Communication system and method

Abstract

To provide a technology that can remotely manage vending of an item through an automatic vending machine.SOLUTION: The present invention is a sensor unit 500 that is installed in an automatic vending machine, and unlocks the automatic vending machine, based on encrypted data transmitted from a terminal apparatus, the sensor unit including: an encryption processing unit 501d that generates a public key and a private key, and encrypts an unlocking code with the public key; a hash generation unit 501e that hashes, through a hash function, sensor information including at least a sensor ID and position information on a sensor, and outputs a hash value; a management unit 501g that stores, in a storage unit 503, at least the public key and the hash value in association with each other, and manages them; and an unlocking unit 501f that determines success or failure of the encrypted data transmitted from the terminal apparatus, and unlocks the automatic vending machine when the encrypted data matches with encrypted data generated by the encryption processing unit.SELECTED DRAWING: Figure 14

Description

[Technical field]

[0001] The present invention relates to a communication system and a communication method. [Background technology]

[0002] Some games that use telecommunication lines such as the Internet employ a system called "gacha" to obtain special in-game items, game characters, etc. "Gacha" is a virtual vending machine that imitates a vending machine in which a capsule containing a toy comes out when you insert a coin and turn the handle (the so-called "gacha gacha" or "gachapon": see Patent Document 1). [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Publication No. 07-148358 Summary of the Invention [Problem to be solved by the invention]

[0004] In games using gacha, items and the like can be obtained by inserting virtual coins, which are distributed for a fee or free of charge, into the gacha. In this type of game, purchasing paid coins is called charging. In gacha, which requires paid coins, it may be possible to obtain powerful items or rare characters that are not normally available (or difficult to obtain) by charging several hundred yen per time. For this reason, some users end up paying large amounts of money until they obtain the desired items, and have difficulty paying the fees. This is a common problem not only in the case of product sales by virtual vending machines, but also in the case of product sales by vending machines, including "gacha gacha" and the like. This is because, unlike face-to-face sales where the seller of the product directly deals with the buyer, in the case of product sales by vending machines, the seller cannot warn the buyer. In the following, in this specification, both physical vending machines such as "gacha gacha" and virtual vending machines are referred to as "vending machines".

[0005] The present invention has been made in consideration of the above-mentioned circumstances, and has an object to provide a technique that enables remote management of product sales through a vending machine. [Means for solving the problem]

[0006] In order to solve the above problem, a communication method according to a first aspect of the present invention includes a terminal device capturing an image of a two-dimensional code to obtain a vending machine ID of a vending machine, and detecting the captured image by a GPS. image a first step of acquiring location information of the terminal device at a time when the vending machine is unlocked, and transmitting the vending machine ID and the location information to a first server device to request acquisition of encrypted data related to unlocking the vending machine; a second step of the first server device determining whether the vending machine ID and the location information match stored information, and transmitting product information to the terminal device if they match; a third step of the second server device receiving a payment request from the terminal device, executing a payment process, and transmitting a payment token to the first server device; a fourth step of the first server device receiving the payment token, hashing sensor information using a hash function to generate a hash value, and transmitting the hash value to the terminal device; a fifth step of making a search request to a virtual server device group that realizes a hash pool based on the hash value; a sixth step of the virtual server device group receiving the search request, checking for the existence of the hash value, and if present, transmitting a public key to a third server device; a seventh step of the third server device generating an unlocking code, encrypting the unlocking code with the public key, and transmitting the encrypted data to the terminal device; an eighth step of the terminal device requesting unlocking of the vending machine by transmitting the encrypted data to a sensor unit of the vending machine; and a ninth step of the sensor unit determining whether the encrypted data is correct, and unlocking the vending machine if it is determined to be correct.

[0007] The communication system according to the second aspect of the present invention captures an image of a two-dimensional code to obtain a vending machine ID of the vending machine, obtains location information of the terminal device at the time of capturing the image by GPS, transmits the vending machine ID and the location information to a first server device, and makes a search request to a group of virtual server devices that realize a hash pool using the hash value transmitted from the first server device, and further transmits encrypted data transmitted from a third server device to a sensor unit of the vending machine, thereby determining whether the terminal device requesting unlocking of the vending machine, the vending machine ID, and the location information match stored information, and if they match, transmits product information to the terminal device and receives a payment token. a first server device that generates a hash value by hashing stored sensor information using a hash function and transmits the hash value to the terminal device; a virtual server device group that, upon receiving a search request using the hash value from the terminal device, confirms the existence of the hash value and, if present, transmits a public key to a third server device; a third server device that generates an unlocking code, encrypts the unlocking code with the public key, and transmits the encrypted data to the terminal device; and a sensor unit that generates the public key and transmits it to the virtual server device group, and, upon receiving the encrypted data from the terminal device, determines whether the encrypted data is correct and unlocks the vending machine if it is determined to be correct. Effect of the Invention

[0008] According to the present invention, it is possible to provide a technology that enables remote management of product sales through a vending machine. In particular, the sensor unit can be retrofitted to an existing vending machine such as a gacha machine, and in that case, it becomes possible to remotely manage sales through the existing vending machine. [Brief description of the drawings]

[0009] [Figure 1] 1 is a block diagram showing an example of the configuration of a wireless communication system 1 according to a first embodiment of the present invention. [Diagram 2] 1 is a front view of a vending machine 30 that communicates with the wireless communication terminal 10 by short-range wireless communication. [Diagram 3] 1 is a block diagram showing an example of the configuration of a wireless communication terminal 10. FIG. [Figure 4] 1 is a diagram showing an example of a screen G01 displayed on a display unit 110a of the wireless communication terminal 10. FIG. [Diagram 5] 13 is a diagram showing an example of a search result screen G02 displayed on the display unit 110a of the wireless communication terminal 10. FIG. [Figure 6] 13 is a diagram showing an example of a payment method selection screen G03 displayed on the display unit 110a of the wireless communication terminal 10. FIG. [Figure 7] 11 is a flowchart showing the flow of an unlocking process executed by the control unit 100 of the wireless communication terminal 10 in accordance with the purchase support program 144a. [Figure 8] FIG. 11 is a configuration diagram of a communication system according to a second embodiment of the present invention. [Figure 9] FIG. 2 is a conceptual diagram showing a processing procedure performed by the system. [Figure 10] FIG. 2 is a configuration diagram of a first server device. [Figure 11] FIG. 2 is a configuration diagram of a second server device. [Figure 12] FIG. 13 is a configuration diagram of a third server device. [Figure 13] FIG. 2 is a configuration diagram of a terminal device. [Figure 14] FIG. 2 is a configuration diagram of a sensor unit. [Figure 15] 1 is a flowchart showing a processing procedure performed by the system. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0010] Hereinafter, an embodiment of the present invention will be described with reference to the drawings.

