Information processing system, information processing method, and program

Abstract

To provide an information processing system capable of easily controlling contribution from a user.SOLUTION: The information processing system includes a settlement means information registration unit that registers, in a settlement processing apparatus, settlement means information used by a user for settlement, a settlement information acquisition unit that acquires settlement information including at least an amount of money that the user purchases in a store from a store terminal or a store server managed by the store, an authentication unit that authenticates the store terminal or the store server and a user terminal used by the user by a public key authentication scheme, and an authentication unit that, when authentication by the authentication unit is successful, and a transmission unit that transmits the settlement information acquired by the settlement information acquisition unit to the settlement processing apparatus, in which the settlement processing apparatus executes a settlement process based on the user identifier, the store identifier, the settlement information, and the settlement method information registered by the settlement method information registration unit.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present invention relates to an information processing system, an information processing method, and a program. [Background technology]

[0002] Patent document 1 discloses an authentication and payment method that enables payment when purchasing goods or services to be made using a single medium by managing a user ID, user password, credit card information, etc. in association with each other. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Patent No. 4218297 Summary of the Invention [Problem to be solved by the invention]

[0004] Meanwhile, payment services for purchasing goods and services must be convenient, such as easy to use and time-saving, but they must also be robust and safe against security risks such as hacking, skimming, and phishing scams. However, in the technical idea of ​​Patent Document 1, user passwords and credit card information, etc. are managed in association with each other, which raises concerns that if a user password is stolen, the credit card, etc. may be used fraudulently. Furthermore, there is a concern that if a user forgets their user password, they may be unable to make payments using a credit card or other means.

[0005] The present invention has been made in view of the above problems, and has an object to provide an information processing system that can achieve both security and convenience in payment. [Means for solving the problem]

[0006] The present invention is an information processing system comprising: a payment method information registration unit that registers payment method information used by a user for payment in a payment processing device; a payment information acquisition unit that acquires payment information including at least the amount of purchases the user will make at the store from a store terminal or store server managed by the store; an authentication unit that authenticates the store terminal or store server and the user terminal used by the user using a public key authentication method; and a transmission unit that, if authentication by the authentication unit is successful, transmits to the payment processing device a user identifier that identifies the user, a store identifier that identifies the store, and the payment information acquired by the payment information acquisition unit; and the payment processing device executes payment processing based on the user identifier, the store identifier, the payment information, and the payment method information registered by the payment method information registration unit. [Effects of the Invention]

[0007] The information processing system according to the present invention has the effect of achieving both security and convenience in payment. [Brief explanation of the drawings]

[0008] [Figure 1] 1 is a diagram showing the overall configuration of an information processing system 1. FIG. [Figure 2] 1 is a diagram illustrating a hardware configuration of an information processing device 100. FIG. [Figure 3] FIG. 2 is a diagram illustrating a hardware configuration of a user terminal 200. [Figure 4] FIG. 2 is a diagram illustrating a hardware configuration of a store terminal 300. [Figure 5] FIG. 2 is a diagram illustrating a hardware configuration of a store server 400. [Figure 6] FIG. 2 is a diagram illustrating a hardware configuration of a payment processing device 500. [Figure 7] 2 is a diagram illustrating an example of the functional configuration of a control unit 110 of the information processing device 100. FIG. [Figure 8] 10 is a flow diagram showing an example of a payment method information registration process executed by information processing device 100. FIG. [Figure 9]10 is a flow chart showing an example of an authentication information registration process executed by the information processing device 100. FIG. [Figure 10] FIG. 10 is a flow diagram showing an example of a brick-and-mortar store payment process executed by the information processing device 100. [Figure 11] 10 is a flow diagram showing an example of a virtual store payment process executed by information processing device 100. FIG. [Figure 12] FIG. 10 is a diagram showing an example of a menu screen W100 output to a user terminal 200. [Figure 13] 10 is a diagram showing an example of a payment method information input screen W200 output to a user terminal 200. FIG. [Figure 14] 10 is a diagram showing an example of a payment information input screen W300 output to a store terminal 300. FIG. [Figure 15] 10 is a diagram showing an example of a code output screen W400 output to the store terminal 300. FIG. [Figure 16] FIG. 10 is a diagram showing an example of a code input screen W500 output to the user terminal 200. [Figure 17] 10 is a diagram showing an example of a code reading screen W600 output to the user terminal 200. FIG. [Figure 18] 13 is a diagram showing an example of a payment approval screen W700 output to the user terminal 200. FIG. [Figure 19] 10 is a diagram showing an example of a payment completion screen W800 output to the user terminal 200 and the store terminal 300. FIG. DETAILED DESCRIPTION OF THE INVENTION

[0009] DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS The present invention will be described below with reference to the accompanying drawings. Various features shown in the following embodiments can be combined with each other.

[0010] Incidentally, the program for realizing the software appearing in this embodiment may be provided as a non-transitory computer-readable medium, or may be provided so that it can be downloaded from an external server, or may be provided so that the program is started on an external computer and its functions are realized on a client terminal (so-called cloud computing).

[0011] In this embodiment, the term "unit" may also include, for example, a combination of hardware resources implemented by a circuit in the broad sense and software information processing that can be specifically realized by these hardware resources. In addition, various types of information are handled in this embodiment, and this information may be represented by, for example, physical values ​​of signal values ​​representing voltages and currents, high and low signal values ​​as a binary bit set consisting of 0 or 1, or quantum superposition (so-called quantum bits), and communication and calculations may be performed on a circuit in the broad sense.

[0012] In addition, a circuit in the broad sense is a circuit realized by at least appropriately combining a circuit, circuitry, a processor, a memory, etc. That is, it includes an application specific integrated circuit (ASIC), a programmable logic device (e.g., a simple programmable logic device (SPLD), a complex programmable logic device (CPLD), and a field programmable gate array (FPGA)), etc.

[0013] 1. Hardware Configuration In the first section, the hardware configuration of the information processing system 1 according to this embodiment will be described.

[0014] FIG. 1 is a diagram showing an example of the overall configuration of an information processing system 1 according to this embodiment. As shown in FIG. 1, the information processing system 1 includes an information processing device 100, a user terminal 200, a store terminal 300, a store server 400, and a payment processing device 500, which are connected via a network NW. These components will be further described. Here, a system exemplified as the information processing system 1 is composed of one or more devices or components. Therefore, for example, even an information processing device 100 alone can be an example of the information processing system 1. Furthermore, such FIG. 1 is merely an example for explaining the invention, and for example, the number of user terminals 200, the number of store terminals 300, and the number of store servers 400 are not limited to those shown in FIG. 1.

[0015] 1-1. Information processing device 100 Fig. 2 is a diagram showing the hardware configuration of the information processing device 100. As shown in Fig. 2, the information processing device 100 includes a control unit 110, a storage unit 120, and a communication unit 130, and these components are electrically connected via a communication bus 160 inside the information processing device 100. Each component will be further described.

[0016] The control unit 110 processes and controls the overall operations related to the information processing device 100. The control unit 110 is, for example, a central processing unit (CPU) not shown. The control unit 110 realizes various functions related to the information processing device 100 by reading out predetermined programs stored in the storage unit 120. In other words, information processing by software stored in the storage unit 120 is specifically realized by the control unit 110, which is an example of hardware, and can be executed as each functional unit included in the control unit 110. This will be described in further detail in the next section. Note that the control unit 110 is not limited to being a single unit, and multiple control units 110 may be provided for each function. A combination of these may also be used.

