Information processing apparatus, information processing method, program, and information processing system

Abstract

To effectively reduce a load required for a procedure while securing sufficient security.SOLUTION: There is provided an information processing apparatus including an encryption unit that encrypts information related to a procedure when user authentication based on authentication information related to the procedure received from a user terminal is established, an information code generation unit that generates an information code from the information encrypted by the encryption unit, and a form generation unit that generates form data related to the procedure including the information code generated by the information code generation unit.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present invention relates to an information processing device, an information processing method, a program, and an information processing system. [Background technology]

[0002] Technologies have been developed to reduce the burden on bank staff and customers regarding transactions conducted at financial institutions. For example, Patent Document 1 discloses a technology that enables transactions exceeding a set limit by having an ATM (Automatic Teller Machine) read a QR code (registered trademark) generated after identity verification. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Publication No. 2022-72663 Summary of the Invention [Problem to be solved by the invention]

[0004] However, as disclosed in Patent Document 1, there are cases where it is difficult to ensure sufficient security simply by verifying the identity of a person who visits a counter.

[0005] Therefore, the present invention has been made in consideration of the above problems, and an object of the present invention is to effectively reduce the burden required for procedures while ensuring sufficient security. [Means for solving the problem]

[0006] In order to solve the above problem, according to one aspect of the present invention, an information processing device is provided, comprising: an encryption unit that encrypts information related to a procedure when user authentication is successful based on authentication information related to the procedure received from a user terminal; an information code generation unit that generates an information code from the information encrypted by the encryption unit; and a report generation unit that generates report data related to the procedure, including the information code generated by the information code generation unit.

[0007] The procedure may include a withdrawal transaction.

[0008] The information relating to the procedure may include at least one of account information and an amount.

[0009] The information relating to the procedure may include an identifier for the form data.

[0010] The user authentication may be performed through internet banking.

[0011] The information code may include a two-dimensional code.

[0012] In addition, in order to solve the above problem, according to another aspect of the present invention, an information processing method is provided, which includes, when user authentication is successful based on authentication information related to a procedure received from a user terminal, a processor encrypting information related to the procedure, generating an information code from the encrypted information, and generating report data related to the procedure that includes the information code.

[0013] In addition, in order to solve the above problem, according to another aspect of the present invention, a program is provided that causes a computer to function as an information processing device, comprising: an encryption unit that encrypts information related to a procedure when user authentication is successful based on authentication information related to the procedure received from a user terminal; an information code generation unit that generates an information code from the information encrypted by the encryption unit; and a report generation unit that generates report data related to the procedure, including the information code generated by the information code generation unit.

[0014] In addition, in order to solve the above problem, according to another aspect of the present invention, an information processing system is provided, comprising: an encryption unit that encrypts information related to a procedure when user authentication is successful based on authentication information related to the procedure received from a user terminal; an information code generation unit that generates an information code from the information encrypted by the encryption unit; a report generation unit that generates report data related to the procedure including the information code generated by the information code generation unit; and a decryption unit that decrypts the information encrypted by the encryption unit from the information code to obtain the information related to the procedure. [Effects of the Invention]

[0015] As described above, according to the present invention, it is possible to effectively reduce the burden required for procedures while ensuring sufficient security. [Brief explanation of the drawings]

[0016] [Figure 1] 1 is a block diagram showing an example of a functional configuration of an information processing system 1 according to a first embodiment of the present invention. [Figure 2] 10 is a diagram for explaining an example of information included in a web form S according to the embodiment. FIG. [Figure 3] FIG. 2 is a block diagram showing an example of a functional configuration of a user terminal 10 according to the embodiment. [Figure 4] 2 is a block diagram showing an example of the functional configuration of a web form generation server 20 according to the embodiment. FIG. [Figure 5]FIG. 2 is a block diagram showing an example of the functional configuration of an internet banking server 30 according to the embodiment. [Figure 6] 2 is a block diagram showing an example of a functional configuration of a tablet 40 according to the embodiment. FIG. [Figure 7] 2 is a block diagram showing an example of the functional configuration of a bank teller terminal 50 according to the embodiment. FIG. [Figure 8] 2 is a block diagram showing an example of the functional configuration of a sales office server 60 according to the embodiment. FIG. [Figure 9] 2 is a block diagram showing an example of the functional configuration of an ATM 70 according to the embodiment. FIG. [Figure 10] 10 is a diagram showing an example of the flow of generating a web form S using the information processing system 1 according to the embodiment. FIG. [Figure 11] 10 is a diagram showing an example of the flow of generating a web form S using the information processing system 1 according to the embodiment. FIG. [Figure 12] FIG. 10 is a diagram showing an example of a processing flow in a sales office using the information processing system 1 according to the embodiment. [Figure 13] FIG. 10 is a diagram showing an example of a processing flow in a sales office using the information processing system 1 according to the embodiment. [Figure 14] FIG. 10 is a block diagram showing an example of a functional configuration of an information processing system 2 according to a second embodiment of the present invention. [Figure 15] 10 is a block diagram showing an example of the functional configuration of a sales office terminal 55 according to the embodiment. FIG. [Figure 16] 2 is a block diagram showing an example of the functional configuration of a sales office server 60 according to the embodiment. FIG. [Figure 17] 10 is a diagram showing an example of a processing flow in a sales office using the information processing system 2 according to the embodiment. FIG. 11 is a block diagram showing an example of the functional configuration of a sales office server 60. FIG. [Figure 18] 10 is a diagram showing an example of a processing flow in a sales office using the information processing system 2 according to the embodiment. FIG. [Figure 19] FIG. 9 is a diagram showing a hardware configuration of an information processing device 900 according to an embodiment of the present invention. DETAILED DESCRIPTION OF THE INVENTION

