Management device, program, and management method

Abstract

The management device includes a value issuing unit that issues a number of value identifiers corresponding to part or all of the deposit amount in a financial institution's account; a value storage unit that stores value identifiers and a usability flag indicating whether or not a value identifier is usable for settlement, in association with the account; and a communication unit that transmits value identifiers to a settlement terminal that has been authenticated as being linked to the account. When the communication unit transmits value identifiers, the management device further includes an account management unit that restricts the movement of deposits from the account.

Description

[Technical Field]

[0001] The present invention relates to a management device, a program, and a management method. [Background Art]

[0002] Patent Document 1 describes a system that enables a user to purchase products at a store using an issued card or the like even when the function of communication infrastructure is lost due to a disaster or the like. Patent Document 2 describes a payment server that receives transaction information including information indicating that the payment transaction is an offline payment transaction from a user terminal or a store terminal, and the sales amount of the store from the payment transaction, and executes transaction processing corresponding to the payment transaction when the sales amount satisfies a predetermined condition. [Prior Art Documents] [Patent Documents] [Patent Document 1] Japanese Unexamined Patent Application Publication No. 2024-68740 [Patent Document 2] Japanese Patent No. 7223899 [Summary of the Invention]

[0003] In a first aspect of the present invention, a management device is provided. The management device includes a value issuing unit that issues a number of value identifiers corresponding to part or all of the deposit amount in an account of a financial institution. The management device includes a value storage unit that stores, in association with the account, the value identifier and an availability flag indicating whether the value identifier is usable for payment. The management device includes a communication unit that transmits the value identifier to a payment terminal authenticated as being associated with the account.

[0004] The management device may include an account management unit that restricts the transfer of deposits from the account when the communication unit transmits the value identifier.

[0005] In any one of the above management devices, the value issuing unit may issue a value identifier including information for identifying the account or a contractor of the account.

[0006] In any of the above-described management devices, the management device may include a certification information generation unit that generates certification information proving that the value identifier was legitimately issued by the financial institution. The communication unit may transmit the certification information to the payment terminal.

[0007] In any of the above-described management devices, the management device may include a value update unit that updates the value identifier and availability flag stored in the value storage unit. The communication unit may receive the value identifier and availability flag associated with the account from the settlement terminal. The value update unit may update the value identifier and availability flag stored in the value storage unit with the value identifier and availability flag received by the communication unit.

[0008] In any of the above-described management devices, the management device may include a payment terminal control unit that controls the payment terminal so as not to be able to perform a payment using the value identifier when the value update unit updates the value identifier and the availability flag.

[0009] In any of the above-described management devices, the management device may include an error detection unit that detects errors by referring to the value identifier and availability flag associated with each of the multiple accounts stored in the value storage unit. The management device may also include an output control unit that outputs an error notification to the administrator from an output unit when the error detection unit detects an error.

[0010] In a second aspect of the present invention, a program is provided. The program causes a computer to function as one of the above-described management devices.

[0011] A third embodiment of the present invention provides a management method. The management method comprises the step of issuing a number of value identifiers corresponding to a portion or all of the deposit amount in a financial institution's account. The management method comprises the step of storing the value identifiers and an availability flag indicating whether or not the value identifiers are usable for settlement, in association with the account. The management method comprises the step of transmitting the value identifiers to a settlement terminal that has been authenticated as being linked to the account.

[0012] It should be noted that the above summary of the invention does not enumerate all of its features. Furthermore, subcombinations of these features may also constitute an invention. [Brief explanation of the drawing]

[0013] [Figure 1] An example of the configuration of payment system 100 is shown. [Figure 2] An example of the structure of value information is shown below. [Figure 3] An example of the configuration of the control device 102 is shown. [Figure 4] An example of the configuration of a consumer payment terminal 104 is shown. [Figure 5] This shows an example of value information synchronization processing. [Figure 6] An example of payment processing using value information is shown. [Figure 7] An example of payment processing using value information is shown. [Figure 8] This shows an example of value information synchronization processing. [Figure 9] An example of computer 1200 is shown. [Modes for carrying out the invention]

[0014] The present invention will be described below through embodiments of the invention, but these embodiments are not intended to limit the invention as defined in the claims. Furthermore, not all combinations of features described in the embodiments are necessarily essential to the solution of the invention.

[0015] Figure 1 shows an example of the configuration of a payment system 100 according to one embodiment. The payment system 100 includes a management device 102, a consumer payment terminal 104, a first store payment terminal 106, and a second store payment terminal 108. The consumer payment terminal 104, the first store payment terminal 106, and the second store payment terminal 108 are examples of payment terminals.

[0016] The management device 102, the consumer payment terminal 104, the first store payment terminal 106, and the second store payment terminal 108 communicate with each other via a communication network 110 such as the Internet. Furthermore, the consumer payment terminal 104, the first store payment terminal 106, and the second store payment terminal 108 communicate with each other using short-range wireless communication technology. This short-range wireless communication technology may conform to communication standards such as Bluetooth®, Wi-Fi®, or infrared communication.

[0017] The management device 102, consumer payment terminal 104, first store payment terminal 106, and second store payment terminal 108 execute or manage so-called cashless payments. The consumer payment terminal 104, first store payment terminal 106, and second store payment terminal 108 have cashless payment functions. The consumer payment terminal 104, first store payment terminal 106, and second store payment terminal 108 are computers such as smartphones, tablet computers, and wearable computers. The functions of the consumer payment terminal 104, first store payment terminal 106, and second store payment terminal 108 may be realized by installing a program such as a smartphone application on a computer such as a smartphone.