[0011] First Embodiment

[0012] Fig. 1 is a block diagram showing a configuration example of a wireless communication system 1 according to a first embodiment of the present invention. As shown in Fig. 1, the wireless communication system 1 includes a wireless communication terminal 10 and a server device 40 connected to a wireless communication network 20. Although detailed illustration is omitted in Fig. 1, the wireless communication network 20 includes a wired communication network, and the server device 40 is connected to the wired communication network.

[0013] The wireless communication terminal 10 is, for example, a smartphone. The wireless communication terminal 10 is accommodated in a wireless communication network 20, and performs wireless communication according to a predetermined wireless communication standard (WI-FI in this embodiment, but not limited to this). The wireless communication terminal 10 also has a function of performing short-distance wireless communication with other devices according to a wireless communication standard different from the above wireless communication standard. Hereinafter, the latter wireless communication standard is referred to as a "first wireless communication standard," and the former wireless communication standard is referred to as a "second wireless communication standard." As described above, a specific example of the second wireless communication standard is WI-FI. On the other hand, a specific example of the first wireless communication standard is Bluetooth (registered trademark) or IrDA. In this embodiment, Bluetooth (registered trademark) is adopted as the first wireless communication standard.

[0014] The vending machine 30 in FIG. 1 is the above-mentioned "capsule toy machine." The vending machine 30 has a function of performing short-range wireless communication with the wireless communication terminal 10 in accordance with the first wireless communication standard. Although only one vending machine 30 is illustrated in FIG. 1, the number of vending machines 30 may be two or more. FIG. 2 is a front view of the vending machine 30. In the vending machine 30, when the handle 32 is twisted in the direction of the arrow after the product payment is inserted (in this embodiment, the input of virtual coins), one capsule C containing a toy comes out from the dispensing opening 34. A printed matter 36 on which a matrix type two-dimensional code corresponding to an identifier (for example, a string of alphanumeric characters of a predetermined number of characters) that uniquely identifies the vending machine 30 is printed is attached near the dispensing opening 34.

[0015] The vending machine 30 is in a locked state in which product sales are prohibited until a security code that unlocks the prohibition on product sales is received via short-range wireless communication, and the capsule C will not dispense even if the handle 32 is turned before the security code is received. The security code is 256 bytes of one-time data that is randomly generated by the server device 40. Every time the server device 40 receives an identifier that uniquely identifies the vending machine 30, it issues a security code corresponding to the identifier and returns it to the sender of the identifier.

[0016] 1, the server device 40 is a computer device having a user DB and a vending machine management DB, and in addition to issuing security codes and virtual coins, performs settlement of the issuance fee of the virtual coins (in other words, settlement of the product price). The vending machine management DB stores, in association with the identifier of the vending machine 30, location information indicating the installation location of the vending machine 30 (for example, information indicating the latitude and longitude of the installation location) and information for issuing a security code. When a security code is generated according to a predetermined pseudo-random number generation algorithm, specific examples of information for issuing a security code include an initial value in the algorithm (a so-called pseudo-random number seed) and the most recently issued security code.

[0017] The user DB is a database for managing users who wish to use the wireless communication system 1 to release the sale of products by the vending machine 30 and purchase products. The user DB stores information indicating the user's product purchase history and product payment history in association with an identifier that uniquely identifies the user. A specific example of an identifier that uniquely identifies a user is a user ID that is assigned to the user when the user concludes a service contract through the wireless communication system 1.

[0018] In this embodiment, a distributed ledger technology called blockchain is used for payment of the product price. A blockchain is a database that has a continuously growing list of ordered records called blocks. In this embodiment, each block in the blockchain corresponds to one payment, and each block contains information about the payment, a timestamp indicating the time the payment was made, and a link to the previous block.

[0019] As described above, near the dispensing opening 34 of the vending machine 30, a printed matter 36 on which a two-dimensional matrix code corresponding to an identifier that uniquely identifies the vending machine 30 is attached. A user of the wireless communication terminal 10 can unlock the locked state of the vending machine 30 (i.e., release the ban on selling products) by reading the two-dimensional matrix code using the wireless communication terminal 10 and transmitting the identifier obtained from the code to the server device 40. The wireless communication terminal 10, which plays a central role in releasing the ban on selling products by the vending machine 30, will be described below.

[0020] Fig. 3 is a block diagram showing an example of the configuration of the wireless communication terminal 10. As shown in Fig. 3, the wireless communication terminal 10 has a control unit 100, a user interface unit 110, a first wireless communication unit 120, a second wireless communication unit 130, a storage unit 140, and a bus 150 that mediates data transmission between these components. Note that in Fig. 3, the user interface unit is abbreviated as "UI unit." This same abbreviation will be used hereinafter in this specification.

[0021] The control unit 100 is a computer such as a CPU (Central Processing Unit). The control unit 100 executes a program stored in the storage unit 140 (more precisely, the non-volatile storage unit 144) and functions as a control center of the wireless communication terminal 10.

[0022] The UI unit 110 is a collection of devices that provide a user interface for allowing a user to use the wireless communication terminal 10. As shown in Fig. 1, the UI unit 110 includes a display unit 110a, an operation unit 110b, and an imaging unit 110c. In addition to these units, the UI unit 110 also includes an audio input / output unit that collects the user's voice and outputs the voice represented by the audio data. However, as this unit is not closely related to the present invention, illustration and detailed description of the audio input / output unit will be omitted.