[0017] Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. In this specification and drawings, components having substantially the same functional configurations are designated by the same reference numerals, and redundant explanations will be omitted.

[0018] <1. First embodiment> <<1.1. Overview>> As mentioned above, in recent years, techniques have been developed to reduce the burden on bank staff and customers regarding transactions conducted at financial institutions.

[0019] For example, the technology disclosed in Patent Document 1 reduces the burden on bank staff and makes it possible to efficiently obtain funds in excess of the limit set for an ATM.

[0020] However, in the case of transactions such as withdrawals, transfers, and money transfers, security cannot be ensured sufficiently by the identity verification described in Patent Document 1. In order to ensure sufficient security in such transactions, it is necessary to verify the seal registered with the financial institution (hereinafter simply referred to as the seal).

[0021] Another method for reducing the burden on transactions is for a user to use an internet service at home or at work to generate a web slip with a QR code containing embedded transaction information, and then have the QR code scanned by a branch terminal, thereby transferring the transaction information to the branch terminal.

[0022] According to the above method, it is possible to effectively reduce the burden on bank staff of inputting (typing) transaction details using a bank branch terminal.

[0023] However, even with the above method, when transactions involve withdrawals, transfers, and other transactions, it is important to ensure security by verifying seals.

[0024] On the other hand, the task of verifying seals is a very demanding task for bank employees, and improvements are needed.

[0025] The technical concept of the present invention was conceived with the above points in mind, and makes it possible to effectively reduce the burden of procedures while ensuring sufficient security without seal matching.

[0026] An example of a system configuration according to a first embodiment of the present invention that achieves the above-mentioned effects will now be described in detail.

[0027] <<1.2. System configuration example>> First, an example of a system configuration according to a first embodiment of the present invention will be described. Fig. 1 is a block diagram showing an example of a functional configuration of an information processing system 1 according to an embodiment of the present invention.

[0028] In this embodiment, it is assumed that a customer (hereinafter also referred to as a user) performs a self-service transaction using a tablet, which has been introduced in the branches of financial institutions in recent years.

[0029] As shown in FIG. 1, the information processing system 1 according to this embodiment includes a user terminal 10, a web slip generation server 20, an internet banking server 30, a tablet 40, a bank clerk terminal 50, a branch server 60, and an ATM 70.

[0030] (User terminal 10) The user terminal 10 according to this embodiment is an information processing device such as a PC (Personal Computer) used by a user. The user terminal 10 may be installed at a user base such as the user's home or workplace.

[0031] The user terminal 10 according to this embodiment communicates with the Web form creation server 20 via the Internet 80 and has the function of printing the Web form S created using a Web application provided by the Web form creation server 20.

[0032] (WEB slip generation server 20) When user authentication based on authentication information related to a procedure received from the user terminal 10 is successful, the Web form generation server 20 according to this embodiment encrypts the information related to the procedure using an encryption key stored in the server.

[0033] The Web form generation server 20 then generates an information code from the encrypted information. That is, the Web form generation server 20 generates an information code with the encrypted information embedded in it.

[0034] The Web form creation server 20 also creates form data relating to the procedure that includes the created information code.

[0035] The web form S according to this embodiment is an example of the form data.

[0036] An example of such a procedure is a withdrawal transaction from an account.

[0037] An example of information contained in the Web form S according to this embodiment will now be described with reference to FIG.

[0038] The Web slip S according to this embodiment includes a two-dimensional code C in addition to text information indicating the type of transaction, account information such as the account number, and the transaction amount.

[0039] The two-dimensional code C may be a matrix code or a stack code. An example of the two-dimensional code C is a QR code.

[0040] The two-dimensional code C according to this embodiment is an example of the information code. That is, the two-dimensional code C according to this embodiment may be obtained by encrypting information related to a procedure and then further coding it.

