Information processor, information processing method and program

Abstract

To realize a verification regarding a use of an instrument configured to execute processing according to a reading result of a use medium via a non-contact communication, in a more preferable manner.SOLUTION: An information processor includes: execution means configured to sequentially execute, as a series of processing, respective pieces of processing in plurality of instruments according to a verification pattern stipulated so as to sequentially execute the pieces of processing respectively corresponding to a plurality of instruments with regard to an issuance or a use of a use medium readable via a non-contact communication; and determination means configured to determine a validity of a result of processing according to an update result of information stored in the use medium according to an execution result of the processing applied to part of the plurality of instruments, targeting the part of the instruments. The determination means estimates, targeting a prescribed kind of instrument other than a ticket examination machine, a validity of a result of first processing applied to the instrument according to a result of processing applied to the ticket examination machine, the processing being second processing to be executed right after the first processing.SELECTED DRAWING: Figure 10

Description

[Technical Field]

[0001] The present disclosure relates to an information processing device, an information processing method, and a program. [Background technology]

[0002] With the realization of near-field wireless communication, also known as contactless communication, this communication technology has been used to read media such as IC cards and portable communication terminals such as smartphones on station equipment such as ticket gates and fare adjustment machines, thereby enabling the management of entry and exit to predetermined areas such as areas inside latches, and the settlement of fares for public transportation, etc. In recent years, the use of such media as IC cards (so-called transportation IC cards) and communication terminals to be read by devices other than station equipment has also been considered for electronic transactions using electronic money, etc., and the provision of other services such as luggage storage services using lockers. Furthermore, in order to safely operate the above-mentioned equipment, various technologies for verifying the operation of the equipment are being studied. Patent Document 1 discloses an example of a technology for verifying the operation of station service equipment. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Patent No. 4857737 Summary of the Invention [Problem to be solved by the invention]

[0004] In conventional methods for verifying the operation of a device, the device reads a medium such as an IC card or a communication terminal (hereinafter also referred to as the medium of use) and executes a process, and the information in the medium of use updated based on the results is compared with pre-prepared correct information to verify its validity.However, in recent years, the number of devices that can use the medium of use exemplified above has increased, and as a result, the amount of information stored in the medium of use has also increased, making it difficult to verify the validity of updates to the information stored in the medium of use in some devices using conventional methods.

[0005] In view of the above problems, the present invention aims to make it possible to more suitably verify the use of a device that executes processing in response to the results of reading a medium used via contactless communication. [Means for solving the problem]

[0006] The information processing device of the present invention has an execution means for sequentially executing the processes of each of a series of devices related to the issuance or use of a medium of use that can be read via contactless communication, at least some of which include station service equipment, as a series of processes for verifying the use of each of the multiple devices based on a verification pattern specified so that processes corresponding to each of the multiple devices included in the series of devices are executed sequentially, among the processes related to the issuance or use of the medium of use that is applied to each of the multiple devices; and a judgment means for determining the legitimacy of the results of the processing applied to at least some of the multiple devices based on the update results of the information stored in the medium of use in accordance with the execution results of the processing applied to the device, and the judgment means estimates the legitimacy of the results of a first processing applied to a specified type of device among the multiple devices other than a ticket gate based on the results of a second processing applied to the ticket gate, which is executed immediately after the first processing and uses as input the information stored in the medium of use that has been updated by the first processing. [Effects of the Invention]

[0007] According to the present invention, it is possible to more preferably verify the use of a device that executes a process in response to the result of reading a medium used via contactless communication. [Brief explanation of the drawings]

[0008] [Figure 1] FIG. 10 is a diagram showing an example of verification work for station equipment. [Figure 2] FIG. 10 is a diagram illustrating an example of verification data related to realization of a verification pattern. [Figure 3] FIG. 10 is a diagram showing an example of a method for verifying the use of a device. [Figure 4] FIG. 1 illustrates an example of a system configuration of an information processing system. [Figure 5] FIG. 10 is a diagram showing an example of a usage pattern of various devices. [Figure 6] FIG. 10 is a diagram showing an example of input / output data to a verification process related to device use. [Figure 7] FIG. 1 illustrates an example of a hardware configuration of an information processing device. [Figure 8] FIG. 2 is a functional block diagram illustrating an example of a functional configuration of a validation server. [Figure 9] FIG. 10 is a diagram showing an example of a verification pattern. [Figure 10] FIG. 10 is a diagram illustrating an example of a method for determining a verification result related to the use of a device. [Figure 11] 10 is a flowchart illustrating an example of a process of a validation server. DETAILED DESCRIPTION OF THE INVENTION

[0009] Preferred embodiments of the present disclosure will be described in detail below with reference to the accompanying drawings. In this specification and drawings, components having substantially the same functional configurations are designated by the same reference numerals, and redundant description will be omitted.

[0010] <Summary> The information processing system 1 according to this embodiment is a system for verifying the use of devices that provide various services by reading a medium of use, such as a transportation IC card or a portable communication terminal such as a smartphone, via short-range wireless communication, also known as contactless communication. Devices that the information processing system 1 can verify include, for example, station service devices related to the use of public transportation (e.g., railways) such as ticket gates, ticket vending machines, and fare adjustment machines. Furthermore, in recent years, the above-mentioned transportation IC cards and other such media have become usable for purposes other than the use of public transportation, such as electronic payments using electronic value, such as electronic money, and procedures related to the use of coin lockers. Therefore, the information processing system 1 is configured to be able to verify devices related to the provision of these services.

[0011] Therefore, to better understand the features of the information processing system 1 according to this embodiment, an example of a conventional method for verifying the use of the above-mentioned devices will be described. In the conventional method, a physical medium such as a transportation IC card is used as the medium of use, and the medium is read by a real device such as a station service device or other device to execute processing, and the processing result is compared with an expected value of the processing result created in advance to determine legitimacy. Furthermore, the device that reads the medium of use during verification is not limited to one, and verification can also be performed in cases where multiple devices are used consecutively, for example, by having each device read the medium of use in sequence.

