Self-checkout device and program

Abstract

The problem that this invention aims to solve is to provide a self-checkout device and program that sets the level of fraud notification to appropriately notify fraudulent activity according to the type of customer operating the device. [Solution] The self-checkout device of the embodiment is a self-checkout device operated by the customer, and includes an acquisition means for acquiring mode information indicating a security level according to the type of customer, and a setting means for setting the level of fraud notification associated with the customer's operation of the self-checkout device based on the acquired mode information.

Description

Technical Field

[0001] Embodiments of the present invention relate to a self-checkout device and a program.

Background Art

[0002] In recent years, in stores that sell products such as supermarkets, convenience stores, discount stores, specialty stores, etc., there are self-checkout devices such as self-POS (Point of Sales) terminals where customers themselves perform operations related to product sales. Such self-checkout devices allow customers to perform product registration operations for registering products and accounting operations for settlement. Therefore, self-checkout devices are equipped with a certain level of security functions to prevent and detect fraud by customers.

[0003] On the other hand, there are also customers who cannot smoothly operate such self-checkout devices. For example, beginners or the elderly fall into this category. When such customers try to operate a self-checkout device, they may perform unintended operations such as making mistakes in the operation procedure, taking more time than necessary, or performing operations different from the usual operations, and the self-checkout device may detect such operations as unauthorized operations.

[0004] When a self-checkout device detects an unauthorized operation, it notifies the unauthorized operation, for example, by lighting and flashing a warning lamp or transmitting a signal indicating the unauthorized detection to the attendant's PC. The store clerk, who is the attendant, has to go to the self-checkout device each time an unauthorized operation is notified, check whether an unauthorized operation has been performed, and take necessary measures. However, unintended operations by inexperienced customers such as beginners or the elderly may be detected as unauthorized operations, and even in such cases, the attendant has to go to the self-checkout device. Such operations of the self-checkout device and the actions of the attendant may cause distrust among customers. It has also been a factor increasing the burden on the attendant. [Overview of the project] [Problems that the invention aims to solve]

[0005] The problem that this invention aims to solve is to provide a self-checkout device and program that sets the level of fraud notification to appropriately notify fraudulent activity according to the type of customer operating the device. [Means for solving the problem]

[0006] The self-checkout device of the embodiment is a self-checkout device operated by the customer, and includes an acquisition means for acquiring mode information indicating a security level corresponding to the type of customer, and a setting means for setting the level of fraud notification associated with the customer's operation of the self-checkout device based on the acquired mode information. [Brief explanation of the drawing]

[0007] [Figure 1] Figure 1 is an explanatory diagram showing the layout and connections of each device in a store according to the first embodiment. [Figure 2] Figure 2 is a perspective view illustrating the appearance of a self-service POS terminal. [Figure 3] Figure 3 is a block diagram showing the hardware configuration of a self-service POS terminal. [Figure 4] Figure 4 is a memory map showing the memory configuration of the unauthorized master. [Figure 5] Figure 5 is a block diagram showing the hardware configuration of the attendant PC. [Figure 6] Figure 6 is a block diagram showing the server hardware configuration. [Figure 7] Figure 7 is a sequence diagram showing the main processes in the server, self-service POS terminal, and attendant PC, as well as the flow of information between each device in chronological order. [Figure 8] Figure 8 is a functional block diagram showing the functional configuration of a self-service POS terminal. [Figure 9]Figure 9 is a flowchart showing the control process flow of a self-service POS terminal. [Figure 10] Figure 10 is a flowchart showing the flow of control processing related to mode queries to the server for self-service POS terminals. [Figure 11] Figure 11 is a flowchart showing the flow of control processing related to mode inquiries to the attendant PC of a self-service POS terminal. [Figure 12] Figure 12 shows the flow of server control processing. [Figure 13] Figure 13 is a flowchart showing the control process flow of the attendant PC. [Figure 14] Figure 14 is a sequence diagram showing the main processes in the server, self-service POS terminal, and attendant PC, as well as the flow of information between each device, in chronological order, according to the second embodiment. [Figure 15] Figure 15 is a functional block diagram showing the functional configuration of a self-service POS terminal. [Figure 16] Figure 16 is a flowchart showing the control process flow of a self-service POS terminal. [Modes for carrying out the invention]

[0008] The first and second embodiments will be described below with reference to the figures. In the first and second embodiments, a self-POS terminal will be described as an example of a self-checkout device. However, the invention is not limited to these embodiments.

[0009] (First Embodiment) First, the first embodiment will be described. Figure 1 is an explanatory diagram showing the layout and connections of each device in store T according to the first embodiment. As shown in Figure 1, store T has a product display area Ta, a checkout area Tb, and a back room Tc. The product display area Ta is equipped with display shelves and display cases for displaying the products sold in store T. Customers receive a shopping basket or cart at the entrance of store T, browse the store, take out the products they wish to purchase, and place them in the shopping basket or cart.

[0010] One or more self-service POS terminals 10 are installed in the checkout area Tb. The self-service POS terminal 10 is a device equipped with a product registration function for registering products purchased by customers at store T, and an accounting function for processing payments. Product registration refers to the process of reading product identification information (e.g., product code) that identifies the product from a code symbol such as a barcode or two-dimensional code attached to the product, storing it in the product information unit 431 (see Figure 3), and displaying the product information (product name, product price, etc.) of the product. Accounting refers to the process of calculating the total amount of the registered products, processing the payment for that total amount using the media selected by the customer (cash or non-cash media such as a credit card), and issuing a receipt (including an electronic receipt that is not printed on paper) that prints product information and payment information related to the paid products. In the case of cash accounting, if there is change to be paid for the cash (payment) inserted, the process includes dispensing the change amount.

[0011] The self-service POS terminal 10 allows customers to perform product registration operations and accounting operations. Customers perform product registration operations by holding the code symbol attached to each item they wish to purchase over the first reader unit 18 or the second reader unit 19 (see Figures 2 and 3). They also perform accounting operations, such as pressing the accounting key 212 (see Figure 3) or performing other operations to complete the transaction.

[0012] As customers operate the self-service POS terminal 10, the self-service POS terminal 10 is equipped with security functions to monitor fraudulent activity by customers. These security functions include monitoring actions such as placing items into a shopping bag without scanning the code symbols attached to the items, or scanning multiple items at once. It also monitors actions where the time taken between scanning the code symbols of one item is longer than a threshold (actions with extremely long time intervals between actions), and actions where the time taken to proceed to the checkout process is longer than a threshold. In addition, it monitors actions performed in a way that is hidden from the camera 26 (see Figures 2 and 3) that captures images of the customer's operations, and actions that differ from the actions intended by the store T. The self-service POS terminal 10 also has a function to detect these actions as fraudulent activity and notify the attendant.

[0013] Furthermore, the self-service POS terminal 10 stores different security levels against fraudulent operation depending on the type of customer (for example, regular customers, beginners, and elderly customers, depending on whether they are familiar with or unfamiliar with operating the self-service POS terminal 10). For example, in the operation of reading a code symbol attached to a product, there are cases where the code symbol cannot be read depending on how the operation is performed. Reasons why a code symbol cannot be read include, for example, the code symbol not facing the reader, or the code symbol being too close or too far from the reader (reading depth issues). Such operational failures tend to be more common among beginners and elderly people.

[0014] The self-service POS terminal 10 determines an operation that cannot read a code symbol as an illegal operation. However, the self-service POS terminal 10 stores different security levels for illegal operations in association with mode information according to the type of customer. Then, the self-service POS terminal 10 gives an illegal notification according to the security level. For example, in the case of a regular customer, when the self-service POS terminal 10 detects an illegal operation once, it notifies that the operation of the customer is an illegal operation. Also, in the case of a beginner, when the self-service POS terminal 10 detects an illegal operation three times, it notifies that the operation of the customer is an illegal operation. Further, in the case of an elderly person, when the self-service POS terminal 10 detects an illegal operation five times, it notifies that the operation of the customer is an illegal operation. Thus, the self-service POS terminal 10 gives an illegal notification according to the security level corresponding to the type of customer. In other words, when the type of customer is a beginner or an elderly person, the self-service POS terminal 10 does not give an illegal notification every time an illegal operation is detected, but gives an illegal notification when an illegal operation is detected a predetermined number of times (that is, when the notification level is reached) (thinning out the number of illegal notifications compared to regular customers).