[0018] The management device 102 manages accounts of a financial institution. Account types include regular accounts and disaster relief accounts. The management device 102 executes deposit processing to an account, withdrawal processing from an account, transfer processing from one account to another account, or remittance processing to an account. The consumer payment terminal 104 is a terminal used by a consumer who purchases a product, and executes payment by communicating with a first store payment terminal 106 and a second store payment terminal 108. The first store payment terminal 106 and the second store payment terminal 108 are terminals used by a seller who sells products, and execute payment by communicating with the consumer payment terminal 104.

[0019] The management device 102 issues value information in an amount corresponding to part or all of the deposit amount of a disaster relief account in accordance with a request from a contractor of the disaster relief account. The management device 102 stores the value information in association with the disaster relief account. When the management device 102 is connected via a communication network 110 to the consumer payment terminal 104 used by the contractor of the disaster relief account, the management device 102 transmits the value information stored in association with the disaster relief account to the consumer payment terminal 104. The consumer payment terminal 104 stores the value information received from the management device 102.

[0020] When a user instructs the consumer payment terminal 104 to execute payment using value information with the first store payment terminal 106, the consumer payment terminal 104 transmits the value information to the first store payment terminal 106 using short-range wireless communication. The consumer payment terminal 104 can execute payment with the first store payment terminal 106 using short-range wireless communication even when not connected to the communication network 110.

[0021] The first store payment terminal 106 stores the value information received from the consumer payment terminal 104. When a user instructs the first store payment terminal 106 to execute payment using value information with the second store payment terminal 108, the first store payment terminal 106 transmits the value information to the second store payment terminal 108 using short-range wireless communication. The first store payment terminal 106 can execute payment with the second store payment terminal 108 using short-range wireless communication even when not connected to the communication network 110.

[0022] When the consumer payment terminal 104 is connected to the management apparatus 102 via the communication network 110, the consumer payment terminal 104 transmits value information stored in the consumer payment terminal 104 to the management apparatus 102. The management apparatus 102 updates the value information stored in association with the disaster account of the subscriber using the consumer payment terminal 104 with the value information transmitted from the consumer payment terminal 104. Accordingly, the value information is synchronized between the consumer payment terminal 104 and the management apparatus 102. In accordance with a request from a subscriber of the disaster account, the management apparatus 102 transfers an amount corresponding to part or all of the value information stored in association with the disaster account to a deposit amount of the disaster account.

[0023] Similarly to the consumer payment terminal 104, the first store payment terminal 106 and the second store payment terminal 108 transmit and receive value information to and from the management apparatus 102 via the communication network 110. Similarly to the disaster account of the subscriber using the consumer payment terminal 104, the management apparatus 102 manages the disaster account of the subscriber using the first store payment terminal 106 and the disaster account of the subscriber using the second store payment terminal 108.

[0024] Cashless payment is highly safe as well as convenient. Therefore, needs for using cashless payment are increasing. However, in a cashless payment system designed on the premise of using the communication network 110, when the communication network 110 cannot be used due to a disaster, a system failure, or the like, cashless payment cannot be executed. According to the present embodiment, even when the communication network 110 cannot be used, payment can be executed using short-range wireless communication.

[0025] Figure 2 shows an example of a configuration of value information according to the present embodiment. The value information includes an availability flag and a value identifier. The value identifier may be completely unique information.

[0026] The availability flag indicates whether or not a value identifier is usable for payment. In this example, the availability flag is represented, for example, by 0 or 1. If the availability flag is 0, it indicates that the value identifier is usable. If the availability flag is 1, it indicates that the value identifier is not usable. In other examples, the availability flag may be any other value, and the correspondence between the value and whether or not it is usable can be designed arbitrarily.

[0027] A value identifier includes information that identifies a financial institution's account or account holder, and information that makes the value identifier completely unique. An example of information that identifies a financial institution's account or account holder is the account number of the financial institution's account. The account number may be the account number of a disaster relief account managed by the financial institution. An example of information that makes the value identifier completely unique is a serial number. The serial number may be a unique number for each account. In this example, the serial number is 6 digits long, but it may have other numbers of digits. The combination of the account number and the serial number results in a completely unique number. A predetermined monetary value is assigned to each value identifier. For example, 1 yen may be assigned to one value identifier. Alternatively, a value identifier may be assigned the same value as any of the following currencies, such as 5 yen, 10 yen, 50 yen, or 100 yen, or it may be assigned a value different from that of actual currency.

[0028] According to this embodiment, since the value identifier is completely unique information, fraud such as duplication of value information can be detected. Because the value information includes information that identifies a financial institution's account or the account holder, if the value information is illegally duplicated, it is possible to identify which account or customer has been affected.

[0029] Figure 3 shows an example of the configuration of the management device 102 according to this embodiment. The management device 102 includes a communication unit 300, a value issuance unit 302, a value storage unit 304, a certification information generation unit 306, an upper limit value generation unit 308, an account management unit 310, a payment terminal authentication unit 312, a value update unit 314, a payment terminal control unit 316, an error detection unit 318, an output control unit 320, and an output unit 322.

