Settlement device and electronic settlement program

Abstract

Reduce the unnecessary trouble incurred to the user in electronic payment. 【Solution means】The terminal device 1[q] includes an information acquisition unit 112 that acquires an offline token KY[q] used for an offline payment process executed in the payment device 3 and offline block information DHY indicating whether the offline payment process in the payment device 3 can be executed from the payment device 3 when communication between the payment device 3 and the terminal device 1[q] is difficult, and a display control unit 114 that causes the display device 13 to display an offline code image GY[q] based on the offline token KY[q] when the offline block information DHY indicates that the payment device 3 can execute the offline payment process.

Description

Technical Field

[0001] The present invention relates to a settlement device and an electronic settlement program.

Background Art

[0002] In a terminal device such as a smartphone (an example of a "terminal"), a technology related to electronic settlement is widespread, in which a code image based on a token supplied from a settlement device is displayed, and the displayed code image is read by a store terminal such as a POS terminal installed in a store or the like. For example, Patent Document 1 discloses a technology related to electronic settlement in which, when communication between a terminal device and a settlement device is difficult, a code image is displayed on the terminal device based on an offline token supplied from the settlement device and stored in the terminal device, and information based on the code image is transmitted from the store terminal that has read the displayed code image to the settlement device, and the settlement device performs settlement processing.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] However, in the conventional technology, there was a case where a code image was displayed on the terminal device even though the settlement device could not execute settlement processing due to the blockage of the function for performing settlement processing in the settlement device. In this case, unnecessary trouble was imposed on the user of the terminal device.

[0005] The present invention has been made in view of the above circumstances, and one of the problems to be solved is to provide a technology that can reduce unnecessary trouble caused to the user in electronic settlement as compared with the conventional technology.

Means for Solving the Problems

[0006] In order to solve the above problems, an electronic payment program according to the present invention causes a processor of a terminal communicable with a payment device to be used for an offline token used in offline payment processing executed in the payment device when communication between the payment device and the terminal is difficult, and offline block information indicating whether or not the offline payment processing can be executed in the payment device, and an acquisition unit that acquires the information from the payment device, and a display control unit that causes a display device to display a code image based on the offline token when the offline block information indicates that the payment device can execute the offline payment processing.

[0007] Further, an electronic payment program according to the present invention causes a processor of a terminal communicable with a payment device to be used for a token used in payment processing executed in the payment device, and block information indicating whether or not the payment processing can be executed in the payment device, and an acquisition unit that acquires the information from the payment device, and a display control unit that causes a display device to display a code image based on the token when the block information indicates that the payment device can execute the payment processing.

[0008] Further, a payment device according to the present invention is a payment device communicable with a terminal, and includes a payment unit that executes offline payment processing when communication between the terminal and the payment device is difficult, offline block information indicating whether or not the offline payment processing can be executed in the payment unit, and a supply unit that supplies the offline token used in the offline payment processing to the terminal. The terminal is capable of displaying a code image based on the offline token when the offline block information indicates that the payment device can execute the offline payment processing.

Advantages of the Invention

[0009] According to the present invention, unnecessary labor for the user in electronic payment is reduced as compared with the conventional technology.

Brief Description of the Drawings

[0010]

Figure 1

Figure 2

Figure 3

Figure 4

Figure 5

Figure 6

Figure 7

Figure 8

Figure 9

Figure 10

Figure 11

Figure 12

Figure 13

Figure 14

Figure 15

Figure 16

Figure 17

Figure 18

Figure 19

Figure 20

Figure 21

Figure 22

Figure 23

Figure 24

Figure 25

Figure 26

Figure 27

Figure 28

Figure 29

Figure 30

Embodiments for Carrying Out the Invention

[0011] Hereinafter, embodiments for carrying out the present invention will be described with reference to the drawings. In each figure, the dimensions and scales of each part are appropriately different from the actual ones. In addition, the embodiments described below are preferred specific examples of the present invention, and thus various technically preferable limitations are imposed. However, the scope of the present invention is not limited to these embodiments unless otherwise specified in the following description to limit the present invention.

[0012] <A. First Embodiment> Hereinafter, the first embodiment of the present invention will be described.

[0013] <A.1. Overview of Electronic Payment System Sys> While referring to FIGS. 1 to 3, the overview of the electronic payment system Sys will be described.

[0014] FIG. 1 is a block diagram showing an example of the configuration of the electronic payment system Sys.

[0015] As shown in FIG. 1, the electronic payment system Sys includes a payment device 3, a store device 5 capable of communicating with the payment device 3 via a network NW, and one or more terminal devices 1 capable of communicating with the payment device 3 via the network NW, and provides services related to electronic payment to the user U of the terminal device 1.

[0016] In the present embodiment, as an example, it is assumed that the electronic payment system Sys includes a plurality of terminal devices 1. Specifically, in the present embodiment, it is assumed that the electronic payment system Sys includes Q terminal devices 1. Here, the value Q is a natural number satisfying "Q≧2". Further, hereinafter, among the Q terminal devices 1 included in the electronic payment system Sys, the q-th terminal device 1 is referred to as a terminal device 1[q]. Here, the variable q is a natural number satisfying "1≦q≦Q". Further, hereinafter, the user U using the terminal device 1[q] is referred to as a user U[q].

[0017] The terminal device 1 (an example of a "terminal") is a portable terminal such as a smartphone or a tablet terminal, and is carried by the user U. In the present embodiment, an electronic payment program PG-T is installed in the terminal device 1. By executing the electronic payment program PG-T, the terminal device 1 activates an electronic payment application (hereinafter sometimes referred to as a "payment app"). Then, when the user U of the terminal device 1 receives a service at a store where the store device 5 is installed, the user U uses the payment app operating on the terminal device 1 to display a code image GG based on the token KK acquired from the payment device 3 on the terminal device 1, whereby the price of the service can be paid by electronic payment.

[0018] Hereinafter, the code image GG displayed on the terminal device 1 will be referred to as the code image GG. The code image GG is, for example, a barcode or a two-dimensional code. In the present embodiment, as an example, a case where the code image GG is a barcode is assumed. Also, hereinafter, the token KK supplied from the payment device 3 to the terminal device 1 will be referred to as the token KK.

[0019] Note that in the present embodiment, it is assumed that the store where the store device 5 is installed is a physical store existing in the real space, that is, a real store. Also, in the present embodiment, it is assumed that the service provided in the store is the sale of goods or the provision of services. That is, in the present embodiment, when the user U of the terminal device 1 receives the provision of goods or services at a store where the store device 5 is installed, the user U can pay the money as the price of the goods or services by electronic payment.

[0020] The store device 5 is, for example, a POS (Point of Sales) register. When the user U[q] of the terminal device 1[q] pays the price for the service provided by the store by electronic payment, the store device 5 reads the code image GG[q] displayed on the terminal device 1[q]. Next, the store device 5 generates settlement information DP[q] by adding store settlement information to the settlement code CC[q] which is the value indicated by the read code image GG[q], and supplies the generated settlement information DP[q] to the settlement device 3. Here, the store settlement information is information including, for example, store identification information for uniquely identifying the store that provided the service to the user U[q], the settlement amount that the user U[q] should pay as the price for the service provided to the user U[q], and the settlement date and time which is the date and time when the payment is made.

[0021] When the settlement information DP[q] is supplied from the store device 5, the settlement device 3 executes a settlement process based on the settlement information DP[q]. Here, the settlement process is a process of determining the payment from the user U[q] of the terminal device 1[q] to the store as the price for the service received by the user U[q] of the terminal device 1[q] from the store.

[0022] Also, in the present embodiment, as an example, it is assumed that the settlement device 3 manages the usage fee of the terminal device 1[q] by the user U[q]. Here, the usage fee of the terminal device 1[q] is a fee including, for example, the purchase price of the terminal device 1[q] and the communication fee generated when the terminal device 1[q] communicates. And in the present embodiment, the settlement device 3 deducts the usage fee of the terminal device 1[q] from the bank account of the user U[q] registered in the settlement device 3 in advance on the payment date of each month. Note that hereinafter, the usage fee of the terminal device 1[q] may be referred to as "phone bill". Also, in this embodiment, as an example, it is assumed that the settlement device 3 manages the electronic money of the user U[q] that can be used in the terminal device 1[q]. In this embodiment, the electronic money managed by the settlement device 3 is so-called prepaid electronic money, and it is assumed that when the user U[q] charges the electronic money in advance, the user can use the electronic money corresponding to the charged amount. However, the present invention is not limited to such a mode. The electronic money managed by the settlement device 3 may be so-called postpaid electronic money that can be used within a predetermined upper limit. Also, in this embodiment, as an example, it is assumed that the settlement device 3 can communicate with a credit card server operated by a credit card company, and the user U[q] can settle using the credit card of the user U[q] issued by the credit card company.

[0023] And in this embodiment, the settlement device 3 can perform a settlement process corresponding to the user U[q] of the terminal device 1[q] by the payment method selected by the user U[q] from among three types of payment methods: combined telephone bill payment, prepaid balance payment, and credit card payment. Here, the combined telephone bill payment is a payment method in which the user U[q] pays the store by combining it with the usage fee of the terminal device 1[q]. The prepaid balance payment is a payment method in which the user U[q] pays the store with the electronic money of the user U[q] managed by the settlement device 3. The credit card payment is a payment method in which the user U[q] pays the store with the credit card of the user U[q].

[0024] Also, in this embodiment, as described above, the settlement device 3 pays out the token KK[q] in response to a request from the terminal device 1[q], and supplies the paid-out token KK[q] to the terminal device 1[q].