[0041] As an example, the two-dimensional code C may be a Security QR Code (SQRC, registered trademark). In this case, the encrypted information related to the procedure may be embedded in the SQRC as private data.

[0042] An example of information contained in the two-dimensional code C according to this embodiment (that is, encrypted information relating to the procedure) is shown on the right side of FIG.

[0043] The information included in the two-dimensional code C may include, for example, common items that are not dependent on input information related to the procedure received from the user terminal 10, and various information that is generated based on the input information.

[0044] The various information generated based on the input information may include, for example, a web slip generation number, account information including branch number and account number, transaction amount, bankbook summary, denomination designation, and other information indicating the details of the transaction.

[0045] The web slip generation number according to this embodiment is an example of an identifier used to identify a procedure (slip).

[0046] The WEB form generation server 20 of this embodiment generates a WEB form S including a two-dimensional code C when user authentication is successful based on the user authentication information received from the user terminal 10, and sends the WEB form S to the user terminal 10.

[0047] Here, the above user authentication may be performed using existing internet banking.

[0048] Referring again to FIG. 1, the description of the functional configuration example of the information processing system 1 according to this embodiment will continue.

[0049] The web slip generation server 20 according to this embodiment is connected to the internet banking server 30 via the internet 80 .

[0050] The Web slip generation server 20 according to this embodiment attempts to log in to Internet banking using the user's authentication information (for example, login information such as ID and password) received from the user terminal 10.

[0051] If the login to Internet banking is successful (user authentication is successful), the Web form creation server 20 may create the Web form S.

[0052] (Internet banking server 30) The internet banking server 30 according to this embodiment provides internet banking services.

[0053] The Internet banking service according to this embodiment may be a service that allows the display of account information such as branch number, account number, account balance inquiry, deposit and withdrawal details inquiry, transfer and money transfer, etc. based on the user's authentication information.

[0054] In this embodiment, the Internet banking server 30 is used to perform user authentication based on a request from the Web slip generation server 20 and to display account information.

[0055] Generally, there are two types of internet banking: one that allows fund transfers such as money transfers and the other that only allows inquiries such as account balance inquiries and deposit / withdrawal details without fund transfers. The internet banking of this embodiment may be either of the above, as long as it has a user authentication function and a function to display account information.

[0056] Internet banking services that allow fund transfers are often charged a monthly fee, while internet banking services that only allow inquiries are often provided free of charge. Therefore, by using the latter internet banking service, the barrier to entry for users can be lowered.

[0057] The collaboration between the Internet banking server 30 and the Web slip generation server 20 may be realized by a screen scraping method. On the other hand, the collaboration between the Internet banking server 30 and the Web slip generation server 20 may be realized by an API that responds with the user's account information when the Internet banking server 30 requests an access token issued in advance (e.g., via OAuth authentication).

[0058] (Tablet 40) The tablet 40 according to this embodiment is a terminal installed in a branch office of a financial institution.

[0059] The tablet 40 according to this embodiment has functions such as allowing the user to input transaction details, photographing personal identification documents, reading bankbooks and cash cards, and reading two-dimensional codes C included in web slips S.

[0060] (Banker terminal 50) The bank employee terminal 50 according to this embodiment is an information processing device such as a PC that is installed in a branch of a financial institution and used by a bank employee of the financial institution.

[0061] The bank employee may use the bank employee terminal 50 to check the transaction information entered by the user and the status of the transaction.

[0062] In this embodiment, the teller terminal 50 is used to confirm whether cash withdrawal is possible at the ATM 70 and to register the completion of cash withdrawal at the ATM 70.

[0063] (Sales store server 60) The branch office server 60 according to this embodiment provides a web application to be displayed on the tablet 40 and the bank employee terminal 50 .

[0064] Furthermore, the sales office server 60 according to this embodiment attempts to decrypt the encrypted procedure-related information contained in the two-dimensional code C read by the tablet 40 using the decryption key it holds.

[0065] If the decryption is successful, the branch server 60 according to this embodiment determines that the procedure is valid and transfers the specified amount (transaction amount) from the user's account to a centralized account for deposits and withdrawals held by the financial institution, thereby enabling a bank employee to withdraw the amount from the ATM 70 without verifying the bank seal. The instruction to transfer funds may be given using an API provided by the accounting system.

[0066] To realize the above-mentioned functions, the branch office server 60 is connected to the web slip generation server 20 via a dedicated network 82. The branch office server 60 is also connected to the tablets 40 and the bank employee terminals 50 via an internal network 84. The dedicated network 82 and the internal network 84 may be closed networks established within a financial institution or the like.

[0067] (ATM70) The ATM according to this embodiment may be an ATM dedicated to depositing and collecting money from a centralized deposit and withdrawal account owned by a financial institution.