[0015] Also, the self-service POS terminal 10 accepts a declaration that the customer is a beginner. The self-service POS terminal 10 has a declaration key 211 (see FIG. 3), and by operating the declaration key 211 by the customer, the self-service POS terminal 10 accepts a declaration that the customer is a beginner.

[0016] Also, the self-service POS terminal 10 has a camera 26 (see FIGS. 2 and 3). When the declaration key 211 is operated, the camera 26 images the customer operating the self-service POS terminal 10 (particularly images the customer's face). Note that the camera 26 may image the customer at all times. The self-service POS terminal 10 transmits an inquiry of the mode information including the declaration information of the beginner accepted by the operation of the declaration key 211 and the image of the customer imaged by the camera 26 to the attendant PC 50.

[0017] The attendant PC 50 is a computer (e.g., a PC (Personal Computer) or tablet) that monitors customer operations at each self-service POS terminal 10. When the attendant PC 50 receives a request for mode information from the self-service POS terminal 10, it simultaneously displays the image of the customer that was received. The attendant operating the attendant PC 50 checks the displayed image of the customer and determines whether the customer is elderly. If it is determined that the customer is elderly, the attendant PC 50 transmits mode information indicating that the customer is elderly to the self-service POS terminal 10 that made the request, at the attendant's discretion. If it is determined that the customer is not elderly, the attendant PC 50 transmits mode information indicating that the customer is a beginner to the self-service POS terminal 10 that made the request, at the attendant's discretion.

[0018] The self-service POS terminal 10 notifies the customer of any fraudulent activity based on the mode information received from the attendant PC 50, indicating the security level.

[0019] Furthermore, when a customer code (an example of customer identification information) that distinguishes and identifies a customer from other customers is entered into the self-service POS terminal 10, the terminal queries the server 70 for mode information indicating the security level of that customer, along with the entered customer code.

[0020] Server 70 cumulatively stores sales information of products sold at store T and manages sales. Server 70 also has a customer master 722 (see Figure 6) that stores mode information previously used by customers, categorized by customer code. When Server 70 receives a mode information inquiry from the self-service POS terminal 10, it simultaneously searches the customer master 722 based on the received customer code, retrieves the stored mode information for that customer, and transmits it to the self-service POS terminal 10 that made the inquiry.

[0021] The self-service POS terminal 10 notifies the customer of the infringement of the security level indicated by the mode information received from the server 70.

[0022] Next, the self-service POS terminal 10 will be described. Figure 2 is a perspective view illustrating the appearance of the self-service POS terminal 10. As shown in Figure 2, the self-service POS terminal 10 comprises a registration device 25 and a payment device 30. The registration device 25 and the payment device 30 are installed adjacent to each other. For example, the registration device 25 is positioned adjacent to the right side of the payment device 30, and the payment device 30 is positioned adjacent to the left side of the registration device 25. The registration device 25 and the payment device 30 are connected by a communication line that allows them to communicate with each other. The registration device 25 is the device on which customers perform product registration operations, and in response to the customer's product registration operations, the registration device 25 executes product registration processing. The payment device 30 is the device on which customers perform payment operations. In response to the customer's payment operations, the payment device 30 executes payment processing.

[0023] The registration device 25 comprises a housing 11. The housing 11 is hollow and has a roughly box-like shape, with a flat top surface. The registration device 25 is equipped with a basket stand 12 on one side of the housing 11 (in this embodiment, the right side, opposite to the arrangement of the accounting device 30). The basket stand 12 is a flat platform on which a basket containing the purchased goods (goods to be registered) is placed.

[0024] The registration device 25 also includes a scale 13 (weighing unit) on the front upper surface of the housing 11. The scale 13 has a thin, flat upper surface 131 and serves as a platform for products that have been registered. The scale 13 weighs the products placed on the upper surface 131 (for example, as one of the security measures to prevent fraud). The scale 13 also has a pair of support columns 14 attached to the upper surface 131, which stand upright from the upper surface 131. A temporary storage platform 15 is attached to the top of the support columns 14. The temporary storage platform 15 is a platform for temporarily removing easily damaged or fragile products (for example, tofu or eggs) that have been registered. Products placed on the temporary storage platform 15 are weighed by the scale 13.

[0025] Furthermore, the support column 14 has a pair of branches 16 that protrude forward from near the temporary storage platform 15. The branches 16 are devices for attaching shopping bags (e.g., plastic shopping bags or reusable bags) into which the registered products are placed. Since the shopping bags attached to the support column 14 have an opening, it is easy to place the registered products into them.

[0026] The registration device 25 also includes a pair of support columns 17 erected upward from the rear upper surface of the housing 11. One of the support columns 17 (the right support column 17 in this embodiment) has an arm 22 extending to the right and forward from partway up, and a first reading unit 18 is provided at the tip of the arm 22. The first reading unit 18 is, for example, a camera that captures images of symbols attached to products. The first reading unit 18 may also be, for example, a scanner that optically reads symbols attached to products. In this embodiment, the first reading unit 18 will be described as a camera from now on. The first reading unit 18 has a reading window facing the customer and captures images of code symbols attached to products brought close to the reading window by the customer. A pole 23 extending upward is attached to the arm 22. A second reading unit 19 is attached to the pole 23 above the first reading unit 18. The second reading unit 19 is a camera or scanner with the same functions as the first reading unit 18 (described as a camera in this embodiment). The second reading unit 19 has a reading window that faces diagonally downward towards the front and is mounted above the first reading unit 18. The second reading unit 19 images the symbol attached to the product brought close to the reading window of the first reading unit 18 by the customer, from above the first reading unit 18, diagonally downward. The first reading unit 18 and the second reading unit 19 read the code symbol printed on the membership card held by the customer who has become a member, and obtain a customer code that distinguishes the member customer from other customers.

[0027] The other support column 17 is equipped with a display unit 20 at its top. The display unit 20 is positioned with its display surface facing the customer and displays product information for the registered products (product code, product name, product price, etc.), the total amount of the products to be purchased, the settlement amount if payment is made using non-cash media, the amount received if payment is made in cash, the amount of change given, etc.

[0028] The display surface of the display unit 20 is equipped with an operation unit 21, which is a touch panel. The operation unit 21 includes various keys for customers to operate the registration device 25. A warning light 24 is also attached to the upper end of the pole 23. The warning light 24 is a lamp that notifies an attendant (store clerk, etc.) when a customer makes a mistake in operating the registration device 25 or the accounting device 30, when the device enters an error state, or when the self-service POS terminal 10 detects fraudulent operation by a customer.

[0029] Additionally, a camera 26 is mounted on the upper end of the pole 23 (just below the warning light 24). The camera 26 is positioned slightly downward from above and captures images of customers (especially their faces) operating the self-service POS terminal 10.

[0030] In such a registration device 25, the customer places the basket containing the items to be purchased on the basket stand 12. Next, the customer hooks the handles of the shopping bag onto the pair of branches 16 and sets it (opens the shopping bag). Then the customer performs the product registration operation. That is, the customer takes one item out of the basket and passes the symbol of the item near the first reading unit 18 and the second reading unit 19 toward the first reading unit 18 and the second reading unit 19, and places it in the set shopping bag. The scale 13 weighs the item in the shopping bag. The customer performs the product registration operation for all the items in the basket. The registration device 25, having captured the symbol through the product registration operation, performs the product registration process for that item.

[0031] Once the product registration process for all items is complete, the customer operates the accounting key 212 (see Figure 3). The registration device 25 then transmits the product information of the registered items to the accounting device 30.