[0017] The storage unit 120 stores various information necessary for information processing by the information processing device 100. This may be implemented, for example, as a storage device such as a solid state drive (SSD) that stores various programs related to the information processing device 100 executed by the control unit 110, or as a memory such as a random access memory (RAM) that stores information (arguments, arrays, etc.) temporarily required for program calculations. Alternatively, it may be implemented as a combination of these.

[0018] The communication unit 130 preferably uses a wired communication means such as USB, IEEE1394, Thunderbolt (registered trademark), or wired LAN network communication, but may also use wireless LAN network communication, mobile communication such as 5G / LTE / 3G, or BLUETOOTH (registered trademark) communication as needed. In other words, it is more preferable to implement the communication unit 130 as a combination of multiple communication means. That is, the communication unit 130 communicates various information with the user terminal 200, the store terminal 300, the store server 400, and the payment processing device 500 via the network NW.

[0019] 1-2. User terminal 200 The user terminal 200 is a terminal device used by a user (hereinafter referred to as "user US"). The user terminal 200 may be a fixed terminal or a mobile terminal realized by a computer device. Examples of the user terminal 200 include a smartphone, a mobile phone, a PC (personal computer), a notebook PC, and a tablet PC. The user terminal 200 may be realized as the user terminal 200 of this embodiment by installing, for example, an application on a general terminal device.

[0020] Fig. 3 is a diagram showing the hardware configuration of user terminal 200. As shown in Fig. 3, user terminal 200 includes a control unit 210, a storage unit 220, a communication unit 230, an input unit 240, and an output unit 250, and these components are electrically connected via a communication bus 260 inside user terminal 200. Descriptions of control unit 210, storage unit 220, and communication unit 230 are omitted because they are substantially the same as the descriptions of control unit 110, storage unit 120, and communication unit 130 in information processing device 100.

[0021] The input unit 240 is used to input various information to the user terminal 200, and receives signals input from a mouse, keyboard, pointing device, touch display, camera, etc. Operational input to the input unit 240 is transferred as a command signal to the control unit 210 via the communication bus 260. The control unit 210 can then execute predetermined control and calculations as necessary.

[0022] The output unit 250 displays text and images, and generates information to be displayed on a display device such as a CRT display, a liquid crystal display, an organic EL display, a plasma display, or a touch display.

[0023] 1-3. Store terminal 300 The store terminal 300 is a terminal device managed by a store (hereinafter referred to as "store SP"). The explanation of the store terminal 300 is omitted because it is substantially the same as the explanation of the user terminal 200.

[0024] Fig. 4 is a diagram showing the hardware configuration of the store terminal 300. As shown in Fig. 4, the store terminal 300 includes a control unit 310, a storage unit 320, a communication unit 330, an input unit 340, and an output unit 350, and these components are electrically connected via a communication bus 360 inside the store terminal 300. Descriptions of the control unit 310, storage unit 320, communication unit 330, input unit 340, and output unit 350 are omitted because they are substantially the same as the descriptions of the control unit 210, storage unit 220, communication unit 230, input unit 240, and output unit 250 in the user terminal 200.

[0025] 1-4.Store server 400 The store server 400 is a server device managed by the store SP, and is, for example, an API (Application Programming Interface) server or a Web server.

[0026] Fig. 5 is a diagram showing the hardware configuration of the store server 400. As shown in Fig. 5, the store server 400 includes a control unit 410, a storage unit 420, and a communication unit 430, and these components are electrically connected within the store server 400 via a communication bus 460. Explanations of the control unit 410, the storage unit 420, and the communication unit 430 are omitted because they are substantially the same as the explanations of the control unit 110, the storage unit 120, and the communication unit 130 in the information processing device 100.

[0027] 1-5. Payment processing device 500 The payment processing device 500 is a device that executes payment processing, and is, for example, an API (Application Programming Interface) server, a web server, etc. The payment processing device 500 may be a server managed by a payment service provider (such as a credit card company, convenience store, bank, or telecommunications carrier) that provides payment services using various payment methods, or a payment agency.

[0028] Figure 6 is a diagram showing the hardware configuration of payment processing device 500. As shown in Figure 6, payment processing device 500 includes control unit 510, memory unit 520, and communication unit 530, and these components are electrically connected via communication bus 560 inside payment processing device 500. Description of control unit 510, memory unit 520, and communication unit 530 will be omitted as they are substantially the same as the description of control unit 110, memory unit 120, and communication unit 130 in information processing device 100.

[0029] 2. Functional configuration The functional configuration of this embodiment will be described in Section 2. As described above, information processing by software stored in the storage unit 120 is specifically realized by the control unit 110, which is an example of hardware, and can be executed as each functional unit included in the control unit 110.

[0030] 7 is a block diagram showing functions realized by information processing device 100 (control unit 110). Specifically, information processing device 100 (control unit 110) includes payment method information registration unit 111, authentication information registration unit 112, payment information acquisition unit 113, authentication unit 114, transmission unit 115, payment approval acquisition unit 116, and personal authentication request unit 117.

[0031] (Payment method information registration unit 111) The payment method information registration unit 111 is configured to be able to register various types of payment method information. For example, the payment method information registration unit 111 may be configured to be able to register, in the payment processing device 500, payment method information used by the user US for payment (hereinafter referred to as "payment method information PY"). Furthermore, for example, the payment method information registration unit 111 may be configured to be able to register, in the payment processing device 500, a user identifier that identifies the user US (hereinafter referred to as "user identifier USID").

[0032] Here, "user US" includes any user (end user) who purchases goods or services. The "user identifier USID" includes any letters, numbers, symbols, or combinations thereof that can identify the user US, such as a user ID.

[0033] "Payment method information PY" includes information necessary for payment processing with all payment methods, such as prepaid payment methods, immediate payment methods, or deferred payment methods. For example, this information includes the following, and this information is registered by the user in the payment processing device. A prepaid payment instrument is a payment instrument that allows payment up to the amount charged by loading cash or electronic money before purchasing a product or service. Examples include gift certificates, catalog gift certificates, magnetic or IC prepaid cards, and prepaid cards used on the Internet. More specifically, for gift certificates and catalog gift certificates, the information includes the number, expiration date, and security code assigned to the certificate. For prepaid cards, the information includes the cardholder's name, card number, card expiration date, and security code. Note that prepaid payment instruments include mobile types (e.g., Suica (registered trademark)), QR code types (e.g., PayPay (registered trademark)), and server types (e.g., Apple (registered trademark) Gift), and the information required to register these registration information in the payment process is also included. An immediate payment method is a payment method in which the payment amount is immediately deducted from a bank account, electronic money account, or cryptocurrency account when a product or service is purchased, such as a debit card. More specifically, for a debit card, the cardholder name, card number, card expiration date, security code, etc. are required. Deferred payment methods refer to payment methods in which cash or electronic money is paid in one lump sum after purchasing a product or service, and examples include credit cards, bank transfers, and account transfers. More specifically, for credit cards, the information includes the name of the credit card holder, credit card number, credit card expiration date, security code, and payment method (e.g., lump sum payment, installment payment, etc.). For bank transfers, the information includes the name of the financial institution, branch name, deposit type, account number, account name, furigana, address, and telephone number. Deferred payment methods also include mobile types (e.g., iD (registered trademark)) and QR code types (e.g., PayPay (registered trademark)), and the information required to register these registration information in the payment process is also included.