[0023] The display unit 110a is, for example, a liquid crystal display and its driving circuit. Under the control of the control unit 100, the display unit 110a displays various screen images that prompt the user to use the wireless communication terminal 10. The imaging unit 110c is, for example, an image sensor. The imaging unit 110c captures an image within an imaging field of view and outputs image data representing the imaging result to the control unit 100. The operation unit 110b is a transparent sheet-like touch sensor provided so as to cover the display area of ​​the display unit 110a. The operation unit 110b and the display unit 110a form a so-called touch panel. The user of the wireless communication terminal 10 can perform various inputs by touching or flicking the operation unit 110b. When the user performs a touch operation or a flick operation on the operation unit 110b, the operation unit 110b outputs data representing the user's operation to the control unit 100. As a result, the operation performed by the user is transmitted to the control unit 100.

[0024] The first wireless communication unit 120 is a communication circuit that performs wireless communication conforming to a first wireless communication standard. The first wireless communication unit 120 receives data transmitted from a partner device of wireless communication conforming to the first wireless communication standard and passes it to the control unit 100, while transmitting data passed from the control unit 100 to the partner device. The second wireless communication unit 130 performs wireless communication conforming to a second wireless communication standard with a base station of the wireless communication network 20. The second wireless communication unit 130 transmits data provided by the control unit 100 to the wireless communication network 20, receives data transmitted from the wireless communication network 20, and passes the received data to the control unit 100.

[0025] The storage unit 140 includes a volatile storage unit 142 and a non-volatile storage unit 144. The volatile storage unit 142 is, for example, a RAM (Random Access Memory). The volatile storage unit 142 is used by the control unit 100 as a work area when executing a program. The non-volatile storage unit 144 is, for example, a flash ROM (Read Only Memory). Various programs and various data are stored in the non-volatile storage unit 144. Specific examples of the programs stored in the non-volatile storage unit 144 include a kernel program that causes the control unit 100 to realize an OS (Operating System), various application programs of a web browser and an email client, and a purchase support program 144a that causes the control unit 100 to execute an unlocking process that prominently illustrates the features of the present invention.

[0026] Among the programs stored in the non-volatile storage unit 144, the programs other than the purchase support program 144a are not particularly different from those installed in a general smartphone. For example, the control unit 100 reads a kernel program from the non-volatile storage unit 144 to the volatile storage unit 142 and starts executing it when the wireless communication terminal 10 is powered on (not shown in FIG. 3). The control unit 100, which operates according to the kernel program and realizes the OS, can execute the purchase support program 144a and other application programs and control the operation of components other than the control unit 100, such as the UI unit 110, in response to instructions input by operating the operation unit 110b. As such, since the programs other than the purchase support program 144a are not particularly different from those installed in a general smartphone, detailed explanations are omitted, and the following explanation focuses on the purchase support program 144a.

[0027] When an instruction to execute the purchase support program 144a is given by an operation on the operation unit 110b, the control unit 100 reads the purchase support program 144a from the non-volatile storage unit 144 to the volatile storage unit 142 and starts executing it. The control unit 100 operating according to the purchase support program 144a causes the display unit 110a to display a screen G01 shown in FIG.

[0028] The virtual operator B01 on the screen G01 is a virtual operator for searching for the installation location of the vending machine 30. When a touch operation is performed on the virtual operator B01, the control unit 100 transmits location information indicating the current location of the wireless communication terminal 10 to the server device 40. The current location of the wireless communication terminal 10 may be identified using existing technology such as GPS.

[0029] The server device 40 refers to the vending machine management DB to identify the vending machines 30 installed within a predetermined range (for example, a range of a 100 meter radius) centered on the position indicated by the position information received from the wireless communication terminal 10. Then, the server device 40 returns the position information indicating the installation location of the identified vending machine 30 to the wireless communication terminal 10.

[0030] When the location information returned from the server device 40 is received, the control unit 100 displays the search result screen G02 shown in Fig. 5 on the display unit 110a. The image of the search result screen G02 is an image obtained by plotting an icon indicating the current location (a star icon in Fig. 5) and an icon corresponding to the vending machine 30 (a black circle icon in Fig. 5) on an image of a map of the above-mentioned predetermined range. A user who visually checks the search result screen G02 can use the information displayed on the search result screen G02 to go to the location of the nearest vending machine 30.

[0031] When a touch operation is performed on the virtual operator B02 on the screen G01, the control unit 100 transitions the display image on the display unit 110a to a payment method selection screen G03 shown in Fig. 6. The payment method selection screen G03 is a screen for allowing the user to select a payment method (such as a credit card) to be used for payment of virtual coins to purchase a product. When a payment method is selected by operating the operation unit 110b, the control unit 100 writes information indicating the selected payment method into the volatile storage unit 142, and transitions the display image on the display unit 110a to the screen G01.

[0032] An image captured by the imaging unit 110c is displayed in an area A01 on the screen G01. The user of the wireless communication terminal 10 holds the wireless communication terminal 10 near the outlet 34 of the vending machine 30 and adjusts its position so that the entire matrix type two-dimensional code corresponding to the identifier of the vending machine 30 is displayed in the area A01, and captures an image of the matrix type two-dimensional code. The control unit 100 analyzes the captured image to obtain the identifier of the vending machine 30.

[0033] When the identifier of the vending machine 30 is acquired, the control unit 100 starts the unlocking process. Fig. 7 is a flowchart showing the flow of the unlocking process. As shown in Fig. 7, the control unit 100 first transmits the identifier acquired in the above manner and information indicating the payment method selected on the payment method selection screen G03 to the server device 40 via the second wireless communication unit 130 (step SA100).

[0034] When the server device 40 receives the identifier and the information indicating the payment method transmitted from the wireless communication terminal 10, it issues a security code corresponding to the identifier by referring to the contents stored in the vending machine management DB, and issues virtual coins for purchasing the product, and settles the price of the product by the payment method indicated in the received information. The server device 40 then returns the issued security code and virtual coins to the sender of the identifier.

[0035] When the control unit 100 receives the security code and virtual coins returned from the server device 40, the control unit 100 transmits the received security code and virtual coins to the vending machine 30 via the first wireless communication unit 120 (step SA110).

[0036] When the vending machine 30 receives the security code and virtual coins transmitted from the wireless communication terminal 10, it unlocks the sale of the product. This enables the purchase of the product sold by the vending machine 30 (in this embodiment, playing the capsule toy machine). When the user of the wireless communication terminal 10 completes the purchase of the product, the vending machine 30 returns to the locked state.