[0032] The accounting device 30 comprises a housing 31. The housing 31 is a hollow, substantially rectangular parallelepiped shape and has a front surface 311 and a top surface 312. The front surface 311 is a substantially upright plane facing the customer side where the accounting device 30 is operated. In this embodiment, the front surface 311 is erected substantially vertically toward the customer. The top surface 312 is a plane located above the front surface 311, at an angle of approximately 90° to the front surface 311, and facing upward.

[0033] The accounting device 30 houses a coin change machine and a banknote change machine (neither of which are shown) inside. The accounting device 30 also has a coin slot 321 and a banknote slot 331 on the front side of the top surface 312. In this embodiment, the banknote slot 331 is located on the left side of the front (customer side) of the top surface 312, and the coin slot 321 is located on the right side of the front of the top surface 312. The accounting device 30 also has a scrutinizing tray 324 adjacent to the coin slot 321 (in this embodiment, adjacent to the back side of the coin slot 321) for temporarily placing coins that have been taken out of a wallet before being inserted into the coin slot 321. When a customer pays for goods in cash, they insert banknotes as payment into the banknote slot 331. Alternatively, the customer places coins as payment on the scrutinizing tray 324 and slides the coins to be inserted into the coin slot 321. Coins inserted through the coin slot 321 are stored in the coin change machine sorted by denomination. Banknotes inserted through the banknote slot 331 are stored in the banknote change machine sorted by denomination.

[0034] The accounting device 30 also has a banknote dispensing slot 332 and a coin dispensing slot 322 at the top of the front panel 311. The banknote dispensing slot 332 is located at the top of the front panel 311, directly below and adjacent to the banknote insertion slot 331. The coin dispensing slot 322 is located adjacent to the banknote dispensing slot 332, directly below it. In other words, the accounting device 30 has the banknote dispensing slot 332 positioned on the upper side of the top of the front panel 311, and the coin dispensing slot 322 positioned immediately below the front panel 311.

[0035] Furthermore, the banknote dispensing opening 332 and the coin dispensing opening 322 are located on one side of the front panel 311 in the left-right direction (in this embodiment, the left side, the side away from the registration device 25). When dispensing change to a customer, the banknote change machine dispenses the change amount equivalent to the banknotes from the banknotes stored in the banknote change machine to the banknote dispensing opening 332. The coin change machine dispenses the change amount equivalent to the coins stored in the coin change machine to the coin dispensing opening 322.

[0036] Furthermore, the top surface 312 of the accounting device 30 is equipped with a printer 35 for printing and issuing receipts, and a card reader / writer 80 for handling credit cards and the like when making cashless payments. When making cashless payments, the accounting operation is performed by inserting a card into the card slot 801. The printer 35 prints a receipt from the receipt issuing slot 351, which contains product information and payment information related to the processed transaction.

[0037] The hardware configuration of the self-service POS terminal 10 will now be described. Figure 3 is a block diagram showing the hardware configuration of the self-service POS terminal 10. As shown in Figure 3, the self-service POS terminal 10 is equipped with a CPU (Central Processing Unit) 41, which is an example of a processor, ROM (Read Only Memory) 42, RAM (Random Access Memory) 43, etc. The CPU 41 is the main control unit of the self-service POS terminal 10. The ROM 42 stores the OS (Operating System) and various programs. Note that the ROM 42 may be replaced with an HDD (Hard Disk Drive) or SSD (Solid State Drive). The RAM 43 is memory for storing programs and various data. The CPU 41, ROM 42, and RAM 43 are connected to each other via a bus 44. The CPU 41, ROM 42, and RAM 43 constitute the control unit 400. That is, the control unit 400 executes the control processing of the self-service POS terminal 10, which will be described later, by operating according to the control program stored in the ROM 42 and loaded into the RAM 43 by the CPU 41.

[0038] The ROM 42 has a control program unit 421 and a fraud master 423. The control program unit 421 stores the control program for operating the self-service POS terminal 10. The fraud master 423 stores various customer operations (actions) that are detected as fraudulent operations, categorized by mode information (i.e., by customer type), corresponding to the security level indicated by the mode information. The fraud master 423 will be described later in Figure 4.

[0039] RAM 43 includes a product information unit 431, a mode information unit 432, a counter 433, and a level setting unit 434. The product information unit 431 stores product information (product code that identifies the product, product name, product price, etc.) of products that have been processed for product registration. The mode information unit 432 stores mode information received from the attendant PC 50 or server 70. The counter 433 stores the number of times fraudulent operations have been performed, categorized by type of fraudulent operation. The level setting unit 434 stores fraudulent information, including fraudulent operations, stored in the fraud master 423, that is associated with the received mode information.

[0040] Furthermore, the control unit 400 is connected to the display unit 20, operation unit 21, first reading unit 18, second reading unit 19, scale 13, accounting device 30, camera 26, printer 35, card reader / writer 80, and warning light 24 via the bus 44 and controller 45. The display unit 20 is, for example, a liquid crystal display, which displays information to the customer operating the self-service POS terminal 10. The operation unit 21 is, for example, a touch panel mounted on the display unit 20, which is a key at a position corresponding to the key image displayed on the display unit 20. The operation unit 21 has a declaration key 211 and an accounting key 212. The declaration key 211 is a key used by customers to declare that they are beginners, and is operated by the customer operating the self-service POS terminal 10. The customer operates the declaration key 211 if they feel they are not yet familiar with operating the self-service POS terminal 10 (if the customer themselves feels they are a beginner with operating the self-service POS terminal 10). The accounting key 212 is operated by the customer when they have registered all the items they are purchasing. When the accounting key 212 is operated, the self-service POS terminal 10 performs accounting processing for the registered product.

[0041] Furthermore, the control unit 400 is connected via bus 44 to a communication unit 46, which has a communication interface function. The communication unit 46 is connected via network L to the attendant PC 50 and server 70, enabling the sending and receiving of information. The control unit 400 is also connected via bus 44 to a timer 47. The timer 47 measures the current time and time.

[0042] Next, the fraudulent master 423 will be described. Figure 4 is a memory map showing the memory configuration of the fraudulent master 423. As shown in Figure 4, the fraudulent master 423 has a mode unit 4231 and a data unit 4232. The mode unit 4231 stores mode information indicating the type of customer. In the example in Figure 4, the mode unit 4231 stores normal mode information, which is mode information indicating a normal customer; beginner mode information, which is mode information indicating a novice customer; and elderly mode information, which is mode information indicating an elderly customer (e.g., 65 years of age or older).

[0043] The data unit 4232 stores fraud information (including the type of fraudulent operation and the number of times it took to reach the notification level) related to one or more operations (actions) of a customer that are detected as fraudulent operations, corresponding to the type of customer indicated by each mode information, in association with the mode information stored in the mode unit 4231. The fraudulent information stored in the data unit 4232 will be described below, divided into normal mode, which indicates the security level of a normal customer; beginner mode, which indicates the security level of a novice; and elderly mode, which indicates the security level of an elderly person.

[0044] First, we will explain the fraudulent operations of regular customers (excluding beginners and elderly customers) related to the fraudulent information stored in the data unit 4232, which corresponds to normal mode. Fraudulent operations involving regular customers can be categorized into the following five types, as an example. (1) The act of placing a product into a shopping bag without reading the code symbol attached to the product with the first reader unit 18 or the second reader unit 19. (2) An operation to read a code symbol was performed, but it could not be read by the first reading unit 18 or the second reading unit 19. (3) An operation that reads the code symbols of two or more products at once. (4) An operation in which a reasonable amount of time (e.g., 1 minute) elapses between reading one code symbol and reading the next code symbol. (5) An operation in which no operation is performed for a reasonable amount of time (e.g., 1 minute) or longer after operating accounting key 212. And so on. The data unit 4232 stores fraudulent information related to fraudulent operations, including (1) to (5). Note that the above five types of fraudulent operations are just examples, and the data unit 4232 stores fraudulent information including fraudulent operations by other customers.