[0030] The communication unit 300 receives authentication information transmitted from the consumer payment terminal 104. The authentication information includes, for example, the store number, account number, and login password. The authentication information may include a customer number instead of the store number and account number. The authentication information may also include a user account name or a one-time password. If the payment terminal authentication unit 312 confirms that the authentication information received by the communication unit 300 is legitimate, it authenticates that the consumer payment terminal 104 is linked to a financial institution account. If the payment terminal authentication unit 312 does not authenticate that the consumer payment terminal 104 is linked to a financial institution account, the communication unit 300 disconnects communication with the consumer payment terminal 104.

[0031] The communication unit 300 receives a request to issue a value identifier transmitted from the consumer payment terminal 104. The value issuing unit 302 issues a number of value identifiers corresponding to part or all of the deposit amount in the financial institution's account in response to the issuance request. An example of a financial institution's account is a disaster relief account. The value issuing unit 302 issues a value identifier that includes information identifying the financial institution's account or the account's subscriber. The value issuing unit 302 may issue a value identifier that includes information identifying the financial institution's account or the account's subscriber and a serial number. The value storage unit 304 stores the value identifier and a usability flag indicating whether or not the value identifier is usable for settlement, in association with the financial institution's account or subscriber.

[0032] The communication unit 300 may receive an issuance request that includes the number or amount of value identifiers to be issued. The value issuance unit 302 may issue value identifiers for the number of issuances included in the issuance request. The value issuance unit 302 issues a number of value identifiers equivalent to the amount included in the issuance request. The value issuance unit 302 does not issue value identifiers if the amount equivalent to the number of issuances included in the issuance request or the amount included in the issuance request is greater than the amount deposited in the account.

[0033] The value issuing unit 302 may issue a value identifier in response to an issuance request other than the issuance request received by the communication unit 300. For example, the value issuing unit 302 may issue a value identifier in response to an issuance request generated by an instruction input to a terminal within a financial institution. The terminal within a financial institution may be, for example, an ATM (Automatic Teller Machine) or a terminal on the bank's premises.

[0034] The certification information generation unit 306 generates certification information that proves the value identifier was legitimately issued by a financial institution. For example, the certification information generation unit 306 generates an electronic signature as certification information. The value storage unit 304 stores the certification information in association with the value identifier.

[0035] The upper limit generation unit 308 generates upper limit information indicating the upper limit of the number of usable value identifiers. For example, the upper limit generation unit 308 generates upper limit information in which the total number of value identifiers issued by the value issuance unit 302 in response to an issuance request is set as the upper limit. The value storage unit 304 stores the upper limit information in association with a financial institution's account or customer.

[0036] The communication unit 300 transmits a value identifier issued by the value issuance unit 302 to the consumer payment terminal 104, which has been authenticated as being linked to a financial institution account. The communication unit 300 transmits authentication information along with the value identifier to the consumer payment terminal 104. The communication unit 300 transmits upper limit information along with the value identifier to the consumer payment terminal 104. When the communication unit 300 transmits a value identifier to the consumer payment terminal 104, the account management unit 310 restricts the transfer of deposits from the financial institution account linked to the consumer payment terminal 104. The account management unit 310 may restrict the amount of deposits that can be transferred from the financial institution account linked to the consumer payment terminal 104, or may control the system so that deposits cannot be transferred from the financial institution account.

[0037] The communication unit 300 receives a value identifier and availability flag associated with a financial institution account from the consumer payment terminal 104. The value update unit 314 updates the value identifier and availability flag stored in the value storage unit 304. The value update unit 314 updates the value identifier and availability flag stored in the value storage unit 304 with the value identifier and availability flag received by the communication unit 300.

[0038] When the value update unit 314 updates the value identifier and the availability flag, the payment terminal control unit 316 controls the consumer payment terminal 104 so that it cannot perform a payment using the value identifier. The payment terminal control unit 316 sends a setting command to the consumer payment terminal 104 to configure it so that it cannot perform a payment using the value identifier. The consumer payment terminal 104 changes the settings of its payment function in accordance with the setting command, thereby preventing it from performing a payment using the value identifier.

[0039] The payment terminal control unit 316 may send a deletion command to the consumer payment terminal 104 to delete the certification information that proves the value identifier was legitimately issued by a financial institution. The consumer payment terminal 104 deletes the certification information stored in the consumer payment terminal 104. By deleting the certification information stored in the consumer payment terminal 104 in response to the deletion command, it becomes impossible to perform payments using the value identifier. If the payment terminal control unit 316 has controlled the consumer payment terminal 104 so that it cannot perform payments using the value identifier, the account management unit 310 will release the restriction on the transfer of deposits from the financial institution account linked to the consumer payment terminal 104.

[0040] When the value update unit 314 updates the value identifier and availability flag, the payment terminal control unit 316 may send selection information to the consumer payment terminal 104 to allow the user of the consumer payment terminal 104 to choose whether or not to continue executing a payment using the value identifier stored in the consumer payment terminal 104. If the consumer payment terminal 104 chooses to continue executing a payment using the value identifier, the account management unit 310 maintains the restriction on the transfer of funds from the financial institution account linked to the consumer payment terminal 104. If the consumer payment terminal 104 chooses not to continue executing a payment using the value identifier, the consumer payment terminal 104 is controlled so that it cannot execute a payment using the value identifier, and the account management unit 310 releases the restriction on the transfer of funds from the financial institution account linked to the consumer payment terminal 104.

[0041] The error detection unit 318 detects errors by referring to the value identifier and availability flag associated with each of the multiple accounts stored in the value storage unit 304. When the error detection unit 318 detects an error, the output control unit 320 causes the output unit 322 to output an error notification to the administrator who manages the management device 102.