[0037] As described above, according to the first embodiment, the issuance of security codes enables remote management of product sales by vending machines. For example, after the total amount of product purchases in a given period (e.g., one month) reaches a predetermined upper limit, the issuance of new security codes can be suspended until the period has elapsed, thereby preventing overcharging for capsule machines.

[0038] Although the first embodiment of the present invention has been described above, the following modifications may of course be made to this embodiment. (1) In the above embodiment, the vending machine 30 was a "gachapon machine," but it may of course be a vending machine for soft drinks, alcoholic drinks, food, books, cigarettes, etc., or may be a virtual vending machine such as a "gachapon machine" in a computer game. In other words, the products sold by the vending machine 30 are not limited to physical objects such as toys, but may be data such as in-game items and game character data. In the above embodiment, virtual coins are used to settle the sales price of the products, but settlement may be made only with real money as in a conventional gachapon machine without using virtual coins. In this case, the server device 40 may be made to return only a security code.

[0039] (2) In the above embodiment, the vending machine 30 has attached thereto a printed matter 36 on which a matrix type two-dimensional code corresponding to an identifier that uniquely identifies the vending machine 30 is printed. However, a printed matter on which a character string representing the identifier is printed may be attached. This is because the identifier can be obtained by capturing an image of the printed matter on which the character string representing the identifier is printed using the imaging unit 110c and performing character recognition on the captured image. In addition, a user who visually recognizes the character string printed on the printed matter may input the characters that make up the character string one by one by operating the operation unit 110b (for example, operating a virtual keyboard), in which case the imaging unit 110c can be omitted.

[0040] (3) In the above embodiment, the wireless communication system 1 including the wireless communication terminal 10 has been described, but the wireless communication terminal 10 may be manufactured or sold separately. Also, the wireless communication terminal 10 in the above embodiment is a smartphone, but it may be a tablet terminal, a notebook personal computer, a wearable computer, or the like.

[0041] In short, a wireless communication terminal may be provided that includes a control unit, a first wireless communication unit that performs short-range wireless communication in accordance with a first wireless communication standard, and a second wireless communication unit that performs communication in accordance with a second wireless communication standard different from the first wireless communication standard, wherein the control unit is a vending machine that performs short-range wireless communication with other devices in accordance with the first wireless communication standard, and is characterized in that the control unit is triggered by input of an identifier that is assigned to the vending machine to uniquely identify a vending machine that is prohibited from selling products until a security code that lifts the prohibition on selling products is received, and transmits the input identifier via the second wireless communication unit to a server device that issues the security code and returns the security code to a sender of the identifier upon receiving the identifier via communication in accordance with the second wireless communication standard, receives the security code returned from the server device via the second wireless communication unit, and transmits the received security code to the vending machine via the first wireless communication unit.

[0042] (4) In the above embodiment, the purchase support program 144a that causes the control unit 100 to execute the lock release process that prominently shows the features of the present invention was pre-installed in the non-volatile storage unit 144 of the wireless communication terminal 10, but the purchase support program 144a may be manufactured or sold separately. In short, it is sufficient to provide a program that causes a computer to execute a first step of transmitting, in response to an input of an identifier given to a vending machine that performs short-distance wireless communication with other devices according to a first wireless communication standard in order to uniquely identify the vending machine in which product sales are prohibited until a security code that releases the prohibition on product sales is received, the input identifier to a server device that issues the security code and returns the identifier to a sender of the identifier in response to receiving the identifier through communication in accordance with a second wireless communication standard different from the first wireless communication standard, in accordance with the second wireless communication standard, and a second step of receiving the security code returned from the server device and transmitting the received security code to the vending machine in accordance with the first wireless communication standard.

[0043] This is because by installing the above program in a conventional wireless communication terminal and operating a control unit (computer) of the wireless communication terminal in accordance with the program, the wireless communication terminal can function as the wireless communication terminal 10 of the above embodiment. Note that the above program can be provided in a specific manner by writing it to a computer-readable recording medium such as a flash ROM and distributing it, or by downloading it via a telecommunication line such as the Internet.

[0044] <Second embodiment> According to the communication system, communication method, and sensor unit of the second embodiment of the present invention, the lock on vending machines such as gacha machines can be released by the terminal device of the user who has completed payment, allowing the user to purchase products. In particular, the sensor unit can be retrofitted to existing vending machines, in which case the lock on the vending machine can be released and products can be purchased by the user's terminal device. In addition, in a digital virtual vending machine, a function equivalent to the sensor unit can be retrofitted by a plug-in. This will be described in detail below.

[0045] FIG. 8 shows the configuration of a communication system according to a second embodiment of the present invention, and a description will be given of the same.

[0046] As shown in the figure, the communication system according to this embodiment is composed of a first server device 200 consisting of a database server device, a second server device 300 equipped with a payment means, a third server device 400, vending machines 800A to 800C... (hereinafter, collectively referred to as 800), sensor units 500A to 500C... (hereinafter, collectively referred to as 500), which are installed in the vending machines 800A to 800C..., a user's terminal device 600, and a group of virtual server devices 700 that realizes a hash pool. The communication system may be realized by any combination of some of these components. As the user's terminal device 600, various devices such as a smartphone, a tablet terminal, or a node-type personal computer can be adopted.

[0047] Hereinafter, a processing procedure performed by the wireless communication system will be described with reference to the conceptual diagram of Fig. 9. This also corresponds to the communication method according to this embodiment.

[0048] The user's terminal device 600 captures an image of the two-dimensional code attached to the vending machine 800, acquires the vending machine's ID, acquires location information at the time of image capture, and transmits this information to the first server device 200 to request acquisition of encrypted data related to unlocking the vending machine 800. The first server device 200 determines whether the acquired vending machine's ID and location information match the recorded information, and if they match, transmits product information about the products sold by the vending machine to the terminal device 600. This product information is displayed in a selectable manner on the user's terminal device 600, and the desired product is identified, allowing the user to proceed with the payment procedure.