[0025] The following is an example of the operation of the electronic payment system Sys according to the present embodiment when the terminal device 1[q] and the payment device 3 can communicate with each other and the electronic payment system Sys provides a service related to electronic payment to the user U[q] of the terminal device 1[q] (hereinafter, may be referred to as "online electronic payment"). First, when the user U[q] of the terminal device 1[q] receives a service at a store where the store device 5 is installed and makes a payment for the price of the service by online electronic payment, the user U[q] operates the terminal device 1[q] to start a payment application on the terminal device 1[q]. Next, when the payment application is started on the terminal device 1[q], the terminal device 1[q] requests a token KK[q] from the payment device 3. Next, in response to the request from the terminal device 1[q], the payment device 3 supplies the token KK[q] to the terminal device 1[q]. Next, the terminal device 1[q] generates a payment code CC[q] based on the token KK[q] supplied from the payment device 3 and displays a code image GG[q] representing the payment code CC[q]. Next, the store device 5 reads the code image GG[q] displayed on the terminal device 1[q] to generate payment information DP[q] including the payment code CC[q] indicated by the code image GG[q] and store payment information, and supplies the payment information DP[q] to the payment device 3. Next, the payment device 3 executes a payment process based on the payment information DP[q] supplied from the store device 5 to confirm the payment from the user U[q] to the store.

[0026] Note that in the above online electronic payment, the payment device 3 issues a token KK[q] in response to a request from the terminal device 1[q]. Therefore, the online electronic payment can be executed only when the terminal device 1[q] and the payment device 3 can communicate with each other, and cannot be executed when it is difficult for the terminal device 1[q] and the payment device 3 to communicate. Thus, the electronic payment system Sys according to the present embodiment executes a payment process using the payment information DP[q] generated based on the token KK[q] stored in the terminal device 1[q] when it is difficult for the terminal device 1[q] and the payment device 3 to communicate with each other.

[0027] The following is an example of the operation of the electronic payment system Sys according to the present embodiment when the terminal device 1[q] and the payment device 3 have difficulty communicating and the electronic payment system Sys provides a service related to electronic payment to the user U[q] of the terminal device 1[q] (hereinafter, may be referred to as "offline electronic payment"). First, when the user U[q] of the terminal device 1[q] receives service at a store where the store device 5 is installed and pays the price of the service by offline electronic payment, the user U[q] operates the terminal device 1[q] to start a payment application on the terminal device 1[q]. Next, when the payment application is started, the terminal device 1[q] generates a payment code CC[q] based on the token KK[q] stored in the terminal device 1[q], and displays a code image GG[q] representing the payment code CC[q]. Next, the store device 5 reads the code image GG[q] displayed on the terminal device 1[q] to generate payment information DP[q] including the payment code CC[q] indicated by the code image GG[q] and store payment information, and supplies the payment information DP[q] to the payment device 3. Next, the payment device 3 executes a payment process based on the payment information DP[q] supplied from the store device 5 to confirm the payment from the user U[q] to the store.

[0028] As described above, the electronic payment system Sys according to the present embodiment can execute two types of electronic payments, i.e., online electronic payment when the terminal device 1[q] and the payment device 3 can communicate, and offline electronic payment when the terminal device 1[q] and the payment device 3 have difficulty communicating. Therefore, the convenience of the user U[q] of the terminal device 1[q] can be improved as compared with a mode where only online electronic payment is possible.

[0029] Note that in the following, the token KK[q] obtained by the terminal device 1 from the payment device 3 in online electronic payment and used for generating the payment code CC[q] is referred to as the online token KX[q], and the token KK[q] stored in the terminal device 1[q] in offline electronic payment and used for generating the payment code CC[q] may be referred to as the offline token KY[q]. Also, in the following, in online electronic payment, the payment code CC[q] generated by the terminal device 1[q] from the online token KX[q] may be referred to as the online payment code CX[q], and in offline electronic payment, the payment code CC[q] generated by the terminal device 1[q] from the offline token KY[q] may be referred to as the offline payment code CY[q]. Also, in the following, in online electronic payment, the code image GG[q] displayed by the terminal device 1[q] based on the online payment code CX[q] may be referred to as the online code image GX[q], and in offline electronic payment, the code image GG[q] displayed by the terminal device 1[q] based on the offline payment code CY[q] may be referred to as the offline code image GY[q]. Also, in the following, in online electronic payment, the payment process executed by the payment device 3 may be referred to as the online payment process, and in offline electronic payment, the payment process executed by the payment device 3 may be referred to as the offline payment process.

[0030] Figure 2 is a block diagram showing an example of the configuration of the terminal device 1[q].

[0031] As shown in Figure 2, the terminal device 1[q] includes a control device 11, a storage device 12, a display device 13, an input device 14, a communication device 15, and a bus 100 that interconnects these devices.

[0032] The memory device 12 is a recording medium readable by the control device 11. The memory device 12 includes, for example, a volatile memory such as a RAM (Random Access Memory) that functions as a working area of the control device 11, and a non-volatile memory such as an EEPROM (Electrically Erasable Programmable Read-Only Memory) that stores various information, and stores user identification information DID[q], acquired offline token information KYY[q], offline token related information DYY, operator identification token KZ, setting information DS, and electronic payment program PG-T.

[0033] The user identification information DID[q] is identification information for uniquely identifying the user U[q] of the terminal device 1[q] from among Q users U[1] to U[Q] managed by the payment device 3.

[0034] The acquired offline token information KYY[q] is information including one or more offline tokens KY[q] acquired by the terminal device 1[q] from the payment device 3. In this embodiment, it is assumed that the terminal device 1[q] has acquired the offline token KY[q] from the payment device 3 M times during the period from when the payment application was first started (first startup) to the present in the terminal device 1[q]. Here, the value M is a natural number that satisfies "M≧1". And hereinafter, among the M offline tokens KY[q] acquired by the terminal device 1[q] from the payment device 3, the offline token KY[q] acquired from the payment device 3 at the m-th time is referred to as the offline token KY[q][m]. Here, the variable m is a natural number that satisfies "1≦m≦M".

[0035] Thus, in this embodiment, it is assumed that the acquired offline token information KYY[q] includes M offline tokens KY[q][1] to KY[q][M] acquired by the terminal device 1[q] from the payment device 3. However, the present invention is not limited to such a mode. The acquired offline token information KYY[q] only needs to include at least the last acquired offline token KY[q][M] among the M offline tokens KY[q][1] to KY[q][M] acquired by the terminal device 1[q] from the payment device 3. For example, the terminal device 1[q] may delete the offline token KY[q][m] that has expired among the M offline tokens KY[q][1] to KY[q][M] acquired from the payment device 3 (specifically, the offline token KY[q][m] for which the end point of the offline token expiration period information DTY[q][m] shown in the offline token expiration period information DTY[q][m] described later has arrived). Specifically, when the end point of the offline token expiration period TY[q][m] shown in the offline token expiration period information DTY[q][m] included in the offline token related information DYY stored in the storage device 12 is a time in the past compared to the current time (that is, when it has expired), the terminal device 1[q] may delete the offline token KY[q][m] corresponding to the offline token expiration period TY[q][m] indicating expiration from the acquired offline token information KYY[q] (that is, the expired offline token KY[q]). In this case, the acquired offline token information KYY[q] will only include the offline tokens KY[q] within the expiration period. Furthermore, for example, the terminal device 1[q] may delete offline tokens KY[q][1] to KY[q][M-1] other than the most recently acquired offline token KY[q][M] among the M offline tokens KY[q][1] to KY[q][M] acquired from the payment device 3. Specifically, upon acquiring the latest offline token KY[q][M] from the payment device 3, the terminal device 1[q] may delete the offline token KY[q][M-1] acquired previously. In this case, the acquired offline token information KYY[q] will include only the latest offline token KY[q][M].

[0036] The offline token related information DYY includes M pieces of offline token validity period information DTY[q][1] to DTY[q][M] that correspond one-to-one to the M offline tokens KY[q][1] to KY[q][M], M encryption keys KS[q][1] to KS[q][M] that correspond one-to-one to the M offline tokens KY[q][1] to KY[q][M], and offline blockage information DHY. In this embodiment, the offline token related information DYY includes M pieces of offline token validity period information DTY[q][1] to DTY[q][M] and M pieces of encryption keys KS[q][1] to KS[q][M], but the present invention is not limited to this embodiment. The offline token related information DYY may include at least the offline token validity period information DTY[q][M] corresponding to the offline token KY[q][M] acquired last among the M pieces of offline token validity period information DTY[q][1] to DTY[q][M], and the encryption key KS[q][M] corresponding to the offline token KY[q][M] acquired last among the M encryption keys KS[q][1] to KS[q][M]. For example, among the M cryptographic keys KS[q][1] to KS[q][M] obtained by the terminal device 1[q] from the payment device 3, the cryptographic key KS[q][m] corresponding to the expired offline token KY[q][m] (specifically, the cryptographic key KS[q][m] corresponding to the offline token KY[q][m] when the end point of the offline token validity period information DTY[q][m] indicated by the offline token validity period information DTY[q][m] arrives) may be deleted. Specifically, when the end point of the offline token validity period TY[q][m] indicated by the offline token validity period information DTY[q][m] included in the offline token related information DYY stored in the storage device 12 is a time in the past compared to the current time (that is, when the offline token KY[q][m] has expired), the cryptographic key KS[q][m] corresponding to the expired offline token KY[q][m] may be deleted from the offline token related information DYY. In this case, the offline token related information DYY will only include the cryptographic keys KS[q] corresponding to the offline tokens KY[q] within the validity period. Also, for example, among the M cryptographic keys KS[q][1] to KS[q][M] obtained by the terminal device 1[q] from the payment device 3, the cryptographic keys KS[q][1] to KS[q][M - 1] other than the last obtained cryptographic key KS[q][M] may be deleted. Specifically, when the terminal device 1[q] obtains the latest cryptographic key KS[q][M] from the payment device 3, the previously obtained cryptographic key KS[q][M - 1] may be deleted. In this case, the offline token related information DYY will only include the latest cryptographic key KS[q][M].