[0042] The error detection unit 318 may detect an error if there are multiple duplicate value information entries that include a availability flag indicating that the value identifier is usable for settlement. The error detection unit 318 may detect an error if there are multiple duplicate value information entries that include a availability flag indicating that the value identifier is usable for settlement among the value information stored in the value storage unit 304 associated with accounts where the transfer of deposits is not restricted.

[0043] The management device 102 may perform the same processing on the first store payment terminal 106 and the second store payment terminal 108 as it does on the consumer payment terminal 104. Each of the first store payment terminal 106 and the second store payment terminal 108 may have at least partially the same functions as the consumer payment terminal 104.

[0044] According to this embodiment, the management device 102 issues value information and transmits it to the consumer payment terminal 104, so that even if the consumer payment terminal 104 is not connected to the management device 102, payment can be made using the value information. By restricting the transfer of funds from the account when the consumer payment terminal 104 is in a state where it can make a payment using the value information, fraudulent transfers of funds from the account can be prevented. By controlling the consumer payment terminal 104 so that it cannot make a payment using the value information when it is in a state where it can transfer funds from the account, fraudulent use of the value information can be prevented. By generating certification information that proves that the value identifier is legitimately issued by a financial institution, the reliability of payments using the value identifier can be ensured.

[0045] Figure 4 shows an example of the configuration of a consumer payment terminal 104 according to this embodiment. The consumer payment terminal 104 includes a first communication unit 400, a second communication unit 402, a value acquisition unit 404, a value storage unit 406, a payment execution unit 408, a usability flag change unit 410, a certification information storage unit 412, a certification information presentation unit 414, an upper limit value storage unit 416, a payment restriction unit 418, an authentication information processing unit 420, an input unit 422, an output unit 424, and an issuance request unit 426.

[0046] The first communication unit 400 communicates with the management device 102 via the communication network 110. The second communication unit 402 communicates directly with the first store payment terminal 106 without going through the communication network 110. The input unit 422 receives input from the user of the consumer payment terminal 104. The input unit 422 is, for example, a touch panel display provided by the consumer payment terminal 104, and receives input by the user's touch operation. The output unit 424 outputs information to the user. The output unit 424 is, for example, a touch panel display provided by the consumer payment terminal 104, and displays information to the user.

[0047] The input unit 422 receives an authentication request from the user. The input unit 422 receives an authentication request, for example, when the user selects a financial institution's app displayed on the touch panel display. When the input unit 422 receives an authentication request, the authentication information processing unit 420 outputs the user's authentication information input screen to the output unit 424. The input unit 422 receives the authentication information entered by the user. The authentication information processing unit 420 forwards the authentication information received by the input unit 422 to the first communication unit 400. The first communication unit 400 transmits the authentication information to the management device 102.

[0048] The input unit 422 receives an issuance request that includes the number or amount of value identifiers entered by the user. The issuance request unit 426 forwards the issuance request received by the input unit 422 to the first communication unit 400. The first communication unit 400 transmits the issuance request to the management device 102. The value acquisition unit 404 acquires the value identifiers issued by the management device 102 via the first communication unit 400. The value acquisition unit 404 acquires the value identifiers that include information identifying the financial institution's account or the account's contract holder and a serial number via the first communication unit 400. The value acquisition unit 404 acquires a usability flag that indicates whether or not the value identifier is usable for settlement, in association with each of the multiple value identifiers transmitted by the management device 102.

[0049] The value storage unit 406 stores the value identifiers acquired by the value acquisition unit 404. The value storage unit 406 stores a usability flag, associated with each of the multiple value identifiers, indicating whether or not the value identifier is usable for settlement. The first communication unit 400 receives certification information along with the value identifiers from the management device 102. The certification information storage unit 412 stores the certification information. The first communication unit 400 receives upper limit information along with the value identifiers from the management device 102. The upper limit storage unit 416 stores the upper limit information.

[0050] The input unit 422 receives a payment execution request from the user. The input unit 422 receives a payment execution request, for example, when the user selects a payment button displayed on the touch panel display. When the input unit 422 receives a payment execution request, the payment execution unit 408 executes a payment using a value identifier to the first store payment terminal 106 via the second communication unit 402. The availability flag changing unit 410 changes the availability flag, which is associated with a number of value identifiers equivalent to the monetary value required for payment by the payment execution unit 408, from a value indicating an available state to a value indicating an unavailable state.

[0051] The certification information presentation unit 414 may present the certification information to the first store payment terminal 106. The payment execution unit 408 may transmit the certification information along with the value identifier to the first store payment terminal 106 via the second communication unit 402. The first store payment terminal 106 may execute the payment after confirming the validity of the certification information.

[0052] The settlement restriction unit 418 may restrict the execution of settlements using a number of value identifiers exceeding the upper limit indicated by the upper limit information. The settlement execution unit 408 may transmit the value identifiers to the first store settlement terminal 106 if the number of value identifiers used for settlement does not exceed the upper limit. If the number of value identifiers used for settlement exceeds the upper limit, the settlement execution unit 408 may cancel the settlement and not transmit the value identifiers to the first store settlement terminal 106. If the number of value identifiers used for settlement exceeds the upper limit, the settlement execution unit 408 may output an error notification to the output unit 424 indicating that settlement using the value identifiers cannot be executed.

