device 10 of the personal verification device 10 transmits the access result to the terminal 20 (St155).

[0118] The camera 23 of the terminal 20 receives the access result from the personal verification device 10 by the process of step St155, photographs the face of the target person 2, and generates a face photographed image (St156). Although it will be described later with reference to FIG. 12, the process of step St156 corresponds to step St181 shown in the flowchart of FIG. 12. Also, although not shown in FIG. 11, the terminal 20 transmits the face photographed image of the target person 2 to the personal verification device 10 (step St182 shown in FIG. 12).

[0119] The personal identification device 10 reads out the face image data stored in the IC chip 51 and also reads out the personal information stored in the IC chip 51 (St157).

[0120] The personal identification device 10 transmits the face image data read out in step St157 to the terminal 20 (St158).

[0121] The terminal 20 performs face verification on the face captured image of the target person 2 acquired in step St156 and the face image data transmitted from the personal identification device 10 in step St158 (St159). The face verification may be realized using a known face image matching technique.

[0122] The terminal 20 determines whether it is possible to confirm the identity of the target person 2 and the disaster victim based on the disaster victim information (St160). That is, the terminal 20 determines whether the target person 2 is the person in the document by determining whether the face verification in step St159 is successful. The terminal 20 further determines whether information indicating that the target person 2 is a disaster victim is written in the writable area of the IC chip 51. For example, the terminal 20 determines whether "OK" is written in the disaster victim confirmation item among the disaster victim information described with reference to FIG. 6. When the target person 2 has completed personal identification by a distribution management system (for example, the distribution management system 1A) installed in the evacuation shelter, information indicating that the owner of the my number card 80 (that is, the target person 2) is a disaster victim is written in the writable area of the IC chip 51 of the my number card 80 owned by the target person 2. The terminal 20 may acquire the information read by the personal identification device 10 from the IC chip 51 in order to determine whether information indicating that the target person 2 is a disaster victim is written in the writable area of the IC chip 51. Note that the disaster victim confirmation of the target person 2 may be performed by the personal identification device 10.

[0123] When the payment management system 1 can confirm the identity of the target person 2 and the disaster victim status (St160; YES), the process proceeds to step St161. When the identity of the target person 2 and the disaster victim status cannot be confirmed (St160; NO), the process proceeds to step St173.

[0124] First, an explanation will be given for the case where the terminal 20 can confirm the identity of the target person 2 and the disaster victim status based on the disaster victim information (St160; YES). The identity confirmation device 10 reads the purchase limit amount information written in the writable area of the IC chip 51 (St161). Thereby, the identity confirmation device 10 reads the upper limit amount that the target person 2 can use for purchasing items. For example, the identity confirmation device 10 reads that the upper limit amount that the target person 2 can use for purchasing items is 30,000 yen.

[0125] The identity confirmation device 10 transmits the read result of the purchase limit amount information to the terminal 20 (St162).

[0126] The terminal 20 calculates the total price of one or more items that the target person 2 intends to purchase (St163). Although it will be described later with reference to FIG. 12, the process of step St163 corresponds to step St187 shown in the flowchart of FIG. 12. Also, although not shown in FIG. 11, the terminal 20 transmits the calculated total price to the identity confirmation device 10 (step St188 shown in FIG. 12).

[0127] The identity confirmation device 10 acquires from the terminal 20 the total price of one or more items that the terminal 20 calculated in step St163 (St164).

[0128] The identity confirmation device 10 compares the upper limit amount that the target person 2 can use for purchasing items read in step St161 with the total price of one or more items that the target person 2 intends to purchase acquired in step St164, and determines whether the upper limit amount is greater than or equal to the total price (St165).

[0129] When the personal confirmation device 10 determines that the upper limit amount is not greater than the total price, that is, the upper limit amount is less than the total price (St165; NO), it transmits to the terminal 20 that the purchase is not possible, together with the difference between the upper limit amount and the total price (step St166). For example, when the upper limit amount is 30,000 yen and the total price of one or more articles that the target person 2 is trying to purchase is 33,000 yen, the personal confirmation device 10 transmits to the terminal 20 that the purchase is not possible. In this case, the target person 2 can proceed with the purchase procedure by returning any one of the one or more articles so that the upper limit amount is greater than or equal to the total price (in other words, not making the purchase). For the sake of convenience of explanation, it is assumed that the target person 2 has returned any one of the one or more articles.

[0130] The terminal 20 recalculates the total price of one or more articles that the target person 2 is trying to purchase (St167). The process of step St167 corresponds to step St194 shown in the flowchart of FIG. 12. Also, although not shown in FIG. 11, the terminal 20 transmits the recalculated total price to the personal confirmation device 10 (step St195 shown in FIG. 12). Then, the personal confirmation device 10 returns to step St164 and repeats the process. Thereby, even when it is determined that the upper limit amount is not greater than the total price (St165; NO), the processes of step St166, step St167, step St164, and step St165 are repeated while involving the return of articles by the target person 2 until the upper limit amount is greater than or equal to the total price.

[0131] In some cases, the target person 2 may give up purchasing an item and wants to cancel a series of procedures for the purchase. For example, if the upper limit amount that the target person 2 can use for purchasing items is 5000 yen, and the target person 2 only wants to purchase one item, and the price of that item is 6000 yen, then the target person 2 cannot purchase that item and has no other items to purchase, so may consider canceling a series of procedures for the purchase. For the sake of convenience of explanation, although omitted from the flowchart shown in FIG. 11, the personal identification device 10 and the terminal 20 may have a function that can interrupt the processing according to the operation by the target person 2 even during the middle of each process.

[0132] When the personal identification device 10 determines that the upper limit amount is greater than or equal to the total price (St165; YES), it transmits to the terminal 20 that the purchase is possible, together with the difference between the upper limit amount and the total price (step St168). For example, if the upper limit amount is 30000 yen and the total price of one or more items that the target person 2 wants to purchase is 10000 yen, the personal identification device 10 transmits to the terminal 20 that the purchase is possible.

[0133] The terminal 20 calculates the remaining amount obtained by subtracting the total price of one or more items that the target person 2 wants to purchase from the upper limit amount (St169). The process of step St169 corresponds to step St197 shown in the flowchart of FIG. 12. Also, although not shown in FIG. 11, the terminal 20 transmits the calculated remaining amount to the personal identification device 10 (step St199 shown in FIG. 12).

[0134] The personal identification device 10 acquires from the terminal 20 the remaining amount calculated by the terminal 20 in step St169 (St170).

[0135] The personal identification device 10 writes the remaining amount acquired in step St170 into the writable area of the IC chip 51 of the My Number Card 80 as new purchase upper limit amount information (St171). Thereby, the purchase upper limit amount information is updated.

[0136] The personal confirmation device 10 transmits a write completion notice to the terminal 20 (St172) to notify the target person 2 that the purchase limit amount information has been updated. Then, this processing flow ends. Note that the terminal 20 displays the write completion notice (step St201 shown in FIG. 12). Thereby, the target person 2 can confirm that the purchase limit amount information has been updated.

[0137] Next, the case where the collation number B cannot be obtained (St152; NO), the case where the IC chip 51 cannot be accessed (St154; NO), or the case where personal confirmation and disaster confirmation cannot be performed (St160; NO) will be described.