[0037] The offline token validity period information DTY[q][m] indicates the offline token validity period TY[q][m], which is the period during which the offline token KY[q][m] can be used in offline electronic payment, that is, the validity period of the offline token KY[q][m]. In this embodiment, it is assumed that the offline token validity period TY[q][m] starts from the generation time of the offline token KY[q][m] and ends at the time when the offline token effective time TSY has elapsed since the generation time of the offline token KY[q][m]. Here, in this embodiment, as an example, it is assumed that the offline token effective time TSY is set to "one week". That is, in this embodiment, as an example, it is assumed that the validity period of the offline token KY[q] is one week.

[0038] The encryption key KS[q][m] is information used to generate the offline payment code CY[q] in offline electronic payment.

[0039] The offline block information DHY is information used to determine whether to display the offline code image GY[q] on the terminal device 1[q] in offline electronic payment. Specifically, the offline block information DHY is information indicating whether the settlement device 3 can execute offline payment processing. More specifically, the offline block information DHY may be information indicating whether the function of the settlement device 3 for executing offline payment processing is operating without being blocked.

[0040] The merchant identification token KZ includes merchant identification information DKZ for identifying the settlement merchant that manages the settlement device 3.

[0041] The setting information DS includes token response information DSW, online token validity information DSX, offline token validity information DSY, and update time information DSC.

[0042] The token response information DSW indicates the waiting time of the terminal device 1 (hereinafter referred to as the "token response waiting time TSW", an example of the "first time") from when the terminal device 1 requests the token KK from the payment device 3 (or from when the payment application is launched on the terminal device 1[q]) until the token KK is supplied to the terminal device 1. In the present embodiment, the terminal device 1 waits for the supply of the token KK from the payment device 3 from when the terminal device 1 requests the token KK from the payment device 3 until the token response waiting time TSW elapses. Then, the terminal device 1 stops waiting for the supply of the token KK from the payment device 3 at the timing when the token response waiting time TSW has elapsed since the terminal device 1 requested the token KK from the payment device 3. Here, in the present embodiment, as an example, it is assumed that the token response waiting time TSW is set to "10 seconds". Note that hereinafter, the period from when the terminal device 1 requests the token KK from the payment device 3 until the token response waiting time TSW elapses may be referred to as the token response waiting period TW (an example of the "first period"). Note that the token response waiting period TW is not limited to the period until a certain time elapses after the terminal device 1 requests the token KK from the payment device 3. For example, the token response waiting period TW may be the period from the launch of the payment application to the end of the payment application. In this case, the token response waiting time TSW may be the time duration from the launch of the payment application to the end of the payment application.

[0043] The online token validity information DSX indicates the time length (hereinafter referred to as the "online token valid time TSX") of the period during which the online token KX[q] can be used in online electronic payment (hereinafter referred to as the "online token validity period TX[q]"). In this embodiment, as an example, it is assumed that the online token valid time TSX is set to "5 minutes". However, the present invention is not limited to such a mode. The online token valid time TSX may be any time longer than the token response waiting time TSW. Also, in this embodiment, the online token validity period TX[q] is a period starting from the generation time of the online token KX[q] and ending at the time when the online token valid time TSX has elapsed since the generation time of the online token KX[q].

[0044] The offline token validity information DSY indicates the offline token valid time TSY. As described above, the offline token valid time TSY is the time length of the offline token validity period TY[q][m] during which the offline token KY[q][m] can be used in offline electronic payment. Also, as described above, in this embodiment, as an example, it is assumed that the offline token valid time TSY is set to "1 week". However, the present invention is not limited to such a mode. The offline token valid time TSY may be any time longer than the online token valid time TSX.

[0045] The update time information DSC is information indicating the update unit time TC. Here, the update unit time TC is the update cycle of the terminal time value AG based on the terminal time TG which is the current time managed in the terminal device 1[q]. In the present embodiment, as an example, a case where the update unit time TC is set to "1 minute" is assumed. Also, in the present embodiment, as an example, a case where the terminal time value AG is a value representing the terminal time TG in the order of "minutes" is assumed. For example, in the present embodiment, when the terminal time TG is "18:25:37", the terminal time value AG may be "1825" obtained by deleting "37 seconds" from the terminal time TG. However, the present invention is not limited to such a mode. The update unit time TC may be a time shorter than the offline token valid time TSY. Also, the update unit time TC may be a time shorter than the online token valid time TSX.

[0046] The control device 11 is configured to include a processor. The processor provided in the control device 11 includes, for example, one or more CPUs (Central Processing Unit). However, the processor provided in the control device 11 may include hardware such as a GPU (Graphics Processing Unit), a DSP (Digital Signal Processor), an ASIC (Application Specific Integrated Circuit), a PLD (Programmable Logic Device), an FPGA (Field Programmable Gate Array), in addition to or instead of some or all of the one or more CPUs. The processor provided in the control device 11 can execute the electronic settlement program PG-T stored in the storage device 12 and function as the information transmission unit 111, the information acquisition unit 112, the code generation unit 113, and the display control unit 114 by operating according to the electronic settlement program PG-T.

[0047] The information transmission unit 111, which is an example of a "request unit", transmits, to the settlement device 3 during the token response waiting period TW from the activation of the settlement application in the terminal device 1[q] until the token response waiting time TSW elapses, an online token request for requesting an online token KX[q] and an offline token request for requesting an offline token KY[q]. Also, the information transmission unit 111 transmits, to the settlement device 3 during the token response waiting period TW, an online congestion information request for requesting online congestion information DHX and an offline congestion information request for requesting offline congestion information DHY. Here, the online congestion information DHX is information used to determine whether to display the online code image GX[q] on the terminal device 1[q] in online electronic settlement. Specifically, the online congestion information DHX is information indicating whether the settlement device 3 can execute online settlement processing. More specifically, the online congestion information DHX may be information indicating whether the function of the settlement device 3 for executing online settlement processing is operating without being blocked. Hereinafter, the online congestion information DHX and the offline congestion information DHY may be collectively referred to as congestion information DH.

[0048] The information acquisition unit 112, which is an example of an "acquisition unit", acquires the online token KX[q], the offline token KY[q], the online congestion information DHX, and the offline congestion information DHY supplied from the settlement device 3 in response to a request from the terminal device 1[q].

[0049] The code generation unit 113 generates an online settlement code CX[q] based on the online token KX[q] acquired by the information acquisition unit 112. Also, the code generation unit 113 generates an offline settlement code CY[q] based on the offline token KY[q] acquired by the information acquisition unit 112 and stored in the storage device 12.

[0050] The display control unit 114 causes the display device 13 to display the online code image GX[q] based on the online settlement code CX[q] generated by the code generation unit 113 in online electronic settlement. Also, in offline electronic settlement, the display control unit 114 causes the display device 13 to display the offline code image GY[q] based on the offline settlement code CY[q] generated by the code generation unit 113.

[0051] The display device 13 is hardware for displaying various types of information. As the display device 13, for example, various display panels such as a liquid crystal display panel and an organic EL display panel can be adopted. In the present embodiment, the display device 13 displays various images such as the online code image GX[q] and the offline code image GY[q] under the control of the display control unit 114.

[0052] The input device 14 is hardware for receiving operations from the user U[q] of the terminal device 1[q]. As the input device 14, for example, devices such as a keyboard, a mouse, a microphone, a switch, a button, a sensor, or a combination of these devices can be adopted. Note that the display device 13 and the input device 14 may be integrally configured. In this case, for example, a touch panel may be adopted as the display device 13 and the input device 14.

[0053] The communication device 15 is hardware for communicating with an external device existing outside the terminal device 1[q] via the network NW. In the present embodiment, the information transmission unit 111 transmits various types of information to the settlement device 3 via the communication device 15. Also, the information acquisition unit 112 acquires various types of information from the settlement device 3 via the communication device 15.

[0054] FIG. 3 is a block diagram showing an example of the configuration of the settlement device 3.

[0055] As shown in FIG. 3, the settlement device 3 includes a control device 31, a storage device 32, a communication device 35, and a bus 300 that interconnects these devices.

[0056] The storage device 32 is a recording medium readable by the control device 31. The storage device 32 is configured to include, for example, a volatile memory such as a RAM that functions as a work area of the control device 31, and a non-volatile memory such as an EEPROM that stores various information, and stores user management information DU, online token payout information DKX, offline token payout information DKY, merchant identification information DKZ, settlement management information DKP, setting information DS, and a control program PG-S.

[0057] The user management information DU has Q records that correspond one-to-one with Q users U[1] to U[Q] managed by the settlement device 3. Each record of the user management information DU includes, in addition to the user identification information DID[q] described above, electronic money balance information DPR[q], telephone charge information DTL[q], credit card information DCR[q], point information DPT[q], and user payment information DSH[q].

[0058] The electronic money balance information DPR[q] is information indicating the balance of electronic money owned by the user U[q]. The telephone charge information DTL[q] is information indicating the telephone charge that the user U[q] should pay (that is, the usage fee of the terminal device 1[q]). The credit card information DCR[q] is information regarding the credit card owned by the user U[q] and registered by the user U[q] in the settlement device 3 via the terminal device 1[q]. Specifically, the credit card information DCR[q] indicates, for example, the card number, expiration date, etc. of the credit card owned by the user U[q]. The point information DPT[q] is information regarding the points granted by the settlement device 3 to the user U[q]. In the present embodiment, it is assumed that when the settlement device 3 grants points to the user U[q], the user U[q] can use electronic money in an amount corresponding to the granted points. The user payment information DSH[q] is information indicating the payment method selected by the user U[q].