[0045] Furthermore, when the data unit 4232 detects the above-mentioned fraudulent operations, it stores the number of times each fraudulent operation can be performed before an alert is issued (the level at which the fraud is reported), associating it with each type of fraudulent operation. For example, in the case of the above-mentioned fraudulent operations in normal mode (related to a normal customer), it stores the number of times each fraudulent operation can be performed, such as once for (1), twice for (2), once for (3), once for (4), and once for (5). When this number is reached (i.e., the alert level for fraud is reached), the control unit 400 alerts the customer for fraud. In other words, the control unit 400 alerts for fraud when each of the fraudulent operations (1), (3), (4), and (5) is performed once. Also, for fraudulent operation (2), the control unit 400 does not alert for fraud after one occurrence, but alerts for fraud after two occurrences. The information on fraudulent operations and their counts stored in the data unit 4232 corresponding to the normal mode is collectively referred to as normal data. In other words, corresponding to the normal mode, the data unit 4232 stores fraudulent information as normal data.

[0046] Next, we will explain the fraudulent operations stored in the data unit 4232 corresponding to beginner mode. Fraudulent operations related to beginner customers are the same fraudulent operations as in normal mode, including (1) to (5) above. That is, the data unit 4232 corresponding to beginner mode stores the same fraudulent information as the fraudulent information stored in normal mode, including (1) to (5). However, the number of times a fraudulent operation is stored in the data unit 4232 corresponding to beginner mode (i.e., the level of fraud notification related to beginners) is different from the number of times a fraudulent operation is stored in the data unit 4232 corresponding to normal mode. That is, there are fraudulent operations for which the number of times a fraudulent operation is stored in the data unit 4232 corresponding to beginner mode is higher than the number of times a fraudulent operation is stored in the data unit 4232 corresponding to normal mode. For example, the number of times a fraudulent operation is stored is 1 time for (1), 3 times for (2), 2 times for (3), 2 times for (4), and 2 times for (5). In other words, the control unit 400 will notify the system of fraud if (1) is performed once. The control unit 400 will also notify the system of fraud if (2) is performed three times. The control unit 400 will also notify the system of fraud if (3) is performed twice. The control unit 400 will also notify the system of fraud if (4) is performed twice. The control unit 400 will also notify the system of fraud if (5) is performed twice. In other words, beginners are less familiar with operating the self-service POS terminal 10 than regular customers, and may be confused by the operation, making them more likely to perform operations that constitute fraud unintentionally compared to regular customers. Therefore, by storing the number of fraudulent operations performed by beginners as a higher number than that of regular customers, the level of fraud notification is mitigated. In other words, the security level for beginners is lowered compared to that of regular customers. The information on fraudulent operations and the number of operations stored in the data unit 4232 in response to beginner mode are collectively referred to as beginner data. In other words, in response to the beginner mode, the data unit 4232 stores incorrect information as beginner data.

[0047] Next, we will explain the fraudulent operations stored in the data unit 4232 corresponding to the elderly mode. Fraudulent operations related to elderly customers are the same as those in the normal mode and beginner mode, including (1) to (5) above. That is, the data unit 4232 corresponding to the elderly mode stores the same fraudulent information as the fraudulent information stored for the normal mode and beginner mode, including (1) to (5). However, the number of times a fraudulent operation is stored in the data unit 4232 corresponding to the elderly mode is different from the number of times a fraudulent operation is stored in the data unit 4232 corresponding to the beginner mode. In other words, the number of times a fraudulent operation is stored in the data unit 4232 corresponding to the elderly mode (i.e., the level of fraud notification related to the elderly) is higher for some fraudulent operations than for the number of times a fraudulent operation is stored in the data unit 4232 corresponding to the normal mode and beginner mode. For example, the control unit stores the number of times each fraudulent operation is performed, such as once for (1), five times for (2), four times for (3), three times for (4), and three times for (5). That is, if fraudulent operation (1) is performed once, the control unit 400 will report fraud. Also, if fraudulent operation (2) is performed five times, the control unit 400 will report fraud. Also, if fraudulent operation (3) is performed four times, the control unit 400 will report fraud. Also, if fraudulent operation (4) is performed three times, the control unit 400 will report fraud. Also, if fraudulent operation (5) is performed three times, the control unit 400 will report fraud. In other words, elderly people are less familiar with operating the self-service POS terminal 10 than regular customers and beginners, and may become confused by the operation, and are more likely to perform operations that correspond to fraudulent operations unconsciously compared to beginners. Therefore, by recording the number of fraudulent operations performed by elderly users as a higher number than those performed by beginners, the level of fraud notification is mitigated. In other words, the security level for elderly users is lowered compared to that of beginners. The information on fraudulent operations and the number of operations stored in the data unit 4232 in response to the elderly mode are collectively referred to as elderly data. That is, in response to the elderly mode, the data unit 4232 stores fraudulent information as elderly data.

[0048] In the example in Figure 4, the types of fraudulent operations performed by regular customers, beginners, and elderly individuals were assumed to be the same. However, the types of fraudulent operations may be different for each group.

[0049] Thus, the fraud master 423 stores mode information corresponding to each type of customer—regular customers, beginners, and elderly—and sets different thresholds for each type of fraudulent operation to reach a notification level (i.e., different security levels depending on the customer type). As a result, even if beginners or elderly users perform an unintended operation that is detected as fraudulent, they will not receive the same level of fraud notification as regular customers.

[0050] The hardware configuration of the attendant PC 50 will now be described. Figure 5 is a block diagram showing the hardware configuration of the attendant PC 50. As shown in Figure 5, the attendant PC 50 is equipped with a CPU 51, ROM 52, RAM 53, etc., which are examples of processors. The CPU 51 is the main control unit of the attendant PC 50. The ROM 52 stores the OS and various programs. Note that the ROM 52 may be replaced with an HDD or SSD. The RAM 53 is memory that stores programs and various data. The CPU 51, ROM 52, and RAM 53 are connected to each other via a bus 54. The CPU 51, ROM 52, and RAM 53 constitute the control unit 500. That is, the control unit 500 executes the control processing of the attendant PC 50, which will be described later, by operating according to the control program stored in the ROM 52 and loaded into the RAM 53 by the CPU 51.

[0051] The ROM 52 has a control program unit 521. The control program unit 521 stores a control program for driving the attendant PC 50.

[0052] The RAM 53 has an image storage unit 531. The image storage unit 531 stores images of customers captured by the camera 26, which are received from the self-service POS terminal 10.

[0053] Furthermore, the control unit 500 is connected to the display unit 56 and the operation unit 57 via the bus 54 and the controller 55. The display unit 56 is, for example, a liquid crystal display and displays information to the operator operating the attendant PC 50. The operation unit 57 is, for example, a keyboard or touch panel and is operated by the operator of the attendant PC 50. The operation unit 57 has an OK key 571 and an elderly key 572. The OK key 571 is operated when the attendant checks the customer's image stored in the image storage unit 531 when the customer requests to be a beginner and determines that the customer is a beginner. The elderly key 572 is operated when the attendant checks the customer's image stored in the image storage unit 531 when the customer requests to be a beginner and determines that the customer is elderly rather than a beginner.

[0054] Furthermore, the control unit 500 is connected via bus 54 to a communication unit 58, which has a communication interface function. The communication unit 58 is connected via network L to the self-POS terminal 10 and the server 70, enabling the transmission and reception of information.

[0055] Next, the hardware configuration of server 70 will be described. Figure 6 is a block diagram showing the hardware configuration of server 70. As shown in Figure 6, server 70 is equipped with a CPU 71, ROM 72, RAM 73, etc., which are examples of processors. The CPU 71 is the control unit of server 70. ROM 72 stores the OS and various programs. Note that ROM 72 may be replaced with an HDD or SSD. RAM 73 is memory for storing programs and various data. The CPU 71, ROM 72, and RAM 73 are connected to each other via a bus 74. The CPU 71, ROM 72, and RAM 73 constitute the control unit 700. That is, the control unit 700 executes the control processing of server 70, which will be described later, by operating according to the control program stored in ROM 72 and loaded into RAM 73 by the CPU 71.