[0012] For example, Figure 1 shows a schematic example of a verification process using a conventional method. The example shown in Figure 1 shows an example in which a new IC card is issued and entry processing is performed at station A, a charge processing is performed at station B, and then passing through a single-latch ticket gate for a transfer (exit processing and entry processing), and finally electronic payment and exit processing is performed at a vending machine at station N. In this way, with conventional methods, station settings, etc. are configured as needed for the target device, the device is actually made to read a medium such as an IC card and execute processing, and various evaluations are made of the processing results.

[0013] On the other hand, as mentioned above, conventional methods require the use of actual machines and media, which requires the preparation of various devices for verification and the securing of a location to install those devices. Given this background, it is conceivable that there may be situations where it is difficult to verify all devices, and in such cases, verification may be limited to representative devices. Furthermore, due to the nature of using actual machines and media, complex operations such as manual operation of the devices are required.

[0014] Furthermore, the generation of verification patterns and the confirmation of verification results are sometimes performed manually, which can be time-consuming for users. In particular, in cases involving complex transfers, the procedure for creating expected values ​​can be complicated, such as manually calculating the usage fee and then deducting it from the electronic value charged to the medium of use. This can lead to situations where there are only a limited number of workers available to handle the process, or where incorrect expected values ​​are created. Given this background, with conventional methods, even if an attempt was made to increase the number of verification patterns, it was sometimes difficult to create a sufficient amount of verification input data within a specified period.

[0015] For example, Fig. 2 shows an example of verification data for realizing various verification patterns. In the example shown in Fig. 2, verification conditions are set for the verification data, such as the company that provides the device, the name of the station where the device is installed, the type of device, functions, detailed settings, confirmation contents, and the increase / decrease amount of electronic value due to contactless communication (hereinafter also referred to as SF increase / decrease amount). In addition, in the verification data, the remaining amount of electronic value held in the medium to be used (hereinafter also referred to as SF remaining amount) is set as the expected value of the processing result by the target device.

[0016] Furthermore, when determining the verification procedures, a wide variety of verification input data is manually created, and if the workers are insufficiently knowledgeable about station equipment or public transportation fare calculation rules, they may apply settings that are not actually used, such as re-entering a ticket gate after entering through one. In particular, the inclusion of such patterns that are not actually used is often discovered when the verification is actually carried out, which can require the verification to be suspended and the verification content and expected values ​​to be revised, which can be time-consuming. In addition, when comparing the verification results with expected values, the main verification items may be items that are expected to be rewritten as the equipment is used, making it difficult to verify the series of information stored on the media used.

[0017] The information processing system 1 according to an embodiment of the present disclosure aims to solve the above-mentioned problems, and provides a mechanism that enables verification of the legitimacy (in other words, validity) of the results of processing performed by each device in response to the results of reading the medium used, without using the actual device or medium. An overview of the information processing system 1 according to this embodiment will be described below.

[0018] 3 is a diagram for explaining an overview of a method for verifying the use of various devices in the information processing system 1 according to this embodiment. In the information processing system 1 according to this embodiment, among the processes of the various devices to be verified, the software (programs) for realizing the processes, particularly those related to issuing the medium to be used and those executed in response to the results of reading the medium to be used, are extracted, and then incorporated into the verification system so that the processes of each piece of software are executed sequentially in accordance with the usage pattern of each device. Specifically, the information processing system 1 runs software corresponding to each of the series of devices to be verified and executes processes in sequence, thereby simulating in software how the series of devices are used in sequence. As a specific example, the example shown in Figure 3 simulates a situation in which a usage medium is issued by a ticket vending machine, the usage medium is used to pass through an entrance ticket gate and enter the latch, and then electronic value is charged by an adjustment machine inside the latch, and then a teller processing machine is used to exit the latch. At this time, the information processing system 1 reproduces information (such as the remaining amount of electronic value) stored in the medium of use (such as an IC card) at that time by encoding data corresponding to the processing result of the software corresponding to the target device, and uses this information (hereinafter also referred to as encoded information) as input for the software corresponding to the next device. With this configuration, a situation in which multiple devices are used sequentially using a common medium of use is simulated. In this way, the information processing system 1 obtains the results of using each of a series of devices as data based on the processing results of the software corresponding to each device, and by evaluating the data, verifies whether the processing results of the target device are valid. With this mechanism, the information processing system 1 according to this embodiment realizes verification of the use of each device without using actual devices or media. Furthermore, by utilizing the characteristic that it can be realized without using actual devices or media, the information processing system 1 may provide a function to automatically create multiple verification patterns that differ in the combination of devices to be verified, the order in which they are used, etc., by combining devices and functions.

[0019] An example of the system configuration of the information processing system 1 according to this embodiment will now be described with reference to Fig. 4. As shown in Fig. 1, the information processing system 1 according to this embodiment includes a verification pattern management server 100, a verification server 200, and a terminal device 300. As described above, the information processing system 1 incorporates software extracted from each device to be verified, particularly software for implementing processes related to the issuance of a medium of use such as an IC card and processes executed in response to the results of reading the medium of use, as software to be used for verifying the device. Such devices to be verified include at least station service equipment related to the issuance of a medium of use and the use of the medium of use, such as ticket vending machines, ticket gates, fare adjustment machines, and counter processing machines, but may also include other devices capable of reading medium of use, such as vending machines and coin lockers.

[0020] The verification pattern management server 100 generates a verification pattern to be applied to verify the processing of each of the plurality of devices by combining processes (in other words, software corresponding to the devices) related to the realization of various functions applied to at least some of the devices that are candidates for verification so that they are executed sequentially and setting conditions related to the execution of the processes (e.g., information stored in a medium to be used). In this case, the verification pattern management server 100 may receive specifications for the devices and functions to be verified from a user (e.g., an administrator) via the terminal device 300, and generate multiple verification patterns by appropriately combining devices and functions within the range of the specified conditions or appropriately changing conditions related to the execution of the processes applied to the devices and functions (e.g., settings of the station where the device is installed, functions to be used, etc.). Furthermore, when generating verification patterns, the verification pattern management server 100 may impose restrictions on the generation of verification patterns corresponding to usage patterns that cannot be expected in normal operation.