[0049] A payment request from the user's terminal device 600 is sent to the second server device 300 that realizes the selected payment method, and after the second server device 300 executes the payment process, the payment token is sent to the first server device 200. When the second server device 200 receives the payment token, it generates a hash value by hashing the sensor information using a hash function and sends it to the user's terminal device 600. When the user's terminal device 600 receives the hash value, it makes a search request based on the received hash value to the virtual server device group 700 that realizes the hash pool. When the virtual server device group 700 receives the search request, it checks whether the hash value exists, and if it exists, it sends the public key to the third server device 400. The third server device 400 generates an unlocking code, encrypts the unlocking code with the public key, and sends the encrypted data to the terminal device 600.

[0050] In this way, the terminal device 600 wirelessly communicates with the sensor unit 500 of the vending machine 800 via wireless means such as Bluetooth (registered trademark) and transmits encrypted data to the sensor unit 500, requesting that the vending machine be unlocked. On the vending machine side, the sensor unit 500 determines whether the encrypted data is valid, and if it is determined to be valid, unlocks the vending machine 800. In this way, the user obtains a product from the vending machine 800.

[0051] The configuration of the first server device will now be described with reference to Fig. 10. The first server device is, for example, a database server device.

[0052] As shown in the figure, the first server device 200 has a control unit 201, a communication unit 202, and a storage unit 203. The control unit 201, the communication unit 202, and the storage unit 203 are communicatively connected via a bus. In addition to these components, the first server device 200 may have an input unit such as a keyboard or a mouse, and a display unit such as a liquid crystal display for displaying various information.

[0053] The communication unit 202 is realized by, for example, a network interface card (NIC) or the like, and is a communication interface that is connected to a communication network 900 such as the Internet in a wired or wireless manner and communicates with the terminal device 600 and the like.

[0054] The storage unit 203 is realized by, for example, a semiconductor memory element such as a random access memory (RAM) or a flash memory, a hard disk drive (HDD), an optical disk device, or the like, and stores in advance the programs to be executed by the control unit 201. The storage unit 203 also has a vending machine information storage unit 204, a product information storage unit 205, and a sensor information storage unit 206.

[0055] More specifically, the vending machine information storage unit 204 stores the vending machine ID, location information related to the installation location of the vending machine, product IDs of handled products, etc. in association with each other. The product information storage unit 205 stores the product ID and detailed information related to the product (model name, unit price, quantity, etc.) in association with each other. The sensor information storage unit 20 stores the sensor ID of the sensor unit 500, location information (location), the vending machine ID of the vending machine in which it is installed, etc. in association with each other.

[0056] The control unit 201 is realized by a CPU (Central Processing Unit), MPU (Micro Processing Unit), etc., and functions as a transmission unit 201a, a reception unit 201b, a product information identification unit 201c, and a hash generation unit 201d by executing a program stored in the storage unit 203. The control unit 201 may be configured by an integrated circuit such as an ASIC (Application Specific Integrated Circuit) or an FPGA (Field Programmable Array).

[0057] The transmitting unit 201a transmits, for example, the product information in the product information storage unit 205 and the hash value generated by the hash generating unit 201d to the user's terminal device 600 via the communication unit 202. The receiving unit 201b receives, via the communication unit 202, the vending machine ID and location information sent from the user's terminal device 600, the payment token sent from the second server device 300, and the like. Then, the product information identifying unit 201c identifies the product ID of the handled product by referring to the vending machine information storage unit 204 based on the vending machine ID sent from the user's terminal device 600, and identifies the product information by referring to the product information storage unit 205 based on the product ID. The hash generating unit 201d hashes the sensor information stored in the sensor information storage unit 206 using a hash function to generate a hash value.

[0058] FIG. 11 shows the configuration of the second server device, which will be described.

[0059] As shown in the figure, the second server device 300 has a control unit 301, a communication unit 302, and a storage unit 303. The control unit 301, the communication unit 302, and the storage unit 203 are communicatively connected via a bus. In addition to these components, the second server device 300 may have an input unit such as a keyboard or a mouse, and a display unit such as a liquid crystal display for displaying various information.

[0060] The communication unit 302 is realized by, for example, a NIC, and is a communication interface that is connected to a communication network 900 such as the Internet by wire or wirelessly and communicates with the terminal device 600, etc. The storage unit 303 is realized by, for example, a semiconductor memory element such as a RAM or a flash memory, a HDD, or an optical disk device, and stores a program to be executed by the control unit 301 in advance. The storage unit 303 also stores payment information. The control unit 301 is realized by, for example, a CPU, an MPU, etc., and functions as a transmission unit 301a, a reception unit 301b, and a payment processing unit 301c by executing a program stored in the storage unit 303. The control unit 301 may be configured by an integrated circuit such as an ASIC or an FPGA.

[0061] The transmitting unit 301a transmits, for example, a payment token to the first server device 200 via the communication unit 302. The receiving unit 301b receives a payment request sent from the user's terminal device 600 via the communication unit 302. The payment processing unit 301c performs payment processing based on the payment request. The result of the payment processing is stored in the memory unit 303 as payment information.

[0062] FIG. 12 shows the configuration of the third server device, which will be described.

[0063] As shown in the figure, the third server device 400 has a control unit 401, a communication unit 402, and a storage unit 403. The control unit 401, the communication unit 402, and the storage unit 403 are communicatively connected via a bus. In addition to these components, the third server device 400 may have an input unit such as a keyboard or a mouse, and a display unit such as a liquid crystal display for displaying various information.

[0064] The communication unit 402 is realized by, for example, a NIC, and is a communication interface that is connected to a communication network 900 such as the Internet by wire or wirelessly and communicates with the terminal device 600, etc. The storage unit 403 is realized by, for example, a semiconductor memory element such as a RAM or a flash memory, a HDD, or an optical disk device, and stores in advance the program to be executed by the control unit 401. The control unit 401 is realized by, for example, a CPU, an MPU, etc., and functions as a transmission unit 401a, a reception unit 401b, a code generation unit 401c, and an encryption processing unit 401d by executing the program in the storage unit 403. The control unit 401 may be configured by an integrated circuit such as an ASIC or an FPGA.

[0065] The transmitting unit 401a transmits, for example, encrypted data generated by the encryption processing unit 401d to the user terminal device 600 via the communication unit 402. The receiving unit 401b receives a public key sent from the virtual server device group 700 via the communication unit 402. The code generating unit 401c generates an unlocking code. Then, the encryption processing unit 401d encrypts the unlocking code with the public key to generate encrypted data.