[0056] ROM 72 has a control program unit 721 and a customer master 722. The control program unit 721 stores a control program for driving the server 70. The customer master 722 stores various information about registered customers, categorized by customer code that distinguishes each customer from others. The customer master 722 also stores, for each customer, security level mode information (e.g., normal mode, beginner mode, or senior mode) that the customer has used in the past, corresponding to the customer code.

[0057] RAM73 has a sales management unit 731. The sales management unit 731 cumulatively stores sales information of products sold at store T and manages the sales of store T.

[0058] Furthermore, the control unit 700 is connected to the display unit 76 and the operation unit 77 via the bus 74 and the controller 75. The display unit 76 is, for example, a liquid crystal display, which displays information to the operator operating the server 70. The operation unit 77 is, for example, a keyboard or touch panel, which is operated by the operator of the server 70.

[0059] Furthermore, the control unit 700 is connected via bus 74 to a communication unit 78, which has a communication interface function. The communication unit 78 is connected via network L to the self-service POS terminal 10 and the attendant PC 50, enabling the transmission and reception of information.

[0060] From here, we will explain the main processes of the self-service POS terminal 10, the attendant PC 50, and the server 70, as well as the transmission and reception of data between each device. Figure 7 is a sequence diagram showing the main processes in the server 70, the self-service POS terminal 10, and the attendant PC 50, and the flow of information between each device in chronological order.

[0061] First, let's explain the main processing flow for the self-service POS terminal 10 to obtain mode information from the server 70. The self-service POS terminal 10 obtains a customer code from the code symbols read by the first reading unit 18 and the second reading unit 19 (T1). The self-service POS terminal 10 then sends the obtained customer code to the server 70 (queries mode information) (T2). The server 70, having received the customer code from the self-service POS terminal 10, searches the customer master 722 based on the customer code and extracts the mode information (normal mode, beginner mode, or elderly mode) that the customer has used in the past, which is stored as customer information for that customer code (T3). The server 70 then sends the extracted mode information to the self-service POS terminal 10 that made the query (T4). The self-service POS terminal 10, having received the mode information, searches the fraud master 423 based on the mode information and extracts fraud information related to the fraudulent operation corresponding to the received mode information from the data unit 4232 and stores it in the level setting unit 434 (T5). In other words, in T5, the security level of the customer is set.

[0062] Next, the main processing flow for the self-service POS terminal 10 to acquire mode information from the attendant PC 50 will be explained. The self-service POS terminal 10 accepts a beginner mode application when the declaration key 211 is operated (T11). The self-service POS terminal 10 then uses the camera 26 to capture an image of the customer operating the self-service POS terminal 10 (T12). The self-service POS terminal 10 then inquires with the attendant PC 50 about the customer's mode information, attaching the captured image of the customer (T13). The attendant PC 50, having received an inquiry from the self-service POS terminal 10, stores the received customer image in the image storage unit 531 and displays the image on the display unit 56. The attendant visually examines the displayed customer image and determines, for example, the customer's age, whether the customer is a beginner or an elderly person. If the attendant determines that the customer is a beginner, they operate the OK key 571 (determining that the customer is a beginner). If the attendant determines that the customer is an elderly person, they operate the elderly person key 572 (determining that the customer is an elderly person). The attendant PC 50 determines the customer's mode based on the attendant's operation (T14). The attendant PC 50 then transmits mode information corresponding to the determined mode to the self-service POS terminal 10 (T15). Upon receiving the mode information, the self-service POS terminal 10 searches the fraud master 423 based on the mode information and extracts fraud information related to the fraudulent operation corresponding to the received mode information (type of fraudulent operation and the number of times until the notification level is reached) from the data unit 4232 and stores it in the level setting unit 434 (T16). In other words, in T15, the customer's security level is set.

[0063] Next, we will explain the fraud notification performed by the self-service POS terminal 10 according to the set security level. A customer performs an operation on the self-service POS terminal 10 (T21). Based on the fraud information related to various fraudulent operations set in T5 or T16, the self-service POS terminal 10 detects that the operation is fraudulent (T22). The self-service POS terminal 10 then determines whether the number of fraudulent operations has reached the stored notification level (T23). If the notification level has not been reached, it returns to T21 (T24). If it determines that the notification level has been reached, the self-service POS terminal 10 notifies the fraud (T25).

[0064] Next, we will explain the functional configuration of the self-service POS terminal 10. Figure 8 is a functional block diagram showing the functional configuration of the self-service POS terminal 10. The control unit 400 of the self-service POS terminal 10 functions as an acquisition means 401, a setting means 402, a fraud detection means 403, a notification means 404, and a reporting means 405, according to the control program stored in the control program unit 421 of the ROM 42.

[0065] The acquisition means 401 acquires mode information indicating the security level according to the type of customer. Specifically, the acquisition means 401 acquires mode information indicating the security level according to the type of customer from the server 70 or the attendant PC 50. More specifically, when a customer code is entered, the acquisition means 401 acquires mode information indicating the security level of the customer from the server 70, which stores the customer's mode information. Also, when the declaration key 211 is operated, the acquisition means 401 transmits an image of the customer and the beginner mode to the attendant PC 50, which monitors the customer's operation, and acquires mode information indicating the security level according to the type of customer from the attendant PC 50. If a customer code is not entered and the declaration key 211 is not operated, the acquisition means 401 will be initialized with mode information related to the normal mode in S11, which will be described later (mode information is acquired).

[0066] The setting means 402 sets the level of fraud notification associated with customer operation of the self-service POS terminal 10 based on the acquired mode information. Specifically, the setting means 402 stores the type and number of fraudulent operations stored in the fraud master 423 (more precisely, the data unit 4232) corresponding to the acquired mode information in the level setting unit 434 as the fraud notification level for each fraudulent operation. More specifically, the setting means 402 sets normal data corresponding to the initially set normal mode. The setting means 402 also sets fraudulent information (either normal data, beginner data, or elderly data) corresponding to the mode information received from the server 70. The setting means 402 also sets information (either beginner data or elderly data) corresponding to the mode information received from the attendant PC 50.

[0067] The fraud detection means 403 detects fraudulent operations. Specifically, the fraud detection means 403 detects fraudulent operations by customers operating the self-service POS terminal 10 based on fraud information stored in the level setting unit 434.

[0068] The notification means 404 notifies the customer of fraudulent activity when the number of fraudulent operations by the customer reaches a set notification level. The notification means 404 notifies the customer of fraudulent activity, for example, by turning on or flashing the warning light 24. The notification means 404 notifies the customer of fraudulent activity, for example, by transmitting information to the attendant PC 50 indicating that fraudulent activity has occurred. The notification means 404 notifies the customer of fraudulent activity, for example, by turning on or flashing the warning light 24 and transmitting information to the attendant PC 50 indicating that fraudulent activity has occurred.

[0069] Declaration means 405 declares beginner mode. Specifically, declaration means 405 declares beginner mode when the customer operates the self-service POS terminal 10. More specifically, declaration means 405 declares beginner mode when the customer operates the declaration key 211.

[0070] Next, we will explain the control of the self-service POS terminal 10. Figures 9 to 11 are flowcharts showing the flow of control processing for the self-service POS terminal 10. As shown in Figure 9, the control unit 400 of the self-service POS terminal 10 stores normal mode information as an initial setting (S11). Then the control unit 400 refers to the fraud master 423 and stores normal data corresponding to the normal mode information (S12).

[0071] Next, the control unit 400 determines whether it has obtained a customer code from the code symbols read by the first reading unit 18 and the second reading unit 19 (S13). If it determines that it has obtained a customer code (Yes in S13), the control unit 400 executes the first setting process (S14).