[0068] The cash card for the above-mentioned concentration account is held by a bank employee, and the PIN number for the cash card is known only to the bank employee.

[0069] The bank employee inserts the cash card into the ATM 70, inputs the PIN number and the amount to be withdrawn, and withdraws the user's funds transferred to the concentration account as cash.

[0070] An example of the functional configuration of the information processing system 1 according to this embodiment has been described above. Below, an example of the functional configuration of each device included in the information processing system 1 will be described in more detail. Note that the following will show representative functional configurations that are characteristic of this embodiment. Each device included in the information processing system 1 may further include functional configurations other than those shown in each drawing.

[0071] (Example of functional configuration of user terminal 10) 3 is a block diagram showing an example of the functional configuration of the user terminal 10 according to this embodiment. As shown in FIG. 3, the user terminal 10 according to this embodiment includes at least a browsing unit 110 and a printing unit 120.

[0072] The browsing unit 110 is a function that runs the web applications provided by the web slip creation server 20. The browsing unit 110 is realized by various browsers.

[0073] The printing unit 120 prints the Web form S generated by the Web form generation server 20. The printing unit 120 can be implemented by any of a variety of printers.

[0074] (Example of functional configuration of the web slip generation server 20) 4 is a block diagram showing an example of the functional configuration of the web form generation server 20 according to this embodiment. As shown in Fig. 4, the web form generation server 20 according to this embodiment includes a web form generation unit 210, an authentication linking unit 220, a screen transition unit 230, an account information comparison unit 240, an encryption unit 250, and a code generation unit 260.

[0075] The web slip generation unit 210 generates slip input forms for transactions such as deposits, withdrawals, transfers, and money transfers, and enables input of slip items corresponding to the transaction on the user terminal 10. For example, for a withdrawal, the user can input the branch number, account number, account number, and withdrawal amount of the withdrawal target into the input form.

[0076] The web slip generator 210 generates a web slip S including the two-dimensional code C generated by the code generator 260 and transmits the web slip S to the user terminal 10.

[0077] The authentication linking unit 220 accesses the Internet banking server 30 and requests user authentication.

[0078] After the user authentication is successful, the screen transition unit 230 requests transition to a screen displaying account information provided by the internet banking server 30.

[0079] The screen transition unit 230 is a functional configuration necessary when the screen scraping method is adopted, and is not necessary when a dedicated API is provided.

[0080] The account information comparison unit 240 checks whether the account information displayed on the Internet banking page matches the account information received from the user terminal 10.

[0081] If the account information comparison unit 240 confirms that the account information matches, the encryption unit 250 encrypts the information relating to the procedure using the encryption key it holds.

[0082] The code generation unit 260 generates an information code (for example, two-dimensional code C) by encoding the information related to the procedure encrypted by the encryption unit 250.

[0083] (Example of functional configuration of Internet banking server 30) 5 is a block diagram showing an example of the functional configuration of the internet banking server 30 according to this embodiment. As shown in FIG. 5, the internet banking server 30 according to this embodiment includes at least an authentication unit 310 and an account information display unit 320.

[0084] The authentication unit 310 performs user authentication based on authentication information. For example, the authentication unit 310 may perform user authentication based on authentication information such as an ID and a password, or may perform user authentication based on a pre-issued access token.

[0085] After user authentication is successful, the account information display unit 320 displays a screen on which account information can be inquired.

[0086] (Example of tablet 40 functional configuration) 6 is a block diagram showing an example of the functional configuration of the tablet 40 according to this embodiment. As shown in FIG. 6, the tablet 40 according to this embodiment includes at least a browsing unit 410 and a code reading unit 420.

[0087] The browsing unit 410 is a function that runs a web application provided by the sales office server 60. The browsing unit 410 is realized by various browsers.

[0088] The code reading unit 420 has a function of reading the two-dimensional code C included in the web slip S. The code reading unit 420 is equipped with a reader compatible with the two-dimensional code C generated by the code generation unit 260.

[0089] (Example of functional configuration of bank employee terminal 50) 7 is a block diagram showing an example of the functional configuration of the bank teller terminal 50 according to this embodiment. As shown in FIG.

[0090] The browsing unit 510 is a function that runs a web application provided by the sales office server 60. The browsing unit 510 is realized by various browsers.

[0091] (Example of functional configuration of the sales office server 60) Fig. 8 is a block diagram showing an example of the functional configuration of the business office server 60 according to this embodiment. As shown in Fig. 8, the business office server 60 according to this embodiment includes a decryption key management unit 610, a code information acquisition unit 620, a decryption unit 630, a funds transfer unit 640, and a transaction content confirmation unit 650.

[0092] The decryption key management unit 610 manages the decryption key for decrypting the encrypted procedure-related information contained in the two-dimensional code C printed on the Web slip S.