[0021] For example, FIG. 5 shows an example of usage patterns of various devices that serve as the basis for the verification pattern created by the verification pattern management server 100. In FIG. Among the equipment subject to verification, station service equipment in particular may include equipment whose use is restricted depending on whether it is located inside or outside an area where entry and exit are managed by devices that manage entry and exit, such as ticket gates and ticket counter processing machines (i.e., inside or outside the latch). As a specific example, ticket vending machines that issue IC cards and other such media are normally assumed to be used outside the latch, and their use inside the latch cannot be expected in normal operation. As another example, fare adjustment machines that perform fare adjustments when exiting outside the latch are normally assumed to be used inside the latch, and their use outside the latch cannot be expected. Furthermore, there are some operations, such as the issuance of media by ticket vending machines, where it is not expected that duplicate operations will be performed in normal operation. In consideration of the constraints exemplified above, when generating a verification pattern, the verification pattern management server 100 may, for example, impose constraints on the conditions that a user can specify, thereby preventing the generation of a verification pattern for a usage pattern that would not be expected in normal operation. On the other hand, from the perspective of verifying device usage, it may be meaningful to target a usage pattern that would not be expected in normal operation as a so-called abnormal pattern for verification. In consideration of such a situation, the verification pattern management server 100 may also target a usage pattern that corresponds to such an abnormal pattern for generating a verification pattern. In this case, when a verification pattern that corresponds to an abnormal pattern is generated, the verification pattern management server 100 may notify the user by issuing notification information such as a warning that a verification pattern (in other words, a usage pattern) that would not be expected in normal operation has been generated.

[0022] In this way, the verification pattern management server 100 generates a verification pattern for each usage pattern of various devices, and manages information indicating the contents of each generated verification pattern (for example, the order of devices to be used, usage conditions, etc.) as pattern information D100. Furthermore, the verification pattern management server 100 outputs the pattern information D100 to the verification server 200, thereby causing the verification of various devices according to the verification pattern indicated by the pattern information D100 (in particular, verification of the legitimacy of processing according to the reading result of the medium to be used).

[0023] The validation server 200 corresponds to a server that executes the actual process of verifying the use of various devices. Specifically, the validation server 200 manages software extracted from each device and sequentially extracts and drives software for the target device according to the verification pattern indicated by the pattern information D100 received as input, thereby sequentially executing the process corresponding to the software. That is, in the information processing system 1 according to this embodiment, the process realized by the software of each device is not executed on the device itself, but rather in an execution environment managed by the validation server 200. As described above, the validation server 200 encodes data corresponding to the processing result of the software corresponding to the device to be verified that executed the process immediately before, as if it were stored in a medium to be used, and uses the encoded data as input for the software corresponding to the next device to be verified. The validation server 200 then outputs information corresponding to the execution result of the processing of the software corresponding to each device to a predetermined output destination as output data D200.

[0024] For example, Fig. 6 shows an example of input / output data for the verification process related to the use of various devices by the verification server 200. As shown in Fig. 6, when verifying the use of various devices, pattern information D100 corresponding to the target verification pattern, settings of the processing medium used when using the various devices, and settings of each device (e.g., station service device settings and customer input information) are input to the software corresponding to the device. The processing medium settings may include information stored in the processing medium, such as the remaining balance of electronic value. For example, when the device is station service device, the settings of each device may include device parameters (e.g., date information, fare / determination related information, etc.) and customer input information (e.g., function selection information, account button press information, etc.). Furthermore, depending on the processing results, the software of the various devices may output, as output data D200, the results of freight determination, detailed transaction data, information written to the medium used, information read from the medium used, etc. Note that the detailed transaction data corresponds to data for managing how the medium was used in a higher-level system, and may be used, for example, to present information to a banking system. Information regarding the handling of the medium used, such as an IC card, may also be included in the output data D200.

[0025] The terminal device 300 is a schematic representation of a terminal device that serves as an input / output interface when a user (e.g., an administrator) uses the verification pattern management server 100 or the verification server 200. As a specific example, the terminal device 300 may be used as an input interface through which the verification pattern management server 100 receives, from the user, specification of conditions related to the generation of a verification pattern. In this case, a UI (User Interface) for receiving the specification of conditions related to the generation of a verification pattern may be presented to the user via the terminal device 300. As another example, the terminal device 300 may serve as an output interface through which the user views the results of verification related to the use of various devices by the verification server 200 (e.g., information managed as output data D200).

[0026] An overview of the information processing system 1 according to an embodiment of the present disclosure has been described above with reference to Figures 1 to 6. Note that, hereinafter, the characteristic configuration and processing of the information processing system 1 according to this embodiment will be described in more detail, focusing particularly on the configuration and processing related to generation of a verification pattern by the verification pattern management server 100.

[0027] <Hardware configuration> An example of the hardware configuration of an information processing device 900 applicable as the verification pattern management server, the verification server 200, the terminal device 300, etc. that constitute the information processing system 1 shown in FIG. 4 will be described below with reference to FIG.

[0028] The information processing device 900 includes a CPU (Central Processing Unit) 901, a communication interface device 902, a HD (Hard Disk) 903, a ROM (Read Only Memory) 908, and a RAM (Random Access Memory) 909. The information processing device 900 may also include at least one of an input device 904 and an output device 905. The information processing device 900 may also include a recording medium drive device 906.

[0029] The CPU 901 controls various operations of the information processing device 900. The ROM 908 stores control programs, boot programs, and the like that can be executed by the CPU 901. The RAM 909 is the main storage memory of the CPU 901 and is used as a work area or a temporary storage area for expanding various programs. The HD 903 stores various data and programs. The CPU 901 reads out a program stored in the HD 903, loads it into the RAM 909, and executes the program, thereby realizing the functions described below with reference to Fig. 8 and the processes described below with reference to Fig. 11. Instead of the HD 903 or together with the HD 903, a storage device other than the HD 903, such as a nonvolatile memory typified by an SSD (Solid State Drive), may be used.