[0034] In addition, "registration" includes storing the payment method information PY entered by the user US in the memory unit 520 of the payment processing device 500, and may include, for example, storing the payment method information PY entered into an application or website provided by the payment processing device 500 in the memory unit 520 of the payment processing device 500, or sending the payment method information PY entered into an application or website provided by the information processing device 100 to the payment processing device 500 and storing it in the memory unit 520 of the payment processing device 500.

[0035] (Authentication information registration unit 112) The authentication information registration unit 112 is configured to be able to register various types of authentication information. For example, the authentication information registration unit 112 is configured to be able to register authentication information for authenticating the user terminal 200 and the store terminal 300 or the store server 400.

[0036] Here, "authentication" includes entity authentication to verify whether the other party in communication is genuine. Furthermore, the "authentication" method may be an authentication method using reversible encryption or an authentication method using irreversible encryption. An authentication method using reversible encryption refers to an authentication method that uses an encryption method that makes it possible to decrypt encrypted information, and examples include a shared key authentication method and a public key authentication method. An authentication method using irreversible encryption is an authentication method that uses an encryption method that makes it impossible to decrypt the encrypted information, such as an authentication method that uses an ID and password.

[0037] From the viewpoint of achieving both convenience and security in payments, the authentication method in the present invention is preferably an authentication method using reversible encryption, more preferably a public key authentication method, and even more preferably a two-way public key authentication method. "Public key authentication method" refers to a method in which one device (terminal) generates a public key and a private key, and transmits the generated public key to the other device (terminal) for authentication. "Two-way public key authentication method" means a method in which one device (terminal) and another device (terminal) generate a public key and a private key, respectively, and exchange the generated public keys to authenticate each other.

[0038] The authentication information registration unit 112 may be configured to be able to register an authentication key for authenticating the user terminal 200 and the store terminal 300 or the store server 400 when the authentication method is a public key authentication method. For example, the authentication information registration unit 112 may be configured to be able to register the user side public key USOP, out of the user side private key (hereinafter referred to as the "user side private key USSC") and the user side public key (hereinafter referred to as the "user side public key USOP") generated by the user terminal 200, in the store terminal 300 or the store server 400. In addition, the authentication information registration unit 112 may be configured to be able to register the store-side public key SPOP to the user terminal 200, out of the store-side private key (hereinafter referred to as the "store-side private key SPSC") and the store-side public key (hereinafter referred to as the "store-side public key SPOP") generated by the store terminal 300 or the store server 400.

[0039] Furthermore, when the authentication method is a two-way public key authentication method, the authentication information registration unit 112 may be configured to register the user public key USOP in the store terminal 300 or the store server 400, and also to register the store public key SPOP in the user terminal 200. This allows two-way public key authentication to be performed between the user terminal 200 and the store terminal 300 or the store server 400, thereby further achieving both convenience and security in payment.

[0040] It should be noted that "registration" includes storing predetermined authentication information in the storage unit 220 of the user terminal 200, the storage unit 320 of the store terminal 300, or the storage unit 420 of the store server 400.

[0041] (Payment information acquisition unit 113) The payment information acquisition unit 113 is configured to be able to acquire various types of payment information. For example, the payment information acquisition unit 113 is configured to be able to acquire payment information (hereinafter referred to as "payment information GS") including at least the amount of purchases made by the user US at the store SP from the store terminal 300 or store server 400 managed by the store SP. Furthermore, for example, the payment information acquisition unit 113 may be configured to be able to acquire a store identifier (hereinafter referred to as "store identifier SPID") that identifies the store SP from the store terminal 300 or store server 400 managed by the store SP.

[0042] The "store SP" includes a physical store or a virtual store on a website (EC (Electronic Commerce) site) that conducts electronic commerce. The "store identifier SPID" includes any letters, numbers, symbols, or combinations thereof that can identify the store SP, such as a store ID. "Management" includes ownership, possession, occupancy, borrowing, contracting, or use by employees or staff of the store SP, or by business operators commissioned by the store SP.

[0043] "Payment information GS" includes any payment information for a product or service, such as the product or service's identification ID, name, amount, unit price, quantity, discount rate, discount amount, or other information. The types of goods or services are not particularly limited and include, for example, any goods or services such as clothing, food, household goods, electrical appliances, financial products, furniture, books, beauty treatments, training, seminars, travel, chiropractic, massage, etc.

[0044] Note that "obtaining" includes receiving the payment information GS from the store terminal 300 or the store server 400, and may also include storing the received payment information GS in the storage unit 120.

[0045] (Authentication unit 114) The authentication unit 114 is configured to be able to authenticate various terminals and servers. For example, the authentication unit 114 is configured to be able to authenticate the store terminal 300 or the store server 400 and the user terminal 200 used by the user US. As mentioned above, "authentication" includes entity authentication to verify whether the other party is genuine. Furthermore, as mentioned above, from the viewpoint of achieving both convenience and security in payments, the "authentication" method is preferably an authentication method using reversible encryption, more preferably a public key authentication method, and even more preferably a two-way public key authentication method.

[0046] That is, the authentication unit 114 is configured to be able to authenticate the store terminal 300 or the store server 400 and the user terminal 200 used by the user US using a public key authentication method. For example, the authentication unit 114 is configured to be able to authenticate the user terminal 200 using a user-side public key USOP registered in the store terminal 300 or the store server 400 . Furthermore, for example, the authentication unit 114 is configured to be able to authenticate the store terminal 300 or the store server 400 using the store-side public key SPOP registered in the user terminal 200.

[0047] Furthermore, the authentication unit 114 is configured to be able to authenticate the store terminal 300 or the store server 400 and the user terminal 200 used by the user US using a bidirectional public key authentication method. For example, the authentication unit 114 is configured to authenticate the user terminal 200 using the user-side public key USOP registered in the store terminal 300 or the store server 400, and to be able to authenticate the store terminal 300 or the store server 400 using the store-side public key SPOP registered in the user terminal 200. The authentication method will be described in detail later.

[0048] (Transmitter 115) The transmitting unit 115 is configured to be able to transmit various types of information. For example, if authentication by the authentication unit 114 is successful, the transmission unit 115 is configured to be able to transmit to the payment processing device 500 a user identifier USID that identifies the user US, a store identifier SPID that identifies the store SP, and payment information GS acquired by the payment information acquisition unit 113.

[0049] Furthermore, for example, the transmitting unit 115 can be configured to be unable to transmit the user identifier USID, the store identifier SPID, and the payment information GS to the payment processing device 500 if the authentication by the authenticating unit 114 fails.

[0050] Here, when the user terminal 200 and the store terminal 300 or the store server 400 are authenticated using a two-way public key authentication method, "if authentication is successful" means if authentication of the user terminal 200 is successful using the user-side public key USOP registered in the store terminal 300 or the store server 400, and if authentication of the store terminal 300 or the store server 400 is successful using the store-side public key SPOP registered in the user terminal 200.

[0051] (Payment approval acquisition unit 116) The payment approval acquisition unit 116 is configured to be able to acquire various payment approvals. For example, the payment approval acquisition unit 116 is configured to be able to acquire, from the user terminal 200, payment approval for the payment information GS (hereinafter referred to as "payment approval AG").

[0052] Here, the method for acquiring the payment approval AG is not particularly limited, but for example, the payment approval acquisition unit 116 may display the payment information GS on the user terminal 200 and accept input of the payment approval AG by the user US. Note that inputting the payment approval AG may include, for example, tapping or clicking the payment approval button.