[0093] The code information acquisition unit 620 acquires information contained in the two-dimensional code C read by the tablet 40. As described above, the information contained in the two-dimensional code C includes encrypted information related to the procedure.

[0094] The decryption unit 630 attempts to decrypt the information contained in the two-dimensional code C acquired by the code information acquisition unit 620 using the decryption key managed by the decryption key management unit 610.

[0095] If the decryption by the decryption unit 630 is successful, the funds transfer unit 640 determines that the procedure is legitimate and transfers the specified amount (transaction amount) from the user's account to a centralized account for deposits and withdrawals held by the financial institution.

[0096] The transaction confirmation unit 650 is a function that allows a transaction to be settled from the teller terminal 50 when cash withdrawal from the ATM 70 is completed. At this time, the teller can check the balance and confirm that there are no funds remaining in the concentration account, thereby preventing missed withdrawals.

[0097] (Example of ATM70 functional configuration) 9 is a block diagram showing an example of the functional configuration of the ATM 70 according to this embodiment. As shown in FIG.

[0098] The cash withdrawal unit 710 is a function that allows a bank employee to withdraw cash using a cash card and a personal identification number that only the bank employee knows, after funds have been transferred from the user account to the concentration account.

[0099] <<1.3. Processing Flow>> Next, a specific example of the flow of processing using the information processing system 1 according to this embodiment will be described.

[0100] First, the flow of generating a web form S using the information processing system 1 according to this embodiment will be described with reference to Figures 10 and 11. Figures 10 and 11 are diagrams showing an example of the flow of generating a web form S using the information processing system 1 according to this embodiment.

[0101] In the example shown in FIGS. 10 and 11, first, the user uses user terminal 10 to select the Web form creation menu on the Web application provided by Web form creation server 20 (S101).

[0102] The Web slip creation server 20 creates a transaction menu based on the selection made in step S101 (S102).

[0103] The user selects "Withdraw from Account" from the transaction menu generated in step 102 (S103).

[0104] Based on the selection made in step S103, Web slip generation server 20 generates an input form for inputting account information (branch number, subject, account number) and withdrawal amount (S104).

[0105] The user inputs account information and the amount to be withdrawn into the input form generated in step 104 (S105).

[0106] Web slip creation server 20 creates an input form for entering internet banking login information based on the input in step S103 (S106).

[0107] The user inputs login information (for example, ID / password) into the input form generated in step 106 (S107).

[0108] Web slip generation server 20 logs in to Internet banking using the login information entered in step S107 (S108).

[0109] If the login is successful, the internet banking server 30 displays a post-login screen (S109).

[0110] Web slip generation server 20 requests Internet banking server 30 to transition to the account information display screen (S110).

[0111] Based on the request in step S110, the internet banking server 30 transitions to the account information display screen (S111).

[0112] Web-based slip creation server 20 acquires account information from the screen displayed in step S111 (S112).

[0113] Unlike the flow shown in steps S107 to S113, the account information may be acquired by using an API provided by the internet banking server 30.

[0114] Next, Web slip generation server 20 checks whether the account information entered from user terminal 10 matches the account information acquired from internet banking server 30 (S113). Here, we will assume that the two match.

[0115] Next, the Web slip generation server 20 requests the user to log out of Internet banking (S114).

[0116] The internet banking server 30 executes the logout process based on the request in step S114 (S115).

[0117] By performing the processes in steps S114 and S115, the load on the Internet banking server 30 is reduced by logging out so that no session remains.

[0118] Next, the Web form creation server 20 encrypts the information to be embedded in the two-dimensional code C (S116).

[0119] Next, Web form creation server 20 creates a two-dimensional code C with the information encrypted in step S116 embedded therein, and creates a Web form S including the created two-dimensional code C (S117).

[0120] The user terminal 10 displays the Web slip S generated in step S117 (S118).

[0121] Next, the user terminal 10 prints the Web slip S (S119).

[0122] The flow of generating a Web slip S using the information processing system 1 according to this embodiment has been described above using a specific example.

[0123] Next, a specific example of the flow of processing at a branch using the information processing system 1 according to this embodiment will be described with reference to Figures 12 and 13. Figures 12 and 13 are diagrams showing an example of the flow of processing at a branch using the information processing system 1 according to this embodiment.

[0124] In the example shown in FIGS. 12 and 13, first, the user uses the tablet 40 to select "transaction using a web slip" on the web application provided by the sales office server 60 (S201).

[0125] The sales shop server 60 generates a two-dimensional code reading screen based on the selection made in step S201 (S202).

[0126] The tablet 40 displays the two-dimensional code reading screen generated in step S202, and the user follows the screen to have the tablet 40 read the two-dimensional code C included in the Web slip S (S203).