[0066] FIG. 13 shows the configuration of the terminal device.

[0067] As shown in the figure, the terminal device 600 has a control unit 601, a communication unit 602, an operation unit 603, a display unit 604, an imaging unit 605, and a storage unit 606. The units 601 to 606 are connected to each other so as to be able to communicate with each other via a control bus. The communication unit 602 is realized by, for example, an NIC or the like, and is a communication interface that is connected to a communication network 4 such as the Internet by wire or wirelessly and communicates with the first server device 200 and the like.

[0068] The operation unit 603 is realized by a mouse, a keyboard, etc., and accepts various operation inputs from the user. The display unit 604 is realized by a liquid crystal display, etc., and performs various displays. The operation unit 603 and the display unit 604 may be integrated into a touch panel. The imaging unit 605 images a two-dimensional code or the like attached to the vending machine 800. The storage unit 606 is realized by, for example, a semiconductor memory element such as a RAM or a flash memory, a HDD, or an optical disk device, and stores the programs executed by the control unit 601.

[0069] The control unit 601 is realized by a CPU, an MPU, or the like, and functions as a transmission unit 601a, a reception unit 601b, a code analysis unit 601c, a location information acquisition unit 601d, and a request unit 601e by executing a program stored in a storage unit 606. The control unit 601 may be configured by an integrated circuit such as an ASIC or an FPGA.

[0070] More specifically, the transmission unit 601a transmits the vending machine ID obtained by capturing an image of the two-dimensional code attached to the vending machine 800 by the imaging unit 605, and further by analyzing the code analysis unit 601c, and the location information obtained by location information acquisition 601d to the first server device 200 via the communication unit 602. The reception unit 601b receives encrypted data and the like sent from the third server device 400 via the communication unit 602. The code analysis unit 601c analyzes the two-dimensional code captured by the imaging unit 605 and acquires the vending machine ID. The location information acquisition unit 601d acquires location information of the terminal device 600 (or the vending machine 800) at the time of capturing the image by means of a global positioning system (GPS) or Bluetooth (registered trademark) Low Energy (BLE). Then, the request unit 601e issues a request for unlocking to the sensor unit 500 based on the operation of the operation unit 603.

[0071] The configuration of the sensor unit will be described with reference to Fig. 14. The sensor unit is a module installed in the vending machine 800.

[0072] As shown in the figure, the sensor unit 500 mounted on the vending machine 800 has a control unit 501 that controls the entire system, a communication unit 502, and a storage unit 503. The communication unit 502 is a communication interface that is connected to a communication network 4 such as the Internet by wire or wirelessly, or communicates with a user's terminal device 600, the first server device 200, and the like by short-range wireless communication such as Bluetooth (registered trademark). The storage unit 503 is realized by a semiconductor memory element such as a RAM or a flash memory, and stores a program executed by the control unit 501. Furthermore, the storage unit 503 stores generated codes, encrypted data, generated hashes, and the like.

[0073] The control unit 501 is realized by a CPU or the like, and functions as a transmitting unit 501a, a receiving unit 501b, a code generating unit 501c, an encryption processing unit 501d, a hash generating unit 501e, an unlocking unit 501f, and a management unit 501g, etc., by executing programs stored in the memory unit 503.

[0074] The transmitting unit 501a transmits the generated public key to the virtual server device group 700 that realizes the hash pool via the communication unit 502. The receiving unit 501b receives the encrypted data transmitted from the user's terminal device 600 via the communication unit 502. The code generating unit 501c generates a variable number unlocking code. Here, the variable number means that the code generated by a predetermined algorithm is changed each time.

[0075] The encryption processing unit 501d generates a public key and a private key based on, for example, public-key cryptography, and associates a hash value, which will be described later, with the public key as necessary. Furthermore, if necessary, the variable number unlocking code is encrypted with the public key. Generally, in public-key cryptography, the public key is made public, and the receiver holds a private key that pairs with the public key, and decrypts the received content with the private key as necessary, but in this embodiment, the sensor unit 500 is both the sender and the receiver. The public-key cryptography has three algorithms, a key generation algorithm, an encryption algorithm, and a decryption algorithm, and key generation, encryption, and decryption are performed based on these algorithms.

[0076] More specifically, the key generation algorithm generates and outputs a public key / private key pair. The encryption algorithm receives as input a public key and a bit string called plaintext (in this example, a variable number unlocking code), generates and outputs ciphertext (encrypted data). And the decryption algorithm receives as input a private key and ciphertext (encrypted data), generates and outputs plaintext (in this example, a variable number unlocking code).

[0077] The hash generation unit 501e hashes the sensor information (sensor ID, location information, etc.) using a hash function and outputs a hash value. The unlocking unit 501g judges whether the encrypted data sent from the user's terminal device 600 is correct or not, and releases (unlocks) the lock if the encrypted data matches the encrypted data (or the variable number unlocking code) held by the user. Here, releasing the lock means, for example, in the case of a gacha vending machine, releasing the lock on the drive system related to product discharge and discharging the product. The management unit 501h associates the public key generated by the encryption processing unit 501d with the hash value generated by the hash generation unit 501e, stores them in the storage unit 503, and manages them.

[0078] Hereinafter, a processing procedure performed by the wireless communication system will be described in detail with reference to the flowchart of Fig. 15. This also corresponds to the communication method according to this embodiment.

[0079] The user's terminal device 600 captures the two-dimensional code attached to the vending machine 800 with the imaging unit 605, and the code analysis unit 601c analyzes the image to obtain the vending machine ID of the vending machine (S1), the location information acquisition unit 601d acquires location information at the time of image capture using means such as GPS or GLE (S2), and the transmission unit 601a transmits the vending machine ID and location information to the first server device via the communication unit 602, thereby requesting the acquisition of encrypted data related to unlocking the vending machine 800 (S3).

[0080] In the first server device 200, the receiving unit 201b receives the vending machine ID and location information via the communication unit 202 (S4), and the product information identification unit 201c determines whether the acquired vending machine ID and location information match the information recorded in the vending machine information storage unit 204.If they match, the product information regarding the products sold by the vending machine is read from the product information storage unit 205 (S5), and the transmitting unit 201a transmits the product information in HTML format or the like to the user's terminal device 600 via the communication unit 202 (S6).

