Information processing method and information processing system

Abstract

To provide an information processing method and an information processing system for implementing cardless transactions.SOLUTION: In an information processing method, an ATM installed in a store receives a selection for withdrawal from a user. An application server generates a two-dimensional code corresponding to a store ID that identifies a store, an ATM ID that identifies an ATM, and a transaction ID that identifies a transaction, in accordance with the withdrawal selection on the ATM, and transmits the generated two-dimensional code to the ATM. The ATM displays the transmitted two-dimensional code. A core banking server receives the store ID, the ATM ID, the transaction ID read from the two-dimensional code displayed on the ATM through a user terminal, and an account number.SELECTED DRAWING: Figure 12

Description

[Technical field]

[0001] The present invention relates to an information processing method and an information processing system. [Background technology]

[0002] Technologies for improving the convenience of ATMs (Automatic Teller Machines) have been disclosed. For example, a technology has been disclosed in which a financial institution issues a temporary cash card, allowing a user to immediately use an account at an ATM (Patent Document 1). [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Publication No. 9-97370 Summary of the Invention [Problem to be solved by the invention]

[0004] However, the technology disclosed in Patent Document 1 requires users to carry multiple cash cards issued for each financial institution or account, which requires effort to issue cash cards and also poses the risk of losing the cash cards.

[0005] In one aspect, an object of the present invention is to provide an information processing method, etc. for realizing cardless transactions. [Means for solving the problem]

[0006] An information processing method according to one aspect includes: accepting a withdrawal selection from a user through an ATM installed in a store; a second server computer, in response to the withdrawal selection at the ATM, generates a two-dimensional code corresponding to a store ID that identifies the store, an ATM ID that identifies the ATM, and a transaction ID that identifies the transaction; the second server computer transmits the generated two-dimensional code to the ATM, which then displays the transmitted two-dimensional code; a first server computer receives the store ID, ATM ID, transaction ID, and account number read from the two-dimensional code displayed on the ATM by the user's terminal device; the first server computer receives the store ID, ATM ID, transaction ID, and PIN transmitted from the ATM; the first server computer determines whether the PIN for the account number corresponding to the received transaction ID matches the received PIN; and if the first server computer determines that the PINs match, it transmits information indicating permission for the withdrawal. Effect of the Invention

[0007] In one aspect, an information processing method for realizing cardless transactions can be provided. [Brief description of the drawings]

[0008] [Figure 1] FIG. 1 is a schematic diagram showing a configuration example of the present system. [Diagram 2] FIG. 2 is a block diagram showing an example of the configuration of an accounting system server. [Diagram 3] FIG. 2 is a block diagram showing a configuration example of an application server. [Figure 4] FIG. 2 is a block diagram showing a configuration example of a terminal. [Diagram 5] FIG. 2 is a block diagram showing an example of the configuration of an ATM. [Figure 6] FIG. 11 is an explanatory diagram showing the data layout of a user DB. [Figure 7] FIG. 2 is an explanatory diagram showing the data layout of a transaction history DB. [Figure 8] FIG. 11 is an explanatory diagram showing a data layout of an application user DB. [Figure 9] 13 is an example of a screen displayed on the terminal. [Figure 10] 13 is an example of a screen displayed by an ATM. [Figure 11] 3 is a flowchart showing the flow of processing of the present system. [Figure 12] 3 is a flowchart showing the flow of processing of the present system. [Figure 13] 3 is a flowchart showing the flow of processing of the present system. [Figure 14] 3 is a flowchart showing the flow of processing of the present system. [Figure 15] 10 is a flowchart showing a process flow of the present system in the second embodiment. [Figure 16] 10 is a flowchart showing a process flow of the present system in the second embodiment. [Figure 17] 11 is a flowchart showing a process flow of the present system in the third embodiment. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0009] In this embodiment, a system for realizing cardless transactions will be described with reference to the drawings.

[0010] [Embodiment 1] In this system, instead of a cash card issued by a financial institution, a user uses an ATM function by starting a specific application on a terminal owned by the user. The ATM function of this system includes general ATM functions such as deposit, withdrawal, remittance, transfer, and balance inquiry, but in this embodiment, we will exemplify a case where a user uses the withdrawal function to withdraw cash.

[0011] 1 is a schematic diagram showing a configuration example of the present system. The present system includes a first server computer 10, a second server computer 20, a terminal device 30, and an ATM 40. Each device is connected to a communication network NW such as the Internet or a LAN (Local Area Network).