[0030] The communication interface device 902 is an interface that connects the information processing device 900 to various networks such as a network. The device used as the communication interface device 902 may be changed as appropriate depending on the type of network and the communication method applied. As a specific example, if the network is a wired network, the communication interface device 902 may include a connector that connects a cable used as a transmission path, a device involved in receiving data via the cable, and a device involved in transmitting data via the cable. As another example, if the network is a wireless network, the communication interface device 902 may include various devices for achieving wireless communication, such as an antenna device and an RF circuit.

[0031] The input device 904 is a device for receiving instructions from an administrator of the information processing device 900. The input device 904 may be realized by, for example, an operation device such as a mouse, a keyboard, a touch panel, a button, a switch, a lever, or a pedal. Furthermore, the device used as the input device 904 may be changed as appropriate depending on the method by which the user gives instructions to the information processing device 900 (in other words, the method of operating the information processing device 900). For example, when the information processing device 900 receives instructions from the user by voice input, the input device 904 may be realized by a sound collection device that receives voice input, such as a microphone.

[0032] The output device 905 is a device for presenting various types of information to the user of the information processing device 900. The output device 905 may be realized by a display device, such as a display, that presents information to the user by displaying various types of display information, screens, etc. Furthermore, the device used as the output device 905 may be changed as appropriate depending on the method of presenting information to the user. For example, when information is presented to the user by sound such as voice or electronic sound, the output device 905 may be realized by an audio output device that outputs sound, such as a speaker.

[0033] The program for the information processing device 900 is provided to the information processing device 900 by a recording medium 907 such as a CD-ROM, a DVD-ROM, or an IC card memory, or is downloaded via a network, etc. When the program for the information processing device 900 is provided by the recording medium 907, the recording medium 907 is set in the recording medium drive device 906, and the program recorded on the recording medium 907 is installed in the HD 903 via the recording medium drive device 906.

[0034] <Functional configuration> An example of the functional configuration of the verification server 200 according to this embodiment will be described with reference to FIG. 8, focusing on the process of reading out the pattern information D100 corresponding to a desired verification pattern and executing verification corresponding to the verification pattern. As shown in FIG. 8, the validation server 200 includes a validation pattern specifying unit 201, a validation execution unit 202, a validation result determination unit 203, and a storage unit 204.

[0035] The verification pattern identification unit 201 identifies and extracts pattern information D100 corresponding to a verification pattern to be verified from the series of pattern information D100 generated by the verification pattern management server 100. As a specific example, the verification pattern identification unit 201 may extract the series of pattern information D100 generated by the verification pattern management server 100 as pattern information D100 corresponding to the series of verification patterns to be verified. As another example, the verification pattern identification unit 201 may receive designation of a condition to be verified from a user via the terminal device 300 or the like, and extract pattern information D100 corresponding to a verification pattern that satisfies the condition.

[0036] For example, FIG. 9 illustrates an example of a verification pattern generated by the verification pattern management server 100. The verification pattern management server 100 receives conditions, such as station settings, model settings, and equipment settings, from a user via a terminal device 300 or the like, and generates a verification pattern for each combination of conditions by combining the conditions. In the example illustrated in FIG. 9, the station where the process is executed and the equipment and functions to be used are set for each of the processes, i.e., the issuance process, the non-latch process (before entry), the entry process, the in-latch process, the exit process, and the non-latch process (after exit). Furthermore, the verification pattern management server 100 receives verification conditions from a user and sets input data for verifying the target equipment against the verification pattern. For example, if the target equipment is station service equipment, the input data may include the station service equipment settings (e.g., customer input information and equipment parameters) described with reference to FIG. 6. Furthermore, if equipment other than station service equipment is to be verified, the input data may also include settings for the equipment. Furthermore, if the verification pattern does not include processing related to issuing a medium to be used, information indicating the initial state of the processing medium may be included as the processing medium setting. The pattern information D100 corresponds to data of each individual verification pattern generated by the verification pattern management server 100.

[0037] Based on the pattern information D100 extracted by the verification pattern identification unit 201, the verification execution unit 202 executes processing related to the verification of the verification pattern corresponding to the pattern information D100 (verification processing related to the use of various devices with the verification pattern). Specifically, as illustrated in Fig. 4, the verification execution unit 202 reads out from a predetermined storage area software programs corresponding to the devices and functions to be verified defined in the pattern information D100, among the software for each of a series of devices that are candidates for verification. As a more specific example, when the verification execution unit 202 processes the pattern information D100 corresponding to the verification pattern illustrated in Fig. 9, it reads out software corresponding to the devices and functions set as the verification targets for each of the first to ninth uses. The software for each of the devices that are candidates for verification targets may be stored and managed in a storage area accessible by the verification execution unit 202, and there are no particular limitations on the storage location or management method. For example, the software for each of the devices may be managed using a storage device included in the verification server 200, such as the storage unit 204 described below. As another example, the software for each of the devices may be managed using a database accessible by the verification server 200.

[0038] The verification execution unit 202 sets an execution order for each of the read software programs so that the corresponding processes are executed in the order specified in the pattern information D100. Furthermore, the verification execution unit 202 applies, to each of the software programs, settings in the input data included in the pattern information D100 that correspond to the equipment functions realized by the software. As a specific example, if the target software corresponds to the function of station service equipment, the verification execution unit 202 applies various settings related to the execution of the process, such as station settings, based on station service equipment settings (e.g., customer input information and equipment parameters) corresponding to the station service equipment in the input data. Furthermore, if a processing medium setting is included in the input data included in the pattern information D100, the verification execution unit 202 may set the state (initial state) of the processing medium to be input to the first software program at the start of verification based on the processing medium setting. For example, in the example shown in Fig. 9, the verification execution unit 202 sets the execution order so that the corresponding processes are executed in the order set for the devices and functions set for each of the first to ninth uses, and then applies station settings, etc. as shown in Fig. 9. Also, in the example shown in Fig. 9, since the process of issuing a medium to be used by a ticket machine is set as the first use, the verification execution unit 202 does not perform any additional initial settings for the medium to be used, assuming that the medium to be used is set based on the processing result of the first use.