[0053] (Personal authentication request unit 117) The personal authentication request unit 117 is configured to be able to request various types of personal authentication. For example, the personal authentication request unit 117 is configured to be able to request personal authentication (hereinafter referred to as "personal authentication CF") from the user terminal 200. Here, the "personal authentication CF" includes any authentication that can confirm that the person operating the user terminal 200 is the user US. For example, "identity authentication CF" includes knowledge authentication that authenticates an individual using stored information stored by the user US, possession authentication that authenticates an individual using possession information possessed by the user US, biometric authentication that authenticates an individual using biometric information of the user US, or multi-factor authentication that combines these, and may further include, for example, password authentication, authentication using secret questions (security questions), fingerprint authentication, face authentication, iris authentication, vocal cord authentication, vein authentication, PIN (Personal Identification Number) code authentication, one-time password authentication, mnemonic authentication, CAPTCHA authentication, 3D Secure authentication, SMS authentication, or other authentication.

[0054] 3. Information Processing Section 3 describes the flow of operations of the information processing system 1 configured as above. Figures 8 to 11 are flow diagrams showing an example of information processing in the information processing system 1 according to this embodiment.

[0055] 3-1. Payment method information registration process FIG. 8 is a flow diagram showing an example of the payment method information registration process in the information processing system 1 according to this embodiment (steps S101 to S105).

[0056] In step S101, the control unit 210 of the user terminal 200 requests the information processing device 100 to register payment method information PY. Step S101 consists of the following five stages of information processing: (1) The control unit 210 of the user terminal 200 launches a predetermined application. (2) The output unit 250 of the user terminal 200 outputs a menu screen (hereinafter referred to as the "menu screen W100") from which registration of payment method information PY can be requested. (3) The input unit 240 of the user terminal 200 accepts the registration request for payment method information PY. (4) The input unit 240 of the user terminal 200 transfers the input registration request for payment method information PY to the control unit 210 via the communication bus 260. (5) The control unit 210 of the user terminal 200 transmits the registration request for payment method information PY to the information processing device 100 via the communication unit 230.

[0057] In step S102, the payment method information registration unit 111 of the information processing device 100 requests the payment processing device 500 to accept input of the payment method information PY. Step S102 consists of the following three stages of information processing: (1) The communication unit 130 of the information processing device 100 receives a registration request for the payment method information PY from the user terminal 200. (2) The communication unit 130 of the information processing device 100 transfers the registration request for the payment method information PY to the payment method information registration unit 111 via the communication bus 160. (3) The payment method information registration unit 111 of the information processing device 100 sends a request to accept input of the payment method information PY to the payment processing device 500 via the communication unit 130.

[0058] In step S103, the control unit 510 of the payment processing device 500 accepts input of payment method information PY from the user terminal 200. Step S103 consists of the following three stages of information processing: (1) The communication unit 530 of the payment processing device 500 receives a request to accept input of payment method information PY from the information processing device 100. (2) The communication unit 530 of the payment processing device 500 transfers the request to accept input of payment method information PY to the control unit 510 via the communication bus 560. (3) The control unit 510 of the payment processing device 500 sends a payment method information input screen (hereinafter referred to as "payment method information input screen W200") on which payment method information PY can be input to the user terminal 200 via the communication unit 530.

[0059] In step S104, the control unit 210 of the user terminal 200 transmits the payment method information PY input by the user US to the payment processing device 500. Step S104 consists of the following six stages of information processing: (1) The communication unit 230 of the user terminal 200 receives the payment method information input screen W200 from the payment processing device 500. (2) The communication unit 230 of the user terminal 200 transfers the payment method information input screen W200 to the control unit 210 via the communication bus 260. (3) The control unit 210 of the user terminal 200 outputs the payment method information input screen W200 to the output unit 250. (4) The input unit 240 of the user terminal 200 accepts input of the payment method information PY. (5) The input unit 240 of the user terminal 200 transfers the input payment method information PY to the control unit 210 via the communication bus 260. (6) The control unit 210 of the user terminal 200 transmits the payment method information PY to the payment processing device 500 via the communication unit 230.

[0060] In step S105, the control unit 510 of the payment processing device 500 registers the payment method information PY. Step S105 consists of the following three stages of information processing: (1) The communication unit 530 of the payment processing device 500 receives the payment method information PY from the user terminal 200. (2) The communication unit 530 of the payment processing device 500 transfers the payment method information PY to the control unit 510 via the communication bus 560. (3) The control unit 510 of the payment processing device 500 stores the payment method information PY in the memory unit 520.

[0061] In another embodiment, the payment method information registration unit 111 of the information processing device 100 may be configured to send the payment method information input screen W200 to the user terminal 200, and to send the payment method information PY entered on the payment method information input screen W200 to the payment processing device 500.

[0062] 3-2. Authentication information registration process FIG. 9 is a flow diagram showing an example of authentication information registration processing in the information processing system 1 according to this embodiment (steps S201 to S207).

[0063] In step S201, the control unit 210 of the user terminal 200 requests the store server 400 to register an authentication key for logging in to the store server 400. Step S201 consists of the following three stages of information processing: (1) The input unit 240 of the user terminal 200 accepts a request to register an authentication key from the user US. (2) The input unit 240 of the user terminal 200 transfers the input request to register an authentication key to the control unit 210 via the communication bus 260. (3) The control unit 210 of the user terminal 200 transmits the request to register an authentication key to the store server 400 via the communication unit 230.

[0064] In step S202, the control unit 410 of the store server 400 generates a store private key SPSC and a store public key SPOP. Step S202 consists of the following eight stages of information processing: (1) The control unit 410 of the store server 400 generates a code (hereinafter referred to as "code CD") and transmits the generated code CD to the user terminal 200 via the communication unit 430. (2) The communication unit 230 of the user terminal 200 receives the code CD and transfers it to the control unit 210 via the communication bus 260. (3) The control unit 210 of the user terminal 200 outputs the code CD to the output unit 250. (4) The input unit 240 of the user terminal 200 accepts input or reading of the code CD. (5) The input unit 240 of the user terminal 200 transfers the input or read code CD to the control unit 210 via the communication bus 260. (6) The control unit 210 of the user terminal 200 transmits the code CD to the store server 400 via the communication bus 260. (7) The communication unit 430 of the store server 400 receives the code CD and transfers it to the control unit 410 via the communication bus 460. (8) If the codes CD match, the control unit 410 of the store server 400 generates a store private key SPSC and a store public key SPOP and stores the generated store private key SPSC and store public key SPOP in the storage unit 420.

[0065] Here, the "code CD" includes any code that can be input or read by the user terminal 200 and that can connect the user terminal 200 to the store terminal 300 or the store server 400, such as any numeric string, character string, symbol string, or combination thereof, one-dimensional code, two-dimensional code, or other code. One-dimensional codes include, for example, barcodes, specifically JAN / EAN / UPC, ITF, CODE39, NW-7 (CODABAR), CODE128, or other barcodes. Two-dimensional codes include, for example, stacked two-dimensional codes or matrix two-dimensional codes, specifically QR Code (registered trademark), PDF417, Data Matrix, Maxi Code, Aztec Code, EAN / UCC composite, or other two-dimensional codes. From the viewpoint of achieving both convenience and security, it is preferable that the code CD has a one-time property of being updated every time a certain period of time elapses.