[0072] Here, the first setting process in S14 will be explained. Figure 10 is a flowchart showing the flow of control processing related to the first setting process. The control unit 400 queries the server 70 for mode information previously used by the customer based on the acquired customer code (S41). The control unit 400 then determines whether it has received mode information as a response to the query in S41 (S42). It waits until it receives the information (No in S42), and if it determines that it has received the mode information (Yes in S42), the acquisition means 401 stores the received mode information (mode information relating to either normal mode, beginner mode, or elderly mode) in the mode information unit 432 (S43). The setting means 402 then reads the invalid information (either normal data, beginner data, or elderly data) corresponding to the stored mode information from the data unit 4232 and stores it in the level setting unit 434 (S44). The control unit 400 then returns to S13.

[0073] Returning to the explanation of Figure 9, if it is determined that the customer code has not been obtained (No in S13), the control unit 400 determines whether the declaration key 211 has been operated (S15). If it is determined that the declaration key 211 has been operated (Yes in S15), the control unit 400 executes the second setting process (S16).

[0074] Here, the second setting process in S16 will be explained. Figure 11 is a flowchart showing the flow of the control process related to the second setting process. The control unit 400 drives the camera 26 to capture an image of the customer (face) operating the self-service POS terminal 10 (S51). The declaration means 405 then transmits information indicating that the declaration key 211 has been operated and the captured image of the customer to the attendant PC 50 (inquiring about the customer's mode) (S52). The control unit 400 then determines whether it has received mode information as a response to the inquiry in S52 (S53). It waits until it receives the information (No in S53), and if it determines that it has received the mode information (Yes in S53), the acquisition means 401 stores the received mode information (mode information relating to either beginner mode or elderly mode) in the mode information unit 432 (S54). The setting means 402 then reads the fraud information (either beginner data or elderly data) corresponding to the stored mode information from the data unit 4232 and stores it in the level setting unit 434 (S55). Then the control unit 400 returns to S13.

[0075] Returning to the explanation of Figure 9, if it is determined that the operation was not performed on the declaration key 211 (No. in S15), the control unit 400 determines whether the accounting key 212 was operated (S17). If it is determined that the operation was not performed on the accounting key 212 (No. in S17), the control unit 400 monitors the customer's operation of the self-service POS terminal 10 (S18). That is, the control unit 400 monitors whether the customer's operation of the self-service POS terminal 10 corresponds to an unauthorized operation related to the unauthorized information stored in the level setting unit 434, for example, the unauthorized information described in (1) to (5) above (S18). The fraud detection means 403 then determines whether an unauthorized operation has been detected (S21). If it is determined that no unauthorized operation has been detected (No. in S21), the control unit 400 executes the processing of the self-service POS terminal 10 related to the operation (for example, product registration processing) (S29).

[0076] Furthermore, if it determines that an unauthorized operation has been detected (Yes in S21), the control unit 400 (counting means) increments the count stored in the counter 433 related to the unauthorized operation by 1 (S22). Next, the control unit 400 (level determination means) compares the count stored in the counter 433 with the count stored in the level setting unit 434 to determine if there has been an unauthorized operation where the count stored in the counter 433 has reached the count stored in the level setting unit 434 (S23). If it determines that there has been no unauthorized operation where the count stored in the level setting unit 434 has reached the count stored in S23 (No in S23), the control unit 400 returns to S18.

[0077] Furthermore, if the counter 433 determines that the number of times stored in the counter 433 has reached the number stored in the level setting unit 434, indicating that there has been an unauthorized operation (Yes in S23), the notification means 404 notifies that there has been an unauthorized operation by the customer (S25). Upon confirming the notification of customer fraud, the attendant goes to the self-service POS terminal 10 to verify the unauthorized operation. Once the attendant has cleared the unauthorized operation, the control unit 400 returns to S13.

[0078] Furthermore, if it is determined in S17 that the accounting key 212 has been operated (Yes in S17), the control unit 400 executes accounting processing based on the product information stored in the product information unit 431 (S30). Then the control unit 400 terminates the processing and returns to S11.

[0079] If both the determination in S13 and the determination in S15 are No, the control unit 400 performs the processing in S18 and makes the determination in S21 based on the normal data set in S12. In other words, the control unit 400 determines the level of detection and reporting of unauthorized operations at the security level for normal customers.

[0080] In this first embodiment, the self-service POS terminal 10 acquires mode information corresponding to the customer and sets the appropriate security level for fraud notification. Specifically, if the customer is a regular customer, in the process of S12 or the first setting process of S14, regular data related to the regular mode is stored in the level setting unit 434, and the security level for fraud notification (number of fraudulent operations) is set based on the regular data. If the customer is a beginner, in the first setting process of S14 or the second setting process of S16, beginner data related to the beginner mode is stored in the level setting unit 434, and the security level for fraud notification (number of fraudulent operations) is set based on the beginner data. If the customer is an elderly person, in the first setting process of S14 or the second setting process of S16, elderly data related to the elderly mode is stored in the level setting unit 434, and the security level for fraud notification (number of fraudulent operations) is set based on the elderly data. The self-service POS terminal 10 then notifies the customer of fraud when the number of detected fraudulent operations reaches the fraud notification level.

[0081] In other words, the self-service POS terminal 10 of the first embodiment does not notify the customer of fraudulent activity each time fraudulent activity occurs, but rather sets a limit on the number of times fraudulent activity will be notified for each type of customer, and only notifies the customer of fraudulent activity after the fraudulent activity has been performed up to that limit, thus limiting the number of fraudulent activity notifications.

[0082] With the self-service POS terminal 10 of this first embodiment, it is possible to set a security level for fraud notification according to the type of customer, and based on that fraud notification level, fraud notification can be made according to the type of customer.

[0083] Next, we will explain the control of server 70. Figure 12 is a flowchart showing the flow of control processing for server 70. As shown in Figure 12, the control unit 700 of server 70 determines whether it has received an inquiry for customer mode information from the self-service POS terminal 10 (S61). If it determines that it has received an inquiry for mode information (Yes in S61), the control unit 700 searches the customer master 722 based on the received customer code and extracts the mode information (either normal mode, beginner mode, or senior mode) that the customer has used in the past (S62). The control unit 700 then sends the extracted mode information to the self-service POS terminal 10 that made the inquiry (S63). The control unit 700 then returns to S61.

[0084] Furthermore, if it is determined that the received notification is not a request for mode information (No. in S61), the control unit 700 determines whether it has received sales information from the self-service POS terminal 10 (S64). If it is not a receipt of sales information (No. in S64), the control unit 700 returns to S61. If it is determined that sales information has been received (Yes in S64), the control unit 700 cumulatively stores the received sales information in the sales management unit 731 (S65). Then the control unit 700 returns to S61.

[0085] The control of the attendant PC 50 will now be explained. Figure 13 is a flowchart showing the flow of control processing for the attendant PC 50. As shown in Figure 13, the control unit 500 of the attendant PC 50 determines whether it has received an inquiry for customer mode information from the self-service POS terminal 10 in conjunction with the operation of the declaration key 211 (S71). If it determines that it has not received an inquiry for mode information (No in S71), the control unit 500 returns to S71. If it determines that it has received an inquiry for mode information (Yes in S71), the control unit 500 stores the customer image received at the same time in the image storage unit 531 and displays the image on the display unit 56 (S72). In S72, the control unit 500 also displays information indicating that the customer has declared beginner mode. The attendant checks the displayed customer image and determines whether the customer is elderly. If it is determined that the customer is elderly, the attendant operates the elderly key 572 to indicate that it is in elderly mode. If it is determined that the customer is not elderly, the attendant operates the OK key 571 to acknowledge that the customer is a beginner.

[0086] The control unit 500 sets a mode according to the key that was pressed (S73). Specifically, the control unit 500 sets the elderly mode when the elderly key 572 is pressed, and sets the advanced beginner mode when the OK key 571 is pressed. The control unit 500 then sends the mode information of the set mode to the self-service POS terminal 10 that made the inquiry (S74). The control unit 500 then returns to S71.