[0053] The consumer payment terminal 104 does not need to determine whether the number of value identifiers used for payment exceeds the upper limit. The consumer payment terminal 104 may transmit the upper limit information along with the value identifiers to the first store payment terminal 106. The first store payment terminal 106 may determine whether the number of value identifiers used for payment exceeds the upper limit. If the number of value identifiers used for payment exceeds the upper limit, the first store payment terminal 106 may cancel the payment and output an error notification indicating that payment using value identifiers cannot be performed. The first store payment terminal 106 may send the error notification to the consumer payment terminal 104.

[0054] The second communication unit 402 receives a payment execution request from the first store payment terminal 106 that requests the execution of a payment using a value identifier. When the second communication unit 402 receives a payment execution request from the first store payment terminal 106, the value acquisition unit 404 acquires the value identifier from the first store payment terminal 106 via the second communication unit 402. The value storage unit 406 stores the value identifier acquired by the value acquisition unit 404 from the first store payment terminal 106, associating it with an availability flag indicating its usable status.

[0055] The first communication unit 400 receives a synchronization request from the management device 102 requesting the synchronization of value information between the consumer payment terminal 104 and the management device 102. When the first communication unit 400 receives a synchronization request from the management device 102, it transmits the value identifier and availability flag stored in the value storage unit 406 to the management device 102. The management device 102 updates the value identifier and availability flag stored in the value storage unit 304 of the management device 102 with the value identifier and availability flag transmitted from the consumer payment terminal 104. As a result, the value identifier and availability flag stored in the consumer payment terminal 104 are synchronized with the value identifier and availability flag stored in the management device 102 in association with the account or customer of the financial institution linked to the consumer payment terminal 104.

[0056] The first communication unit 400 receives a setting command from the management device 102 to configure the consumer payment terminal 104 so that it cannot perform payments using a value identifier. The value acquisition unit 404 stores the setting command received by the first communication unit 400 in the value storage unit 406, associating it with the value identifier. The payment execution unit 408 configures the value storage unit 406 so that it cannot perform payments using a value identifier, according to the setting command stored in the value storage unit 406.

[0057] The first communication unit 400 receives a deletion command from the management device 102 to delete the certification information that proves the value identifier was legitimately issued by a financial institution. The certification information storage unit 412 deletes the certification information corresponding to the value identifier included in the deletion command received from the first communication unit 400 from the certification information storage unit 412. When the settlement execution unit 408 performs settlement with the first store settlement terminal 106, it determines whether the certification information has been presented from the certification information presentation unit 414. If the settlement execution unit 408 determines that the certification information has not been presented, it cancels the settlement and does not send the value identifier to the first store settlement terminal 106.

[0058] The first communication unit 400 may receive selection information from the management device 102 to allow the user of the consumer payment terminal 104 to choose whether or not to continue executing a payment using a value identifier stored in the consumer payment terminal 104. The input unit 422 receives input of a selection result indicating whether or not to continue executing a payment using a value identifier stored in the consumer payment terminal 104. The first communication unit 400 transmits the selection result received by the input unit 422 to the management device 102.

[0059] If it is selected to continue executing a payment using the value identifier stored in the consumer payment terminal 104, the payment execution unit 408 maintains the settings to enable the execution of a payment using the value identifier. If it is selected not to continue executing a payment using the value identifier stored in the consumer payment terminal 104, the payment execution unit 408 changes the settings to disable the execution of a payment using the value identifier. If it is selected not to continue executing a payment using the value identifier stored in the consumer payment terminal 104, the certification information storage unit 412 may delete the certification information stored in the certification information storage unit 412.

[0060] According to this embodiment, since the consumer payment terminal 104 stores a value identifier and an availability flag, it can perform a payment using the value identifier with the first store payment terminal 106 even if it is not connected to the communication network 110. Furthermore, the consumer payment terminal 104 can prevent the unauthorized use of the value identifier by changing the availability flag associated with the value identifier used for payment from an available state to an unavailable state. The consumer payment terminal 104 can prevent the unauthorized duplication of value identifiers by storing upper limit information and managing the upper limit of the number of value identifiers that can be used for payment.

[0061] Figure 5 shows an example of the value information synchronization process between the management device 102 and the consumer payment terminal 104 according to this embodiment. The management device 102 transfers 3 yen from a 100 yen deposit in a regular account where the contract holder is Mr. A to a disaster relief account where the contract holder is Mr. A, and issues value information corresponding to 3 yen. Subsequently, the management device 102 transmits the value information to the consumer payment terminal 104 linked to Mr. A's disaster relief account, thereby executing the value information synchronization process between the management device 102 and the consumer payment terminal 104.

[0062] When the management device 102 receives a request to issue value identifiers from the consumer payment terminal 104, it issues three value identifiers corresponding to the 3 yen deposit in the disaster relief account: 1234567000001, 1234567000002, and 1234567000003. The management device 102 stores a 0 as a usability flag, associated with the value identifiers, to indicate that they are usable for payment. As a result, the value information for person A is generated as 0-1234567000001, 0-1234567000002, and 0-1234567000003.

[0063] The management device 102 stores a transfer restriction flag, associated with Mr. A's value information, indicating that the transfer of deposits from the disaster relief account linked to the consumer payment terminal 104 is not restricted. For example, if the transfer restriction flag is 0, it indicates that the transfer of deposits from the disaster relief account is not restricted.

[0064] The management device 102 generates certification information a and stores the generated certification information a in association with Person A's value information. The management device 102 also stores upper limit information, which indicates the same number of upper limits as the number of value identifiers issued based on the issuance request, in association with Person A's value information.