[0066] In step S203, the control unit 410 of the store server 400 transmits the store identifier SPID and the store public key SPOP to the information processing device 100. Step S203 consists of the following three stages of information processing: (1) The control unit 410 of the store server 400 transmits the store identifier SPID and the store public key SPOP to the information processing device 100 via the communication unit 430. (2) The communication unit 130 of the information processing device 100 receives the store identifier SPID and the store public key SPOP and transfers them to the authentication information registration unit 112 via the communication bus 160. (3) The authentication information registration unit 112 of the information processing device 100 stores the store identifier SPID and the store public key SPOP in the memory unit 120.

[0067] In step S204, the authentication information registration unit 112 of the information processing device 100 transmits the store identifier SPID and the store public key SPOP to the user terminal 200. Step S204 consists of the following three stages of information processing: (1) The authentication information registration unit 112 of the information processing device 100 transmits the store identifier SPID and the store public key SPOP to the user terminal 200 via the communication unit 130. (2) The communication unit 230 of the user terminal 200 receives the store identifier SPID and the store public key SPOP and transfers them to the control unit 210 via the communication bus 260. (3) The control unit 210 of the user terminal 200 stores the store identifier SPID and the store public key SPOP in the memory unit 220.

[0068] In step S205, the control unit 210 of the user terminal 200 generates a user-side private key USSC and a user-side public key USOP. Step S205 consists of the following six stages of information processing: (1) The control unit 210 of the user terminal 200 generates a code CD and transmits the generated code CD to the store server 400 via the communication unit 230. (2) The communication unit 430 of the store server 400 receives the code CD and transfers it to the control unit 410 via the communication bus 460. (3) The control unit 410 of the store server 400 accepts input of the code CD from the user terminal 200. (4) The control unit 410 of the store server 400 transmits the input code CD to the user terminal 200 via the communication unit 430. (5) The communication unit 230 of the user terminal 200 receives the code CD and transfers it to the control unit 210 via the communication bus 260. (6) If the codes CD match, the control unit 210 of the user terminal 200 generates a user-side private key USSC and a user-side public key USOP, and stores the generated user-side private key USSC and user-side public key USOP in the memory unit 220.

[0069] In step S205, the number of user terminals 200 may be one or more. For example, when there are two user terminals 200, the information processing is configured with the following six stages: (1) The control unit 210 of the first user terminal 200 generates a code CD and transmits the generated code CD to the store server 400 via the communication unit 430. (2) The communication unit 430 of the store server 400 receives the code CD and transfers it to the control unit 410 via the communication bus 460. (3) The control unit 410 of the store server 400 accepts input of the code CD from the second user terminal 200. (4) The control unit 410 of the store server 400 transmits the input code CD to the first user terminal 200 via the communication unit 430. (5) The communication unit 230 of the first user terminal 200 receives the code CD and transfers it to the control unit 210 via the communication bus 260. (6) If the codes CD match, the control unit 210 of the first user terminal 200 generates a user-side private key USSC and a user-side public key USOP, and stores the generated user-side private key USSC and user-side public key USOP in the memory unit 220.

[0070] In step S206, the control unit 210 of the user terminal 200 transmits the user identifier USID and the user public key USOP to the information processing device 100. Step S206 consists of the following three stages of information processing: (1) The control unit 210 of the user terminal 200 transmits the user identifier USID and the user public key USOP to the information processing device 100 via the communication unit 230. (2) The communication unit 130 of the information processing device 100 receives the user identifier USID and the user public key USOP and transfers them to the authentication information registration unit 112 via the communication bus 160. (3) The authentication information registration unit 112 of the information processing device 100 stores the user identifier USID and the user public key USOP in the memory unit 120.

[0071] In step S207, the authentication information registration unit 112 of the information processing device 100 transmits the user identifier USID and the user public key USOP to the store server 400 via the communication unit 130. Step S207 consists of the following three stages of information processing: (1) The authentication information registration unit 112 of the information processing device 100 transmits the user identifier USID and the user public key USOP to the store server 400 via the communication unit 130. (2) The communication unit 430 of the store server 400 receives the user identifier USID and the user public key USOP and transfers them to the control unit 410 via the communication bus 460. (3) The control unit 410 of the store server 400 stores the user identifier USID and the user public key USOP in the memory unit 420.

[0072] 3-3. Physical store payment processing FIG. 10 is a flow diagram showing an example of a brick-and-mortar store payment process in the information processing system 1 according to this embodiment (steps S301 to S318).

[0073] In step S301, the control unit 310 of the store terminal 300 transmits the payment information GS of the user US, which has been entered into a payment information input screen (hereinafter referred to as the "payment information input screen W300") by a staff member or employee of the store SP, to the store server 400. Step S301 consists of the following three stages of information processing: (1) The input unit 340 of the store terminal 300 accepts the input of the payment information GS. (2) The input unit 340 of the store terminal 300 transfers the input payment information GS to the control unit 310 via the communication bus 360. (3) The control unit 310 of the store terminal 300 transmits the payment information GS to the store server 400 via the communication unit 330.

[0074] In step S302, the control unit 410 of the store server 400 acquires the payment information GS from the store terminal 300 and transmits the acquired payment information GS to the information processing device 100. Step S302 consists of the following three stages of information processing: (1) The communication unit 430 of the store server 400 receives the payment information GS from the store terminal 300 and transfers it to the control unit 410 via the communication bus 460. (2) The control unit 410 of the store server 400 stores the payment information GS in the memory unit 420. (3) The control unit 410 of the store server 400 transmits the payment information GS to the information processing device 100 via the communication unit 430.

[0075] In step S303, the authentication unit 114 of the information processing device 100 generates a code CD for connecting the user terminal 200 with the store terminal 300 or the store server 400, and transmits the generated code CD to the store server 400.

[0076] In step S304, the control unit 410 of the store server 400 transmits the code CD to the store terminal 300. Step S304 consists of the following three stages of information processing: (1) The communication unit 430 of the store server 400 receives the code CD from the information processing device 100 and transfers it to the control unit 410 via the communication bus 460. (2) The control unit 410 of the store server 400 stores the code CD in the memory unit 420. (3) The control unit 410 of the store server 400 transmits the code CD to the store terminal 300 via the communication unit 430.

[0077] In step S305, the control unit 310 of the store terminal 300 displays a code output screen including the code CD (hereinafter referred to as the "code output screen W400") on the output unit 350. Step S305 consists of the following three stages of information processing: (1) The communication unit 330 of the store terminal 300 receives the code output screen W400 including the code CD from the store server 400. (2) The communication unit 330 of the store terminal 300 transfers the code output screen W400 including the code CD to the control unit 310 via the communication bus 360. (3) The control unit 310 of the store terminal 300 displays the code output screen W400 including the code CD on the output unit 350.

[0078] In step S306, the input unit 210 of the user terminal 200 accepts the input or reading of the code CD by the user US. Step S306 consists of the following four stages of information processing: (1) The control unit 210 of the user terminal 200 outputs to the user terminal 200 a code input screen (hereinafter referred to as the "code input screen W500") on which the code CD can be input or a code reading screen (hereinafter referred to as the "code reading screen W600") on which the code CD can be read. (2) The input unit 240 of the user terminal 200 accepts the input or reading of the code CD. (3) The input unit 240 of the user terminal 200 transfers the input or read code CD to the control unit 210 via the communication bus 260. (4) The control unit 210 of the user terminal 200 transmits the code CD and the user identifier USID to the store server 400 via the communication unit 230. (5) The control unit 410 of the store server 400 transmits the store identifier SPID to the user terminal 200 via the communication unit 430.