[0059] The online token payout information DKX has one or more records that correspond one-to-one with one or more online tokens KX paid out by the payment device 3. Each record of the online token payout information DKX includes the online token KX[q] paid out by the payment device 3, the user identification information DID[q] of the user U[q] corresponding to the terminal device 1[q] to which the online token KX[q] was paid out, and information indicating the online token validity period TX[q] corresponding to the online token KX[q] (hereinafter referred to as "online token validity period information DTX[q]").

[0060] The offline token payout information DKY has one or more records that correspond one-to-one with one or more offline tokens KY paid out by the payment device 3. Each record of the offline token payout information DKY includes the offline token KY[q] paid out by the payment device 3, the encryption key KS[q] paid out by the payment device 3 corresponding to the offline token KY[q], the user identification information DID[q] of the user U[q] corresponding to the terminal device 1[q] to which the offline token KY[q] was paid out, and the offline token validity period information DTY[q][m] indicating the offline token validity period TY[q][m] corresponding to the offline token KY[q]. Note that the settlement device 3 may delete records in which the end point of the offline token expiration period TY[q][m] indicated by the offline token expiration period information DTY[q][m] has arrived among the plurality of records included in the offline token payout information DKY. Specifically, when the end point of the offline token expiration period TY[q][m] indicated by the offline token expiration period information DTY[q] is a time in the past relative to the current time (i.e., when the expiration date has passed), the settlement device 3 deletes the offline token KY[q][m] corresponding to the offline token expiration period information DTY[q][m] (i.e., the expired offline token KY[q][m]) among the plurality of offline tokens KY included in the offline token payout information DKY, and may also delete the encryption key KS[q][m] corresponding to the offline token expiration period information DTY[q][m] (i.e., the expired encryption key KS[q][m]) among the plurality of encryption keys KS included in the offline token payout information DKY. In addition, the settlement device 3 may delete records other than the record corresponding to the latest offline token KY[q][M] among the M records corresponding to the M offline tokens KY[q][1] to KY[q][M] paid out corresponding to the user U[q] in the offline token payout information DKY. That is, the settlement device 3 may delete the offline tokens KY[q] other than the last paid-out offline token KY[q][M] among the M offline tokens KY[q][1] to KY[q][M] paid out corresponding to the user U[q] in the offline token payout information DKY. Further, the settlement device 3 may delete the encryption keys KS[q] other than the last paid-out encryption key KS[q][M] among the M encryption keys KS[q][1] to KS[q][M] paid out corresponding to the user U[q] in the offline token payout information DKY.

[0061] The settlement management information DKP has one or more records that correspond one-to-one with one or more electronic settlements executed in the electronic settlement system Sys. Each record of the settlement management information DKP includes settlement information DP[q] corresponding to each electronic settlement.

[0062] The control device 31 is configured to include a processor. The processor provided in the control device 31 is configured to include, for example, one or more CPUs. However, the processor provided in the control device 31 may be configured to include hardware such as a GPU, a DSP, an ASIC, a PLD, an FPGA, etc., in addition to one or more CPUs, or instead of some or all of the one or more CPUs. The processor provided in the control device 31 executes the control program PG-S stored in the storage device 32 and operates according to the control program PG-S, thereby being able to function as the information supply unit 311, the information reception unit 312, and the settlement processing unit 313.

[0063] The information supply unit 311 is an example of a "supply unit", and in response to a request from the terminal device 1[q], supplies the online token KX[q], the online occlusion information DHX, the offline token KY[q], and the offline occlusion information DHY to the terminal device 1[q].

[0064] The information reception unit 312 is an example of a "reception unit", and receives an online token request, an online occlusion information request, an offline token request, and an offline occlusion information request from the terminal device 1[q]. Further, the information reception unit 312 receives the settlement information DP[q] from the store device 5.

[0065] The settlement processing unit 313 is an example of a "settlement unit", and executes a settlement process based on the settlement information DP[q]. Specifically, in online electronic settlement, the settlement processing unit 313 executes an online settlement process based on the settlement information DP[q], and in offline electronic settlement, executes an offline settlement process based on the settlement information DP[q].

[0066] The communication device 35 is hardware for communicating with external devices such as the terminal device 1[q] and the store device 5 that exist outside the settlement device 3 via the network NW. In the present embodiment, the information supply unit 311 supplies various types of information to the terminal device 1[q] via the communication device 35. Further, the information reception unit 312 acquires various types of information from the terminal device 1[q] and the store device 5 via the communication device 35.

[0067] <A.2. Operation of the Electronic Settlement System Sys> Hereinafter, with reference to FIGS. 4 to 11, an outline of the operation of the electronic settlement system Sys will be described.

[0068] <A.2.1. Operation of the Electronic Settlement System Sys in Online Electronic Settlement> FIG. 4 is a sequence chart showing an example of the operation of the electronic settlement system Sys when the electronic settlement system Sys executes online electronic settlement.

[0069] As shown in FIG. 4, when the user U[q] of the terminal device 1[q] receives a service at a store where the store device 5 is installed and pays the price of the service by electronic settlement, the control device 11 of the terminal device 1[q] executes the electronic settlement program PG-T based on the operation of the user U[q] to start the settlement application (S11).

[0070] Next, the control device 11 of the terminal device 1[q] determines whether the communication state of the terminal device 1[q] is an online state (S12). Specifically, the control device 11 may determine whether the communication state of the terminal device 1[q] is an online state by using, for example, the communication state monitoring function of the terminal device 1[q] by the operating system of the terminal device 1[q]. Here, "the communication state of the terminal device 1[q] is an online state" may mean, for example, a state in which the terminal device 1[q] can communicate with an external device existing outside the terminal device 1[q], or when the terminal device 1[q] performs wireless communication, a case where the radio wave intensity related to the wireless communication is equal to or greater than a predetermined intensity. Note that in the sequence chart shown in FIG. 4, a case where the communication state of the terminal device 1[q] is an online state is assumed.

[0071] Next, the information transmission unit 111 of the terminal device 1[q] transmits an online block information request to the settlement device 3 (S21). Here, the online block information request is a telegram for requesting the online block information DHX.

[0072] Then, the control device 31 of the settlement device 3 supplies the online block information DHX to the terminal device 1[q] as a response to the online block information request supplied from the terminal device 1[q] in step S21 (S22). Specifically, in step S22, the control device 31 first determines whether online settlement processing can be executed in the settlement device 3, and generates the online block information DHX indicating the determination result. Then, the information supply unit 311 of the control device 31 supplies the generated online block information DHX to the terminal device 1[q].

[0073] Next, the information transmission unit 111 of the terminal device 1[q] transmits an online token request to the settlement device 3 (S23). Here, the online token request is a telegram for requesting the online token KX[q].

[0074] Then, the control device 31 of the payment device 3 supplies the online token KX[q] to the terminal device 1[q] as a response to the online token request supplied from the terminal device 1[q] in step S23 (S24). Specifically, in step S24, the control device 31 first generates an online token KX[q] corresponding to the user U[q] of the terminal device 1[q]. Then, the information supply unit 311 of the control device 31 supplies the generated online token KX[q] to the terminal device 1[q].

[0075] In this embodiment, as an example, the case where the terminal device 1[q] transmits an online token request to the payment device 3 in step S23 after transmitting an online block information request to the payment device 3 in step S21 has been illustrated and described. However, the present invention is not limited to such a mode. The terminal device 1[q] may transmit an online block information request to the payment device 3 after transmitting an online token request to the payment device 3. Further, the terminal device 1[q] may transmit an online token request and an online block information request to the payment device 3 simultaneously (for example, in the same telegram).

[0076] Next, the information transmission unit 111 of the terminal device 1[q] transmits an offline block information request to the payment device 3 (S31). Here, the offline block information request is a telegram for requesting the offline block information DHY.

[0077] Then, the control device 31 of the payment device 3 supplies the offline block information DHY to the terminal device 1[q] as a response to the offline block information request supplied from the terminal device 1[q] in step S31 (S32). Specifically, in step S32, the control device 31 first determines whether offline payment processing can be executed in the payment device 3, and generates offline block information DHY indicating the determination result. Then, the information supply unit 311 of the control device 31 supplies the generated offline block information DHY to the terminal device 1[q].

[0078] Next, the information transmission unit 111 of the terminal device 1[q] transmits an offline token request to the payment device 3 (S33). Here, the offline token request is a telegram requesting the offline token KY[q].

[0079] Then, the control device 31 of the payment device 3 supplies the offline token KY[q] and the encryption key KS[q] to the terminal device 1[q] as a response to the offline token request supplied from the terminal device 1[q] in step S33 (S34). Specifically, in step S34, the control device 31 first generates the offline token KY[q] and the encryption key KS[q] corresponding to the user U[q] of the terminal device 1[q]. Then, the information supply unit 311 of the control device 31 supplies the generated offline token KY[q] and encryption key KS[q] to the terminal device 1[q].

[0080] In this embodiment, as an example, the case where the terminal device 1[q] transmits an offline occlusion information request to the payment device 3 in step S31 and then transmits an offline token request to the payment device 3 in step S33 has been illustrated and described. However, the present invention is not limited to such a mode. The terminal device 1[q] may transmit an offline occlusion information request to the payment device 3 after transmitting an offline token request to the payment device 3. Further, the terminal device 1[q] may transmit an offline token request and an offline occlusion information request to the payment device 3 simultaneously (for example, in the same telegram).