[0127] Next, the sales office server 60 attempts to decrypt the information read in step S203 using the decryption key it holds (S204). Here, it is assumed that the decryption is successful and information related to the procedure is obtained.

[0128] The decryption key does not necessarily have to be stored in the sales office server 60. The decryption key may be stored in the tablet 40. Furthermore, when SQRC is used as the two-dimensional code C, the decryption key may be stored in a reader provided in the tablet 40. In this case, the two-dimensional code C can be decrypted and read simultaneously.

[0129] Next, the sales office server 60 generates a confirmation screen for the transaction details (S205).

[0130] The tablet 40 displays the confirmation screen for the transaction details generated in step S205, and the user performs a confirmation operation on the screen, such as pressing the execute button (S206).

[0131] Based on the confirmation operation performed in step S206, the sales office server 60 transfers funds from the user's withdrawal account to the concentration account for deposits and withdrawals (S207).

[0132] Next, the sales office server 60 generates a screen indicating that cash can now be withdrawn from the concentration account (S208).

[0133] The teller terminal 50 displays a screen indicating that cash can now be withdrawn from the concentration account created in step S208 (S209).

[0134] The bank clerk checks the screen displayed in step S209, operates the ATM 70, withdraws cash from the concentration account, and hands it over to the user (S210).

[0135] Thereafter, the bank employee uses the bank employee terminal 50 to input information regarding the completion of cash withdrawal from the concentration account (S211).

[0136] Based on the input in step S211, the sales office server 60 registers that the withdrawal has been completed from the concentration account, that is, performs a clearing process for the transaction (S212).

[0137] The above describes, with specific examples, the flow of processing at a branch using the information processing system 1 according to this embodiment. According to the information processing system 1 according to this embodiment, the information related to the procedure to be embedded in the two-dimensional code C is encrypted upon successful user authentication via internet banking, and by confirming successful decryption of the information contained in the two-dimensional code C printed on the web slip S at the branch or the like, seal verification is no longer necessary during transactions, and transactions using a tablet can be completely self-contained.

[0138] 2. Second embodiment <<2.1. System configuration example>> Next, a second embodiment of the present invention will be described. In the first embodiment, a self-service transaction is performed by a user using a tablet. In contrast, in the second embodiment of the present invention, a bank clerk processes a web slip S using a bank branch terminal.

[0139] In the following, the differences between the first and second embodiments will be mainly described, and detailed descriptions of functions, effects, etc. common to the first and second embodiments will be omitted.

[0140] FIG. 14 is a block diagram showing an example of the functional configuration of an information processing system 2 according to the second embodiment of the present invention.

[0141] The information processing system 2 according to the second embodiment includes a user terminal 10, a web slip generation server 20, an internet banking server 30, and a branch server 60, similar to the information processing system 1 according to the first embodiment.

[0142] On the other hand, the information processing system 2 according to the second embodiment differs from the information processing system 1 according to the first embodiment in that it includes a branch office terminal 55 and a cashier 57 instead of the tablet 40, the teller terminal 50, and the ATM 70.

[0143] The bank office terminal 55 is a terminal through which a bank employee performs an example of processing related to the Web slip S, including reading the two-dimensional code C included in the Web slip S. The bank office terminal 55 is connected to the bank office server 60 via the in-bank network 84.

[0144] Fig. 15 is a block diagram showing an example of the functional configuration of the office terminal 55. As shown in Fig. 15, the office terminal 55 according to this embodiment includes a code reading unit 551, a confirmation result receiving unit 552, a transaction execution unit 553, and a deposit / withdrawal instruction unit 554.

[0145] The code reading unit 551 has a function of reading the two-dimensional code C included in the web slip S. The code reading unit 551 is equipped with a reader compatible with the two-dimensional code C. The information read by the code reading unit 551 is sent to the sales office server 60.

[0146] The confirmation result receiving unit 552 receives information indicating whether the information could be decrypted by the sales office server 60, and the decrypted information, that is, the information related to the procedure.

[0147] The transaction execution unit 553 executes the transaction based on the information received by the confirmation result reception unit 552. For example, in the case of a withdrawal transaction, the transaction execution unit 553 executes an accounting transaction that deducts an equivalent amount from the user's account.

[0148] The deposit / withdrawal instruction unit 554 instructs the cashier 57 to deposit or withdraw cash. For example, in the case of a withdrawal transaction, the deposit / withdrawal instruction unit 554 issues a withdrawal instruction to the cashier 57 after the transaction execution unit 553 has executed the accounting process. The bank office terminal 55 and the cashier 57 may be connected directly or via the in-bank network 84.

[0149] Next, we will describe the functional configuration of the branch office server 60 according to a second embodiment of the present invention. The branch office server 60 according to this embodiment provides a web application to be displayed on the branch office terminal 55, instead of providing a web application to be displayed on the tablet 40 and the bank clerk terminal 50.