[0087] (Second Embodiment) The second embodiment will now be described. In the first embodiment, the self-service POS terminal 10 counts the number of times it detects fraudulent operations, and when the counted number of fraudulent operations reaches the notification level for such fraudulent operations, it notifies the customer of the fraud. In the second embodiment, instead of immediately detecting an operation by a customer as a fraudulent operation, it first detects it as an abnormal operation, and when the number of abnormal operations detected reaches a predetermined number, it determines that the abnormal operation is a fraudulent operation, and if it is determined to be a fraudulent operation, it notifies the customer of the fraud. The second embodiment will be described below, but components similar to those in the first embodiment will be denoted by the same reference numerals as in the first embodiment, and their explanations will be omitted or simplified. Also, drawings that are not described below (for example, Figure 1 and Figure 2) are common to the second embodiment as well.

[0088] In the second embodiment, the description of the fraud master 423 shown in Figure 4 is reinterpreted as follows: The data unit 4232 stores abnormal information (type of abnormal operation and the number of times it was determined to be a fraudulent operation) related to one or more operations (actions) of a customer that are detected as abnormal operations, corresponding to the type of customer indicated by each mode information, in association with the mode information stored in the mode unit 4231. In the second embodiment, the fraudulent operations (1) to (5) in the first embodiment are reinterpreted as abnormal operations. In the second embodiment, the abnormal information and count information stored in the data unit 4232 corresponding to the normal mode are collectively referred to as normal data, the abnormal information and count information stored in the data unit 4232 corresponding to the beginner mode are collectively referred to as beginner data, and the abnormal information and count information stored in the data unit 4232 corresponding to the elderly mode are collectively referred to as elderly data.

[0089] Next, the main processes in the server 70, self-POS terminal 10, and attendant PC 50 in the second embodiment, and the flow of information between each device will be described. Figure 14 is a sequence diagram showing the main processes in the server 70, self-POS terminal 10, and attendant PC 50, and the flow of information between each device in chronological order according to the second embodiment. In Figure 14, T1 to T5 and T11 to T16 are the same as in Figure 7, so their explanation is omitted. Note that in Figure 14, T5 in Figure 7 is interpreted as follows: The self-POS terminal 10, having received mode information, searches the fraud master 423 based on the mode information, extracts abnormal information related to the abnormal operation corresponding to the received mode information from the data unit 4232, and stores it in the level setting unit 434 (T5). Furthermore, in Figure 14, T16 in Figure 7 is reinterpreted as follows: The self-POS terminal 10, upon receiving mode information, searches the fraud master 423 based on the mode information, extracts abnormal information related to the abnormal operation corresponding to the received mode information (type of abnormal operation and the number of times until it is determined to be an fraudulent operation) from the data unit 4232, and stores it in the level setting unit 434 (T16).

[0090] Next, we will explain the fraud notification performed by the self-service POS terminal 10 according to the set security level. A customer performs an operation on the self-service POS terminal 10 (T31). Based on the abnormal information related to various abnormal operations set in T5 or T16, the self-service POS terminal 10 detects an abnormal operation if it is an abnormal operation (T32). The self-service POS terminal 10 then determines whether the number of abnormal operations has reached the fraud level stored in the data unit 4232 (T33). If the fraud level has not been reached, it returns to T31 (T34). If it determines that the fraud level has been reached, the self-service POS terminal 10 determines that the customer's abnormal operation is a fraudulent operation (T35). The self-service POS terminal 10 then notifies that a fraudulent operation has occurred (T36).

[0091] From here, the functional configuration of the self-POS terminal 10 according to the second embodiment will be described. Figure 15 is a functional block diagram showing the functional configuration of the self-POS terminal 10. The control unit 400 of the self-POS terminal 10 functions as an acquisition means 401, a setting means 402, an anomaly detection means 407, a fraud determination means 408, a notification means 404, and a reporting means 405, according to the control program stored in the control program unit 421 of the ROM 42.

[0092] Since acquisition means 401 is equivalent to acquisition means 401 in Figure 8, its explanation is omitted.

[0093] The setting means 402 sets the level of abnormality notification associated with customer operation of the self-service POS terminal 10 based on the security level corresponding to the acquired mode information. Specifically, the setting means 402 stores the abnormality information (type of abnormal operation and the number of times it is judged to be an abnormal operation) stored in the fraud master 423 (more precisely, the data unit 4232) corresponding to the acquired mode information in the level setting unit 434 as an abnormal operation level for each abnormal operation. More specifically, the setting means 402 sets normal data (abnormality information) corresponding to the initially set normal mode. The setting means 402 also sets abnormality information (either normal data, beginner data, or elderly data) corresponding to the mode information received from the server 70. The setting means 402 also sets information (either beginner data or elderly data) corresponding to the mode information received from the attendant PC 50.

[0094] The anomaly detection means 407 detects abnormal operations. Specifically, the anomaly detection means 407 detects abnormal operations performed by customers operating the self-service POS terminal 10. Abnormal operations refer to operations performed by customers on the self-service POS terminal 10 that differ from normal operations and are suspected of being fraudulent but have not yet been determined to be fraudulent.

[0095] The fraud detection means 408 determines that fraudulent operation has occurred when the number of detected abnormal operations reaches the number that determines fraudulent operation. Specifically, the fraud detection means 408 determines that fraudulent operation has occurred when the number of abnormal operations detected by the abnormality detection means 407 reaches the fraudulent operation level set by the setting means 402.

[0096] The notification means 404 notifies the customer of the fraudulent operation when the fraud detection means 408 determines that the operation is fraudulent. The notification means 404 notifies the fraudulent operation, for example, by turning on or flashing the warning light 24. The notification means 404 notifies the fraudulent operation, for example, by transmitting information to the attendant PC 50 indicating that fraud has occurred. The notification means 404 notifies the fraudulent operation, for example, by turning on or flashing the warning light 24 and transmitting information to the attendant PC 50 indicating that fraud has occurred.

[0097] Since declaration means 405 is equivalent to declaration means 405 in Figure 8, its explanation is omitted.

[0098] From here, the control of the self-service POS terminal 10 in the second embodiment will be described. Figure 16 is a flowchart showing the control process flow of the self-service POS terminal 10 according to the second embodiment. In Figure 16, the explanations for S11 to S17 and S30 are omitted as they are the same as in Figure 9. Note that in Figure 10, which explains S14 in Figure 16, S44 and the setting means 402 read abnormal information (either normal data, beginner data, or elderly data) corresponding to the stored mode information from the data unit 4232 and store it in the level setting unit 434 (S44). Also, in Figure 11, which explains S16 in Figure 16, S55 and the setting means 402 read abnormal information (either beginner data or elderly data) corresponding to the stored mode information from the data unit 4232 and store it in the level setting unit 434 (S55).

[0099] In Figure 16, if it is determined that the operation is not that of the accounting key 212 (No. in S17), the control unit 400 monitors the customer's operation of the self-service POS terminal 10 (S18). That is, the control unit 400 monitors whether the customer's operation of the self-service POS terminal 10 corresponds to any of the abnormal operations stored in the level setting unit 434, such as (1) to (5) above (S18). The abnormality detection means 407 then determines whether an abnormal operation has been detected (S81). If it is determined that no abnormal operation has been detected (No. in S81), the control unit 400 executes the processing of the self-service POS terminal 10 related to that operation (for example, product registration processing) (S29).

[0100] Furthermore, if the control unit 400 determines that an abnormal operation has been detected (Yes in S81), it increments the count stored in the counter 433 related to the abnormal operation by 1 (S82). Next, the control unit 400 compares the count stored in the counter 433 with the count stored in the level setting unit 434 to determine if there is an abnormal operation where the count stored in the counter 433 has reached the count stored in the level setting unit 434 (S83). If the control unit 400 determines that there is no abnormal operation where the count stored in the level setting unit 434 has reached the count stored in S83 (No in S83), it returns to S18.