[0081] Next, the information acquisition unit 112 of the terminal device 1[q] acquires the offline token KY[q] and the encryption key KS[q] supplied from the payment device 3 in step S34, and stores the acquired offline token KY[q] and encryption key KS[q] in the storage device 12 (S35). Note that since the acquisition of the offline token KY[q] in step S35 is the M-th acquisition (the latest acquisition), the offline token KY[q] acquired in step S35 is added to the acquired offline token information KYY[q] as the offline token KY[q][M], and the encryption key KS[q] acquired in step S35 is added to the offline token related information DYY as the encryption key KS[q][M]. Also, in this embodiment, as an example, it is assumed that the information acquisition unit 112 stores the offline block information DHY acquired in step S32 in the storage device 12. If the storage device 12 already stores the offline block information DHY, the information acquisition unit 112 shall overwrite the offline block information DHY already stored in the storage device 12 with the offline block information DHY newly acquired in step S32.

[0082] Also, based on the online block information DHX acquired by the information acquisition unit 112 in step S22, the code generation unit 113 of the terminal device 1[q] determines whether or not the execution function of the online payment process in the payment device 3 is in a blocked state (S41). Note that in the sequence chart shown in FIG. 4, it is assumed that the execution function of the online payment process in the payment device 3 is not in a blocked state, that is, the payment device 3 can execute the online payment process. Hereinafter, the state where the execution function of the online payment process in the payment device 3 is in a blocked state may be referred to as the "online blocked state".

[0083] Next, the code generation unit 113 of the terminal device 1[q] generates an online payment code CX[q] based on the online token KX[q] acquired by the information acquisition unit 112 in step S24 (S42). Specifically, in step S42, the code generation unit 113 generates an online payment code CX[q] including the online token KX[q].

[0084] Thereafter, the display control unit 114 of the terminal device 1[q] generates display information for displaying an online code image GX[q] representing the online payment code CX[q] based on the online payment code CX[q] generated by the code generation unit 113 in step S42, and causes the online code image GX[q] to be displayed on the display device 13 based on the generated display information (S43). Specifically, in step S43, the display control unit 114 causes an online code image display screen G1 including the online code image GX[q] to be displayed on the display device 13.

[0085] FIG. 5 is a schematic diagram showing an example of the online code image display screen G1.

[0086] As shown in FIG. 5, the online code image display screen G1 includes an online code image GX[q], a payment method display area A1, and a point usage selection button B1.

[0087] The online code image GX[q] is a barcode for representing the online payment code CX[q] as described above. However, the present invention is not limited to such a mode. The online code image GX[q] may be, for example, a two-dimensional code for representing the online payment code CX[q].

[0088] The point usage selection button B1 is a button for selecting whether to use the points given to the user U[q] in online electronic payment. Although not shown in FIG. 4 etc., in this embodiment, as an example, when the user U[q] changes the presence or absence of point usage using the point usage selection button B1 on the online code image display screen G1, it is assumed that the change content is notified from the terminal device 1[q] to the payment device 3.

[0089] In the payment method display area A1, the payment method of the user U[q] when the user U[q] uses electronic payment in the electronic payment system Sys is displayed. Specifically, the display control unit 114 causes the payment method of the user U[q] to be displayed in the payment method display area A1 based on the user payment information DSH[q]. Although not shown in FIG. 4 etc., in this embodiment, as an example, it is assumed that the payment device 3 supplies the user payment information DSH[q] to the terminal device 1[q] in response to a request from the terminal device 1[q]. Note that the payment method of the user U[q] displayed in the payment method display area A1 can be changed on the payment method selection screen GS described below.

[0090] FIG. 6 is a schematic diagram showing an example of the payment method selection screen GS.

[0091] As shown in FIG. 6, the payment method selection screen GS includes three radio buttons RB, namely, a radio button RB1 for selecting combined payment of telephone charges as a payment method in electronic payment, a radio button RB2 for selecting prepaid balance payment as a payment method in electronic payment, and a radio button RB3 for selecting credit card payment as a payment method in electronic payment. The payment method selection screen GS also includes a determination button BS1 for determining the payment method in electronic payment, and a credit registration button BS2 for causing the display device 13 to display a screen (not shown) for registering credit card information DCR[q]. The user U[q] can select, as the payment method for the user U[q] in the electronic payment system Sys, the payment method corresponding to the selected radio button RB by pressing the determination button BS1 while one of the three radio buttons RB is selected on the payment method selection screen GS.

[0092] Return to FIG. 4 for the description. As shown in FIG. 4, the store device 5 performs a process of reading a code image GG[q] (online code image GX[q]) included in a screen (online code image display screen G1) displayed on the display device 13 of the terminal device 1[q] by using a barcode reader or the like provided in the store device 5 (S44). Thereafter, the store device 5 generates store settlement information (store identification information, settlement amount, settlement date and time) based on the service content provided by the store where the store device 5 is installed to the user U[q], and generates settlement information DP[q] including the generated store settlement information and a settlement code CC[q] (online settlement code CX[q]) indicated by the code image GG[q] (online code image GX[q]) read in step S44 (S61). Then, the store device 5 transmits the settlement information DP[q] generated in step S61 to the settlement device 3 (S62).

[0093] Next, the settlement processing unit 313 of the settlement device 3 confirms the validity of the token KK[q] (online token KX[q]) included in the settlement code CC[q] (online settlement code CX[q]) based on the settlement code CC[q] (online settlement code CX[q]) included in the settlement information DP[q] supplied from the store device 5 (S63). In the sequence chart shown in FIG. 4, it is assumed that the token KK[q] (online token KX[q]) is valid. After that, the settlement processing unit 313 of the settlement device 3 executes settlement processing (online settlement processing) (S64). Then, the information supply unit 311 of the settlement device 3 transmits a register charging response indicating the result of the settlement processing (online settlement processing) in step S64 to the store device 5 (S65).

[0094] <A.2.2. Operation of the Electronic Payment System Sys in Offline Electronic Payment> FIG. 7 is a sequence chart showing an example of the operation of the electronic payment system Sys when the electronic payment system Sys executes offline electronic payment. In FIG. 7, it is assumed that the electronic payment system Sys cannot execute online electronic payment due to the communication state of the terminal device 1[q] being offline.

[0095] As shown in FIG. 7, when the user U[q] of the terminal device 1[q] receives a service at a store where the store device 5 is installed and pays the price of the service by electronic payment, the control device 11 of the terminal device 1[q] starts the settlement application by executing the electronic payment program PG-T based on the operation of the user U[q] (S11).

[0096] Next, the control device 11 of the terminal device 1[q] determines whether the communication state of the terminal device 1[q] is an online state (S12). As described above, in the sequence chart shown in FIG. 7, it is assumed that the result of the determination in step S12 is negative, that is, the communication state of the terminal device 1[q] is offline.

[0097] If the result of the determination in step S12 is negative, the code generation unit 113 of the terminal device 1[q] determines whether or not the execution function of the offline settlement process in the settlement device 3 is in a blocked state based on the offline block information DHY stored in the storage device 12 (S51). In the sequence chart shown in FIG. 7, it is assumed that the execution function of the offline settlement process in the settlement device 3 is not in a blocked state, that is, the settlement device 3 can execute the offline settlement process. Hereinafter, the state where the execution function of the offline settlement process in the settlement device 3 is in a blocked state may be referred to as an "offline blocked state".

[0098] Next, the code generation unit 113 of the terminal device 1[q] acquires the latest offline token KY[q][M] from the storage device 12 (S52). Then, the code generation unit 113 of the terminal device 1[q] generates an offline settlement code CY[q] based on the offline token KY[q][M] (S53). Specifically, in step S53, the code generation unit 113 generates an offline settlement code CY[q] including the offline token KY[q][M].

[0099] Thereafter, the display control unit 114 of the terminal device 1[q] generates display information for displaying an offline code image GY[q] representing the offline settlement code CY[q] based on the offline settlement code CY[q] generated by the code generation unit 113 in step S53, and causes the offline code image GY[q] to be displayed on the display device 13 based on the generated display information (S54). Specifically, in step S54, the display control unit 114 causes an offline code image display screen G2 including the offline code image GY[q] to be displayed on the display device 13.

[0100] FIG. 8 is a schematic diagram showing an example of the offline code image display screen G2.

[0101] As shown in FIG. 8, the offline code image display screen G2 includes an offline code image GY[q], a payment method display area A2, and a point usage selection button B2.

[0102] As described above, the offline code image GY[q] is a barcode for representing the offline payment code CY[q]. In this embodiment, as an example, it is assumed that in the offline code image display screen G2, a two-dimensional code for representing the offline payment code CY[q] is also displayed as the offline code image GY[q]. In the payment method display area A2, the payment method of the user U[q] when the user U[q] uses electronic payment in the electronic payment system Sys is displayed. The point usage selection button B2 is a button for displaying the current selection status of the user U[q] on whether to use the points given to the user U[q] in offline electronic payment.

[0103] Returning to the explanation in FIG. 7. As shown in FIG. 7, the store device 5 performs a process of reading the code image GG[q] (offline code image GY[q]) included in the screen (offline code image display screen G2) displayed on the display device 13 of the terminal device 1[q] (S55). After that, the store device 5 generates store payment information based on the service content provided by the store where the store device 5 is installed to the user U[q], and generates payment information DP[q] including the generated store payment information and the payment code CC[q] (offline payment code CY[q]) indicated by the code image GG[q] (offline code image GY[q]) read in step S55 (S61). Then, the store device 5 transmits the payment information DP[q] generated in step S61 to the payment device 3 (S62).

[0104] Next, the settlement processing unit 313 of the settlement device 3 confirms the validity of the token KK[q] (offline token KY[q][M]) included in the settlement code CC[q] (offline settlement code CY[q]) based on the settlement code CC[q] (offline settlement code CY[q]) included in the settlement information DP[q] supplied from the store device 5 (S63). Note that in the sequence chart shown in FIG. 7, it is assumed that the token KK[q] (offline token KY[q][M]) is valid. After that, the settlement processing unit 313 of the settlement device 3 executes settlement processing (offline settlement processing) (S64). Then, the information supply unit 311 of the settlement device 3 transmits a register billing response indicating the result of the settlement processing (offline settlement processing) in step S64 to the store device 5 (S65).