[0065] The management device 102 transmits A's value information 0-1234567000001, 0-1234567000002, and 0-1234567000003 to the consumer payment terminal 104. Along with A's value information, the management device 102 transmits certification information a and upper limit information indicating upper limit 3 to the consumer payment terminal 104. When the management device 102 transmits A's value information, it changes the transfer restriction flag from 0 to 1. For example, if the transfer restriction flag is 1, it indicates that the transfer of deposits from the disaster relief account is restricted. If the transfer restriction flag is 1, the management device 102 locks the disaster relief account and does not move deposits from the disaster relief account, even if the availability flag associated with the value identifier indicates that it is available.

[0066] The consumer payment terminal 104 stores the value information of person A, 0-1234567000001, 0-1234567000002, and 0-1234567000003, received from the management device 102. The consumer payment terminal 104 stores the certification information a in association with person A's value information. The consumer payment terminal 104 stores the upper limit information indicating the upper limit of 3 in association with person A's value information. This synchronizes the value information between the management device 102 and the consumer payment terminal 104. After this, the consumer payment terminal 104 can execute the payment using the value information received from the management device 102.

[0067] Furthermore, the same process as the synchronization of value information performed between the management device 102 and the consumer payment terminal 104 may be performed between the management device 102 and the first store payment terminal 106, and between the management device 102 and the second store payment terminal 108.

[0068] Figure 6 shows an example of payment processing using value information between the consumer payment terminal 104 and the first store payment terminal 106 according to this embodiment. When person A purchases goods at store B, the consumer payment terminal 104 transmits value information equivalent to 2 yen as the price of the goods to the first store payment terminal 106 at store B, thereby executing payment processing between the consumer payment terminal 104 and the first store payment terminal 106.

[0069] The consumer payment terminal 104 stores three value information entries, 0-1234567000001, 0-1234567000002, and 0-1234567000003, as value information for person A, corresponding to 3 yen. The consumer payment terminal 104 stores certification information a in association with the value information. The first store payment terminal 106 stores three value information entries, 0-2345678000001, 0-2345678000002, and 0-2345678000003, as value information for store B, corresponding to 3 yen. The first store payment terminal 106 stores certification information b in association with the value information.

[0070] In response to customer A entering a payment instruction for 2 yen, the consumer payment terminal 104 transmits two value information pieces, 0-1234567000001 and 0-1234567000002, corresponding to 2 yen, to the first store payment terminal 106. The consumer payment terminal 104 also transmits certification information a along with customer A's value information to the first store payment terminal 106.

[0071] The first store payment terminal 106 stores the value information 0-1234567000001 and 0-1234567000002 received from the consumer payment terminal 104. The first store payment terminal 106 stores the certification information a received from the consumer payment terminal 104 in association with the value information 0-1234567000001 and 0-1234567000002. This completes the payment processing from the consumer payment terminal 104 to the first store payment terminal 106.

[0072] Once the consumer payment terminal 104 has finished transmitting the value information, it changes the availability flag associated with the transmitted value identifiers 1234567000001 and 1234567000002 from 0 to 1. After this, the consumer payment terminal 104 cannot execute a payment using the transmitted value identifiers 1234567000001 and 1234567000002. The first store payment terminal 106 can execute a payment using the value information received from the consumer payment terminal 104.

[0073] Figure 7 shows an example of payment processing using value information between the first store payment terminal 106 and the second store payment terminal 108 according to this embodiment. When a user of the first store payment terminal 106 purchases goods at store C, the first store payment terminal 106 transmits value information equivalent to 3 yen as the price of the goods to the second store payment terminal 108 at store C, thereby executing payment processing between the first store payment terminal 106 and the second store payment terminal 108.

[0074] The first store payment terminal 106 stores five value information entries, 0-1234567000001, 0-1234567000002, 0-2345678000001, 0-2345678000002, and 0-2345678000003, as value information for store B equivalent to 5 yen. The first store payment terminal 106 stores certification information a in association with value information entries 0-1234567000001 and 0-1234567000002. The first store payment terminal 106 stores certification information b in association with value information entries 0-2345678000001, 0-2345678000002, and 0-2345678000003. The second store payment terminal 108 stores three value information entries, 0-3456789000001, 0-3456789000002, and 0-3456789000003, as value information for store C equivalent to 3 yen. The second store payment terminal 108 stores the certification information c in association with the value information entries 0-3456789000001, 0-3456789000002, and 0-3456789000003.

[0075] In response to the user of the first store payment terminal 106 entering a payment instruction for 3 yen, the first store payment terminal 106 transmits three value information pieces corresponding to 3 yen, 0-1234567000001, 0-1234567000002, and 0-2345678000001, to the second store payment terminal 108. Along with the value information, the first store payment terminal 106 transmits certification information a and certification information b to the second store payment terminal 108.

[0076] The second store payment terminal 108 stores the value information 0-1234567000001, 0-1234567000002, and 0-2345678000001 received from the first store payment terminal 106. The second store payment terminal 108 stores the certificate information a received from the first store payment terminal 106 in association with the value information 0-1234567000001 and 0-1234567000002. The second store payment terminal 108 stores the certificate information b received from the first store payment terminal 106 in association with the value information 0-2345678000001. This completes the payment processing from the first store payment terminal 106 to the second store payment terminal 108.

[0077] Once the first store payment terminal 106 has finished transmitting the value information, it changes the availability flag associated with the transmitted value identifiers 1234567000001, 1234567000002, and 2345678000001 from 0 to 1. After this, the first store payment terminal 106 cannot execute a payment using the transmitted value identifiers 1234567000001, 1234567000002, and 2345678000001. The second store payment terminal 108 can execute a payment using the value information received from the first store payment terminal 106.