[0012] The first server computer 10 is an accounting system server computer that manages the accounts of each user (hereinafter referred to as the accounting system server 10). The accounting system server 10 authenticates the user and executes processing related to the execution or cancellation of financial transactions. In this embodiment, the processing is described as being performed by one server computer, but the processing may be distributed among multiple server computers.

[0013] The second server computer 20 is a server computer including a server computer for applications constituting the present system and a server computer for Internet banking (hereinafter referred to as the application server 20). The application server 20 generates a two-dimensional code. In this embodiment, the two-dimensional code generated is, for example, a QR code (registered trademark). In this embodiment, the processing is described as being performed by one server computer, but the processing may be distributed among a plurality of server computers.

[0014] The terminal device 30 is an information terminal owned by a user, and may be a smartphone, a wearable device, a tablet terminal, or the like (hereinafter, referred to as terminal 30). The terminal 30 functions in place of a cash card, and reads a two-dimensional code displayed by an ATM 40 to utilize the ATM functions.

[0015] The ATM 40 is installed in a store such as a financial institution, supermarket, or convenience store, and provides various financial services to users. When the accounting system server 10 and the application server 20 identify the ATM 40, they do so by combining the following two pieces of identification information: One is identification information that identifies the store in which the ATM 40 main body is installed (hereinafter referred to as a store ID), and the other is identification information that identifies the ATM 40 main body (hereinafter referred to as an ATM ID).

[0016] 2 is a block diagram showing an example of the configuration of the accounting system server 10. The accounting system server 10 includes a control unit 11, a main memory unit 12, a communication unit 13, and an auxiliary memory unit 14.

[0017] The control unit 11 is a processor such as one or more CPUs (Central Processing Units), MPUs (Micro-Processing Units), GPUs (Graphics Processing Units), or quantum processors, and executes various information processes.

[0018] The main memory unit 12 is a temporary storage area such as SRAM (Static Random Access Memory) or DRAM (Dynamic Random Access Memory), and temporarily stores data necessary for the control unit 11 to execute processes.

[0019] The communication unit 13 is a communication interface for connecting to a communication network NW such as the Internet or a LAN.

[0020] The auxiliary storage unit 14 is a memory such as an SSD (Solid State Drive) or an HDD (Hard Disk Drive). The auxiliary storage unit 14 stores a program 140 (program product) for causing the accounting server 10 to execute processes, a user DB (data base) 150, a transaction history DB 160, and other data.

[0021] Note that the accounting server 10 may include a reading unit for reading a portable storage medium 10a, and may read the program 140 from the portable storage medium 10a. Further, the accounting server 10 may download the program 140 from another computer via the communication network NW.

[0022] FIG. 3 is a block diagram showing a configuration example of the application server 20. The application server 20 includes a control unit 21, a main memory unit 22, a communication unit 23, and an auxiliary storage unit 24.

[0023] The control unit 21 is a processor such as one or more CPUs, MPUs, GPUs, or quantum processors, and executes various information processes.

[0024] The main memory unit 22 is a temporary storage area such as an SRAM or a DRAM, and temporarily stores data necessary for the control unit 21 to execute processing.

[0025] The communication unit 23 is a communication interface for connecting to a communication network NW such as the Internet or a LAN.

[0026] The auxiliary storage unit 24 is a memory such as an SSD or an HDD, etc. The auxiliary storage unit 24 stores a program 240 (program product) that causes the application server 20 to execute processes, an application user DB 250, and other data.

[0027] The application server 20 may include a reading unit for reading the portable storage medium 20a and may read the program 240 from the portable storage medium 20a. The application server 20 may also download the program 240 from another computer via the communication network NW.

[0028] 4 is a block diagram showing an example of the configuration of the terminal 30. The terminal 30 includes a control unit 31, a storage unit 32, a communication unit 33, an input unit , a display unit 35, and an imaging unit .

[0029] The control unit 31 is one or more processors such as a CPU, an MPU, a GPU, or a quantum processor, and executes various types of information processing.

[0030] The storage unit 32 is a temporary storage area such as an SRAM or a DRAM, and temporarily stores data required for the control unit 31 to execute processing.

[0031] The communication unit 33 is a communication interface for connecting to a communication network NW such as the Internet or a LAN.