[0105] FIG. 9 is a sequence chart showing another example of the operation of the electronic settlement system Sys when the electronic settlement system Sys executes offline electronic settlement. Note that in FIG. 9, it is assumed that the electronic settlement system Sys cannot execute online electronic settlement because the terminal device 1[q] fails to acquire the online token KX[q] from the settlement device 3.

[0106] As shown in FIG. 9, when the user U[q] of the terminal device 1[q] receives a service at a store where the store device 5 is installed and pays the price of the service by electronic settlement, the processes of steps S11 and S12 described above are executed. Note that in the sequence chart shown in FIG. 9, it is assumed that the result of the determination in step S12 is affirmative, that is, the communication state of the terminal device 1[q] is in an online state.

[0107] Next, the information transmission unit 111 of the terminal device 1[q] transmits an online congestion information request to the settlement device 3 (S21). However, in the sequence chart shown in FIG. 9, it is assumed that there is no response from the settlement device 3 to the online congestion information request. Also, the information transmission unit 111 of the terminal device 1[q] transmits an online token request to the payment device 3 (S23). However, in the sequence chart shown in FIG. 9, it is assumed that there is no response from the payment device 3 to the online token request. That is, as described above, in the sequence chart shown in FIG. 9, it is assumed that the terminal device 1[q] fails to obtain the online token KX[q] from the payment device 3. Also, the information transmission unit 111 of the terminal device 1[q] transmits an offline block information request to the payment device 3 (S31). However, in the sequence chart shown in FIG. 9, it is assumed that there is no response from the payment device 3 to the offline block information request. Also, the information transmission unit 111 of the terminal device 1[q] transmits an offline token request to the payment device 3 (S33). However, in the sequence chart shown in FIG. 9, it is assumed that there is no response from the payment device 3 to the offline token request.

[0108] Then, the code generation unit 113 of the terminal device 1[q] determines whether the payment device 3 is in an offline blocked state based on the offline block information DHY stored in the storage device 12 (S51). Note that in the sequence chart shown in FIG. 9, it is assumed that the payment device 3 is not in an offline blocked state, that is, the payment device 3 is capable of executing offline payment processing.

[0109] Thereafter, the electronic payment system Sys performs offline electronic payment by executing the processes of steps S52 to S55 and steps S61 to S65.

[0110] FIG. 10 is a sequence chart showing another example of the operation of the electronic payment system Sys when the electronic payment system Sys performs offline electronic payment. Note that in FIG. 10, it is assumed that the electronic payment system Sys cannot execute online electronic payment due to the payment device 3 being in an online blocked state.

[0111] As shown in FIG. 10, when the user U[q] of the terminal device 1[q] receives service provision at a store where the store device 5 is installed and pays the consideration for the service by electronic payment, the above-described processes of steps S11 and S12, steps S21 to S24, and steps S31 to S35 are executed. In the sequence chart shown in FIG. 10, it is assumed that the result of the determination in step S12 is affirmative, that is, the communication state of the terminal device 1[q] is in an online state. Also, in the sequence chart shown in FIG. 10, as shown in steps S31 to S34, it is assumed that there is a supply of online congestion information DHX, online token KX[q], offline congestion information DHY, and offline token KY[q] from the settlement device 3. Thereafter, the code generation unit 113 of the terminal device 1[q] determines whether the settlement device 3 is in an online congestion state based on the online congestion information DHX acquired by the information acquisition unit 112 in step S22 (S41). In the sequence chart shown in FIG. 10, as described above, it is assumed that when the settlement device 3 is in an online congestion state, that is, when the settlement device 3 cannot execute online settlement processing. When the result of the determination in step S41 is negative, that is, when the settlement device 3 is in an online congestion state, the code generation unit 113 of the terminal device 1[q] determines whether the settlement device 3 is in an offline congestion state based on the offline congestion information DHY stored in the storage device 12 (S51). In the sequence chart shown in FIG. 10, it is assumed that when the settlement device 3 is not in an offline congestion state, that is, when the settlement device 3 can execute offline settlement processing.

[0112] Thereafter, the electronic payment system Sys performs offline electronic payment by executing the processes of steps S52 to S55 and steps S61 to S65 (steps after S55 are not shown).

[0113] <A.2.3. Operation of the Electronic Payment System Sys at Initial Startup> FIG. 11 is a sequence chart showing an example of the operation of the electronic payment system Sys when the payment application is first launched in the terminal device 1[q] and the electronic payment system Sys executes an electronic payment.

[0114] As shown in FIG. 11, even when the user U[q] of the terminal device 1[q] has not launched the payment application and pays the price of the service received at the store where the store device 5 is installed by electronic payment, the control device 11 of the terminal device 1[q] launches the payment application by executing the electronic payment program PG-T based on the operation of the user U[q] (S11).

[0115] Next, the control device 11 of the terminal device 1[q] executes the process of step S12 described above. In the sequence chart shown in FIG. 11, it is assumed that the result of the determination in step S12 is affirmative, that is, the communication state of the terminal device 1[q] is in an online state.

[0116] Next, the information transmission unit 111 of the terminal device 1[q] transmits a setting information request to the payment device 3 (S13). Here, the setting information request is a telegram requesting the setting information DS.

[0117] Then, the control device 31 of the payment device 3 supplies the setting information DS to the terminal device 1[q] as a response to the setting information request supplied from the terminal device 1[q] in step S13 (S14). Specifically, in step S14, the control device 31 first acquires the setting information DS stored in the storage device 32. Then, the information supply unit 311 of the control device 31 supplies the acquired setting information DS to the terminal device 1[q].

[0118] In addition, the information transmission unit 111 of the terminal device 1[q] transmits a merchant identification token request to the payment device 3 (S15). Here, the merchant identification token request is a telegram requesting the merchant identification token KZ.

[0119] Then, in step S15, the control device 31 of the payment device 3 supplies the terminal device 1[q] with a merchant identification token KZ as a response to the merchant identification token request supplied from the terminal device 1[q] (S16). Specifically, in step S16, the control device 31 first generates a merchant identification token KZ based on the merchant identification information DKZ stored in the storage device 32. Then, the information supply unit 311 of the control device 31 supplies the generated merchant identification token KZ to the terminal device 1[q].

[0120] In this embodiment, as an example, the case where the terminal device 1[q] transmits a setting information request to the payment device 3 in step S13 and then transmits a merchant identification token request to the payment device 3 in step S15 has been illustrated and described. However, the present invention is not limited to such a mode. The terminal device 1[q] may transmit a setting information request to the payment device 3 after transmitting a merchant identification token request to the payment device 3. Further, the terminal device 1[q] may transmit a setting information request and a merchant identification token request to the payment device 3 simultaneously (for example, in the same telegram).

[0121] Next, the information acquisition unit 112 of the terminal device 1[q] acquires the setting information DS supplied from the payment device 3 in step S14 and the merchant identification token KZ supplied from the payment device 3 in step S16, and stores the acquired setting information DS and merchant identification token KZ in the storage device 12 (S17).

[0122] Thereafter, the electronic payment system Sys performs an electronic payment by executing the processes after step S21.

[0123] In this embodiment, the mode in which the setting information DS and the merchant identification token KZ are supplied from the payment device 3 to the terminal device 1[q] at the first startup of the payment application in the terminal device 1[q] has been illustrated and described. However, the present invention is not limited to such a mode.

[0124] For example, when the setting information DS is changed, the settlement device 3 may supply the changed setting information DS to the terminal device 1[q]. Specifically, when the setting information DS is changed and a settlement app startup notification (not shown) indicating that the settlement app has been started in the terminal device 1[q] is supplied from the terminal device 1[q] to the settlement device 3, the changed setting information DS may be supplied to the terminal device 1[q] as a response to the settlement app startup notification. Further, for example, when a settlement app startup notification is supplied from the terminal device 1[q] to the settlement device 3, the settlement device 3 may supply the setting information DS to the terminal device 1[q] regardless of whether the setting information DS has been changed.

[0125] Also, for example, when the merchant identification information DKZ is changed, the settlement device 3 may supply a merchant identification token KZ indicating the changed merchant identification information DKZ to the terminal device 1[q]. Specifically, when the merchant identification information DKZ is changed and a settlement app startup notification is supplied from the terminal device 1[q] to the settlement device 3, the merchant identification token KZ based on the changed merchant identification information DKZ may be supplied to the terminal device 1[q] as a response to the settlement app startup notification. In this case, the frequency at which the terminal device 1[q] acquires the merchant identification token KZ is lower than the frequency at which it acquires the online token KX[q]. Also, in this case, the frequency at which the terminal device 1[q] acquires the merchant identification token KZ is lower than the frequency at which it acquires the offline token KY[q]. Also, for example, when a settlement app startup notification is supplied from the terminal device 1[q] to the settlement device 3, the settlement device 3 may supply the merchant identification token KZ to the terminal device 1[q] regardless of whether the merchant identification information DKZ has been changed.

[0126] <A.2.4. Summary of the Operations of the Electronic Payment System Sys> As described above, in the present embodiment, when the communication state of the terminal device 1[q] is in an offline state, when the terminal device 1[q] fails to obtain the online token KX[q] from the settlement device 3, and when the settlement device 3 is in an online blocked state, etc., when online electronic settlement is difficult, offline electronic settlement is executed. Therefore, for example, compared with a mode in which the electronic settlement system can only execute online electronic settlement, when the user U[q] of the terminal device 1[q] receives a service at a store where the store device 5 is installed, the possibility of difficulty in paying the price of the service by electronic settlement can be reduced. Thereby, according to the present embodiment, it is possible to reduce the decrease in convenience related to the settlement of the user U[q] who has received a service at the store where the store device 5 is installed.