[0138] The personal confirmation device 10 executes either error processing, notification to the staff, termination of a series of processes, or re - execution of the processes (St173). Error processing is, for example, displaying on the display device 24 of the terminal 20 that an error has occurred, etc. The content of the error processing is not limited to this and may be set by the staff in advance, for example. The staff is, for example, the store manager or the administrator of the payment management system 1, etc. Also, the personal confirmation device 10 notifies the staff, for example, by displaying on the display device 24 of the terminal 20 that the collation number B could not be obtained, that the IC chip 51 could not be accessed, or that personal confirmation and disaster confirmation could not be performed. Also, the personal confirmation device 10 may, for example, terminate a series of processes. In this case, the process for purchasing an item will start over from the initial step St150. Also, the personal confirmation device 10 may, for example, re - execute the acquisition of the collation number B, the access to the IC chip 51, or personal confirmation and disaster confirmation. For example, when the personal confirmation device 10 cannot obtain the collation number B (St152; NO), it may attempt to acquire the collation number B again. That is, the personal confirmation device 10 may start over from the process of step St151. For the sake of convenience of explanation, in the flowchart shown in FIG. 11, after step St173 is shown as the end, but the personal confirmation device 10 may restart the process from a specific step after step St173. Note that the process of step St173 above may be executed by the terminal 20.

[0139] FIG. 12 is a flowchart showing an operation example of the payment management system 1 according to the first embodiment. Each process in the flowchart shown in FIG. 12 is executed by the terminal 20 or the personal identification device 10. Which of the terminal 20 and the personal identification device 10 performs each process will be described for each process. The operation of the personal identification device 10 is executed based on the control of the terminal 20, but for the sake of simplicity of explanation, the description to that effect is omitted in the description of each process. Also, at the start point of this flowchart, the processes up to step St155 in the flowchart shown in FIG. 11 are completed. That is, at the start point of this flowchart, the personal identification device 10 has transmitted the access result indicating that the access to the IC chip 51 was successful to the terminal 20.

[0140] The processor 21 of the terminal 20 receives the access result indicating that the access to the IC chip 51 was successful, which was transmitted from the personal identification device 10 in step St155 shown in FIG. 11 (St180).

[0141] When the processor 21 receives the access result in step St180, it activates the camera 23 of the terminal 20, and the camera 23 captures the face of the target person 2 to generate a face captured image (St181).

[0142] The processor 21 performs face matching between the face image data transmitted from the personal identification device 10 in step St158 shown in FIG. 11 and the face captured image of the target person 2 generated in step St181 (St182). This corresponds to step St159 shown in FIG. 11. Also, the processor 21 executes disaster confirmation based on the disaster victim information. It is assumed that the terminal 20 has succeeded in face matching (personal identification) and disaster confirmation (St160 shown in FIG. 11; YES). As a result, the process of the personal identification device 10 shown in the flowchart of FIG. 11 proceeds to step St162.

[0143] The processor 21 receives the read result of the purchase limit amount information transmitted from the personal identification device 10 in step St162 shown in FIG. 11 (St183).

[0144] The operating device 25 of the terminal 20 receives the input of the price of the item by the target person 2 (St184). For example, when the display device 24 and the operating device 25 are configured as an integrated device and are a touch panel display, the target person 2 can input the price of the item using the numeric keypad displayed on the touch panel display. Further, a message or instruction prompting the target person 2 to input the price of the item may be displayed on the touch panel display.

[0145] The display device 24 of the terminal 20 displays the price of the item input by the target person 2 in step St184. Thereby, the target person 2 can confirm whether there is an input error.

[0146] The processor 21 of the terminal 20 determines whether the prices of all the items that the target person 2 intends to purchase have been input (St186). The processor 21 may receive an operation from the target person 2, for example, for the determination in step St186. For example, the processor 21 may cause the display device 24 to display an operation that the target person 2 performs when the input is completed, and cause the operating device 25 to receive the operation. For example, when the display device 24 and the operating device 25 are configured as an integrated device and are a touch panel display, a button labeled "Input Completed" may be displayed on the touch panel display. Then, when the target person 2 presses the button, the processor 21 may determine that the prices of all the items that the target person 2 intends to purchase have been input.

[0147] If there are still items for which the price has not been input among all the items that the target person 2 intends to purchase (St186; NO), the processor 21 of the terminal 20 returns to step St184 and repeats the process. Thereby, the target person 2 can input the prices of all the items that the target person 2 intends to purchase.

[0148] When the prices of all the items that the target person 2 intends to purchase are input (St186; YES), the processor 21 calculates the total price of all these items, that is, the total price of one or more items that the target person 2 intends to purchase, and the display device 24 displays the calculated total price (St187).

[0149] The processor 21 transmits the total price of one or more items that the target person 2 intends to purchase, calculated in step St187, to the personal verification device 10 (St188). As a result, the processing of the personal verification device 10 shown in the flowchart of FIG. 11 proceeds to step St165.

[0150] The personal verification device 10 determines whether the target person 2 can purchase one or more items that the target person 2 intends to purchase (St189). Step St189 corresponds to step St165 in the flowchart shown in FIG. 11.

[0151] The processor 21 of the terminal 20 receives the determination result transmitted from the personal verification device 10 as to whether the target person 2 can purchase one or more items (St190). Step St190 corresponds to either step St166 or step St168 in the flowchart shown in FIG. 11. The processor 21 of the terminal 20 receives from the personal verification device 10 either a message indicating that the purchase is possible or a message indicating that the purchase is not possible.

[0152] When it is the case that the target person 2 cannot purchase one or more items (St191; NO), the processor 21 causes the display device 24 to display a message indicating that the purchase is not possible, together with the difference between the upper limit amount and the total price (St192). In this case, the target person 2 can proceed with the purchase procedure by returning (in other words, not purchasing) any one of the one or more items so that the upper limit amount is equal to or greater than the total price. For the sake of explanation, assume that the target person 2 has returned any one of the one or more items.

[0153] The operation device 25 of the terminal 20 accepts the input of the price of the item that the target person 2 has decided not to purchase, in other words, the return price, by the operation of the target person 2 (St193).

[0154] The processor 21 recalculates the total price of one or more items that the target person 2 is trying to purchase and causes it to be displayed on the display device 24 (St194). The recalculation process in step St194 corresponds to step St166 in the flowchart shown in FIG. 11.

[0155] The processor 21 transmits the total price calculated in step St194 to the personal identification device 10 (St195). Then, the process of this flowchart returns to step St189.

[0156] When the target person 2 can purchase one or more items (St191; YES), the processor 21 causes the display device 24 to display that the purchase is possible, together with the difference between the upper limit amount and the total price (St192).

[0157] The processor 21 calculates the balance obtained by subtracting the total price of one or more items that the target person 2 is trying to purchase from the upper limit amount (St197). Step St197 corresponds to step St169 in the flowchart shown in FIG. 11.

[0158] The processor 21 causes the balance calculated in step St197 to be displayed on the display device 24 (St198).

[0159] The processor 21 transmits the balance calculated in step St197 to the personal identification device 10 (St199).

[0160] The personal identification device 10 receives the balance transmitted from the terminal 20 in step St199 and writes it to the writable area of the IC chip 51 (St200). Step St200 corresponds to step St171 in the flowchart shown in FIG. 11. The personal identification device 10 transmits a write completion notice to the terminal 20 to notify the target person 2 that the purchase upper limit amount information has been updated.

[0161] The terminal 20 receives the write completion notification transmitted from the personal identification device 10 and causes it to be displayed on the display device 24 (St201). Then, this processing flow ends.

[0162] As described above, the payment management system 1 performs personal identification and disaster confirmation of the owner of the My Number card 80, refers to the purchase limit information written in the writable area of the IC chip 51 of the My Number card 80, determines whether the owner can purchase an item, and if the owner purchases an item, updates the purchase limit information. Note that when the owner of the My Number card 80 receives a distribution of items, the payment management system 1 also performs personal identification and disaster confirmation, refers to the distribution count information written in the writable area of the IC chip 51, determines whether the owner can receive the distribution, and if the owner receives the distribution, updates the distribution count information. In addition, an example is shown in which the integrated personal identification device 60 installed in the evacuation shelter writes various information to the My Number card 80 of the target person 2 who has evacuated to the evacuation shelter, and the modular personal identification device 10 installed in the store determines whether the target person 2 can receive the distribution and updates the various information. However, a modular personal identification device 10 may be installed in the evacuation shelter, or an integrated personal identification device 60 may be installed in the store. Thereby, the payment management system 1 and the payment management system 1A can promptly distribute items to the target person 2 even in an offline environment.