[0079] In step S307, if the code CD received from the user terminal 200 matches, the control unit 410 of the store server 400 executes authentication processing using the user-side public key USOP corresponding to the user identifier USID. Step S307 consists of the following nine information processing steps: (1) The communication unit 430 of the store server 400 receives the code CD and the user identifier USID from the user terminal 200 and transfers them to the control unit 410 via the communication bus 460. (2) If the code CD matches, the control unit 410 of the store server 400 encrypts plaintext (hereinafter referred to as "plaintext CL") using the user-side public key USOP corresponding to the user identifier USID stored in the storage unit 420 to obtain ciphertext (hereinafter referred to as "ciphertext CR"). Note that the plaintext CL may include, for example, a random number. (3) The control unit 410 of the store server 400 transmits the obtained ciphertext CR to the user terminal 200 via the communication unit 430. (4) The communication unit 230 of the user terminal 200 receives the ciphertext CR from the store server 400 and transfers it to the control unit 210 via the communication bus 260. (5) The control unit 210 of the user terminal 200 decrypts the ciphertext CR using the user-side private key USSC stored in the memory unit 220 to obtain the plaintext CL. (6) The control unit 210 of the user terminal 200 converts the obtained plaintext CL into a converted text (hereinafter referred to as the "converted text CO") using a predetermined hash function (hereinafter referred to as the "hash function SH"). (7) The control unit 210 of the user terminal 200 transmits the converted converted text CO to the store server 400 via the communication unit 230. (8) The communication unit 430 of the store server 400 receives the converted text CO from the user terminal 200 and transfers it to the control unit 410 via the communication bus 460. (9) The control unit 410 of the store server 400 uses the hash function SH to convert the plain text CL into an answer sentence (hereinafter referred to as the “answer sentence AS”), and determines whether the answer sentence AS matches the converted sentence CO.

[0080] In step S308, the control unit 410 of the store server 400 transmits the authentication result to the information processing device 100. If the answer sentence AS and the converted sentence CO match, the authentication result is successful. On the other hand, if the answer sentence AS and the converted sentence CO do not match, the authentication result is unsuccessful.

[0081] In step S309, the control unit 210 of the user terminal 200 executes authentication processing using the store-side public key SPOP corresponding to the store identifier SPID. Step S309 consists of the following nine stages of information processing: (1) The communication unit 230 of the user terminal 200 receives the store identifier SPID from the store server 400 and transfers it to the control unit 210 via the communication bus 260. (2) The control unit 210 of the user terminal 200 encrypts the plaintext CL using the store-side public key SPOP corresponding to the store identifier SPID stored in the memory unit 220 to obtain ciphertext CR. (3) The control unit 210 of the user terminal 200 transmits the obtained ciphertext CR to the store server 400 via the communication unit 230. (4) The communication unit 430 of the store server 400 receives the ciphertext CR from the user terminal 200 and transfers it to the control unit 410 via the communication bus 460. (5) The control unit 410 of the store server 400 decrypts the ciphertext CR using the store-side private key SPSC stored in the memory unit 420 to obtain plaintext CL. (6) The control unit 410 of the store server 400 converts the obtained plaintext CL into converted text CO using the hash function SH. (7) The control unit 410 of the store server 400 sends the converted converted text CO to the user terminal 200 via the communication unit 430. (8) The communication unit 230 of the user terminal 200 receives the converted text CO from the store server 400 and transfers it to the control unit 210 via the communication bus 260. (9) The control unit 210 of the user terminal 200 converts the plaintext CL into an answer text AS using the hash function SH and determines whether the answer text AS and the converted text CO match.

[0082] In step S310, the control unit 210 of the user terminal 200 transmits the authentication result to the information processing device 100. If the answer sentence AS and the converted sentence CO match, the authentication result is successful. On the other hand, if the answer sentence AS and the converted sentence CO do not match, the authentication result is unsuccessful.

[0083] In step S311, if the authentication result of the user terminal 200 and the store server 400 is successful, the transmission unit 115 of the information processing device 100 transmits the user identifier USID, the store identifier SPID, and the payment information GS to the payment processing device 500. Step S311 consists of the following four stages of information processing: (1) The communication unit 130 of the information processing device 100 receives the authentication result from the user terminal 200 and the store server 400 and transfers it to the transmission unit 115 via the communication bus 160. (2) If the authentication result of the user terminal 200 and the store server 400 is successful, the transmission unit 115 transmits the user identifier USID, the store identifier SPID, and the payment information GS to the payment processing device 500. (3) The communication unit 530 of the payment processing device 500 receives the user identifier USID, the store identifier SPID, and the payment information GS from the information processing device 100 and transfers it to the control unit 510 via the communication bus 560. (4) The control unit 510 of the payment processing device 500 stores the user identifier USID, the store identifier SPID, and the payment information GS in the storage unit 520.

[0084] In step S312, the payment approval acquisition unit 116 of the information processing device 100 requests payment approval AG for the payment information GS from the user terminal 200. Step S312 consists of the following four stages of information processing: (1) The payment approval acquisition unit 116 of the information processing device 100 sends a payment approval screen (hereinafter referred to as the "payment approval screen W700") including the payment information GS to the user terminal 200 via the communication unit 130. (2) The communication unit 230 of the user terminal 200 receives the payment approval screen W700 from the information processing device 100 and transfers it to the control unit 210 via the communication bus 260. (3) The control unit 210 of the user terminal 200 displays the payment approval screen W700 on the output unit 250. (4) The input unit 240 of the user terminal 200 accepts input of payment approval AG by the user US.

[0085] In step S313, the control unit 210 of the user terminal 200 transmits the payment approval AG entered by the user US to the information processing device 100. Step S313 consists of the following three stages of information processing: (1) The input unit 240 of the user terminal 200 transfers the payment approval AG entered on the payment approval screen W700 to the control unit 210 via the communication bus 260. (2) The control unit 210 of the user terminal 200 transmits the payment approval AG to the information processing device 100 via the communication unit 230. (3) The communication unit 130 of the information processing device 100 receives the payment approval AG from the user terminal 200 and transfers it to the payment approval acquisition unit 116 via the communication bus 160.

[0086] In step S314, the personal authentication request unit 117 of the information processing device 100 requests the personal authentication CF from the user terminal 200 via the communication unit .

[0087] In step S315, the control unit 210 of the user terminal 200 performs personal authentication and transmits the authentication result to the information processing device 100. Step S315 consists of the following six stages of information processing: (1) The communication unit 230 of the user terminal 200 receives a request for personal authentication CF from the information processing device 100 and transfers it to the control unit 210 via the communication bus 260. (2) The control unit 210 of the user terminal 200 performs personal authentication. (3) The input unit 240 of the user terminal 200 accepts the input or reading of personal information. (4) The input unit 240 of the user terminal 200 transfers the input or read personal information to the control unit 210 via the communication bus 260. (5) The control unit 210 of the user terminal 200 determines whether the personal authentication has been successful based on the personal information. (6) The control unit 210 of the user terminal 200 transmits the authentication result of the personal authentication CF to the information processing device 100 via the communication unit 230.

[0088] In step S316, the transmitting unit 115 of the information processing device 100 transmits the payment approval AG to the payment processing device 500 if the payment approval acquisition unit 116 acquires the payment approval AG and if the personal authentication CF is successful.

[0089] In step S317, control unit 510 of payment processing device 500 executes payment processing. Step S317 consists of the following two stages of information processing: (1) Communication unit 530 of payment processing device 500 receives payment approval AG from information processing device 100 and transfers it to control unit 510 via communication bus 560. (2) Control unit 510 of payment processing device 500 executes payment processing based on the user identifier USID, store identifier SPID, payment information GS, and payment method information PY stored in memory unit 520.