[0039] The verification execution unit 202 executes the software programs of each device specified as a verification target in the verification pattern in accordance with the set execution order, by sequentially running the software to execute the processing. Furthermore, upon completion of the processing of each piece of software, the verification execution unit 202 retains the results of the processing and encodes the results into a format that can be accepted as input by the software to be executed next. The verification execution unit 202 then applies the encoded data (the results of the previously executed processing) as input data to the software to be executed next.

[0040] The verification result determination unit 203 determines the validity of the execution result of the process by the software of each device according to the verification pattern by the verification execution unit 202. For example, the verification result determination unit 203 may determine the validity of the execution result of the processing by comparing data corresponding to the execution result of the processing by the software of each device with correct answer data prepared in advance. On the other hand, in recent years, the number of devices and functions that can use the media has increased, and it may be difficult to prepare correct data in advance for verifying the use of the devices and functions. In consideration of this situation, this embodiment also describes an example of a mechanism that makes it possible to estimate the validity of results even in a situation where it is difficult to prepare correct data in advance.

[0041] First, as a first method, an example of a method applicable under the assumption that software is provided individually by multiple vendors to realize the functions of a specific device will be described. In other words, the first method is applicable in a situation where one of multiple types of logic (for example, the logic of software provided by different vendors) is applied to realize a common function. As an example, the equipment and function to be verified here is the ticket gate entrance / exit management function (i.e., entrance / exit processing and exit processing), and the software to realize this function is provided individually by three companies. In other words, since these three pieces of software were developed individually by each company, although they realize a common function, their internal logic (code) is different from each other.

[0042] In this case, the verification execution unit 202, when running the software of the device to be verified, independently runs three pieces of software with different logics applied to the device, executes processing, and stores the results of each processing. Then, the verification result determination unit 203 compares the results of the processing of each piece of software, i.e., the results of the processing corresponding to each of the three types of logic (e.g., a series of information stored on a medium to be used after processing), and estimates the validity (appropriateness) of the execution result of the processing of the target device based on whether the results of the comparison match. Specifically, if the results of the comparison of the results of the processing corresponding to each of the three types of logic match, the verification result determination unit 203 estimates that the execution result of the processing of the target device is valid (appropriate). On the other hand, if the results of the comparison do not match, the verification result determination unit 203 estimates that the execution result of the processing of the target device is not valid (appropriate). By applying this control, it becomes possible to estimate the validity of the execution result of the processing of the target device even in situations where it is difficult to prepare correct data in advance.

[0043] Next, the second method will be described. In the second method, the execution result of a first process by software of a target first device (the update result of information stored in a medium used as a result of the execution of the first process) is applied as input to a second process by software of a second device used immediately afterwards. Then, in the second method, based on the result of determining the validity of the execution result of the second process, the validity (appropriateness) of the execution result of the first process executed immediately before the second process is estimated.

[0044] For example, FIG. 10 is a diagram illustrating an example of a method for determining the verification result related to the use of a target device. In the example illustrated in FIG. 10, a predetermined device other than a ticket gate is set as the first device, and in addition to the original verification pattern, an additional verification pattern (hereinafter also referred to as a verification pattern for encoding confirmation) is set to estimate the validity (appropriateness) of the result of the first processing by the software applied to the first device. In the verification pattern for encoding confirmation, a ticket gate is set as the second device to be used immediately after the first device is used, and the validity (appropriateness) of the result of the first processing by the software of the first device is estimated based on the result of determining the validity of the result of the second processing by the software of the second device (ticket gate). In addition, in this case, the ticket gate used as the second device is applied with the settings of a station under the management of the company that manages the first device to be verified.

[0045] As a specific example, in the example shown in Figure 10, the verification pattern is set up to verify the first use when the equipment "EM20" of company A is used outside the latch at "station a" under the management of company A. In this case, in the verification pattern for encoding confirmation, an entrance ticket gate with "station a" applied as the station setting is set as the second equipment to be used immediately after the equipment "EM20" is used. Note that an equipment that manages entry into a predetermined area (for example, inside the latch), such as an entrance ticket gate, corresponds to an example of a first ticket gate. Under these assumptions, data corresponding to the first processing result of the software applied to device "EM20" is encoded, thereby reproducing the information stored in the medium of use at that time (information immediately after device EM20 was used at station a). In addition, this information is used as input to drive software applied to the second device, the entrance ticket gate, which executes the second processing, an entry process into the latch at station a, and the legitimacy (validity) of the execution result of this entry process is determined. The first method described above may be applied to determine the legitimacy (validity) of the execution result of the entry process, which is the second process. In this case, when executing the entry process into the latch at station a, processes corresponding to each of multiple types of logic are applied, the results of the processes corresponding to each of the multiple types of logic are compared, and the legitimacy of the result of the entry process is estimated based on the result of the comparison. Then, depending on the result of the judgment on the legitimacy of the result of the entry process into the latch at station a by the entrance ticket gate set as the second device (for example, the result of the estimation of validity), an estimation is made of the legitimacy (validity) of the result of the first processing of the software applied to device "EM20", which is the first device. An example of a device installed outside the latch is a ticket vending machine that issues IC cards and other such media.