[0101] Furthermore, if the counter 433 determines that the number of times stored in the counter 433 has reached the number stored in the level setting unit 434, the fraud detection means 408 determines that the abnormal operation is a fraudulent operation (S84). The notification means 404 notifies that a fraudulent operation has occurred by a customer, as determined by the fraud detection means 408 (S85). Upon receiving notification of the fraudulent operation, the attendant goes to the self-service POS terminal 10 to verify the fraudulent operation. Once the attendant has cleared the fraud, the control unit 400 returns to S13.

[0102] In this second embodiment, the self-service POS terminal 10 acquires mode information corresponding to the customer and sets the security level for fraudulent operations appropriate to that customer. Specifically, if the customer is a regular customer, in the process of S12 or the first setting process of S14, regular data related to the regular mode is stored in the level setting unit 434, and the security level for fraudulent operations (number of abnormal operations) is set based on the regular data. If the customer is a beginner, in the first setting process of S14 or the second setting process of S16, beginner data related to the beginner mode is stored in the level setting unit 434, and the security level for fraudulent operations (number of abnormal operations) is set based on the beginner data. If the customer is an elderly person, in the first setting process of S14 or the second setting process of S16, elderly data related to the elderly mode is stored in the level setting unit 434, and the security level for fraudulent operations (number of abnormal operations) is set based on the elderly data. The self-service POS terminal 10 then determines that the customer's operation is fraudulent when the number of detected abnormal operations reaches the fraudulent operation level and notifies the customer of the fraudulent operation.

[0103] In other words, the self-service POS terminal 10 of the second embodiment does not determine an abnormal operation to be fraudulent each time an abnormal operation is performed by a customer, but rather only determines an abnormal operation to be fraudulent when the number of such abnormal operations reaches a level set according to the type of customer. In the second embodiment, the notification means 404 notifies the fraud each time the fraud determination means 408 determines an abnormal operation. Therefore, in the second embodiment, the setting of the number of levels of fraudulent operation by the setting means 402 in S44 and S55 (the number of abnormal operations that the fraud determination means 408 determines to be fraudulent) is substantially equivalent to the setting of the fraud notification level, and is also equivalent to the notification level at which the notification means 404 notifies the fraud.

[0104] With the self-service POS terminal 10 of this second embodiment, it is possible to set a security level for fraudulent activity (i.e., fraud notification level) according to the type of customer, and to make a judgment about fraudulent activity according to the type of customer based on the fraudulent activity level.

[0105] As described above, the self-POS terminal 10 according to the first and second embodiments is a self-POS terminal 10 that performs product registration and accounting processing based on the customer's own operation, and comprises an acquisition means 401 that acquires mode information indicating a security level according to the type of customer (whether the customer is a regular customer, a beginner, or an elderly person), and a setting means 402 that sets the level of fraud notification associated with the customer's operation of the self-checkout device based on the security level corresponding to the acquired mode information.

[0106] According to these first and second embodiments, it is possible to set the level of fraud notification to appropriately provide fraud notification depending on the type of customer operating the system.

[0107] Furthermore, the self-service POS terminal 10 according to the first and second embodiments includes a notification means 404 that notifies the customer of fraudulent activity when a set notification level is reached.

[0108] According to these first and second embodiments, appropriate false alarms can be issued according to the set alarm level.

[0109] Although the first and second embodiments of the present invention have been described above, these embodiments and other embodiments are presented as examples and are not intended to limit the scope of the invention. These embodiments and other embodiments can be implemented in various other forms, and various omissions, substitutions, modifications, and combinations can be made without departing from the spirit of the invention. These embodiments and other embodiments and their variations are included in the scope and spirit of the invention, as well as in the claims of the invention and its equivalents.

[0110] For example, in the first and second embodiments, a query for mode information is made to the server 70 when a customer code is entered, and to the attendant PC 50 when the declaration key 211 is operated. However, the system is not limited to this, and the query for mode information may be made to only one of the two, the server 70 or the attendant PC 50.

[0111] Furthermore, in the first and second embodiments, the camera 26 is configured to capture images of the customer operating the self-service POS terminal 10 when the declaration key 211 is operated. However, the system is not limited to this configuration; the camera 26 may continuously capture images of customers operating the self-service POS terminal 10, and the image captured at the moment the declaration key 211 is operated may be extracted and transmitted to the attendant PC 50.

[0112] The programs executed by the self-service POS terminal 10 in the first and second embodiments are provided as installable or executable files recorded on a computer-readable recording medium such as a CD-ROM, flexible disk (FD), CD-R, or DVD (Digital Versatile Disk).

[0113] Furthermore, the programs executed by the self-service POS terminals 10 of the first and second embodiments may be stored on a computer connected to a network such as the Internet and provided by downloading them via the network. Alternatively, the programs executed by the self-service POS terminals 10 of the first and second embodiments may be provided or distributed via a network such as the Internet.

[0114] Furthermore, the programs executed by the self-service POS terminal 10 in the first and second embodiments may be pre-installed and provided in ROM or the like. [Explanation of Symbols]

[0115] 10 Self-service POS terminals 18. First Reading Section 19 Second Reading Section 20 Display section 21 Control section 24 Police Lights 26 Cameras 50 Attendant PC 56 Display section 57 Operation section 58 Communications Department 70 servers 76 Display section 77 Control section 211 Declaration Key 400 Control Unit 401 Acquisition method 402 Setting means 403 Fraud detection methods 404 Notification methods 405 Declaration Methods 407 Anomaly detection means 408 Fraudulent determination means 423 Unauthorized Master 432 Mode Information Section 433 counter 434 Level setting section 500 Control Unit 531 Image storage unit 571 OK key 572 Senior Citizen Key 700 Control Unit 722 Customer Master 4231 Mode section 4232 Data Section [Prior art documents] [Patent Documents]

[0116] [Patent Document 1] Japanese Patent Publication No. 2009-157563

Claims

1. A self-checkout device operated by the customer themselves, A means for acquiring mode information indicating a security level corresponding to the type of customer, A setting means for setting the level of fraud notification associated with the customer's operation of the self-checkout device based on acquired mode information, A self-checkout device equipped with this device.

2. The system further includes a notification means that notifies the customer of fraudulent activity when a set notification level is reached. The self-checkout device according to claim 1.

3. Furthermore, a means for detecting fraudulent operations is provided. The setting means sets the number of times the fraudulent operation is detected before the notification means notifies the fraud, based on the security level, as the level of fraud notification. The self-checkout device according to claim 2.

4. An anomaly detection means for detecting abnormal operation is further provided. The setting means sets the number of times the abnormal operation can be detected until it reaches a level that can be determined to be an unauthorized operation, based on the security level. The system further includes a means for determining when an unauthorized operation has occurred if the number of abnormal operations reaches the number of detections, The notification means, when the fraud detection means determines that fraudulent activity has occurred, notifies the customer of the fraudulent activity, indicating that the notification level has been reached. The self-checkout device according to claim 2.

5. The acquisition means receives the mode information corresponding to the input customer identification information from a server that stores the mode information of the customer according to customer identification information that distinguishes and identifies the customer from other customers. A self-checkout device according to any one of claims 1 to 4.

6. The acquisition means receives the mode information corresponding to the customer from an attendant PC that monitors the customer's operation using the self-checkout device. A self-checkout device according to any one of claims 1 to 4.

7. Furthermore, it includes a means for declaring that you are in beginner mode, The acquisition means receives the mode information corresponding to the customer from the attendant PC based on the declared beginner mode. The self-checkout device according to claim 6.

8. The device further includes an imaging unit for imaging a customer operating the self-checkout device, The acquisition means receives the mode information corresponding to the customer from the attendant PC based on the declared beginner mode and the image captured by the imaging unit. The self-checkout device according to claim 7.

9. A computer used as a self-checkout device operated by the customer themselves, A means for acquiring mode information indicating a security level corresponding to the type of customer, A setting means for setting the level of fraud notification associated with the customer's operation of the self-checkout device based on acquired mode information, A program that can be made to function.

Images