[0163] Note that in FIGS. 11 and 12, an example is shown in which the determination of whether the target person 2 can receive the distribution is made by the personal identification device 10, but this determination may be made by the terminal 20.

[0164] (Modification Example 1 of Embodiment 1) In the above-described Embodiment 1, an offline environment is assumed. However, the personal identification device 10 or the personal identification device 60 can function even in an online environment to promptly supply articles to the target person. With reference to FIGS. 13 and 14, for example, an operation example of the personal identification device 310 or the like in an online environment such as normal times when no disaster has occurred will be described. FIG. 13 is a block diagram showing a configuration example of a supply management system 1B according to Modification 1 of Embodiment 1.

[0165] The supply management system 1B is a system for appropriately supplying articles to people in an online environment where the Internet can be used. Here, it is assumed that the supply management system 1B is installed in a store. The supply management system 1B includes a Point Of Sales (hereinafter referred to as "POS") device 300, a personal identification device 310, and a power supply 320. The supply management system 1B may further include an edge PC 330.

[0166] The POS device 300 has, for example, a function of scanning the barcode of an article to calculate the price, a function of managing the inventory of the article, a function of recording sales data, and the like. The POS device 300 realizes various functions by using the Internet. The POS device 300 includes a processor 301, a memory 302, a display device 303, a camera 304, a barcode scanner 305, a receipt ejecting device 306, and an interface device 307.

[0167] The processor 301 realizes the functions of the POS device 300 by executing a computer program stored in the memory 302.

[0168] The memory 302 stores a computer program and data for realizing the functions of the POS device 300. The memory 302 may include a ROM and a RAM. Further, the memory 302 may include a volatile storage medium and a non-volatile storage medium.

[0169] The display device 303 is a device that displays information, images, etc. Examples of the display device 303 include a liquid crystal display, an organic EL display, etc.

[0170] The camera 304 photographs the face of the target person 2 when necessary.

[0171] The barcode scanner 305 is a device that reads the barcode of an article.

[0172] The receipt ejecting device 306 is a device that ejects a receipt when necessary.

[0173] The external interface device 307 transmits and receives data with the edge PC 330. When the supply management system 1B does not include the edge PC 330, the external interface device 307 transmits and receives data with the personal identification device 310.

[0174] The personal identification device 310 performs personal identification of the target person 2, etc. The personal identification device 310 has the same functions as the personal identification device 10 or the personal identification device 60. The personal identification device 310 may be configured in the same way as the modular personal identification device 10, or may be configured in the same way as the integrated personal identification device 60. When the personal identification device 310 is modular, a terminal (for example, terminal 20) that operates in cooperation with the personal identification device 310 is included in the supply management system 1B. When the personal identification device 310 is integrated, the operation of the personal identification device 310 is controlled by the processor 301 of the POS device 300 or a processor (not shown) of the edge PC 330 described later.

[0175] The power supply 320 supplies power to each device included in the supply management system 1B.

[0176] The edge PC 330 executes a part of the functions of the POS device 300, such as, for example, a function of managing the inventory of articles and a function of recording sales data. Alternatively, the edge PC 330 transmits and receives data to and from a company server via the Internet, for example. The edge PC 330 may be omitted in the payment management system 1B.

[0177] FIG. 14 is a flowchart showing an operation example of the payment management system 1B according to Modification 1 of Embodiment 1. With reference to the flowchart shown in FIG. 14, an example in which the target person 2 purchases an article using the payment management system 1B will be described. Note that payment information including at least purchase limit amount information is written in a writable area of the IC chip 51 of the My Number card 80 owned by the target person 2. For convenience of explanation, FIG. 14 shows which of the POS device 310 or the personal identification device 310 is the processing entity of each process in the flowchart. However, the operations executed by the personal identification device 310 in the following description are executed under the control of the processor 301 of the POS device 310.

[0178] The barcode scanner 305 of the POS device 300 reads the barcode of the article (St400). At the time of step St400, for example, the target person 2 may move the barcode of the article so that the barcode scanner 305 can read it. To simplify the explanation, when the target person 2 attempts to purchase a plurality of articles, the barcodes of all the plurality of articles are read by the barcode scanner 305 in step St400.

[0179] The processor 301 of the POS device 300 receives a settlement process start operation by the operation of the target person 2 (St401). The settlement process start operation is an operation that serves as a trigger for starting the settlement procedure. For example, the display device 303 of the POS device 300 may be a touch panel display, and a button such as "barcode reading completed" may be displayed on the touch panel display. Then, the operation of the target person 2 touching the button may be the settlement process start operation.

[0180] The processor 301 of the POS device 300 sends an instruction to the identity verification device 310 to perform identity verification on the target person 2 (St402).

[0181] The identity verification device 310 executes the identity verification process for the target person 2 (St403). The identity verification process refers to the processes from step St130 to step St138 in the flowchart shown in FIG. 10 when the identity verification device 310 is an integrated device. When the identity verification device 310 is a modular device, it refers to the processes from step St150 to step St160 in the flowchart shown in FIG. 11. For simplicity of explanation, it is assumed that the identity verification has been completed (St138; YES, or St160; YES). Also, the disaster confirmation may not be performed at step St160. In the identity verification process, the camera 304 may take a picture of the face of the target person 2.

[0182] The identity verification device 310 sends the availability of payment to the POS device 300 (St404). The availability of payment is, in other words, the availability of purchase. The identity verification device 310 determines whether the upper limit amount of the purchase limit information written in the IC chip 51 of the My Number Card 80 owned by the target person 2 is greater than the total price of the items that the target person 2 is trying to purchase, and further determines the availability of payment. If the upper limit amount is greater than the total price, the payment of items to the target person 2 is possible.

[0183] The processor 301 of the POS device 300 receives the availability of payment sent from the identity verification device 310 at step St404 and causes it to be displayed on the display device 303 (St405).

[0184] When it is not possible to supply items to the target person 2 (St406; NO), the processor 301 executes the processing for the case where supply is not possible (St407). The processing for the case where supply is not possible includes, for example, accepting the input of the return price of the items of the target person 2 and recalculating the total price of the items. The processing for the case where supply is not possible may be performed in cooperation with the personal identification device 310. The processing for the case where supply is not possible may be, for example, each processing when branching to step St192 at step St191 of the flowchart shown in FIG. 11. After step St407, the processor 301 of the POS device 300 returns to step St406 and determines again whether supply is possible.

[0185] When it is possible to supply (St406; YES), the processor 301 accepts a payment execution operation by the target person 2 (St408). The payment execution operation is an operation that triggers the progress of the payment procedure. For example, the display device 303 of the POS device 300 may be a touch panel display, and buttons such as "Execute Payment" may be displayed on the touch panel display. Then, the operation of the target person 2 touching the button may be the payment execution operation.

[0186] When the processor 301 of the POS device 300 accepts the payment execution operation in step St408, it sends an instruction to update the supply information to the personal identification device 310 (St409).

[0187] The personal identification device 310 updates the upper limit amount of the supply information, here the purchase upper limit amount information, and writes it to the writable area of the IC chip 51 of the my number card 80, which is the personal identification document here (St410). Then, this processing flow ends.

[0188] In this way, the personal identification device 310 may operate in cooperation with the POS device 300 in an online environment. The supply management system 1B can not only simply supply items to the target person (in other words, sell), but also appropriately supply items after performing personal identification of the target person and determination of whether supply is possible.