[0046] As another example, in the example shown in FIG. 10, the verification pattern is configured to verify the second use, assuming that entry into the latch is via a ticket gate (entrance ticket gate) of Company A at "Station A." In this case, in the verification pattern for encoding confirmation, the second device to be used immediately after this entrance ticket gate is used is set to be an exit ticket gate or a ticket window adjustment machine of Company A, where a station other than Station A under the management of Company A is applied as the station setting. Note that here, it is assumed that the exit ticket gate of Company A is set as the second device. Also, devices that manage exit to outside of a specified area (for example, outside the latch), such as exit ticket gates and ticket window adjustment machines, correspond to an example of a second ticket gate. Under these assumptions, data corresponding to the first processing result of the software applied to the entrance ticket gate is encoded, thereby reproducing the information held in the medium of use at that time (information immediately after entry into the latch at station a). Furthermore, this information is used as input to drive the software applied to the second device, the exit ticket gate, which executes the second processing, an exit process to exit the latch at a station other than station a, and the legitimacy (validity) of the execution result of this exit process is determined. In this case, the above-described first method may also be applied to determining the validity (appropriateness) of the execution result of the exit process, which is the second process. Then, based on the result of the judgment on the validity of the result of the exit process outside the latch at stations other than Station A by the exit ticket gate set as the second device (for example, the result of the estimation of validity), an estimation is made of the validity (validity) of the result of the first processing of the software applied to the entrance ticket gate, which is the first device. In addition to the entrance ticket gates exemplified above, examples of equipment that may be installed within the latches include fare adjustment machines that handle fare adjustments, and the single-latch ticket gates described below.

[0047] As another example, in the example shown in Figure 10, the verification pattern is set up to verify the case where, as the nth use, after entering the latch, the ticket gate (one-latch ticket gate) of Company Z at Station z is passed through (a transfer involving exit and entry processing) . In this case, in the verification pattern for encoding confirmation, the second device to be used immediately after using this one-latch ticket gate is set to be an exit ticket gate or fare adjustment machine of Company Z, where a station other than Station z under the management of Company Z is applied as the station setting. Note that here, it is assumed that the exit ticket gate of Company Z is set as the second device. Under these assumptions, encoding is performed on data corresponding to the first processing result of the software applied to the single-latch ticket gate, thereby reproducing the information stored in the medium of use at that time (information immediately after the transfer at station z). In addition, this information is used as input to drive the software applied to the second device, the exit ticket gate, which executes the second processing, an exit process to an out-of-latch station other than station z, and the legitimacy (validity) of the execution result of this exit process is determined. In this case, the above-described first method may also be applied to determining the validity (appropriateness) of the execution result of the exit process, which is the second process. Then, based on the judgment result of the legitimacy of the result of the exit process to outside the latch at a station other than station z by the exit gate set as the second device (for example, the estimated validity result), an estimate is made of the legitimacy (validity) of the result of the first processing of the software applied to the one-latch ticket gate, which is the first device.

[0048] In this way, the verification result determination unit 203 determines the validity of the execution results of the processing by the software of each device according to the verification patterns set by the verification execution unit 202, and outputs data indicating the results of the determination for each of the series of verification patterns (i.e., the verification results) to a predetermined output destination as output data D200. As a specific example, the verification result determination unit 203 may output the output data D200 to the terminal device 300, thereby presenting to the user information indicating the results of the verification related to the use of various devices in the various verification patterns indicated by the output data D200. As another example, the verification result determination unit 203 may store the output data D200 in a predetermined storage area (e.g., the storage unit 204).

[0049] The storage unit 204 schematically represents a storage area for storing and holding various data. For example, the storage unit 204 may be used as a storage area for holding software programs and data extracted from each device to be verified. As another example, the storage unit 204 may be used as a storage area for holding pattern information D100 output from the verification pattern management server 100. As another example, the storage unit 204 may be used as a storage area for holding data (output data D200) indicating the results of verification related to the use of various devices for each of a series of verification patterns.

[0050] An example of the functional configuration of the verification server 200 according to this embodiment has been described above with reference to FIGS. 8 to 10, focusing on the process of reading out the pattern information D100 corresponding to a desired verification pattern and performing verification corresponding to the verification pattern.

[0051] <Processing> As an example of the processing of the verification server 200 according to this embodiment, the verification processing related to the use of the target device will be described, focusing in particular on the part executed as a verification pattern for encoding confirmation, with reference to Fig. 11. For convenience, in the example shown in Fig. 11, when applying the verification pattern for encoding confirmation, it is assumed that the first device to be verified is a device other than a ticket gate, and the second device used immediately after the first device is used is a ticket gate.

[0052] In S101, the verification pattern identification unit 201 identifies and extracts, from the series of pattern information D100 generated by the verification pattern management server 100, pattern information D100 corresponding to the verification pattern to be verified.

[0053] In S102, the verification execution unit 202 executes processing related to verification of the verification pattern corresponding to the pattern information D100, based on the pattern information D100 extracted in S101. Specifically, the verification execution unit 202 reads from a predetermined storage area the software programs corresponding to the devices and functions to be verified specified in the pattern information D100, among the software for each of a set of devices that are candidates for verification. The verification execution unit 202 sets an execution order for each of the read software programs so that the corresponding processes are executed in the order specified in the pattern information D100. The verification execution unit 202 executes the software programs for each device specified as a target for verification in the verification pattern in accordance with the set execution order, thereby causing the software to execute the processes. In this process, upon completion of the processing of each piece of software, the verification execution unit 202 retains the results of the processing and encodes the results into a format that can be accepted as input by the software to be run next. The verification execution unit 202 then applies the encoded data as input data to the software to be run next. Furthermore, the verification execution unit 202 executes processing related to the verification of the verification pattern for encoding confirmation, targeting a predetermined first device other than a ticket gate. For example, if the first device is a device used outside a latch, the verification execution unit 202 applies an entrance ticket gate as the second device. If the first device is a device used inside a latch, the verification execution unit 202 applies an exit ticket gate (or a ticket counter) as the second device. Then, the verification execution unit 202 encodes data corresponding to the result of the first processing of the software applied to the first device, and causes the software applied to the second device to execute a second processing using the encoded data as input.