[0032] The input unit 34 is an input interface such as a touch panel or mechanical operation buttons, and receives operation input from the user. The input unit 34 may be a microphone that collects voice commands from the user.

[0033] The display unit 35 is a display screen such as a liquid crystal display or an organic EL (Electro Luminescence) display, and displays images such as transition screens of applications, which will be described later (see FIG. 9).

[0034] The imaging unit 36 ​​is a camera equipped with an imaging element such as a charge-coupled device (CCD) sensor or a complementary metal oxide semiconductor (CMOS) sensor, and captures an image of a two-dimensional code or the like.

[0035] 5 is a block diagram showing an example of the configuration of the ATM 40. The ATM 40 includes a control unit 41, a main memory unit 42, a communication unit 43, an auxiliary memory unit 44, an input unit 45, and a display unit 46.

[0036] The control unit 41 is one or more processors such as a CPU, an MPU, a GPU, or a quantum processor, and executes various types of information processing.

[0037] The main memory unit 42 is a temporary storage area such as an SRAM or a DRAM, and temporarily stores data required for the control unit 41 to execute processing.

[0038] The communication unit 43 is a communication interface for connecting to a communication network NW such as the Internet or a LAN.

[0039] The auxiliary storage unit 44 is a memory such as an SSD or an HDD, etc. The auxiliary storage unit 44 stores programs that cause the ATM 40 to execute processes and other data.

[0040] The auxiliary storage unit 44 stores a store ID and an ATM ID. Furthermore, the auxiliary storage unit 44 may store a transaction ID that identifies a transaction executed at the ATM 40. The transaction ID is identification information that identifies a transaction executed at the ATM 40, and is, for example, a serial number that indicates the order of transactions executed by the ATM 40. In this embodiment, it is assumed that the application server 20 assigns a transaction ID to each transaction.

[0041] The input unit 45 is an input interface such as a touch panel or mechanical operation buttons, and receives operation input from the user.

[0042] The display unit 46 is a display screen such as a liquid crystal display or an organic EL display, and displays images such as transition screens, which will be described later (see FIG. 10).

[0043] 6 is an explanatory diagram showing the data layout of the user DB 150. The user DB 150 stores information about the accounts of each user opened at a financial institution. The user DB 150 is a DB that stores user IDs, login IDs, user information, account numbers, and passwords.

[0044] The user ID field stores identification information for identifying a user who uses financial services. The login ID field stores a login ID for logging in to the app. The user information field stores personal information of a user who has opened an account (e.g., name, address, telephone number, date of birth, etc.). The account number field stores identification information for identifying an account. The PIN field stores identification information (e.g., a four-digit number string) set for using financial services.

[0045] 7 is an explanatory diagram showing the data layout of the transaction history DB 160. The transaction history DB 160 chronologically stores information transmitted from the application server 20, the terminal 30, or the ATM 40. The transaction history DB 160 is a DB that stores fields for transaction date and time, processing content, sender, store ID, ATM ID, transaction ID, login ID, account number, transaction type, amount, and PIN.

[0046] The transaction date and time field stores, in chronological order, the dates and times when various processes were performed by the user operating the terminal 30 or the ATM 40. The process content field stores various processes (e.g., logging in) performed by operating the terminal 30 or the ATM 40. The sender field stores the name of the device (e.g., a terminal) that sent information to the accounting system server 10.

[0047] The store ID field stores a store ID. The ATM ID field stores an ATM ID. The transaction ID field stores a transaction ID. The login ID field stores a user's login ID. The account number field stores a user's account number.

[0048] The transaction type field stores the financial service selected by the user, such as withdrawal, deposit, or transfer. The amount field stores the amount (numeric value) entered by the user through the terminal 30. The PIN field stores the user's PIN.

[0049] In addition, in FIG. 7, the login ID stored in the record of "processing content: login" is used in "match determination between login IDs" which will be described later in the second embodiment.

[0050] 8 is an explanatory diagram showing a data layout of the application user DB 250. The application user DB 250 is a DB that stores login IDs, passwords, and login dates and times.

[0051] In the login ID field, the login ID for logging in to the application is stored. In the password field, the password set to confirm the identity when logging in to the application is stored. In the login date and time field, the date and time when the user logged in to the application is stored. The login date and time field is rewritten by the control unit 21 each time the user logs in.

[0052] Hereinafter, the screen transitions of the terminal 30 and the ATM 40 will be described.