[0078] Figure 8 shows an example of the value information synchronization process between the consumer payment terminal 104 and the management device 102 according to this embodiment. The consumer payment terminal 104 transmits value information to the management device 102, thereby executing the value information synchronization process between the consumer payment terminal 104 and the management device 102.

[0079] Before the synchronization process is executed, the management device 102 manages a deposit of 97 yen in a regular account where the contract holder is Mr. A. The management device 102 also manages a deposit of 3 yen in a disaster relief account where the contract holder is Mr. A. The management device 102 stores a movement restriction flag of 1 associated with the disaster relief account. The management device 102 stores three value information items corresponding to the 3 yen deposit in the disaster relief account: 0-1234567000001, 0-1234567000002, and 0-1234567000003. The availability flag included in the three value information items is set to 0, meaning that the three value information items are set to a state where they can be used for settlement. However, the movement restriction flag is set to 1, restricting the movement of deposits from the disaster relief account.

[0080] The consumer payment terminal 104 stores value information 1-1234567000001, 1-1234567000002, and 0-1234567000003. Value identifiers 1234567000001 and 1234567000002 have been used for payment, so their availability flags have been changed from 0 to 1.

[0081] The management device 102 sends a synchronization request to the consumer payment terminal 104. Upon receiving the synchronization request, the consumer payment terminal 104 sends the value information 1-1234567000001, 1-1234567000002, and 0-1234567000003 stored in the consumer payment terminal 104 to the management device 102. The management device 102 updates the value information 0-1234567000001, 0-1234567000002, and 0-1234567000003 stored in the management device 102 with the value information 1-1234567000001, 1-1234567000002, and 0-1234567000003 received from the consumer payment terminal 104. The management device 102 changes the availability flags associated with value identifiers 1234567000001 and 1234567000002 from 0 to 1. The management device 102 changes the deposit in the disaster relief account from 3 yen to 1 yen. This synchronizes the value information stored in the consumer payment terminal 104 with the value information stored in the management device 102.

[0082] When updating value information, the management device 102 may change the movement restriction flag from 1 to 0. The management device 102 may send a setting command to the consumer payment terminal 104 to configure it so that it cannot perform payments using the value identifier. The consumer payment terminal 104 may store the setting command in association with the value identifier. As a result, the consumer payment terminal 104 locks the value information stored in it and is configured so that it cannot perform payments using the value identifier.

[0083] The management device 102 transfers 1 yen from the disaster relief account to the regular account in accordance with Mr. A's request. As a result, the regular account balance becomes 98 yen, and the disaster relief account balance becomes 0 yen. The management device 102 changes the availability flag associated with the value identifier 1234567000003 from 0 to 1.

[0084] Figure 9 shows an example of a computer 1200 in which embodiments of the present invention may be embodied in whole or in part. A program installed on the computer 1200 can cause the computer 1200 to function as an operation or one or more sections of an apparatus according to an embodiment of the present invention, or to execute such operation or one or more sections, and / or to cause the computer 1200 to execute a process or a stage of such process according to an embodiment of the present invention. Such a program may be executed by the CPU 1212 to cause the computer 1200 to perform a particular operation associated with some or all of the blocks of the flowcharts and configuration diagrams described herein.

[0085] The computer 1200 according to this embodiment includes a CPU 1212, RAM 1214, a graphics controller 1216, and a display device 1218, which are interconnected by a host controller 1210. The computer 1200 also includes input / output units such as a communication interface 1222, a storage device 1224 such as a hard disk drive, a DVD-ROM drive 1226, and an IC card drive, which are connected to the host controller 1210 via an input / output controller 1220. The computer also includes legacy input / output units such as a ROM 1230 and a keyboard 1242, which are connected to the input / output controller 1220 via an input / output chip 1240.

[0086] The CPU 1212 operates according to the programs stored in the ROM 1230 and RAM 1214, thereby controlling each unit. The graphics controller 1216 acquires the image data generated by the CPU 1212 from the frame buffer provided in RAM 1214 or from itself, and displays the image data on the display device 1218.

[0087] The communication interface 1222 communicates with other electronic devices via a network. The storage device 1224 stores programs and data used by the CPU 1212 in the computer 1200. The DVD-ROM drive 1226 reads programs or data from the DVD-ROM 1227 and provides them to the storage device 1224 via the RAM 1214. The IC card drive reads programs and data from the IC card and / or writes programs and data to the IC card.

[0088] The ROM 1230 stores boot programs and / or hardware-dependent programs of the computer 1200, which are executed by the computer 1200 upon activation. The input / output chip 1240 may also connect various input / output units to the input / output controller 1220 via parallel ports, serial ports, keyboard ports, mouse ports, etc.

[0089] The program is provided on a computer-readable medium such as a DVD-ROM 1227 or an IC card. The program is read from the computer-readable medium and installed on a storage device 1224, RAM 1214, or ROM 1230, which are examples of computer-readable mediums, and executed by the CPU 1212. The information processing described within these programs is read by the computer 1200, resulting in coordination between the program and the various types of hardware resources described above. The apparatus or method may be configured to realize the manipulation or processing of information in accordance with the use of the computer 1200.