[0054] In S103, the verification result determination unit 203 determines the validity (validity) of the execution result of the second process by the software applied to the second device, which is associated with the execution of the verification pattern for encoding confirmation in S102. For example, the verification result determination unit 203 may determine the validity of the execution result of the second process by comparing data corresponding to the execution result of the second process with correct data prepared in advance. That is, the verification result determination unit 203 may determine that the result of the second process is normal (valid) if the data corresponding to the execution result of the second process matches the correct data, and may determine that the result is abnormal (invalid) if they do not match. As another example, the verification result determination unit 203 may determine the validity of the execution result of the second process based on the first technique described above. In this case, when the second process is executed by software applied to the second device, the verification result determination unit 203 causes multiple pieces of software that have different logics related to realizing a common function to execute the second process and compares the results of the second process executed by each piece of software. Then, the verification result determination unit 203 may infer that the result of the second process is normal (valid) if the results of the comparison match, and may infer that the result of the second process is abnormal (invalid) if the results of the comparison do not match.

[0055] In S104, the verification result determination unit 203 determines whether the verification result for the second device in S103 was normal, i.e., whether the result of the second processing by the software applied to the second device was normal. If the verification result determination unit 203 determines in S104 that the verification result for the second device is normal, the process proceeds to S105. In this case, in S105, the verification result determination unit 203 determines (estimates) that the verification result for the use of the first device that is the target of verification using the encoding confirmation verification pattern is normal (valid). On the other hand, if the verification result determination unit 203 determines in S104 that the verification result for the second device is not normal, the process proceeds to S106. In this case, in S106, the verification result determination unit 203 determines (estimates) that the verification result for the use of the first device that is the target of verification using the encoding confirmation verification pattern is abnormal (invalid).

[0056] Above, with reference to FIG. 11, an example of the processing of the verification server 200 according to this embodiment has been described, focusing in particular on the part of the verification processing related to the use of the target device that is executed as a verification pattern for encoding confirmation.

[0057] <Conclusion> As described above, the validation server 200 according to this embodiment sequentially executes processes for each of a series of devices, including at least some station service devices, related to the issuance or use of a medium readable via contactless communication, as a series of processes for verifying the use of each of the multiple devices, based on a validation pattern defined to sequentially execute processes corresponding to each of the multiple devices included in the series of devices. Furthermore, the validation server 200 targets at least some of the multiple devices and determines the legitimacy of the results of the processes applied to the devices based on the results of updates to information stored in the medium of use corresponding to the results of the processes applied to the devices. In this case, the validation server 200 targets a predetermined type of device other than a ticket gate among the multiple devices and estimates the legitimacy of the results of a first process applied to the device based on the results of a second process applied to the ticket gate, which is executed immediately after the first process and uses information stored in the medium of use updated by the first process as input. As described above, the information processing system 1 according to the present embodiment allows software to simulate the use of various devices, such as IC cards and station service equipment, without using actual media or devices. This significantly reduces the effort required for verification compared to when actual media or devices are used for verification. Furthermore, the information processing system 1 according to the present embodiment allows for more suitable verification of the operation of devices, even in situations where it is difficult to verify the validity of information update results based solely on the results of processing by individual devices, due to reasons such as the difficulty of preparing correct data in advance.

[0058] The following configurations also fall within the technical scope of the present disclosure. (1) An information processing device having: an execution means for sequentially executing the processes of each of a series of devices related to the issuance or use of a medium of use that can be read via contactless communication, at least some of which include station service equipment, as a series of processes for verifying the use of each of the multiple devices based on a verification pattern specified so that processes corresponding to each of the multiple devices included in the series of devices are executed sequentially, among the processes related to the issuance or use of the medium of use that is applied to each of the multiple devices; and a judgment means for determining the legitimacy of the results of the processing applied to at least some of the multiple devices based on the update results of the information stored in the medium of use in accordance with the execution results of the processing applied to the device, wherein the judgment means targets a predetermined type of device among the multiple devices other than a ticket gate and estimates the legitimacy of the result of a first processing applied to the device based on the result of a second processing applied to the ticket gate, which is executed immediately after the first processing and uses as input the information stored in the medium of use that has been updated by the first processing. (2) The information processing device described in (1), wherein the second processing is a processing to which one of multiple types of logic related to the realization of a common function is applied, and the determination means compares the results of processing corresponding to each of the multiple types of logic applied as the second processing, using information stored in the utilization medium that has been updated by the first processing as input, and if the results of the comparison match, presumes that the result of the first processing is valid. (3) The information processing device described in (1) or (2), wherein the determination means estimates the legitimacy of the result of the first processing by applying a verification pattern in which the second processing is executed immediately after the first processing, from among verification patterns generated by combining processes related to the issuance or use of the medium to be used that are applied to each of the series of devices so that processes corresponding to each of the multiple devices included in the series of devices are executed sequentially. (4) An information processing device described in any one of (1) to (3), wherein the determination means applies, when the specified type of equipment is equipment installed outside an area where entry and exit are managed by the ticket gate, a process applied to a first ticket gate that manages entry to the area as the second process used to estimate the validity of the result of the first process applied to the equipment, and when the specified type of equipment is equipment installed inside the area, applies a process applied to a second ticket gate that manages exit from the area as the second process used to estimate the validity of the result of the first process applied to the equipment. (5) The information processing device described in (4), wherein the determination means applies the settings of the first ticket gate installed at the same station as the device when the specified type of device is installed outside the area as the settings of the second processing used to estimate the validity of the results of the first processing applied to the device. (6) An information processing device as described in (4) or (5), wherein the determination means, when the specified type of equipment is an equipment installed within the area, applies the settings of the second ticket gate installed at the same station as the equipment as the settings of the second processing used to estimate the validity of the results of the first processing applied to the equipment. (7) An information processing device described in any one of (1) to (6), wherein the determination means applies the setting of a station under the control of the bureau to be verified as the setting of the station where the ticket gate is installed. (8) An information processing method executed by an information processing device, comprising: an execution step of sequentially executing the processes of each of a series of devices related to the issuance or use of a medium of use that can be read via contactless communication, at least some of which include station service equipment, as a series of processes for verifying the use of each of the multiple devices, based on a verification pattern specified so that processes corresponding to each of the multiple devices included in the series of devices are executed sequentially, among the processes related to the issuance or use of the medium of use that is applied to each of the multiple devices; and a judgment step of determining the legitimacy of the results of the processing applied to at least some of the multiple devices based on the update results of the information stored in the medium of use in accordance with the execution results of the processing applied to the device, wherein the judgment step targets a predetermined type of device other than a ticket gate in the series of devices and estimates the legitimacy of the result of a first processing applied to the device based on the result of a second processing applied to the ticket gate, which is executed immediately after the first processing and uses as input the information stored in the medium of use that has been updated by the first processing. (9) A program that causes a computer to execute an execution step of sequentially executing the processes of each of a series of devices related to the issuance or use of a medium of use that can be read via contactless communication, at least some of which include station service equipment, as a series of processes for verifying the use of each of the multiple devices, based on a verification pattern that is defined so that processes corresponding to each of the multiple devices included in the series of devices are executed sequentially, among the processes related to the issuance or use of the medium of use that is applied to each of the multiple devices; and a judgment step of judging the legitimacy of the results of the processes applied to at least some of the multiple devices based on the update results of the information stored in the medium of use in accordance with the execution results of the processes applied to the device, wherein the judgment step targets a specified type of device other than a ticket gate in the series of devices and estimates the legitimacy of the results of a first process applied to the device based on the results of a second process applied to a ticket gate, which is executed immediately after the first process and uses as input the information stored in the medium of use that has been updated by the first process. [Explanation of symbols]