[0189] (Modification Example 2 of Embodiment 1) In Modification Example 2 of Embodiment 1, an example of the supply management of articles when the My Number Card 80 is mounted on a medium such as a smartphone and treated as the identity document 50 will be described. Hereinafter, a medium such as a smartphone on which the identity document 50 is mounted will be referred to as a "user terminal". Note that the identity document 50 may be mounted on the terminal 20 and used as the user terminal. For convenience of explanation, it is assumed that the identity document 50 is the My Number Card 80. Further, the My Number Card 80 mounted on the user terminal will be referred to as an "electronic My Number Card".

[0190] The My Number Card 80 may be used as an electronic My Number Card by being stored, for example, in an application based on the operating system of the user terminal. Examples of applications in which the electronic My Number Card is stored include a virtual wallet application (hereinafter referred to as a "wallet application") that can manage electronic money and the like. Hereinafter, for convenience of explanation, it is assumed that the electronic My Number Card is stored in the wallet application, but the electronic My Number Card may be stored in other applications of the user terminal.

[0191] The wallet application may have a region corresponding to the writable region of the IC chip 51 of the My Number Card 80 (hereinafter referred to as a "data update region"). By performing short-range wireless communication such as the NFC method between the user terminal and the IC card reader / writer of the identity verification device, the information stored in the data update region may be read or information may be written to the data update region.

[0192] First, a series of processes performed between the user terminal possessed by the disaster victim and the identity verification device installed in the evacuation shelter after the occurrence of a disaster, that is, in an offline environment when the disaster victim has evacuated to the evacuation shelter, will be described with reference to FIG. 15. FIG. 15 is a sequence flow diagram for explaining an example of supply management according to Modification Example 2 of Embodiment 1.

[0193] It is assumed that the personal identification device installed in the shelter is the personal identification device 60 shown in Fig. 2. Also, it is assumed that the target person 2 has become a disaster victim. At the start of the series of processes shown in Fig. 15, the user terminal is equipped with a My Number card 80. Also, although the personal identification device 60 may operate based on the control of the edge PC 40, the description of the edge PC 40 may be omitted to avoid redundancy.

[0194] The camera 63 of the personal identification device 60 captures the face of the target person 2 (step St500). Thereby, a face capture image of the target person 2 is generated.

[0195] The personal identification device 60 requests the information of the personal identification document 50 from the user terminal (step St501). At this time, it is assumed that the user terminal is located in the vicinity of the personal identification device 60 by the target person 2. That is, the user terminal and the personal identification device 60 are in a state where short-range wireless communication is possible. The information of the personal identification document 50 requested may include face image data and personal information stored in the electronic My Number card.

[0196] The user terminal transmits the information of the personal identification document 50 requested in step St501 to the personal identification device 60 (step St502). Thereby, the personal identification device 60 can receive and acquire the face image data and personal information.

[0197] The personal identification device 60 performs face verification using the face capture image of the target person 2 and the face image data received in step St502 (step St503).

[0198] The personal identification device 60 determines whether the face verification in step St503 was successful, in other words, whether the target person 2 could be identified (step St504).

[0199] When the face verification in step St503 fails (step St504; NO), in other words, when the identity verification of the target person 2 cannot be completed, the identity verification device 60 notifies of the verification failure (step St505). The identity verification device 60 may notify the user terminal of the verification failure, or may notify by the display device 66. Further, when the face verification fails, the identity verification device 60 may return to step St500 and execute the series of processes again from the photographing of the face of the target person 2.

[0200] When the face verification in step St503 is successful (step St504; YES), in other words, when the identity verification of the target person 2 can be completed, the identity verification device 60 writes the purchase limit amount information to the data update area of the wallet application of the user terminal (step St506). Thereby, the purchase limit amount information is written to the data update area.

[0201] Subsequently, the identity verification device 60 registers the disaster victim information (step St507). The disaster victim information may be temporarily registered in a register (not shown) of the identity verification device 60 or may be registered in the memory of the edge PC 40 or the like.

[0202] The identity verification device 60 determines whether it has become an online environment (step St508). When the identity verification device 60 determines that it has not become an online environment, that is, when it remains in an offline environment (step St508; NO), the process of step S508 is repeated. That is, the identity verification device 60 executes the process of step St509 when connected to an online environment (Internet).

[0203] When it is determined that the online environment has been established (step St508; YES), that is, when connected to the online environment, the personal identification device 60 transmits the purchase limit information written in the data update area of the wallet application of the user terminal in step St506 and the disaster victim information registered in step St507 (step St509). The transmission destination may be, for example, a server for distribution management (hereinafter referred to as the "distribution management system server"). The distribution management system server may be used, for example, by a user who manages the distribution of goods to disaster victims. Thereby, the distribution management system server can manage information on the disaster-stricken person and the amount of money paid to that person.

[0204] Note that the processes of step St508 and step St509 are performed when the Internet environment that has been offline due to a disaster is restored. Therefore, in the series of processes in FIG. 15, the processes of step St508 and step St509 may be omitted.

[0205] In this way, the target person 2 who has taken refuge in the evacuation shelter can communicate the user terminal storing the electronic personal number card and the personal identification device 60. As a result, the purchase limit information is written in the data update area of the wallet application of the user terminal. Then, the target person 2 can purchase goods within the range of the upper limit amount written in the data update area.

[0206] Note that the personal identification device installed in the evacuation shelter has been described on the premise that it is the personal identification device 60 shown in FIG. 2, but the personal identification device 10 shown in FIG. 1 may be installed in the evacuation shelter. In this case, a face photographed image of the target person 2 may be generated by photographing the face of the target person 2 with a camera provided in the user terminal (for example, when the user terminal is terminal 20, camera 23). Then, the face photographed image of the target person 2 may be transmitted from the user terminal to the personal identification device 10.

[0207] Also, the personal identification may be performed not by the personal identification device 60 or the personal identification device 10 but by the user terminal storing the electronic personal number card.

[0208] For example, the user terminal that has received a request for information on the identity document in step St501 may guide the target person 2 to take a picture of his or her own face. Specifically, the user terminal may cause an instruction to take a picture of the face for identity verification to be displayed on a display device provided in the user terminal (for example, when the user terminal is terminal 20, the display device 24), or may output voice guidance. Then, for example, due to an operation by the target person 2 or the like, a face capture image of the target person 2 may be generated by the camera of the user terminal (for example, when the user terminal is terminal 20, the camera 23).

[0209] Then, the user terminal may perform identity verification by performing face matching between the face capture image and the face image data stored in the electronic personal number card. If the user terminal succeeds in identity verification, it may perform the process of transmitting information on the identity document to the identity verification device 60 in step St502. The identity verification device 60 may use the reception of information on the identity document from the user terminal as a trigger for determining successful identity verification and writing purchase limit information in step St506.

[0210] In this way, when identity verification is performed by the user terminal, the processes of step St500, step St503, step St504, and step St505 shown in FIG. 15 may be performed by the user terminal, and these processes may be performed between step St501 and step St502.

[0211] Furthermore, when the user terminal performs identity verification, the user terminal may perform face matching using the face image data pre-registered in the user terminal instead of the face image data stored in the electronic personal number card. That is, the user terminal may perform identity verification by matching the face capture image with the face image data pre-registered in the user terminal. The face image data pre-registered in the user terminal may be, for example, the face image data pre-registered in the user terminal for biometric authentication (here, biometric authentication by face matching) to unlock the screen lock state of the user terminal or the like. For example, the data of the face capture image generated by photographing the face of the owner of the user terminal (here, the target person 2) may be registered in the user terminal for use in the above biometric authentication or the like. Note that the above unlocking of the screen lock of the user terminal or biometric authentication or the like is an example of the use of the face image data registered in the user terminal and is not limited thereto.