[0090] In step S318, when the payment processing is completed, the control unit 510 of the payment processing device 500 outputs a payment completion screen (hereinafter referred to as the "payment completion screen W800") indicating that the payment processing is completed to the user terminal 200 and the store terminal 300. Step S318 consists of the following three stages of information processing: (1) The control unit 510 of the payment processing device 500 sends the payment completion screen W800 to the user terminal 200 and the store terminal 300 via the communication unit 530. (2) The communication unit 230 of the user terminal 200 and the communication unit 330 of the store terminal 300 receive the payment completion screen W800 and transfer it to the control unit 210 and the control unit 310 via the communication bus 260 and the communication bus 360. (3) The control unit 210 and the control unit 310 display the payment completion screen W800 on the output unit 250 and the output unit 350.

[0091] 3-4. Virtual store payment processing FIG. 11 is a flow diagram showing an example of a virtual store payment process in the information processing system 1 according to this embodiment (steps S401 to S418).

[0092] In step S401, the control unit 210 of the user terminal 200 transmits the payment information GS entered by the user US on the e-commerce site of the store SP to the store server 400. Step S401 consists of the following three stages of information processing: (1) The input unit 240 of the user terminal 200 accepts the input of the payment information GS. (2) The input unit 240 of the user terminal 200 transfers the input payment information GS to the control unit 210 via the communication bus 260. (3) The control unit 210 of the user terminal 200 transmits the payment information GS to the store server 400 via the communication unit 230.

[0093] In step S402, the control unit 410 of the store server 400 acquires the payment information GS from the user terminal 200 and transmits the acquired payment information GS to the information processing device 100. Step S402 consists of the following three stages of information processing: (1) The communication unit 430 of the store server 400 receives the payment information GS from the user terminal 200 and transfers it to the control unit 410 via the communication bus 460. (2) The control unit 410 of the store server 400 stores the payment information GS in the memory unit 420. (3) The control unit 410 of the store server 400 transmits the payment information GS to the information processing device 100 via the communication unit 430.

[0094] In step S403, the authentication unit 114 of the information processing device 100 generates a code CD for connecting the user terminal 200 and the store server 400, and transmits the generated code CD to the store server 400.

[0095] In step S404, the control unit 410 of the store server 400 transmits the code CD to the user terminal 200. Step S404 consists of the following three stages of information processing: (1) The communication unit 430 of the store server 400 receives the code CD from the information processing device 100 and transfers it to the control unit 410 via the communication bus 460. (2) The control unit 410 of the store server 400 stores the code CD in the memory unit 420. (3) The control unit 410 of the store server 400 transmits the code CD to the user terminal 200 via the communication unit 430.

[0096] In step S405, the control unit 210 of the user terminal 200 displays the code CD on the output unit 250. Step S405 consists of the following three stages of information processing: (1) The communication unit 230 of the user terminal 200 receives the code CD from the store server 400. (2) The communication unit 230 of the user terminal 200 transfers the code CD to the control unit 210 via the communication bus 260. (3) The control unit 210 of the user terminal 200 displays the code CD on the output unit 250.

[0097] In step S406, the input unit 210 of the user terminal 200 accepts input of a code CD by the user US. Step S406 consists of the following four stages of information processing: (1) The input unit 240 of the user terminal 200 accepts input of the code CD. (2) The input unit 240 of the user terminal 200 transfers the input code CD to the control unit 210 via the communication bus 260. (3) The control unit 210 of the user terminal 200 transmits the code CD and the user identifier USID to the store server 400 via the communication unit 230. (4) The control unit 410 of the store server 400 transmits the store identifier SPID to the user terminal 200 via the communication unit 430.

[0098] Steps S407 to S417 are substantially the same as steps S307 to S317, and therefore will not be described here.

[0099] In step S418, when the payment processing is completed, the control unit 510 of the payment processing device 500 outputs a payment completion screen W800 indicating that the payment processing is completed to the user terminal 200. Step S418 consists of the following three stages of information processing: (1) The control unit 510 of the payment processing device 500 sends the payment completion screen W800 to the user terminal 200 via the communication unit 530. (2) The communication unit 230 of the user terminal 200 receives the payment completion screen W800 and transfers it to the control unit 210 via the communication bus 260. (3) The control unit 210 displays the payment completion screen W400 on the output unit 250.

[0100] 4.Screen display example In Section 4, display examples of the menu screen W100, payment method information input screen W200, payment information input screen W300, code output screen W400, code input screen W500, code reading screen W600, payment approval screen W700, and payment completion screen W800 will be explained.

[0101] (Menu screen W100) Figure 12 is a diagram showing an example of a menu screen W100 on which the user terminal 200 requests the registration of payment method information PY. As shown in Figure 12, the menu screen W100 has a payment method information registration request button W101 for requesting the registration of payment method information PY. When the user US operates the payment method information registration request button W101, the menu screen W100 transitions to a payment method information input screen W200.

[0102] (Payment method information input screen W200) Figure 13 is a diagram showing an example of a payment method information input screen W200 on which payment processing device 500 accepts input of payment method information PY. As shown in Figure 13, payment method information input screen W200 has a payment method information input area W201 for inputting payment method information PY, and a payment method information registration button W202 for registering the payment method information PY input in payment method information input area W201. From the viewpoint of achieving both convenience and security, it is preferable that the payment method information input screen W200 conforms to the Payment Card Industry Data Security Standard (PCI DSS).

[0103] (Payment information input screen W300) 14 is a diagram showing an example of a payment information input screen W300 on which the store terminal 300 accepts input of payment information GS. As shown in FIG. 14, the payment information input screen W300 has an amount input field W301 for inputting the purchase amount of the user US at the store SP, a numeric keypad W302 for inputting the amount in the amount input field W301, and a confirm button W303 for confirming the amount input in the amount input field W301. When the confirm button W303 is operated by a staff member or employee of the store SP, the control unit 310 of the store terminal 300 transmits payment information GS including the amount to the information processing device 100.

[0104] (Code output screen W400) Fig. 15 is a diagram showing an example of a code output screen W400 on which the store terminal 300 outputs the code CD. As shown in Fig. 15, the code output screen W400 has an amount display area W401 that displays the purchase amount of the user US at the store SP, and code display areas W402 and W403 that display the code CD. The code output screen W400 is presented to the user US by a staff member or employee of the store SP.

[0105] (Code entry screen W500) Fig. 16 is a diagram showing an example of a code input screen W500 on which the user terminal 200 inputs a code CD. As shown in Fig. 16, the code input screen W500 has a code input area W501 for inputting the code CD output on the code output screen W400 of the store terminal 300, an elapsed time display area W502 for displaying the elapsed time for inputting the code CD, and a numeric keypad W503 for inputting the code CD into the code input area W501. When the code CD displayed on the store terminal 300 is correctly entered, communication between the user terminal 200 and the store terminal 300 and the store server 400 is established.

[0106] (Code reading screen W600) Fig. 17 is a diagram showing an example of a code reading screen W600 on which the user terminal 200 reads the code CD. As shown in Fig. 17, the code reading screen W600 has a code reading frame W601. For example, the control unit 210 of the user terminal 200 may activate a reader installed in the user terminal 200 to output the code reading screen W600 to the output unit 250, and read the code CD when the code reading frame W601 matches the code CD to be read. When the user terminal 200 reads the code CD displayed on the store terminal 300, communication between the user terminal 200 and the store terminal 300 and the store server 400 is established.