[0081] In the user's terminal device 600, when the receiving unit 601b receives the product information via the communication unit 602 (S7), the product information is displayed on the display unit 604 along with the payment method so that it can be selected. When the desired product is identified by operating the operation unit 603, the request unit 601e makes a payment request to the second server device 300 via the communication unit 602 (S8).

[0082] When the receiving unit 301b of the second server device 300 receives a payment request via the communication unit 302 (S9), the payment processing unit 301c performs payment processing related to the electronic payment (S10), and the transmitting unit 301a transmits a payment token via the communication unit 302 to the first server device 200, proving that the electronic payment has been completed (S11).

[0083] In the first server device 200, when the receiver 201b receives the payment token via the communication unit 202 (S12), the hash generator 201d generates a hash value by hashing the sensor information (sensor ID, sensor location, etc.) stored in the sensor information storage unit 206 using a hash function, and the transmitter 201a transmits the hash value to the user's terminal device 600 via the communication unit 202 (S13). Note that the hash function used by the hash generator 201d for hashing is the same as the hash function used by the hash generator 501e of the sensor unit 501, and the sensor information to be hashed is also the same, so that it is possible to generate the same hash value as that on the sensor unit 501 side.

[0084] When the receiving unit 601b of the user terminal device 600 receives the hash value via the communication unit 602 (S14), the requesting unit 601e makes a search request based on the received hash value to the virtual server device group 700 that realizes the hash pool via the communication unit 602 (SS15). When the virtual server device group 700 receives this search request, it checks whether the hash value exists, and if it exists, it transmits the public key to the third server device 400 (S16).

[0085] In the third server device 400, when the receiving unit 401b receives the public key via the communication unit 402 (S17), the code generating unit 401c generates a variable number unlocking code, the encryption processing unit 401d encrypts the unlocking code with the public key based on the encryption logic, and the transmitting unit 401a transmits the encrypted data to the terminal device 600 via the communication unit 402 (S18). Note that the encryption logic used for the encryption process in the third server device 400 is the same as the encryption logic used in the sensor unit 500. Also, the code generating logic used in the code generating unit 401c is the same as that used in the sensor unit 500.

[0086] When the receiving unit 601b of the user's terminal device 600 receives the encrypted data via the communication unit 602 (S19), the requesting unit 601e makes a sensor unlock request by transmitting the encrypted data via the communication unit 602 to the sensor unit 500 implemented in the vending machine 800 by short-range wireless communication such as Bluetooth (registered trademark) (S20).

[0087] On the vending machine side 800, the transmission section 501a of the sensor unit 500 receives the encrypted data via the communication section 502 (S21), and the lock release section 501f judges whether the encrypted data is correct, and if the encrypted data is judged to be correct, the lock of the vending machine 800 is released (S22). In this way, the user obtains a product from the vending machine 800.

[0088] The success or failure of the encrypted data may be determined by generating a variable number unlocking code by the code generating unit 501c in the sensor unit 500, and comparing the encrypted data encrypted by the encryption logic in the encryption processing unit 501d with the received encrypted data. Alternatively, the received encrypted data may be decrypted by the decryption logic of the encryption processing unit 501d to obtain a variable number unlocking code, which may then be compared with the variable number unlocking code generated by the code generating unit 501c.

[0089] As described above, according to the second embodiment, the user's terminal device is only provided with the hash value and encrypted data generated based on the sensor information, so that the variable number unlocking code can be prevented from leaking onto the Web, realizing more secure transactions.

[0090] In addition, the first server device consisting of a database server etc., and the third server device which generates the encrypted data use the same logic as the sensor unit for generating hashes and encrypted data, so there is no need to send and receive variable number unlocking codes or hashes, which also makes transactions more secure.

[0091] In addition, the encrypted data is generated by the third server device receiving the public key from the hash pool and encrypting the variable number unlocking code with the public key, so that the leakage of the encrypted data can be prevented. In other words, it is possible to ensure the advantage of preventing the leakage of the encrypted data.

[0092] Furthermore, the hash value is generated on the first server device and sent to the user's terminal device, and the encrypted data is generated on the third server device and sent to the user's terminal device, so the distribution of information expands the targets of attack, which also helps to deter attacks.

[0093] Furthermore, because the public keys are managed by the hash pool, in the event of an attack, it is possible to immediately move the area and rebuild, making it possible to manage the public keys more securely.

[0094] Furthermore, the encrypted data generated by the third server device is updated in a short period of time, so that even if an attack occurs, the probability of the data being decrypted is virtually zero.

[0095] Also, since it is based on hash management, it can be said that, probabilistically, the more the system grows, the higher the security becomes.

[0096] Even if a sensor unit installed in a vending machine is physically attacked, the damage will only affect that vending machine and will not affect other machines, making it possible to deal with the attack immediately.

[0097] Although the second embodiment of the present invention has been described above, this embodiment is not limited to this and various improvements and modifications are possible. For example, it goes without saying that the sensor units installed in each vending machine may form a sensor network in a predetermined unit, and the sensor units with a sufficient remaining power supply may be made to control the uploading of public keys to the hash pool, thereby realizing power saving.