[0212] Therefore, when the user terminal performs identity verification, the user terminal may perform identity verification by performing face matching between the face capture image and the face image data stored in the electronic personal number card or the face image data pre-registered in the user terminal.

[0213] Next, the process when the target person 2 purchases an item at a store or a distribution center or the like (hereinafter referred to as "store or the like") will be described with reference to FIG. 16. The distribution center is a place where items are distributed to disaster victims and can be managed and operated, for example, by an administration or the like. FIG. 16 is a sequence flow diagram for explaining a supply management example according to Modification Example 2 of Embodiment 1.

[0214] The personal identification device installed in a store or the like is assumed to be the personal identification device 10 shown in FIG. 1. At the start point of the series of processes shown in FIG. 16, the series of processes shown in FIG. 15 has been completed. That is, the purchase limit amount information is written in the data update area of the wallet application of the user terminal of the target person 2. Further, the personal identification device 10 may operate based on the control of the user terminal or the edge PC 40. However, in order to avoid making the explanation redundant, the description that the operation of the personal identification device 10 is based on the control of the user terminal or the edge PC 40 may be omitted.

[0215] The personal identification device 10 requests the information of the personal identification document 50 and the purchase limit amount information from the user terminal (step St600). At this time, it is assumed that the user terminal is located in the vicinity of the personal identification device 10 by the target person 2. That is, the user terminal and the personal identification device 10 are in a state where short-range wireless communication is possible. The information of the personal identification document 50 to be requested may include personal information stored in the electronic personal number card.

[0216] The user terminal transmits the information of the personal identification document 50 and the purchase limit amount information requested in step St600 to the personal identification device 10 (step St601). Thereby, the personal identification device 10 can receive and acquire the information on the upper limit of the amount that the target person 2 can use for purchasing goods. In addition, the personal identification device 10 can acquire the personal information of the target person 2.

[0217] The personal identification device 10 receives the information of the goods and the amount of the goods (step St602). For example, the personal identification device 10 may be connected to a barcode scanner that reads a barcode to acquire the information of the goods (for example, the name of the goods, etc.) to which the barcode is attached and the information of the amount of the goods. Then, the target person 2 may read the barcode attached to the goods to be purchased with the barcode scanner. Thereby, the information of the goods and the amount of the goods is transmitted from the barcode scanner to the personal identification device 10, and the personal identification device 10 can receive these information.

[0218] The personal verification device 10 calculates the remaining balance by subtracting the amount of the item obtained in step St602 from the upper limit amount included in the purchase upper limit amount information obtained in step St601 (step St603). For the sake of simplicity, it is assumed that the upper limit amount is larger than the amount of the item.

[0219] The personal verification device 10 writes the remaining balance information calculated in step St603 to the data update area of the wallet application of the user terminal (step St604). Then, the user terminal updates the purchase upper limit amount information (step St605).

[0220] The personal verification device 10 registers the user information and the purchase information (step St606). The user information may include, for example, at least a part of the personal information of the target person 2 obtained by the personal verification device 10 in step St601, or the disaster victim information. The purchase information may be information indicating when, at which store, etc. the target person 2 purchased which item, or the remaining balance of the amount available to the target person 2. The user information and the purchase information may be temporarily registered in a register (not shown) of the personal verification device 10 or in the memory of the edge PC 40.

[0221] The personal verification device 10 determines whether it has entered an online environment (step St607). If the personal verification device 10 determines that it has not entered an online environment, that is, it remains in an offline environment (step St607; NO), the process of step S607 is repeated. That is, the personal verification device 10 executes the process of step St608 when connected to an online environment (Internet).

[0222] When the personal verification device 10 determines that it has entered an online environment (step St607; YES), that is, when connected to an online environment, it transmits the user information and the purchase information (step St608). The transmission destination may be, for example, a distribution management system server. Thereby, the distribution management system server can manage which items the disaster-stricken person purchased and the remaining balance information of the amount available to the person.

[0223] Note that the processes of step St607 and step St608 are performed when the Internet environment that has been offline due to a disaster is restored. Therefore, in the series of processes in FIG. 16, the processes of step St607 and step St608 may be omitted.

[0224] In this way, the disaster victim who has received the amount for purchasing goods with the electronic personal number card at the evacuation shelter, that is, the one who has completed writing the purchase limit amount information to the data update area, can purchase goods at a store or the like using the amount received.

[0225] Note that the personal identification device installed in a store or the like has been described on the premise that it is the personal identification device 10 shown in FIG. 1, but the personal identification device 60 shown in FIG. 2 may be installed in a store or the like.

[0226] (Modification Example 3 of Embodiment 1) In modification example 3 of embodiment 1, similar to modification example 2 of embodiment 1, an example of the supply management of goods when the personal number card 80 is mounted on a medium such as a smartphone and treated as the personal identification document 50 will be described.

[0227] In modification example 3 of embodiment 1, before the occurrence of a disaster, that is, in an online environment, it is assumed that the personal number card 80 is mounted on the user terminal, and furthermore, an evacuee voucher to be described later is issued.

[0228] The evacuee voucher may include information such as the name of the person, the disaster victim information, and the purchase limit information. The evacuee voucher may further have a flag (hereinafter referred to as the "evacuee flag") indicating whether the person is a disaster victim (evacuee) who has suffered a disaster. The evacuee flag is in one of two states, "ON" and "OFF". When the evacuee flag is ON, the evacuee voucher is valid. On the other hand, when the evacuee flag is OFF, the evacuee voucher is invalid. For the evacuee voucher to be valid means that the evacuee voucher indicates that the person is a disaster victim (evacuee) who has suffered a disaster, and the information (such as the purchase limit information) included in the evacuee voucher becomes available. Specifically, when the evacuee voucher is valid, the purchase limit information included in the evacuee voucher may be used for purchasing goods. Conversely, while the evacuee voucher is invalid, the evacuee voucher does not indicate that the person is a disaster victim (evacuee), and the information included in the evacuee voucher may not be available.

[0229] The evacuee voucher may be issued as follows. For example, a person who owns a user terminal storing an electronic personal number card may access a server that provides administrative services using the user terminal and request the issuance of an evacuee voucher. The server may be, for example, a local government server. Hereinafter, the server that issues the evacuee voucher is referred to as the local government server. Then, the local government server may issue the evacuee voucher to the user terminal. At this time, the evacuee voucher may be issued and stored in the data update area of the wallet application of the user terminal. Also, at this time, the evacuee flag of the evacuee voucher is OFF.

[0230] The local government server may have pre-registered face image data (or face captured images) and personal information of individuals (residents). When issuing an evacuation voucher, the local government server may perform identity verification using an electronic personal number card. Specifically, when a request to issue an evacuation voucher is made, personal information is transmitted from the user terminal to the local government server, and the local government server may perform identity verification by comparing the received personal information with the personal information pre-registered in the local government server. Furthermore, when a request to issue an evacuation voucher is made, a face captured image may also be transmitted from the user terminal to the local government server. The face captured image may be generated, for example, by a person who owns the user terminal taking a picture using the user terminal. Then, the local government server may perform identity verification by performing face comparison between the received face captured image and the pre-registered face image data (or face captured image). The evacuation voucher may be issued if the identity verification is successful.

[0231] First, after a disaster occurs, that is, when the affected person takes refuge in a shelter in an offline environment, a series of processes performed between the user terminal held by the affected person and the identity verification device installed in the shelter will be described with reference to FIG. 17. FIG. 17 is a sequence flow diagram for explaining a payment management example according to Modification 3 of Embodiment 1.