[0053] FIG. 9 is an example of a screen displayed by the terminal 30. Following the user's operations hereinafter, the control unit 31 of the terminal 30 displays the screens of FIGS. 9A to 9C on the display unit 35.

[0054] FIG. 9A is an example of a login screen. When the user starts the application, as shown in FIG. 9A, the display unit 35 displays the login screen.

[0055] The user inputs the login ID and password for logging in to the application through the input unit 34. When the authentication of the identity is successful, the control unit 31 changes the screen of the display unit 35 from FIG. 9A to FIG. 9B.

[0056] FIG. 9B is an example of a transaction selection screen. As shown in FIG. 9B, the display unit 35 displays a list of selectable transactions (for example, deposit, withdrawal, transfer, etc.), an account number input field, an amount input field, a transaction execution button, and a cancel button.

[0057] The user selects the withdrawal button, inputs the account number, and inputs the withdrawal amount (for example, 10,000 yen) through the input unit 34. After the user confirms the transaction details, the user selects the transaction execution button through the input unit 34. The control unit 31 accepts the input and selection from the user and changes the screen of the display unit 35 from FIG. 9B to FIG. 9C.

[0058] 9C is an example of a two-dimensional code reading screen. As shown in FIG. 9C, the display unit 35 displays a predetermined frame for reading the two-dimensional code displayed on the ATM 40.

[0059] The user reads the two-dimensional code by performing an operation so that the two-dimensional code fits within a predetermined frame. The imaging unit 36 ​​reads the two-dimensional code, and the control unit 31 stores the information contained in the two-dimensional code. The ATM 40 displays a PIN input screen, which will be described later, on the display unit 46 (see FIG. 10C).

[0060] Fig. 10 shows an example of a screen displayed by the ATM 40. In accordance with subsequent operations by the user, the ATM 40 displays the screens shown in Fig. 10A to Fig. 10C.

[0061] Fig. 10A is an example of the first selection screen. As shown in Fig. 10A, the display unit 46 displays a predetermined guidance message for the user and a selection button such as smartphone withdrawal or electronic money charge as a list of financial services. When the user selects the smartphone withdrawal button through the input unit 45, the control unit 41 transitions the screen of the display unit 46 from Fig. 10A to Fig. 10B.

[0062] Fig. 10B is an example of a two-dimensional code display screen. As shown in Fig. 10B, the display unit 46 displays a predetermined guidance message for the user, the two-dimensional code transmitted from the application server 20, and a "Next button." After the imaging unit 36 ​​of the terminal 30 reads the two-dimensional code, the user selects the "Next button" through the input unit 45 of the ATM 40. When the control unit 41 accepts the selection of the "Next button," it transitions the screen of the display unit 46 from Fig. 10B to Fig. 10C.

[0063] Fig. 10C is an example of a PIN input screen. As shown in Fig. 10C, the display unit 46 displays a predetermined guidance message for the user, the input PIN, and an input button. When the user inputs the PIN through the input unit 45, the accounting system server 10 checks the PIN. If it is confirmed that the PINs match, the control unit 41 of the ATM 40 dispenses a predetermined amount of money.

[0064] As described above, by using the terminal 30 instead of a cash card, the user can carry out cardless transactions with a high degree of convenience.

[0065] Next, the flow of processing by this system will be described with reference to Figures 11 to 14. Figures 11 to 14 are flow charts showing the flow of processing by this system.

[0066] When logging in to an application, the user inputs a login ID and a password through the terminal 30. The control unit 31 of the terminal 30 accepts the input from the user (step S101). The control unit 31 transmits the input login ID and password to the application server 20 (step S102).

[0067] Control unit 21 receives the login ID and password transmitted from terminal 30 (step S103). Control unit 21 reads out the password corresponding to the received login ID from application user DB 250. Control unit 21 determines whether or not the user is the correct user based on the received password and the password read out from application user DB 250 (step S104).

[0068] If it is determined that the passwords do not match (step S104: NO), the control unit 21 transmits a message to the terminal 30 indicating that the user is not authorized to log in, and returns the process to step S101. The user again inputs the login ID and password through the terminal 30.

[0069] On the other hand, if it is determined that the passwords match (step S104: YES), the control unit 21 authenticates the user and transmits a message to the terminal 30 indicating that the user is authorized to log in (step S105). The control unit 31 receives the message indicating that the login is authorized (step S106). The control unit 21 obtains the login date and time when the login was authorized, and stores the login date and time in the application user DB 250.