[0150] 16 is a block diagram showing an example of the functional configuration of a sales office server 60 according to the second embodiment of the present invention. As shown in FIG. 16, the sales office server 60 according to the second embodiment includes a decryption key management unit 610, a code information acquisition unit 620, a decryption unit 630, and a web slip generation number confirmation unit 670.

[0151] The decryption key management unit 610 manages the decryption key for decrypting the encrypted procedure-related information contained in the two-dimensional code C printed on the Web slip S.

[0152] The code information acquisition unit 620 acquires information contained in the two-dimensional code C read by the office terminal 55. As described above, the information contained in the two-dimensional code C includes encrypted information related to procedures.

[0153] The decryption unit 630 attempts to decrypt the information contained in the two-dimensional code C acquired by the code information acquisition unit 620 using the decryption key managed by the decryption key management unit 610.

[0154] To prevent duplicate processing of the same slip, the Web slip generation number verification unit 670 verifies the Web slip generation number, which is a unique identifier that identifies the Web slip S. Specifically, the Web slip generation number verification unit 670 verifies whether the slip identified from the Web slip generation number contained in the procedure-related information decrypted by the decryption unit 630 has been processed in the past, and sends the verification result to the office terminal 55.

[0155] <<2.2. Processing Flow>> The flow of generating a Web form S according to the second embodiment is the same as the flow of generating a Web form S according to the first embodiment, so a description thereof will be omitted.

[0156] On the other hand, the flow of processing at the sales office according to the second embodiment is different from that of the first embodiment.

[0157] 17 and 18 are diagrams showing an example of the flow of processing in a sales office using the information processing system 2 according to the second embodiment of the present invention.

[0158] In the example shown in FIGS. 17 and 18, first, a bank clerk receives a Web slip S from a user (S301).

[0159] The bank clerk operates the bank branch terminal 55 to display the screen for reading the two-dimensional code C, and reads the two-dimensional code C included in the Web slip S received in step S301 (S302).

[0160] The sales office server 60 attempts to decrypt the information read in step S302 using the decryption key it holds (S303). Here, it is assumed that the decryption is successful and information related to the procedure is obtained.

[0161] Next, the sales office server 60 checks whether the slip identified by the Web slip generation number included in the procedure information acquired in step S303 has been processed in the past (S304). Here, we assume that it has been confirmed that a slip with the same Web slip generation number has not been processed in the past.

[0162] Next, the sales office server 60 displays on the sales office terminal 55 a message that the transaction is possible without seal verification (S305).

[0163] The office terminal 55 reflects the transaction details on the screen based on the information related to the procedure acquired in step S303 (S306).

[0164] Next, the office terminal 55 executes the accounting transaction with the transaction details reflected on the screen in step S306 (S307). Here, it is assumed that a withdrawal transaction is executed.

[0165] Next, the bank branch terminal 55 instructs the cashier 57 to dispense cash, and the bank employee hands over the cash dispensed from the cashier 57 to the user based on the instruction (S308).

[0166] The above describes, with specific examples, the flow of processing at a branch using the information processing system 2 according to this embodiment. According to the information processing system 2 according to this embodiment, the information to be embedded in the two-dimensional code C is encrypted when user authentication via Internet banking is successful, and the branch or the like confirms that the information contained in the two-dimensional code C printed on the web slip S has been decrypted, thereby eliminating the need for seal verification during transactions and simplifying administrative processing using the branch terminal 55.

[0167] <3. Hardware configuration> Next, an example of the hardware configuration of an information processing device 900 according to one embodiment of the present invention will be described. The information processing device 900 is a device having a hardware configuration equivalent to that of the user terminal 10, the web slip generation server 20, the internet banking server 30, the tablet 40, the bank clerk terminal 50, the branch office terminal 55, and the branch office server 60.

[0168] The hardware configuration of the information processing device 900 described below is merely an example. Therefore, with regard to the hardware configuration of the user terminal 10, the web slip generation server 20, the internet banking server 30, the tablet 40, the bank clerk terminal 50, the branch office terminal 55, and the branch office server 60, unnecessary components may be removed from the hardware configuration of the information processing device 900 described below, or new components may be added.

[0169] 19 is a diagram showing the hardware configuration of an information processing device 900 according to one embodiment of the present invention. The information processing device 900 includes a processor 901, a read-only memory (ROM) 902, a random access memory (RAM) 903, a host bus 904, a bridge 905, an external bus 906, an interface 907, an input device 908, an output device 909, a storage device 910, and a communication device 911.