[0232] It is assumed that the identity verification device installed in the shelter is the identity verification device 60 shown in FIG. 2. Also, it is assumed that the target person 2 has become an affected person. At the start of the series of processes shown in FIG. 17, the user terminal is equipped with a personal number card 80 and an evacuation voucher has been issued. Also, the evacuation flag of the evacuation voucher is OFF. Although the identity verification device 60 may operate based on the control of the edge PC 40, the description of the edge PC 40 may be omitted to avoid redundancy.

[0233] The camera 63 of the identity verification device 60 captures the face of the target person 2 (step St700). Thereby, a face captured image of the target person 2 is generated.

[0234] The user authentication device 60 requests the information of the user authentication document 50 from the user terminal (step St701). At this time, it is assumed that the user terminal is located in the vicinity of the user authentication device 60 by the target person 2. That is, the user terminal and the user authentication device 60 are in a state where short-range wireless communication is possible. The information of the user authentication document 50 to be requested may include the face image data and personal information stored in the electronic personal number card.

[0235] [[ID=Y]]The user terminal transmits the information of the user authentication document 50 requested in step St701 and the information of the evacuee voucher to the user authentication device 60 (step St702). As a result, the user authentication device 60 can receive and acquire the face image data, personal information, and the information of the evacuee voucher. When the user terminal has the evacuee voucher in the data update area of the wallet application, in addition to the requested user authentication document 50, that is, the information of the electronic personal number card, the user terminal can transmit the information of the evacuee voucher to the user authentication device 60. <N

[0236] The user authentication device 60 performs face verification using the face captured image of the target person 2 and the face image data received in step St702 (step St703).

[0237] The user authentication device 60 determines whether the face verification in step St703 is successful, in other words, whether the target person 2 can be authenticated (step St704).

[0238] If the face verification in step St703 fails (step St704; NO), in other words, if the target person 2 cannot be authenticated, the user authentication device 60 notifies of the verification failure (step St705). The user authentication device 60 may notify the user terminal of the verification failure, or may notify by the display device 66. Also, if the face verification fails, the user authentication device 60 may return to step St700 and re-execute a series of processes from the photographing of the face of the target person 2.

[0239] When the face verification in step St503 is successful (step St704; YES), in other words, when the identity verification of the target person 2 is successful, the victim information is registered and the evacuee flag of the evacuee voucher is set to ON (step St708). The victim information may be temporarily registered in a register (not shown) of the identity verification device 60 or in the memory of the edge PC 40. By setting the evacuee flag to ON, the evacuee voucher indicates that the target person 2 is a victim (evacuee). Also, by setting the evacuee flag to ON, the target person 2 can purchase items using the information of the evacuee voucher, for example, the amount included in the purchase limit information.

[0240] The identity verification device 60 notifies the user terminal that the evacuee flag has been set to ON (step St709). Thereby, the target person 2 can confirm that the evacuee flag has been set to ON.

[0241] The identity verification device 60 determines whether it has entered an online environment (step St710). If the identity verification device 60 determines that it has not entered an online environment, that is, if it remains in an offline environment (step St710; NO), the process of step S710 is repeated. That is, the identity verification device 60 executes the process of step St711 when connected to an online environment (Internet).

[0242] When the identity verification device 60 determines that it has entered an online environment (step St710; YES), that is, when connected to an online environment, it transmits the victim information registered in step St708 (step St711). The transmission destination may be, for example, a distribution management system server. Thereby, the distribution management system server can manage the information of the affected people.

[0243] Note that the processes of step St710 and step St711 are performed when the Internet environment that was offline due to a disaster is restored. Therefore, in the series of processes in FIG. 17, the processes of step St710 and step St711 may be omitted.

[0244] In this way, the target person 2 who has taken refuge in the evacuation shelter can communicate the user terminal storing the electronic personal number card with the personal identification device 60. As a result, the evacuee voucher stored in advance in the data update area of the wallet application of the user terminal becomes valid. Then, the target person 2 can purchase items, for example, within the range of the upper limit amount indicated by the purchase upper limit amount information included in the evacuee voucher.

[0245] Note that the personal identification device installed in the evacuation shelter has been described on the premise that it is the personal identification device 60 shown in FIG. 2, but the personal identification device 10 shown in FIG. 1 may be installed in the evacuation shelter. In this case, a face photographed image of the target person 2 may be generated by photographing the face of the target person 2 with a camera provided in the user terminal (for example, when the user terminal is the terminal 20, the camera 23). Then, the face photographed image of the target person 2 may be transmitted from the user terminal to the personal identification device 10.

[0246] Also, the personal identification may be performed not by the personal identification device 60 or the personal identification device 10, but by the user terminal storing the electronic personal number card.

[0247] For example, the user terminal that has received the request for information on the personal identification document in step St701 may guide the target person 2 to photograph his / her own face. Specifically, the user terminal may display an instruction to photograph the face for personal identification on a display device provided in the user terminal (for example, when the user terminal is the terminal 20, the display device 24), or output a voice guidance. Then, for example, due to an operation of the target person 2 or the like, a face photographed image of the target person 2 may be generated by photographing the face of the target person 2 with a camera of the user terminal (for example, when the user terminal is the terminal 20, the camera 23).

[0248] Then, the user terminal may perform identity verification by comparing the face captured image with the face image data stored in the electronic personal number card. If the user terminal succeeds in identity verification, it may perform the transmission process of the information of the identity verification document and the information of the evacuee voucher to the identity verification device 60 in step St702. The identity verification device 60 may receive the information of the identity verification document and the information of the evacuee voucher from the user terminal as a trigger for determining the success of identity verification and registering the disaster victim information and turning on the evacuee flag in step St708.

[0249] In this way, when identity verification is performed by the user terminal, the processes of step St700, step St703, step St704, and step St705 shown in FIG. 17 may be performed by the user terminal, and these processes may be performed between step St701 and step St702.

[0250] Furthermore, when identity verification is performed by the user terminal, the user terminal may perform face comparison using the face image data pre-registered in the user terminal instead of the face image data stored in the electronic personal number card. That is, the user terminal may perform identity verification by comparing the face captured image with the face image data pre-registered in the user terminal.

[0251] Therefore, when identity verification is performed by the user terminal, the user terminal may perform identity verification by comparing the face captured image with the face image data stored in the electronic personal number card or the face image data pre-registered in the user terminal.

[0252] Next, the process when the target person 2 purchases an item at a store or the like will be described with reference to FIG. 18. FIG. 18 is a sequence flow diagram for explaining a payment management example according to Modification Example 3 of Embodiment 1.

[0253] The personal identification device installed in the store or the like is assumed to be the personal identification device 60 shown in FIG. 2. At the start of the series of processes shown in FIG. 18, the series of processes shown in FIG. 17 has been completed. That is, the evacuee flag of the evacuee voucher issued to the user terminal of the target person 2 is ON. Also, the personal identification device 60 may operate based on the control of the edge PC 40, but the description of the edge PC 40 may be omitted to avoid redundancy.

[0254] The personal identification device 60 requests the information of the personal identification document 50 and the information of the evacuee voucher from the user terminal (step St800). At this time, it is assumed that the user terminal is located near the personal identification device 60 by the target person 2. That is, the user terminal and the personal identification device 60 are in a state where short-range wireless communication is possible. The information of the personal identification document 50 to be requested may include personal information stored in the electronic personal number card.

[0255] The user terminal transmits the information of the personal identification document 50 and the information of the evacuee voucher requested in step St800 to the personal identification device 60 (step St801). Thereby, the personal identification device 60 can receive and acquire the information on the upper limit of the amount that the target person 2 can use for purchasing goods. The said information corresponds to the purchase upper limit amount information included in the information of the evacuee voucher. Also, the personal identification device 60 can acquire the personal information of the target person 2.