[0127] Further, in the present embodiment, when the settlement application is started (see step S11) in the terminal device 1[q] and electronic settlement is executed, in addition to obtaining the online token KX[q] from the settlement device 3 (see step S24), the terminal device 1[q] obtains the offline token KY[q] (see step S34). That is, in the present embodiment, the terminal device 1[q] obtains the offline token KY[q] from the settlement device 3 at the timing when the terminal device 1[q] and the settlement device 3 perform communication related to electronic settlement. Therefore, according to the present embodiment, for example, compared with a mode in which the terminal device 1[q] obtains the offline token KY[q] from the settlement device 3 at a timing unrelated to the timing when electronic settlement is performed, such as a predetermined timing, the number of processes other than electronic settlement in the terminal device 1[q] can be reduced. Thereby, according to the present embodiment, compared with a mode in which the terminal device 1[q] obtains the offline token KY[q] from the settlement device 3 at a timing unrelated to the timing when electronic settlement is performed, the complexity of schedule adjustment of the processes in the terminal device 1[q] can be reduced.

[0128] Also, in this embodiment, the terminal device 1[q] stores the offline token KY[q] acquired from the settlement device 3 in the storage device 12 at the timing when electronic settlement is performed. Therefore, according to this embodiment, when online electronic settlement is difficult due to communication failure or the like, it is possible to reduce the possibility that even offline electronic settlement becomes difficult to execute.

[0129] Also, in this embodiment, the terminal device 1[q] displays the online code image GX[q] on the display device 13 only when the online blockage information DHX indicates that the settlement device 3 is not in the online blockage state, and also displays the offline code image GY[q] on the display device 13 only when the offline blockage information DHY indicates that the settlement device 3 is not in the offline blockage state. That is, according to this embodiment, when it is difficult to execute online electronic settlement, the display of the online code image GX[q] on the terminal device 1[q] can be suppressed, and when it is difficult to execute offline electronic settlement, the display of the offline code image GY[q] on the terminal device 1[q] can be suppressed. Therefore, according to this embodiment, for example, compared with the mode of displaying the code image GG[q] without considering the blockage information DH, the labor of the user U[q] related to the display of the code image GG[q] can be reduced.

[0130] <A.3. Outline of the Settlement Code CC[q]> Hereinafter, with reference to FIG. 12, the outline of the settlement code CC[q] (online settlement code CX[q] and offline settlement code CY[q]) will be described.

[0131] FIG. 12 is a diagram showing an example of the data configuration of the online settlement code CX[q] and the offline settlement code CY[q].

[0132] As shown in FIG. 12, the online settlement code CX[q] includes a merchant identification token KZ, an online token KX[q], an appropriation value VJ, and a code type value VV. Further, the offline settlement code CY[q] includes a merchant identification token KZ, an offline token KY[q], a time encryption code TT[q][n], an appropriation value VJ, and a code type value VV.

[0133] The merchant identification token KZ is LZ-digit data composed of LZ code values VZ[1] to VZ[LZ]. Here, the value LZ is a natural number satisfying "LZ ≧ 2". Also, in the present embodiment, it is assumed that each code value VZ is single-digit data composed of a single digit (0 to 9). However, the code value VZ may be single-digit data composed of a single alphanumeric character (a single digit or a single alphabet).

[0134] The online token KX[q] is LX-digit data composed of LX code values VX[1] to VX[LX]. Here, the value LX is a natural number satisfying "LX ≧ 4". Also, in the present embodiment, it is assumed that each code value VX is single-digit data composed of a single digit (0 to 9). However, the code value VX may be single-digit data composed of a single alphanumeric character (a single digit or a single alphabet).

[0135] The offline token KY[q] is LY-digit data composed of LY code values VY[1] to VY[LY]. Here, the value LY is a natural number satisfying "LY ≧ 2" and "LY < LX". Also, in the present embodiment, it is assumed that each code value VY is single-digit data composed of a single digit (0 to 9). However, the code value VY may be single-digit data composed of a single alphanumeric character (a single digit or a single alphabet).

[0136] The time encryption code TT[q] is LT-digit data composed of LT code values VT[1] to VT[LT]. Here, the value LT is a natural number that satisfies "LT≥2" and "LT + LY = LX". That is, in this embodiment, the total value of the number of digits LY of the offline token KY[q] and the number of digits LT of the time encryption code TT[q][n] is equal to the number of digits LX of the online token KX[q]. Also, in this embodiment, it is assumed that each code value VT is 1-digit data composed of a single digit number (0 to 9). However, the code value VT may be 1-digit data composed of an alphanumeric character (a single digit number or a single alphabet).

[0137] The assigned value VJ is 1-digit data composed of a single digit number (0 to 9). However, the assigned value VJ may be a 1-bit value, may be a number with two or more digits, or may be an alphanumeric character with one or more digits.

[0138] The code type value VV is 1-digit data composed of a single digit number (0 to 9). However, the code type value VV may be a 1-bit value, may be a number with two or more digits, or may be an alphanumeric character with one or more digits. A value indicating the type of the settlement code CC[q] is set in the code type value VV. Specifically, when the settlement code CC[q] is the online settlement code CX[q], a value indicating that the settlement code CC[q] is the online settlement code CX[q], for example, "1", is set in the code type value VV. Hereinafter, the value indicating that the settlement code CC[q] is the online settlement code CX[q] is referred to as the "online code value". Also, when the settlement code CC[q] is the offline settlement code CY[q], a value indicating that the settlement code CC[q] is the offline settlement code CY[q], for example, "2", is set in the code type value VV. Hereinafter, the value indicating that the settlement code CC[q] is the offline settlement code CY[q] is referred to as the "offline code value".

[0139] Next, the code generation unit 113 will explain the process of generating the settlement code CC[q] (hereinafter referred to as the "code generation process"). In the following, among the code generation processes by the code generation unit 113, the process of generating the online settlement code CX[q] is referred to as the "online code generation process". Also, in the following, among the code generation processes by the code generation unit 113, the process of generating the offline settlement code CY[q] is referred to as the "offline code generation process".

[0140] In the online code generation process, the code generation unit 113 sets an online code value (for example, "1") for the code type value VV. Then, the code generation unit 113 arranges the merchant identification token KZ stored in the storage device 12, the online token KX[q] acquired by the information acquisition unit 112 from the settlement device 3, the appropriation value VJ, and the code type value VV in a predetermined order to generate the online settlement code CX[q].

[0141] In the offline code generation process, the code generation unit 113 generates a terminal time value AG based on the terminal time TG managed by the terminal device 1[q]. Specifically, the code generation unit 113 generates the terminal time value AG by deleting the part representing "seconds" in the terminal time TG and leaving the parts representing "minutes" and "hours". Next, in the offline code generation process, the code generation unit 113 encrypts the terminal time value AG using the encryption key KS[q][M] corresponding to the last acquired offline token KY[q][M] among the M encryption keys KS[q][1] to KS[q][M] stored in the storage device 12 to generate a time encryption code TT[q]. That is, in the present embodiment, it is assumed that the time encryption code TT[q] is a value obtained by encrypting the terminal time value AG using the encryption key KS[q][M]. Also, in the offline code generation process, the code generation unit 113 sets an offline code value (for example, "2") for the code type value VV. Then, in the offline code generation process, the code generation unit 113 arranges the operator identification token KZ stored in the storage device 12, the offline token KY[q] acquired by the information acquisition unit 112 from the payment device 3, the time encryption code TT[q] generated by the code generation unit 113, the appropriation value VJ, and the code type value VV in a predetermined order to generate an offline payment code CY[q]. In this embodiment, it is assumed that the number of digits of the online payment code CX[q] is equal to the number of digits of the offline payment code CY[q].

[0142] As described above, in this embodiment, the code generation unit 113 updates the terminal time value AG at the period of the update unit time TC. Specifically, in this embodiment, the code generation unit 113 updates the terminal time value AG every minute. Then, when the terminal time value AG is updated, the code generation unit 113 updates the time encryption code TT[q] with the value obtained by encrypting the updated terminal time value AG with the encryption key KS[q][M], and updates the offline payment code CY[q] with the updated time encryption code TT[q]. Specifically, the operator identification token KZ, the offline token KY[q], the updated time encryption code TT[q], the appropriation value VJ, and the code type value VV are arranged in a predetermined order to generate the updated offline payment code CY[q].

[0143] Hereinafter, among the time encryption codes TT[q], the time encryption code TT[q] that has undergone (n + 1) updates may be referred to as the time encryption code TT[q][n]. That is, hereinafter, the time encryption code TT[q] that has not been updated at all may be referred to as the time encryption code TT[q][1], and the time encryption code TT[q] that has undergone one update may be referred to as the time encryption code TT[q][2]. Here, the variable n is a natural number that satisfies "1 ≤ n".

[0144] As described above, in this embodiment, the offline settlement code CY[q] includes, in addition to the offline token KY[q] that is updated every offline token valid time TSY (for example, one week), a time encryption code TT[q] that is updated every update unit time TC (for example, one minute), which is a time shorter than the offline token valid time TSY. That is, in this embodiment, the offline settlement code CY[q] is updated every update unit time TC, which is the update period of the time encryption code TT[q]. Therefore, according to this embodiment, compared with the mode in which the offline settlement code CY[q] is configured without including the time encryption code TT[q], the security risk associated with the leakage of the offline settlement code CY[q] can be reduced.

[0145] Also, in this embodiment, the offline settlement code CY[q] includes, in addition to the offline token KY[q], a merchant identification token KZ obtained at a timing different from that of the offline token KY[q]. Therefore, according to this embodiment, compared with the mode in which the offline settlement code CY[q] is configured without including the merchant identification token KZ, the security risk associated with the leakage of the offline settlement code CY[q] can be reduced. Similarly, in this embodiment, the online settlement code CX[q] includes, in addition to the online token KX[q], a merchant identification token KZ obtained at a timing different from that of the online token KX[q]. Therefore, according to this embodiment, compared with the mode in which the online settlement code CX[q] is configured without including the merchant identification token KZ, the security risk associated with the leakage of the online settlement code CX[q] can be reduced.