[0107] (Payment approval screen W700) Figure 18 is a diagram showing an example of a payment approval screen W700 on which the user terminal 200 inputs payment approval AG. As shown in Figure 18, the payment approval screen W700 has a payment information display area W701 that displays payment information GS, and a payment approval button W702 for inputting payment approval AG. When the user US operates the payment approval button W702, a payment approval AG is sent to the information processing device 100.

[0108] (Payment completion screen W800) 19 is a diagram showing an example of a payment completion screen W800 indicating that the payment process has been completed. As shown in Fig. 19, the payment completion screen W800 has a payment completion display area W801 that indicates that the payment process has been completed, and a transaction information display area W802 that displays transaction information including payment information GS. The payment completion screen W800 is displayed on the user terminal 200 and the store terminal 300, thereby completing the payment.

[0109] 5. Effects In Section 5, the effects of this embodiment will be described.

[0110] The information processing system 1 of this embodiment comprises a payment method information registration unit 111 that registers payment method information PY used by the user US for payment in the payment processing device 500; a payment information acquisition unit 113 that acquires payment information GS containing at least the amount of purchases the user US will make at the store SP from the store terminal 300 or store server 400 managed by the store SP; an authentication unit 114 that authenticates the store terminal 300 or store server 400 and the user terminal 200 used by the user US using a public key authentication method; and a transmission unit 115 that, if authentication by the authentication unit 114 is successful, transmits to the payment processing device 500 a user identifier USID that identifies the user US, a store identifier SPID that identifies the store SP, and the payment information GS acquired by the payment information acquisition unit 113.The payment processing device 500 executes payment processing based on the user identifier USID, the store identifier SPID, the payment information GS, and the payment method information PY registered by the payment method information registration unit 111. This means that the user US does not have to go through the trouble of entering a password, and if authentication using the public key authentication method between the store terminal 300 or store server 400 and the user terminal 200 is successful, the payment information GS is sent to the payment processing device 500 and the payment processing is executed, thereby achieving both security and convenience in payments.

[0111] In the information processing system 1 according to this embodiment, the authentication unit 114 authenticates the store terminal 300 or store server 400 and the user terminal 200 used by the user US using a two-way public key authentication method. This eliminates the need for the user US to enter a password, and once the authenticity of both the user US and the store SP is verified, the payment information GS is sent to the payment processing device 500 and payment processing is executed, thereby achieving both security and convenience in payments.

[0112] In the information processing system 1 according to this embodiment, the store terminal 300 and the store server 400 do not acquire the payment method information PY. This allows the user terminal 200 to process payments without transmitting the payment method information PY to the store terminal 300 and the store server 400, further improving security without compromising convenience in payments.

[0113] The information processing system 1 according to this embodiment further includes a payment approval acquisition unit 116 that acquires payment approval AG for the payment information GS from the user terminal 200. When the payment approval acquisition unit 116 acquires payment approval AG, the payment processing device 500 executes payment processing based on the user identifier USID, the store identifier SPID, the payment information GS, and the payment method information PY registered by the payment method information registration unit 111. This allows payment processing to be executed when payment approval AG for the payment information GS is acquired from the user terminal 200, further improving the security of payments.

[0114] The information processing system 1 according to this embodiment further includes an identity authentication request unit 117 that requests identity authentication CF from the user terminal 200, and when the payment approval acquisition unit 116 acquires payment approval AG and the identity authentication CF is successful, the payment processing device 500 executes payment processing based on the user identifier USID, store identifier SPID, payment information GS, and payment method information PY registered by the payment method information registration unit 111. This allows payment processing to be executed not only when payment approval AG for the payment information GS is acquired from the user terminal 200 but also when identity authentication CF is successful, thereby further improving the security of payments.

[0115] In the information processing system 1 according to this embodiment, the personal authentication CF includes knowledge authentication, possession authentication, biometric authentication, or a multi-factor authentication that combines these. As a result, the personal authentication CF includes knowledge authentication, possession authentication, biometric authentication, or a multi-factor authentication that combines these, which further improves the security of payments.

[0116] 6.Other Although the embodiment of the present invention has been described above, the present invention is not limited to this and can be modified as appropriate within the scope of the technical idea of ​​the invention.

[0117] An aspect of the embodiment of the present invention may be a program that causes a computer to function as each unit of the information processing system 1.

[0118] An aspect of the embodiment of the present invention may be an information processing method executed by the information processing system 1. This information processing method includes each process executed by each unit of the information processing system 1.

[0119] As a variant example, each control unit performs write processing (storage processing) and read processing of various data and information to a memory unit, but this is not limited to this, and for example, information processing of each flow may be performed using a register or cache memory within the control unit. [Explanation of symbols]

[0120] 1. Information Processing Systems 100 Information processing device 110 control section 111 Payment Method Information Registration Department 112 Authentication Information Registration Section 113 Payment Information Acquisition Department 114 Authentication Department 115 Transmitter 116 Payment Approval Acquisition Department 117 Authentication request section 120 Storage section 130 Communications Department 160 communication bus 200 user terminals 210 Control Unit 220 Storage section 230 Communications Department 240 Input section 250 Output section 260 Communication Bus 300 store terminals 310 Control Unit 320 Storage section 330 Communications Department 340 Input section 350 Output Section 360 Communication Bus 400 Store Server 410 Control Unit 420 Storage section 430 Communications Department 460 communication bus 500 Payment Processing Device 510 control section 520 Storage section 530 Communications Department 560 Communication Bus

Claims

1. a payment method information registration unit that registers information about a payment method used by a user for payment with the payment processing device; a payment information acquisition unit that acquires payment information including at least the amount of purchases made by the user at the store from a store terminal or a store server managed by the store; an authentication unit that authenticates the store terminal or the store server and the user terminal used by the user using a public key authentication method; a transmission unit that transmits, when authentication by the authentication unit is successful, a user identifier that identifies the user, a store identifier that identifies the store, and payment information acquired by the payment information acquisition unit to the payment processing device; Equipped with the payment processing device executes payment processing based on the user identifier, the store identifier, the payment information, and the payment method information registered by the payment method information registration unit; Information processing system.

2. the authentication unit authenticates the store terminal or the store server and the user terminal used by the user using a bidirectional public key authentication method; The information processing system according to claim 1 .

3. The store terminal and the store server do not acquire the payment method information. The information processing system according to claim 1 .

4. A payment approval acquisition unit that acquires payment approval for the payment information from the user terminal, When the payment approval acquisition unit acquires payment approval, the payment processing device executes payment processing based on the user identifier, the store identifier, the payment information, and the payment method information registered by the payment method information registration unit. The information processing system according to claim 1 .

5. further comprising an authentication request unit that requests authentication of the user terminal; When the payment approval acquisition unit acquires payment approval and the identity authentication is successful, the payment processing device executes payment processing based on the user identifier, the store identifier, the payment information, and the payment method information registered by the payment method information registration unit. The information processing system according to claim 1 .

6. The identity authentication includes knowledge authentication, possession authentication, biometric authentication, or multi-factor authentication that combines these. The information processing system according to claim 5 .

7. A program, A program for causing a computer to function as each unit of the information processing system according to any one of claims 1 to 6.

8. An information processing method executed by an information processing system, The information processing system according to any one of claims 1 to 6, further comprising: Information processing methods.

Images