[0256] The personal identification device 60 reads information on the article and the price of the article (step St802). For example, the personal identification device 60 may be connected to a barcode scanner. Then, the target person 2 may read the barcode attached to the article to be purchased with the barcode scanner. Thereby, information on the article and the price of the article is transmitted from the barcode scanner to the personal identification device 60, and the personal identification device 60 can receive this information. Alternatively, the camera 63 of the personal identification device 60 may read the barcode of the article and cooperate with the edge PC 40 to obtain information on the article and the price of the article. Information including the price of the article etc. may be stored and held in the edge PC 40.

[0257] The personal identification device 10 calculates the balance by subtracting the price of the article obtained in step St802 from the upper limit amount included in the evacuee voucher information obtained in step St801 (step St803). For the sake of simplicity of explanation, it is assumed that the upper limit amount is larger than the price of the article.

[0258] The personal identification device 60 generates the balance information calculated in step St803 as a two-dimensional code and displays it on the display device 66 (step St804).

[0259] The user terminal reads the two-dimensional code generated in step St804 (step St805). The user terminal may use a camera (for example, when the user terminal is terminal 20, camera 23) for reading the two-dimensional code. Thereby, the balance information is transmitted from the personal identification device 60 to the user terminal (step St806). The user terminal can receive the balance information.

[0260] The user terminal updates the evacuee voucher information based on the balance information received in step St806 (step St807). Specifically, the user terminal updates the upper limit amount included in the purchase upper limit amount information among the evacuee voucher information to the received balance.

[0261] The personal identification device 60 registers the evacuee voucher information and the purchase information (step St808). The evacuee voucher information and the purchase information may be temporarily registered in a register (not shown) or the like of the personal identification device 60, or may be registered in the memory or the like of the edge PC 40. Note that the personal identification device 60 may update the evacuee voucher information, similarly to the user terminal in step St807.

[0262] The personal identification device 60 determines whether it has entered an online environment (step St809). When the personal identification device 60 determines that it has not entered an online environment, that is, when it determines that it remains in an offline environment (step St809; NO), it repeats the process of step S809. That is, the personal identification device 10 executes the process of step St810 when connected to an online environment (Internet).

[0263] When the personal identification device 10 determines that it has entered an online environment (step St809; YES), that is, when connected to an online environment, it transmits the user information and the purchase information (step St810). The transmission destination may be, for example, a distribution management system server. Thereby, the distribution management system server can manage what items the affected person has purchased and the remaining balance information of the amount that the person can use.

[0264] Note that the processes of step St607 and step St608 are performed when the Internet environment, which was offline due to a disaster, is restored. Therefore, in the series of processes in FIG. 16, the processes of step St607 and step St608 may be omitted.

[0265] In this way, a person who has been issued an evacuee voucher in advance can turn on the evacuee flag of the evacuee voucher at the evacuation shelter when a disaster occurs. When the evacuee flag is turned on, the information contained in the evacuee voucher becomes available, and for example, it is possible to purchase items within the range of the upper limit amount included in the purchase upper limit amount information. The disaster victim can purchase items by linking the personal identification device installed in a store or the like with the user terminal that stores the evacuee voucher.

[0266] Note that the personal identification device installed in a store or the like has been described on the premise that it is the personal identification device 60 shown in FIG. 2, but the personal identification device 10 shown in FIG. 1 may be installed in a store or the like. In this case, the two-dimensional code generated in step St804 may be displayed, for example, on a display device (not shown) of the edge PC40.

[0267] In Modification Example 2 and Modification Example 3 of the above-described Embodiment 1, examples in which items are purchased based on the purchase upper limit amount information have been shown. However, the present invention is not limited to this, and for example, the distribution frequency information may be written in the data update area, or the distribution frequency information may be included as information in the evacuee voucher. Then, the target person 2 may receive the distribution of items based on the distribution frequency information.

[0268] (Other Modification Examples of Embodiment 1) In the above-described Embodiment 1, when the target person 2 purchases an item using the payment management system 1, that is, the modular personal identification device 10, an example in which the price of the item is input using the operation device 25 of the terminal 20 has been shown. However, the present invention is not limited to this. When the target person 2 purchases an item using the payment management system 1A, that is, the integrated personal identification device 60, the price of the item may be input using the input device 70. Further, when the modular personal identification device 10 is used, the price of the item that the target person 2 intends to purchase may be written on paper or a bill, etc., and the paper or bill with the price written thereon may be photographed by the document photographing camera 13, and the price may be read by OCR. Similarly, when the integrated personal identification device 60 is used, the price may be read by OCR.

[0269] In addition, in the above-described Embodiment 1, an example was shown in which the display device 66 of the integrated personal authentication device 60 displays various types of information written in the writable area of the IC chip 51 of the My Number Card 80. Also, an example was shown in which the display device 24 of the terminal 20 displays the price of an article, the remaining amount, and the like. However, the present invention is not limited thereto, and the personal authentication device 10 or the personal authentication device 60 may have a function for voice guidance so that the target person 2 can grasp various types of information, the price of articles, and the like. For example, the personal authentication device 10 or the personal authentication device 60 may include a speaker. For example, the personal authentication device 10 or the personal authentication device 60 may guide the target person 2 to perform an operation to be performed by the target person 2 by voice guidance using a speaker or the like.

[0270] (Summary of Embodiment 1) According to the description of the above Embodiment 1, at least the following techniques are disclosed. Although the corresponding components and the like in Embodiment 1 are exemplified in parentheses, the present invention is not limited thereto.

[0271] (Technology 1) In the payment management method, when the identity of a person (for example, the target person 2) can be confirmed based on an identity document (for example, the My Number Card 80), payment information regarding payment to the person (for example, the purchase limit information 92A) is written in the writable area of the IC chip (for example, the IC chip 51) of the identity document. When the person attempts to receive an article, it is determined whether or not the article can be paid to the person based on the information of the article (for example, the information 100) and the payment information. When the article can be paid to the person, the payment information is updated and written in the writable area as new payment information (for example, the purchase limit information 92A1).

[0272] In this way, based on the personal identification document, after verifying the identity of the person who owns the personal identification document, information regarding payment is written into the IC chip of the personal identification document. When the person attempts to receive the payment, the eligibility for payment is determined based on this information. If the payment is possible, that is, if the payment has been made, the information is updated and written back into the IC chip of the personal identification document. By this payment management method, even in an offline environment, fair and prompt item payment becomes possible.

[0273] (Technology 2) In the payment management method described in Technology 1, the payment information includes purchase limit amount information indicating an amount (for example, purchase limit amount information 92B). The payment management method determines whether a person can purchase an item based on the amount and the price of the item when the person attempts to purchase an item. If the person can purchase the item, the remaining amount obtained by subtracting the price of the item from the amount is written into the writable area as new purchase limit amount information (for example, purchase limit amount information 92B1).

[0274] Thereby, based on the amount written in the IC chip of the personal identification document, whether a person can purchase an item is determined, so that the purchase of items by the person can be appropriately managed.

[0275] (Technology 3) In the payment management method described in Technology 2, when the price of an item is greater than the amount indicated by the purchase limit amount information, the payment management method determines that the person cannot purchase the item, and notifies the person of the determination result and the difference between the amount and the price of the item.

[0276] Thereby, a person attempting to purchase an item can confirm the difference between the available amount and the total price of one or more items when unable to purchase the item.

[0277] (Technology 4) In the payment management method described in Technique 2 or 3, the amount indicated by the purchase upper limit information is defined according to whether the person is an adult or not, and whether the person is an adult is determined based on information including the person's date of birth.

[0278] Thereby, the amount that a person can use for purchasing an item can be determined based on the age etc. of the said person.