[0070] A user who has been permitted to log in selects the Withdrawal button via terminal 30 and inputs an account number and an amount to be withdrawn. Control unit 31 accepts the selection and input from the user (step S107). Control unit 31 stores in memory unit 32 the login ID, account number, the fact that the Withdrawal button was selected, and the amount to be withdrawn.

[0071] Next, the user operates the ATM 40 to select the smartphone withdrawal button. The control unit 41 of the ATM 40 accepts the selection of the smartphone withdrawal button from the user (step S108). The control unit 41 reads out the shop ID and ATM ID stored in the auxiliary storage unit 44 and transmits them to the application server 20 (step S109).

[0072] The control unit 21 receives the store ID and ATM ID transmitted from the ATM 40 (step S110). The control unit 21 receives requests from the multiple ATMs 40 installed in each store at any time. Based on the request, the control unit 21 assigns a transaction ID that identifies a transaction at the ATM 40. The control unit 21 generates a two-dimensional code based on the transaction ID and the store ID and ATM ID transmitted from the ATM 40 (step S111).

[0073] In addition, after the control unit 41 assigns the transaction ID in step S109, the store ID, ATM ID, and transaction ID may be transmitted.

[0074] The control unit 21 transmits the generated two-dimensional code to the ATM 40 (step S112). The control unit 41 receives the two-dimensional code transmitted from the application server 20 (step S113). The control unit 41 displays the received two-dimensional code on the display unit 46 (step S114).

[0075] The user holds the imaging unit 36 ​​of the terminal 30 over the two-dimensional code displayed by the ATM 40. The control unit 31 of the terminal 30 reads the two-dimensional code photographed by the imaging unit 36 ​​(step S115). The control unit 31 obtains the date and time when the two-dimensional code was read (hereinafter, referred to as the transaction date and time) and the store ID, ATM ID, and transaction ID contained in the two-dimensional code (step S116). The control unit 41 of the ATM 40 stores the transaction date and time in the auxiliary storage unit 44.

[0076] The control unit 31 reads out the login ID, account number, the information indicating that the withdrawal button was selected, and the withdrawal amount from the memory unit 32 (step S117). The control unit 31 adds the login ID, account number, the information indicating that the withdrawal button was selected, and the withdrawal amount read in step S117 to the acquired transaction date and time, store ID, ATM ID, and transaction ID, and transmits this information to the accounting system server 10 (step S118). Here, the transaction date and time, store ID, ATM ID, transaction ID, login ID, account number, the information indicating that the withdrawal button was selected, and the withdrawal amount are collectively referred to as "linked information."

[0077] The transaction type of "withdrawal button selected" read out in step S117 is not limited to this, and may be, for example, a deposit or transfer transaction in response to the user's operation in step S107.

[0078] The control unit 11 of the accounting system server 10 receives the linkage information sent from the terminal 30 (step S119). The control unit 11 stores the linkage information in the transaction history DB 160 (step S120).

[0079] In step S115, the control unit 31 reads the two-dimensional code displayed by the ATM 40. After that, the user selects the "Next button" displayed on the display unit 46. The control unit 41 of the ATM 40 accepts the selection from the user and displays a PIN input screen (step S121).

[0080] The user inputs a PIN through the input unit 45 of the ATM 40. The control unit 41 accepts the input of the PIN from the user (step S122). The control unit 41 transmits the accepted input PIN, as well as the store ID, ATM ID, transaction ID, and transaction date and time stored in the auxiliary storage unit 44 to the application server 20 (step S123). The control unit 21 of the application server 20 receives the PIN, store ID, ATM ID, transaction ID, and transaction date and time (step S124).

[0081] The control unit 21 transmits the received PIN, store ID, ATM ID, transaction ID, and transaction date and time to the accounting system server 10 (step S125). The control unit 11 of the accounting system server 10 receives the PIN, store ID, ATM ID, transaction ID, and transaction date and time transmitted from the application server 20 (step S126). The control unit 11 stores the PIN, store ID, ATM ID, transaction ID, and transaction date and time transmitted from the application server 20 in a record of the transaction history DB 160 (step S127).

[0082] In addition, although step S123 shows a case where the control unit 41 transmits information via the application server 20, the present invention is not limited to this. The control unit 41 may transmit information directly to the accounting system server 10 without passing through the application server 20.