[0059] 1 Information processing system, 100 Verification pattern management server, 200 Verification server, 201 Verification pattern identification unit, 202 Verification execution unit, 203 Verification result determination unit, 204 Storage unit, 300 Terminal device

Claims

1. an execution means for sequentially executing the processes of each of a series of devices related to the issuance or use of a medium readable via contactless communication, the series of devices including at least some of which are station service devices, as a series of processes for verifying the use of each of the multiple devices, based on a verification pattern defined so that processes corresponding to each of the multiple devices included in the series of devices are sequentially executed, among the processes related to the issuance or use of the medium, the series of devices including at least some of which are station service devices; a determination means for determining the validity of a result of a process applied to at least some of the devices based on an update result of information stored in the medium to be used in accordance with the execution result of the process; and the determination means estimates the validity of a result of a first process applied to a predetermined type of device other than a ticket gate among the plurality of devices based on a result of a second process applied to the ticket gate, which is executed immediately after the first process and uses as input information stored in the utilization medium updated by the first process; Information processing device.

2. the second processing is processing to which one of a plurality of types of logic related to realizing a common function is applied, the determination means compares the results of the processing corresponding to each of the plurality of types of logic applied as the second processing, using the information stored in the utilization medium updated by the first processing as an input, and when the results of the comparison match, presumes that the result of the first processing is valid. The information processing device according to claim 1 .

3. 2. The information processing device of claim 1, wherein the determination means estimates the legitimacy of the result of the first processing by applying a verification pattern in which the second processing is executed immediately after the first processing, from among verification patterns generated by combining processes related to the issuance or use of the medium to be used that are applied to each of the series of devices so that processes corresponding to each of multiple devices included in the series of devices are executed sequentially.

4. The determination means When the predetermined type of device is a device installed outside an area where entry and exit are managed by the ticket gate, a process applied to a first ticket gate that manages entry to the area is applied as the second process used to estimate the validity of the result of the first process applied to the device, If the predetermined type of device is a device installed inside the area, a process applied to a second ticket gate that manages exit from the area is applied as the second process used to estimate the validity of the result of the first process applied to the device. The information processing device according to claim 1 .

5. The information processing device described in claim 4, wherein the determination means, when the specified type of equipment is an equipment installed outside the area, applies the settings of the first ticket gate installed at the same station as the equipment as the settings of the second processing to be used to estimate the validity of the results of the first processing applied to the equipment.

6. The information processing device described in claim 4, wherein the determination means, when the specified type of equipment is equipment installed within the area, applies the settings of the second ticket gate installed at the same station as the equipment as the settings of the second processing used to estimate the validity of the results of the first processing applied to the equipment.

7. The information processing device according to claim 4 , wherein the determining means applies a setting of a station under the control of a corporation that is the subject of verification as the setting of the station where the ticket gate is installed.

8. An information processing method executed by an information processing device, an execution step of sequentially executing the processes of each of a series of devices related to the issuance or use of a medium of use that can be read via contactless communication, at least some of which include station service equipment, as a series of processes for verifying the use of each of the multiple devices, based on a verification pattern defined so that processes corresponding to each of the multiple devices included in the series of devices are sequentially executed, among the processes related to the issuance or use of the medium of use that can be read via contactless communication, at least some of which include station service equipment; a determining step of determining the validity of a result of a process applied to at least some of the devices based on an update result of information stored in the medium to be used in accordance with the execution result of the process; Including, The determination step targets a predetermined type of equipment other than a ticket gate among the series of equipment, and estimates the validity of a result of a first process applied to the equipment based on a result of a second process applied to the ticket gate, which is executed immediately after the first process and uses as input information stored in the utilization medium updated by the first process. Information processing methods.

9. On the computer, an execution step of sequentially executing the processes of each of a series of devices related to the issuance or use of a medium of use that can be read via contactless communication, at least some of which include station service equipment, as a series of processes for verifying the use of each of the multiple devices, based on a verification pattern defined so that processes corresponding to each of the multiple devices included in the series of devices are sequentially executed, among the processes related to the issuance or use of the medium of use that can be read via contactless communication, at least some of which include station service equipment; a determining step of determining the validity of a result of a process applied to at least some of the devices based on an update result of information stored in the medium to be used in accordance with the execution result of the process; Execute The determination step targets a predetermined type of equipment other than a ticket gate among the series of equipment, and estimates the validity of a result of a first process applied to the equipment based on a result of a second process applied to the ticket gate, which is executed immediately after the first process and uses as input information stored in the utilization medium updated by the first process. program.

Images