[0170] The processor 901 functions as an arithmetic processing device and control device, and controls the overall operation of the information processing device 900 in accordance with various programs. The ROM 902 stores programs and calculation parameters used by the processor 901. The RAM 903 temporarily stores programs used in the execution of the processor 901 and parameters that change as appropriate during the execution. These are interconnected by a host bus 904 that is composed of a CPU bus or the like.

[0171] The host bus 904 is connected to an external bus 906, such as a PCI (Peripheral Component Interconnect / Interface) bus, via a bridge 905. It is not necessary to configure the host bus 904, bridge 905, and external bus 906 separately, and these functions may be implemented on a single bus.

[0172] The input device 908 is composed of input means such as a mouse, keyboard, touch panel, buttons, microphone, switches, and levers that allow the user to input information, and an input control circuit that generates an input signal based on the user's input and outputs it to the processor 901. By operating this input device 908, the user operating the information processing device 900 can input various data to the information processing device 900 and instruct the information processing device 900 to perform processing operations.

[0173] The output device 909 includes, for example, a display device such as a CRT (Cathode Ray Tube) display device, a liquid crystal display (LCD) device, an OLED (Organic Light Emitting Diode) device, or a lamp, and an audio output device such as a speaker.

[0174] The storage device 910 is a device for storing data. The storage device 910 may include a storage medium, a recording device for recording data on the storage medium, a reading device for reading data from the storage medium, and a deleting device for deleting data recorded on the storage medium. The storage device 910 is configured, for example, with an HDD (Hard Disk Drive). This storage device 910 drives a hard disk and stores programs executed by the processor 901 and various data.

[0175] The communication device 911 is, for example, a communication interface configured with a communication device for connecting to a network, etc. The communication device 911 may be compatible with either wireless communication or wired communication.

[0176] <4. Conclusion> As described above, the WEB slip generation server 20 according to one embodiment of the present invention comprises an encryption unit 250 that encrypts information relating to a procedure when user authentication is successful based on authentication information relating to the procedure received from the user terminal 10, a code generation unit 260 that generates an information code from the information encrypted by the encryption unit 250, and a WEB slip generation unit 210 that generates form data relating to the procedure, including the information code generated by the code generation unit 260.

[0177] According to the above configuration, it is possible to effectively reduce the burden required for the procedure while ensuring sufficient security.

[0178] Although the preferred embodiments of the present invention have been described in detail above with reference to the accompanying drawings, the present invention is not limited to these examples. It is clear that a person skilled in the art to which the present invention pertains can conceive of various modifications and alterations within the scope of the technical ideas set forth in the claims, and it is understood that these also naturally fall within the technical scope of the present invention.

[0179] For example, in the above embodiment, a transaction at a financial institution is given as an example of a procedure, but the present invention can also be applied to ensuring security and reducing the load in government procedures, etc. [Explanation of symbols]

[0180] 10 User terminal 20 Web slip generation server 30 Internet banking server 40 tablets 50 bank teller terminals 55 Sales office terminal 60 Sales Office Server 210 Web slip generation unit 220 Authentication Collaboration Department 250 Encryption section 260 Code Generation Unit 610 Decryption key management unit 620 Code Information Acquisition Unit 630 Decoding Unit 640 Funds Transfer Department

Claims

1. an encryption unit that encrypts information related to a procedure when user authentication is successful based on authentication information related to the procedure received from the user terminal; an information code generation unit that generates an information code from the information encrypted by the encryption unit; a form generation unit that generates form data related to the procedure, including the information code generated by the information code generation unit; Equipped with Information processing device.

2. The procedure includes a withdrawal transaction. The information processing device according to claim 1 .

3. The information relating to the procedure includes at least one of account information or amount, The information processing device according to claim 2 .

4. The information relating to the procedure includes an identifier of the form data. The information processing device according to claim 2 .

5. The user authentication is performed via internet banking. The information processing device according to claim 2 .

6. The information code includes a two-dimensional code. The information processing device according to claim 1 .

7. The processor: When user authentication is established based on authentication information related to a procedure received from a user terminal, encrypting information related to the procedure; generating an information code from the encrypted information; generating form data relating to the procedure, including the information code; Including, Information processing methods.

8. Computer, an encryption unit that encrypts information related to a procedure when user authentication is successful based on authentication information related to the procedure received from the user terminal; an information code generation unit that generates an information code from the information encrypted by the encryption unit; a form generation unit that generates form data related to the procedure, including the information code generated by the information code generation unit; an information processing device comprising: A program that functions as a

9. an encryption unit that encrypts information related to a procedure when user authentication is successful based on authentication information related to the procedure received from the user terminal; an information code generation unit that generates an information code from the information encrypted by the encryption unit; a form generation unit that generates form data related to the procedure, including the information code generated by the information code generation unit; a decryption unit that decrypts the information encrypted by the encryption unit from the information code and acquires the information related to the procedure; Equipped with Information processing system.

Images