[0083] The control unit 11 identifies the transaction of the corresponding user based on the transaction ID or transaction date and time received in step S126 and the "association information including the transaction ID" stored in step S120. The control unit 11 reads the account number corresponding to the matching transaction ID from the transaction history DB 160. The control unit 11 reads the PIN associated with the read account number from the user DB 150. The control unit 11 determines whether the read PIN matches the PIN sent from the application server 20 (step S128).

[0084] If it is determined that the PINs do not match (step S128: NO), the user is not the actual user, and a notice to cancel the withdrawal is sent to the application server 20 (step S129). The control unit 21 receives the notice to cancel the withdrawal (step S130).

[0085] The control unit 21 transmits a message to the ATM 40 to the effect that the withdrawal is to be canceled (step S131). The control unit 41 receives the message to the ATM 40 to the effect that the withdrawal is to be canceled (step S132). The control unit 41 displays a message to the effect that the withdrawal is to be canceled on the display unit 46 (step S133). Each device ends the series of processes.

[0086] If it is determined that the PINs match (step S128: YES), the control unit 11 authenticates the user. The control unit 11 stores the transaction date and time, transaction ID, transaction type, and amount in the transaction history DB 160 (step S134).

[0087] The control unit 11 transmits permission information permitting the withdrawal and the withdrawal amount to the application server 20 (step S135). The control unit 21 receives the permission information permitting the withdrawal and the withdrawal amount (step S136). The control unit 21 transmits the received permission information and withdrawal amount to the ATM 40 (step S137).

[0088] The control unit 41 receives the permission information permitting the withdrawal and the withdrawal amount (step S138). The control unit 41 outputs a predetermined amount based on the received withdrawal amount (step S139). The user removes cash from the ATM 40. Each device ends the series of processes.

[0089] If a user attempts to execute a transaction after a predetermined time has elapsed since logging in, the transaction may be canceled in order to reduce security risks. Specifically, the control unit 11 of the accounting system server 10 determines whether to cancel the transaction based on the "login date and time" stored in the application user DB250 and the "transaction date and time" stored in the transaction history DB160.

[0090] In step S128, the case where the withdrawal is stopped when the PIN numbers do not match is illustrated, but the present invention is not limited to this. For example, the withdrawal may be stopped even if an amount greater than the user's deposit amount is input as the withdrawal amount. In this case, the control unit 11 causes the terminal 30 to display a screen for the user to re-input the withdrawal amount.

[0091] As described above, in this system, the ATM 40 does not generate the two-dimensional code, but the application server 20 generates the two-dimensional code. Therefore, the ATM 40 that must be installed in multiple stores can be configured simply, enabling efficient system maintenance and operation. In addition, since the application server 20 has a function for generating two-dimensional codes, the load on the accounting system server 10 that manages bank accounts can be distributed. Furthermore, since the application server 20 links various information transmitted from multiple ATMs 40, the load on the accounting system server 10 can be reduced.

[0092] As described above, according to the first embodiment, it is possible to realize cardless transactions with reduced security risks.

[0093] [Embodiment 2] In the first embodiment, a form in which withdrawal permission is given when it is determined that the PINs match has been described. In the second embodiment, a form in which the accounting system server 10 determines whether the login IDs match, and then also determines whether the PINs match and outputs withdrawal permission will be described. Note that the same reference numerals will be used to denote content that overlaps with the first embodiment, and description thereof will be omitted.

[0094] 15 and 16 are flowcharts showing the flow of processing in the system according to the second embodiment.

[0095] When a user logs in to the application, the processes until receiving a "login permission" from the application server 20 (steps S101 to S106) are the same as those in the first embodiment.

[0096] A user who has been permitted to log in selects the Withdrawal button via terminal 30 and inputs an account number and an amount to be withdrawn. Control unit 31 accepts the selection and input from the user (step S201). Control unit 31 stores the login ID, account number, the fact that the Withdrawal button was selected, and the amount to be withdrawn in memory unit 32.

[0097] The control unit 31 transmits the login ID, account number, a message indicating that the Withdrawal button was selected, and the withdrawal amount to the accounting system server 10 (step S202). The control unit 11 of the accounting system server 10 receives the login ID, account number, a message indicating that the Withdrawal button was selected, and the withdrawal amount transmitted from the terminal 30 (step S203). The control unit 11 stores information including the login ID in the transaction history DB 160 (step S204).