[0098] The present invention also includes the following aspects. (1) a first step in which a terminal device captures an image of a two-dimensional code attached to a vending machine to obtain a vending machine ID, obtains location information, and transmits the vending machine ID and the location information to a first server device to request acquisition of encrypted data related to unlocking the vending machine; a second step of the first server device determining whether the vending machine ID and the location information match stored information, and if they match, transmitting product information to the terminal device; a third step of a second server device receiving a payment request from the terminal device, executing a payment process, and transmitting a payment token to the first server device; a fourth step of the first server device receiving the payment token, hashing the sensor information using a hash function to generate a hash value, and transmitting the hash value to the terminal device; a fifth step of the terminal device making a search request to a group of virtual server devices that realize a hash pool by using the hash value; a sixth step of the virtual server device group receiving the search request, confirming the existence of the hash value, and if the hash value exists, transmitting the public key to a third server device; a seventh step of the third server device generating an unlocking code, encrypting the unlocking code with the public key, and transmitting the encrypted data to the terminal device; an eighth step of requesting unlocking of the vending machine by transmitting the encrypted data to a sensor unit of the vending machine by the terminal device; a ninth step in which the sensor unit judges whether the encrypted data is correct, and unlocks the vending machine if the encrypted data is judged to be correct. Communication methods. (2) In the ninth step, the sensor unit generates an unlocking code, encrypts the unlocking code, and compares the encrypted data with the encrypted data sent from the terminal device to determine whether the encrypted data is valid or not. The communication method described in (1) above. (3) The unlocking code is a variable number unlocking code. The communication method according to (1) or (2) above. (4) a terminal device that captures an image of a two-dimensional code attached to a vending machine, acquires a vending machine ID, acquires location information at the time of capturing the image, transmits the vending machine ID and the location information to a first server device, and also makes a search request to a group of virtual server devices that realize a hash pool using the hash value transmitted from the first server device, and further transmits encrypted data transmitted from a third server device to a sensor unit of the vending machine, thereby requesting unlocking of the vending machine; a first server device that determines whether the vending machine ID and location information match stored information, and if they match, transmits product information to the terminal device, and when a payment token is received, generates a hash value by hashing the stored sensor information using a hash function, and transmits the hash value to the terminal device; a virtual server group that, upon receiving a search request using the hash value from the terminal device, confirms the existence of the hash value, and if the hash value exists, transmits a public key to a third server device; a third server device that generates an unlocking code, encrypts the unlocking code with the public key, and transmits the encrypted data to the terminal device; a sensor unit that generates the public key and transmits it to the virtual server device group, and when the encrypted data is received from the terminal device, judges whether the encrypted data is correct, and unlocks the vending machine if the encrypted data is judged to be correct. Communication systems. (5) The sensor unit generates an unlocking code, encrypts the unlocking code, and compares the encrypted data with the encrypted data sent from the terminal device to determine whether the encrypted data is correct or not. A communication system according to (4) above. (6) The unlocking code is a variable number unlocking code. A communication system according to (4) or (5) above. (7) A sensor unit that is installed in a vending machine and unlocks the vending machine based on encrypted data sent from a terminal device, an encryption processing unit that generates a public key and a private key and encrypts an unlocking code with the public key; a hash generation unit that hashes sensor information including at least a sensor ID and sensor location information using a hash function and outputs a hash value; a management unit that stores and manages at least the public key generated by the encryption processing unit and the hash value generated by the hash generation unit in a storage unit in association with each other; an unlocking unit that determines whether the encrypted data sent from the terminal device is correct, and unlocks the vending machine if the encrypted data matches the encrypted data generated by the encryption processing unit; Sensor unit. [Explanation of symbols]

[0099] 1...wireless communication system, 10...wireless communication terminal, 20...wireless communication network, 30...vending machine, 40...server device. 100...control unit, 110...UI unit, 110a...display unit, 110b...operation unit, 110c...imaging unit, 120...first wireless communication unit, 130...second wireless communication unit, 140...storage unit, 142...volatile storage unit, 144...non-volatile storage unit, 144a...purchase support program, 150...bus, 200...first server device, 300...second server device, 400...third server device, 500...sensor unit, 600...terminal device, 700...virtual server device group, 800...vending machine.

Claims

1. A first step in which a terminal device captures an image of a two-dimensional code to obtain a vending machine ID of the vending machine, obtains location information of the terminal device at the time of capturing the image by a GPS, and transmits the vending machine ID and the location information to a first server device, thereby requesting acquisition of encrypted data related to unlocking the vending machine; a second step of the first server device determining whether the vending machine ID and the location information match stored information, and if they match, transmitting product information to the terminal device; a third step of a second server device receiving a payment request from the terminal device, executing a payment process, and transmitting a payment token to the first server device; a fourth step in which the first server device receives the payment token, hashes the sensor information using a hash function to generate a hash value, and transmits the hash value to the terminal device; a fifth step in which the terminal device sends a search request to a group of virtual server devices that realize a hash pool by using the hash value; a sixth step of the virtual server group receiving the search request, confirming the existence of the hash value, and if the hash value exists, transmitting the public key to a third server device; a seventh step in which the third server device generates an unlocking code, encrypts the unlocking code with the public key, and transmits the encrypted data to the terminal device; an eighth step of requesting unlocking of the vending machine by transmitting the encrypted data to a sensor unit of the vending machine by the terminal device; a ninth step in which the sensor unit judges whether the encrypted data is correct, and unlocks the vending machine if the encrypted data is judged to be correct. Communication methods.

2. When the first server device receives location information indicating a current location from the terminal device, the first server device identifies vending machines installed within a predetermined range centered on the location indicated by the location information, and transmits location information indicating the installation locations of the vending machines to the terminal device; When the terminal device receives the location information from the first server device, the terminal device displays the current location on a map image and also displays the current location of the vending machine. The communication method according to claim 1 .

3. a terminal device that captures an image of a two-dimensional code to acquire a vending machine ID of the vending machine, acquires location information of a terminal device at the time of capturing the image by a GPS, transmits the vending machine ID and the location information to a first server device, and also makes a search request to a group of virtual server devices that realize a hash pool using the hash value transmitted from the first server device, and further transmits encrypted data transmitted from a third server device to a sensor unit of the vending machine, thereby requesting unlocking of the vending machine; a first server device that determines whether the vending machine ID and location information match stored information, and if they match, transmits product information to the terminal device, and when a payment token is received, generates a hash value by hashing the stored sensor information using a hash function, and transmits the hash value to the terminal device; a virtual server group that, upon receiving a search request using the hash value from the terminal device, confirms the presence of the hash value, and if the hash value exists, transmits a public key to a third server device; a third server device that generates an unlocking code, encrypts the unlocking code with the public key, and transmits the encrypted data to the terminal device; a sensor unit that generates the public key and transmits it to the virtual server device group, and when the encrypted data is received from the terminal device, judges whether the encrypted data is correct, and unlocks the vending machine if the encrypted data is judged to be correct. Communication systems.

4. When the first server device receives location information indicating a current location from the terminal device, the first server device identifies vending machines installed within a predetermined range centered on the location indicated by the location information, and transmits location information indicating the installation location of the vending machine to the terminal device; When the terminal device receives the location information from the first server device, the terminal device displays the current location on a map image and also displays the current location of the vending machine. The communication system according to claim 3.

Images