[0090] For example, when communication is performed between a computer 1200 and an external device, the CPU 1212 may execute a communication program loaded into RAM 1214 and, based on the processing described in the communication program, instruct the communication interface 1222 to perform communication processing. Under the control of the CPU 1212, the communication interface 1222 reads transmission data stored in a transmission buffer processing area provided in a recording medium such as RAM 1214, storage device 1224, DVD-ROM 1227, or IC card, transmits the read transmission data to the network, or writes received data received from the network to a receive buffer processing area provided on the recording medium.

[0091] Furthermore, the CPU 1212 may read all or necessary parts of files or databases stored on external recording media such as the storage device 1224, DVD-ROM drive 1226 (DVD-ROM 1227), or IC card into the RAM 1214, and perform various types of processing on the data in the RAM 1214. The CPU 1212 then writes the processed data back to the external recording media.

[0092] Various types of information, such as various types of programs, data, tables, and databases, may be stored on the recording medium and subjected to information processing. The CPU 1212 may perform various types of processing on the data read from RAM 1214, including various types of operations, information processing, conditional judgments, conditional branching, unconditional branching, information retrieval / replacement, etc., as described throughout this disclosure and specified by the program instruction sequence, and write the results back to RAM 1214. The CPU 1212 may also retrieve information in files, databases, etc., within the recording medium. For example, if multiple entries are stored in the recording medium, each having an attribute value of a first attribute associated with an attribute value of a second attribute, the CPU 1212 may search among the multiple entries for an entry that matches the condition for which the attribute value of the first attribute is specified, read the attribute value of the second attribute stored in that entry, and thereby obtain the attribute value of the second attribute associated with the first attribute that satisfies a predetermined condition.

[0093] The programs or software modules described above may be stored on or near computer-readable media on computer 1200. Alternatively, recording media such as hard disks or RAM provided within a server system connected to a dedicated communication network or the Internet can be used as computer-readable media, thereby providing programs to computer 1200 via the network.

[0094] Although the present invention has been described above using embodiments, the technical scope of the present invention is not limited to the scope described in the above embodiments. It will be apparent to those skilled in the art that various modifications or improvements can be made to the above embodiments. It will be clear from the claims that such modified or improved forms may also be included in the technical scope of the present invention.

[0095] It should be noted that the execution order of operations, procedures, steps, and stages in the devices, systems, programs, and methods shown in the claims, specifications, and drawings is not explicitly stated as "before," "prior to," etc., and that these can be implemented in any order unless the output of a previous process is used in a later process. Even if the operation flow in the claims, specifications, and drawings is described using phrases such as "first," "next," etc. for convenience, it does not mean that it is essential to perform the operations in that order. [Explanation of Symbols]

[0096] 100 Payment system, 102 Management device, 104 Consumer payment terminal, 106 First store payment terminal, 108 Second store payment terminal, 110 Communication network, 300 Communication unit, 302 Value issuance unit, 304 Value storage unit, 306 Certification information generation unit, 308 Upper limit generation unit, 310 Account management unit, 312 Payment terminal authentication unit, 314 Value update unit, 316 Payment terminal control unit, 318 Error detection unit, 320 Output control unit, 322 Output unit, 400 First communication unit, 402 Second communication unit, 404 Value acquisition unit, 406 Value storage unit, 408 Payment execution unit, 410 Availability flag change unit, 412 Certification information storage unit, 414 Certification information presentation unit, 416 Upper limit storage unit, 418 Payment restriction unit, 420 Authentication information processing unit, 422 Input unit, 424 Output unit, 426; Request unit, 1200; Computer, 1210; Host controller, 1212; CPU, 1214; RAM, 1216; Graphics controller, 1218; Display device, 1220; Input / output controller, 1222; Communication interface, 1224; Storage device, 1226; DVD-ROM drive, 1227; DVD-ROM, 1230; ROM, 1240; Input / output chip, 1242; Keyboard

Claims

1. A value issuing unit that issues a number of value identifiers equivalent to part or all of the deposit amount in a financial institution's account, A value storage unit that stores a value identifier and a usability flag indicating whether or not the value identifier is usable for settlement, in association with the aforementioned account, A communication unit that transmits a value identifier to a payment terminal that has been authenticated as being linked to the aforementioned account. A control device equipped with the following features.

2. When the communication unit transmits a value identifier, the account management unit restricts the transfer of funds from the account. The control device according to claim 1, further comprising:

3. The value issuing unit issues a value identifier that includes information identifying the account or the contract holder of the account. The control device according to claim 1.

4. Certification information generation unit that generates certification information proving that the value identifier was legitimately issued by the aforementioned financial institution. Furthermore, The communication unit transmits the certificate information to the payment terminal. The control device according to claim 1.

5. Value update unit that updates the value identifier and availability flag stored in the value storage unit. Furthermore, The communication unit receives the value identifier and availability flag associated with the account from the payment terminal. The value update unit updates the value identifier and availability flag stored in the value storage unit with the value identifier and availability flag received by the communication unit. The control device according to claim 1.

6. When the value update unit updates the value identifier and the availability flag, the payment terminal control unit controls the payment terminal so that it cannot perform a payment using the value identifier. The control device according to claim 5, further comprising:

7. A program for causing a computer to function as a management device according to any one of claims 1 to 6.

8. The stage of issuing a number of value identifiers equivalent to part or all of the deposit amount in a financial institution's account, A step of storing a value identifier and a usability flag indicating whether or not the value identifier is usable for settlement, in association with the aforementioned account, The step of sending a value identifier to a payment terminal that has been authenticated as being linked to the aforementioned account. A management method that includes the following features.

Images