[0098] Next, the user operates the ATM 40 to select the smartphone withdrawal button. The control unit 41 of the ATM 40 accepts the selection of the smartphone withdrawal button from the user (step S205). The control unit 41 reads out the shop ID and ATM ID stored in the auxiliary storage unit 44 and transmits them to the application server 20 (step S206).

[0099] The control unit 21 receives the store ID and the ATM ID transmitted from the ATM 40 (step S207). The control unit 21 generates a two-dimensional code based on the transaction ID and the store ID and the ATM ID transmitted from the ATM 40 (step S208).

[0100] The control unit 21 transmits the generated two-dimensional code to the ATM 40 (step S209). The control unit 41 receives the two-dimensional code transmitted from the application server 20 (step S210). The control unit 41 displays the received two-dimensional code on the display unit 46 (step S211).

[0101] The user holds the imaging unit 36 ​​of the terminal 30 over the two-dimensional code displayed by the ATM 40. The control unit 31 of the terminal 30 reads the two-dimensional code captured by the imaging unit 36 ​​(step S212). The control unit 31 obtains the transaction date and time, and the store ID, ATM ID, and transaction ID contained in the two-dimensional code (step S213). The control unit 41 of the ATM 40 stores the transaction date and time in the auxiliary storage unit 44.

[0102] The control unit 31 reads out the "login ID, account number, the fact that the withdrawal button was selected, and the withdrawal amount" stored in the memory unit 32 (step S214). The control unit 31 sends linkage information including the login ID to the accounting system server 10 (step S215). The control unit 11 receives the linkage information including the login ID (step S216). The control unit 11 stores the linkage information including the login ID in the transaction history DB 160 (step S217).

[0103] The control unit 11 determines whether or not the login IDs match based on the login ID received in step S203 and the "association information including the login ID" stored in step S216 (step S218).

[0104] If it is determined that the login IDs do not match (step S218: NO), the control unit 11 transmits information to the application server 20 to cancel the transaction (step S219). On the other hand, if it is determined that the login IDs match (step S218: YES), the control unit 11 proceeds to a process of determining whether the passwords match. The subsequent processes are the same as those from step S128 described in the first embodiment.

[0105] As described above, according to the second embodiment, two-step authentication using a login ID and a PIN is performed, thereby reducing security risks that arise from not issuing cash cards.

[0106] [Embodiment 3] In the third embodiment, instead of selecting the "Next button" in Fig. 9B, when it is determined that the two-dimensional code has been read, an automatic transition to Fig. 9C will be described. In this case, the control unit 41 of the ATM 40 does not need to display the "Next button" shown in Fig. 9B. Note that the same reference numerals are used to denote the same contents as in the first embodiment, and the description thereof will be omitted.

[0107] FIG. 17 is a flowchart showing the flow of processing in the system according to the third embodiment.

[0108] In step S112 of the first embodiment, after the control unit 21 of the application server 20 transmits the two-dimensional code, the control unit 21 requests the accounting system server 10 for a determination result of "whether the terminal 30 has read the two-dimensional code" (step S301). The control unit 11 of the accounting system server 10 determines whether the terminal 30 has read the two-dimensional code based on whether the information included in the two-dimensional code (store ID, ATM ID, and transaction ID) has been received (step S302).

[0109] When the control unit 11 determines that the terminal 30 has read the two-dimensional code (step S302: YES), it transmits to the application server 20 a notice that the two-dimensional code has been read (step S303). On the other hand, when the control unit 11 determines that the terminal 30 has not read the two-dimensional code (step S302: NO), it waits until the store ID, ATM ID, and transaction ID are transmitted from the terminal 30.

[0110] The control unit 21 receives a notification from the accounting system server 10 that the two-dimensional code has been read (step S304). The control unit 21 transmits a notification to the ATM 40 that the two-dimensional code has been read, so that the ATM 40 displays a screen for inputting a PIN number (step S305). The control unit 41 of the ATM 40 displays a screen for inputting a PIN number on the display unit 46 (step S306).

[0111] As described above, according to the third embodiment, the screen can automatically transition to the PIN input screen without the user having to select the "Next" button, which further improves the convenience of cardless transactions.