[0279] (Technique 5) In the payment management method described in any one of Techniques 1 to 4, the payment information includes distribution frequency information (for example, distribution frequency information 93C) indicating the number of times an item can be distributed to a person, and the payment management method determines whether the item can be distributed to the person based on the information of the said item (for example, information 120) and the distribution frequency information. When the item can be distributed to the person, the remaining number of times obtained by subtracting the distribution number of times of the said item from the number of distributable times is written as new distribution frequency information (for example, distribution frequency information 93C1) in the writable area.

[0280] Thereby, based on the distribution number of times written in the IC chip of the identification document, it is determined whether the item can be distributed to the said person, so that the distribution of the item to the person can be appropriately managed.

[0281] (Technique 6) In the payment management method described in Technique 5, the number of times an item can be distributed indicated by the distribution frequency information is defined according to the type of the said item.

[0282] Thereby, the distribution to a person can be managed for each type of item.

[0283] (Technique 7) In the payment management method described in any one of Techniques 1 to 6, when the person's identity can be confirmed, the payment management method writes disaster victim information (for example, disaster victim information 91A) including that the person is a disaster victim and payment information regarding the payment to the person in the writable area of the IC chip of the identification document.

[0284] Thus, for example, at the time of a disaster, based on the identification document, it is possible to determine whether the person who owns the identification document is a disaster victim, so that the supply of items to disaster victims can be appropriately managed.

[0285] (Technology 8) In the supply management method described in Technology 7, the disaster victim information includes evacuation shelter information indicating the evacuation location of the person.

[0286] Thus, for example, at the time of a disaster, based on the identification document, it is possible to confirm where the person who owns the identification document has evacuated to.

[0287] (Technology 9) In the supply management method described in Technology 7 or 8, the disaster victim information includes information regarding the family composition of the person.

[0288] Thus, for example, at the time of a disaster, based on the identification document, it is possible to confirm the family composition of the person who owns the identification document.

[0289] (Technology 10) In the supply management method described in any one of Technologies 1 to 9, when it is determined that the supply of items to a person is not possible, the determination result is notified to the person.

[0290] Thus, a person who intends to receive the supply can confirm that they cannot receive the supply if that is the case.

[0291] (Technology 11) The payment management system (for example, payment management system 1) performs face verification on a person (for example, target person 2) who holds an identity document (for example, My Number Card 80), and includes a terminal equipped with a display device (for example, display device 24) and an identity verification device (for example, identity verification device 10) that can communicate with the terminal. When the face verification of the person based on the identity document by the terminal is successful, the identity verification device writes payment information related to the payment to the person (for example, purchase limit information 92A) to the writable area of the IC chip (for example, IC chip 51) of the identity document. When the person attempts to receive an item, it determines whether the payment of the item to the person is possible based on the information of the item (for example, information 100) and the payment information. If the payment of the item to the person is possible, it updates the payment information and writes it to the writable area as new payment information (for example, purchase limit information 92A1). The terminal receives an input of the information of the item by a user operation, displays the information of the item on the display device according to the input, and when the payment of the item to the person is possible, displays the new payment information on the display device.

[0292] Thereby, the payment management system obtains the same effect as that of Technology 1. In addition, the person who has received the payment can confirm the payment information updated by the payment on the display device.

[0293] (Technology 12) In the payment management system described in Technology 11, when the identity verification device determines that the payment of an item to a person is not possible, the terminal displays the determination result on the display device.

[0294] Thereby, the payment management system obtains the same effect as that of Technology 10.

[0295] The functions of the above-described embodiments can also be realized by supplying a program and an application for realizing the functions of the above-described embodiments to a system or a device using a network or a storage medium or the like, and having one or more processors in the computer of the system or the device read and execute the program.

[0296] In addition, the functions of the above-described embodiments may be realized by a circuit (for example, an ASIC or an FPGA) that realizes one or more functions.

[0297] As described above, the embodiments according to the present disclosure have been described with reference to the drawings. Needless to say, the present disclosure is not limited to such examples. It is obvious that those skilled in the art can conceive various modification examples, correction examples, substitution examples, addition examples, deletion examples, and equivalent examples within the scope described in the claims, and it is naturally understood that they also belong to the technical scope of the present disclosure. Further, within the scope not departing from the gist of the invention, the components in the above-described embodiments may be arbitrarily combined.

Industrial Applicability

[0298] The present disclosure is useful as a payment management method and a payment management system.

Explanation of Signs

[0299] 1, 1A, 1B Payment management system 2 Target person 10, 60, 310 Identity verification device 20 Terminal 21, 301 Processor 22, 302 Memory 13, 64 Document photographing camera 14, 65 IC card reader / writer 25 Operating device 16, 68 Mounting part 23, 63, 304 Camera 24, 66, 303 Display device 26, 307 External interface device 30, 320 Power supply 40, 330 Edge PC 50 Identity verification document 51 IC chip 52 Face photograph 53 Character information 70 Input device 80 My Number Card 300 POS device 305 Barcode scanner 306 Receipt printer

Claims

1. When the identity of a person can be verified based on identity verification documents, payment information regarding the payment to the person is written into the writable area of the IC chip of the identity verification documents, when the person attempts to receive an item, it is determined whether the item can be paid to the person based on the information of the item and the payment information, when the item can be paid to the person, the payment information is updated and written into the writable area as new payment information, A payment management method.

2. The payment information includes purchase limit amount information indicating an amount, when the person attempts to purchase an item, it is determined whether the person can purchase the item based on the amount and the price of the item, when the person can purchase the item, the remaining amount obtained by subtracting the price of the item from the amount is written into the writable area as new purchase limit amount information, The payment management method according to claim 1.

3. When the price of the item is greater than the amount indicated by the purchase limit amount information, it is determined that the person cannot purchase the item, and the determination result and the difference between the amount and the price of the item are notified to the person, The payment management method according to claim 2.

4. The amount indicated by the purchase limit amount information is defined according to whether the person is an adult or not, whether the person is an adult or not is determined based on information including the person's date of birth, The payment management method according to claim 2.

5. The payment information includes distribution times information indicating the number of times an item can be distributed to the person, it is determined whether the item can be distributed to the person based on the information of the item and the distribution times information, when the item can be distributed to the person, the remaining number of times obtained by subtracting the distribution times of the item from the number of times the item can be distributed is written into the writable area as new distribution times information, The payment management method according to claim 1.

6. The number of times an item can be distributed indicated by the distribution times information is defined according to the type of the item, The payment management method according to claim 5.

7. When the identity of the person can be verified, disaster victim information including that the person is a disaster victim and payment information regarding the payment to the person are written into the writable area of the IC chip of the identity verification documents, The payment management method according to claim 1.

8. When the person intends to receive an item, perform the identity verification of the person based on the identity document and the verification that the person is a disaster victim based on the disaster victim information. The payment management method according to claim 7.

9. The disaster victim information includes evacuation shelter information indicating the evacuation location of the person. The payment management method according to claim 7.

10. The disaster victim information includes information regarding the family composition of the person. The payment management method according to claim 7.

11. When it is determined that the item cannot be provided to the person, notify the person of the determination result. The payment management method according to claim 1.

12. Perform face verification of a person holding an identity document, and include a terminal equipped with a display device and An identity verification device capable of communicating with the terminal. The identity verification device When the face verification of the person based on the identity document by the terminal is successful, write payment information regarding the payment to the person in the writable area of the IC chip of the identity document. When the person intends to receive an item, determine whether the item can be provided to the person based on the information of the item and the payment information. When the item can be provided to the person, update the payment information and write it as new payment information in the writable area. The terminal Receive an input of the information of the item by a user operation, Display the information of the item on the display device according to the input, When the item can be provided to the person, display the new payment information on the display device. Payment management system.

13. When the identity verification device determines that the item cannot be provided to the person, The terminal displays the determination result on the display device. The payment management system according to claim 12.

Images