[0112] The embodiments disclosed herein are illustrative in all respects and are not restrictive. The technical scope of the present invention is defined based on the claims, not the meaning disclosed above, and includes all modifications within the meaning and scope equivalent to the claims.

[0113] The matters described in each embodiment may be combined with each other. In addition, the independent claims and dependent claims described in the claims may be combined with each other in any and all combinations regardless of the citation format. Furthermore, the claims use a format in which a claim cites two or more other claims (multiple claim format), but this is not limited to this. A multiple claim (multi-multi claim) that cites at least one multiple claim may also be used. [Explanation of symbols]

[0114] 10 First server computer (accounting server) 10a Removable storage media 11 Control section 12 Main memory 13. Communications Department 14 Auxiliary storage 140 Programs (Program Products) 150 User DB 160 Transaction History DB 20 Second server computer (application server) 20a Removable storage media 21 Control section 22 Main memory 23 Communications Department 24 Auxiliary storage 240 Programs (Program Products) 250 App User DB 30 Terminal equipment (terminal) 31 Control Unit 32 Storage section 33 Communications Department 34 Input section 35 Display section 36 Imaging unit 40 ATM 41 Control section 42 Main memory 43 Communications Department 44 Auxiliary storage 45 Input section 46 Display section

Claims

1. Accept withdrawal options from users through ATMs installed in stores, the second server computer generates a two-dimensional code corresponding to a store ID for identifying the store, an ATM ID for identifying the ATM, and a transaction ID for identifying the transaction in response to a withdrawal selection at the ATM; The second server computer transmits the generated two-dimensional code to the ATM, The ATM displays the transmitted two-dimensional code, a first server computer receives a store ID, an ATM ID, and a transaction ID read from a two-dimensional code displayed on the ATM by the user's terminal device, and an account number input by the user through the user's terminal device; the first server computer receives the store ID, the ATM ID, the transaction ID, and the PIN number transmitted from the ATM; when the transaction ID received from the user's terminal device matches the transaction ID received from the ATM, the first server computer identifies an account number corresponding to the matching transaction ID based on the account number received from the user's terminal device; The first server computer determines whether the PIN of the identified account number matches the received PIN; The first server computer transmits information indicating that the withdrawal is permitted if it is determined that the two PINs match. Information processing methods.

2. The first server computer receives a login ID, an account number, and a withdrawal amount transmitted from a terminal device of the user who is currently logged in; the first server computer receives a store ID, an ATM ID, and a transaction ID read from a two-dimensional code displayed on the ATM by a terminal device of the logged-in user, and a login ID and an account number input by the user through the terminal device of the user; After determining that the login IDs match, the first server computer determines whether the PIN for the account number corresponding to the received store ID, ATM ID, and transaction ID matches the received PIN; When it is determined that the PINs match, the first server computer transmits information indicating a withdrawal permission for the withdrawal amount to the second server computer; The second server computer transmits the received withdrawal permission information to the ATM. The information processing method according to claim 1 .

3. The first server computer determines whether the user's terminal device has read the two-dimensional code based on whether the first server computer has received the store ID, the ATM ID, and the transaction ID read from the two-dimensional code by the user's terminal device; The second server computer acquires a result of the determination made by the first server computer as to whether or not the two-dimensional code has been read, The second server computer causes the ATM to display a screen for inputting a PIN based on the result of the determination.

3. The information processing method according to claim 1.

4. An information processing system including a first server computer, a second server computer, and an ATM installed in a store, The ATM control unit of the ATM Accept the withdrawal option from the user, The second control unit of the second server computer generating a two-dimensional code corresponding to a store ID for identifying the store, an ATM ID for identifying the ATM, and a transaction ID for identifying the transaction in response to a withdrawal selection at the ATM; The generated two-dimensional code is transmitted to the ATM. The ATM control unit Display the transmitted two-dimensional code, The first control unit of the first server computer receiving a store ID, an ATM ID, and a transaction ID read from a two-dimensional code displayed on the ATM by the user's terminal device, and an account number input by the user through the user's terminal device; receiving a store ID, an ATM ID, a transaction ID, and a PIN number transmitted from the ATM; If the transaction ID received from the user's terminal device matches the transaction ID received from the ATM, an account number corresponding to the matching transaction ID is identified based on the account number received from the user's terminal device; Determine whether the PIN for the identified account number matches the received PIN; If it is determined that the PINs match, a message is sent indicating that the withdrawal is permitted. Information processing system.

Images