[0146] <A.4. Operations of the Terminal Device 1[q]> Hereinafter, with reference to FIGS. 13 to 17, an overview of the operations of the terminal device 1[q] when electronic payment is executed will be described.

[0147] FIGS. 13 to 16 are flowcharts showing an example of the operation of the terminal device 1[q] when an electronic payment is executed in the electronic payment system Sys. Note that the flowcharts shown in FIGS. 13 to 16 start when the payment application is launched in the terminal device 1[q].

[0148] As shown in FIG. 13, when the payment application is launched in the terminal device 1[q], the control device 11 of the terminal device 1[q] determines whether the communication state of the terminal device 1[q] is in an online state (S101). Note that the process of step S101 corresponds to the process of step S12 described above. If the result of the determination in step S101 is negative, that is, if the communication state of the terminal device 1[q] is in an offline state, the control device 11 of the terminal device 1[q] advances the process to step S151.

[0149] If the result of the determination in step S101 is positive, that is, if the communication state of the terminal device 1[q] is in an online state, the information transmission unit 111 of the terminal device 1[q] transmits an online block information request to the payment device 3 (S103). Note that the process of step S103 corresponds to the process of step S21 described above.

[0150] Then, when there is no response to the online block information request from the payment device 3 (S105: N), the control device 11 of the terminal device 1[q] advances the process to step S109. On the other hand, when the information acquisition unit 112 of the terminal device 1[q] receives the online block information DHX transmitted from the payment device 3 by the communication device 15 as a response to the online block information request (S105: Y), the information acquisition unit 112 acquires the online block information DHX (S107).

[0151] In addition, the information transmission unit 111 of the terminal device 1[q] transmits an online token request to the payment device 3 (S109). Note that the process of step S109 corresponds to the process of step S23 described above.

[0152] Then, when there is no response to the online token request from the settlement device 3 (S111: N), the control device 11 of the terminal device 1[q] proceeds with the process to step S115. On the other hand, when the information acquisition unit 112 of the terminal device 1[q] receives the online token KX[q] transmitted from the settlement device 3 as a response to the online token request (S111: Y), it acquires the online token KX[q] (S113).

[0153] Also, the information transmission unit 111 of the terminal device 1[q] transmits an offline block information request to the settlement device 3 (S115). Note that the process of step S115 corresponds to the process of step S31 described above.

[0154] Then, when there is no response to the offline block information request from the settlement device 3 (S117: N), the control device 11 of the terminal device 1[q] proceeds with the process to step S121. On the other hand, when the information acquisition unit 112 of the terminal device 1[q] receives the offline block information DHY transmitted from the settlement device 3 as a response to the offline block information request (S117: Y), it acquires the offline block information DHY (S119).

[0155] Also, the information transmission unit 111 of the terminal device 1[q] transmits an offline token request to the settlement device 3 (S121). Note that the process of step S121 corresponds to the process of step S33 described above.

[0156] Then, when there is no response to the offline token request from the settlement device 3 (S123: N), the control device 11 of the terminal device 1[q] advances the process to step S131. On the other hand, when the information acquisition unit 112 of the terminal device 1[q] receives the offline token KY[q] and the encryption key KS[q] transmitted from the settlement device 3 as a response to the offline token request (S123: Y), the information acquisition unit 112 stores the offline token KY[q] and the encryption key KS[q] in the storage device 12 (S125). Specifically, in step S125, the information acquisition unit 112 acquires the offline token KY[q] and the encryption key KS[q] supplied from the settlement device 3. Next, the information acquisition unit 112 adds the acquired offline token KY[q] to the acquired offline token information KYY[q] as the latest offline token KY[q][M], and also adds the acquired encryption key KS[q] to the offline token related information DYY as the latest encryption key KS[q][M]. Note that the process of step S125 corresponds to the process of step S35 described above.

[0157] As shown in FIG. 14, the code generation unit 113 of the terminal device 1[q] determines whether the settlement device 3 is in an online blocked state (S131). Specifically, in step S131, the code generation unit 113 determines whether the information acquisition unit 112 has acquired the online block information DHX in step S107 and whether the online block information DHX indicates that the settlement device 3 is not in an online blocked state. Note that the process of step S131 corresponds to the process of step S41 described above.

[0158] When the result of the determination in step S131 is negative, that is, when the information acquisition unit 112 has not acquired the online block information DHX in step S107, or when the online block information DHX indicates that the settlement device 3 is in an online blocked state, the control device 11 of the terminal device 1[q] advances the process to step S151. Even when the result of the determination in step S131 is affirmative, if the information acquisition unit 112 has not acquired the online token KX[q] in step S113 (S133: N), the control device 11 of the terminal device 1[q] advances the process to step S151.

[0159] When the result of the determination in step S131 is affirmative and the information acquisition unit 112 has acquired the online token KX[q] in step S113 (S133: Y), the code generation unit 113 of the terminal device 1[q] executes an online code generation process to generate an online payment code CX[q] (S135). Note that the process of step S135 corresponds to the process of step S42 described above.

[0160] Then, the display control unit 114 of the terminal device 1[q] generates display information for displaying an online code image GX[q] indicating the online payment code CX[q], and causes the display device 13 to display the online code image GX[q] based on the display information (S137). Note that the process of step S137 corresponds to the process of step S43 described above.

[0161] Next, the control device 11 of the terminal device 1[q] determines whether the user U[q] has performed an operation to terminate the payment application (hereinafter referred to as "termination operation") using the input device 14 (S139). When the result of the determination in step S139 is affirmative, that is, when the termination operation has been performed, the control device 11 of the terminal device 1[q] ends a series of processes according to the flowcharts shown in FIGS. 13 to 16.

[0162] When the result of the determination in step S139 is negative, that is, when the termination operation has not been performed, the code generation unit 113 of the terminal device 1[q] determines whether an online code image update opportunity, which is an opportunity to update the online code image GX[q], has arrived (S141). Here, the online code image update opportunity is an opportunity to update the online code image GX[q] displayed on the display device 13.

[0163] In this embodiment, it is assumed that when any one or more of the three update conditions J1, namely the online token time condition J11, the online code image display condition J12, and the online code image operation condition J13, are satisfied, it is regarded that the opportunity to update the online code image has arrived. Here, the online token time condition J11 is the condition that the time corresponding to the online token valid time TSX (5 minutes in this embodiment) has elapsed since the online code image GX[q] was displayed on the display device 13. The online code image display condition J12 is the condition that the online code image display screen G1 including the online code image GX[q] on the display device 13 transitions from the background display to the foreground display. The online code image operation condition J13 is the condition that a pull-down operation is executed while the online code image display screen G1 including the online code image GX[q] is displayed on the display device 13.

[0164] If the result of the determination in step S141 is negative, that is, if the opportunity to update the online code image has not arrived, the control device 11 returns the process to step S137 and continues to display the online code image GX[q] on the display device 13. If the result of the determination in step S141 is positive, that is, if the opportunity to update the online code image has arrived, the information transmission unit 111 of the terminal device 1[q] transmits an online token request to the payment device 3 (S143).

[0165] Then, when the control device 11 of the terminal device 1[q] does not receive a response from the payment device 3 to the online token request related to step S143 (S145: N), the process proceeds to step S151. On the other hand, when the information acquisition unit 112 of the terminal device 1[q] receives the online token KX[q] transmitted from the payment device 3 as a response to the online token request related to step S143 (S145: Y), the information acquisition unit 112 acquires the online token KX[q] (S147), and the process proceeds to step S135. In step S135, an online payment code CX[q] is generated based on the online token KX[q] acquired in step S147.

[0166] As shown in FIG. 15, the code generation unit 113 of the terminal device 1[q] determines whether or not the payment device 3 is in an offline blocked state (S151). Specifically, in step S151, the code generation unit 113 determines whether or not the information acquisition unit 112 has acquired the offline block information DHY in step S119 and whether or not the offline block information DHY indicates that the payment device 3 is not in an offline blocked state. Note that the process of step S151 corresponds to the process of step S51 described above.

[0167] When the result of the determination in step S151 is negative, that is, when the information acquisition unit 112 has not acquired the offline block information DHY in step S119 or when the offline block information DHY indicates that the payment device 3 is in an offline blocked state, the control device 11 of the terminal device 1[q] proceeds with the process to step S171.

[0168] When the result of the determination in step S151 is positive, that is, when the offline block information DHY indicates that the payment device 3 is not in an offline blocked state, the code generation unit 113 of the terminal device 1[q] determines whether or not the latest offline token KY[q][M] stored in the storage device 12 is valid (S153). Specifically, in step S153, the code generation unit 113 determines whether one or more offline tokens KY[q][1] to KY[q][M] are stored in the storage device 12, and whether the offline token validity period TY[q][M] corresponding to the latest offline token KY[q][M] stored in the storage device 12 is a period including the current time. Then, when the result of the determination is affirmative, the code generation unit 113 acquires the latest offline token KY[q][M] from the storage device 12. Note that the process of step S153 corresponds to the process of step S52 described above.

[0169] When the result of the determination in step S153 is negative, that is, when no offline token KY[q] is stored in the storage device 12, or when the latest offline token KY[q][M] stored in the storage device 12 has expired, the control device 11 of the terminal device 1[q] advances the process to step S171.

[0170] When the result of the determination in step S153 is affirmative, that is, when the latest offline token KY[q][M] stored in the storage device 12 is valid, the display control unit 114 of the terminal device 1[q] causes the display device 13 to display an offline payment explanation screen G3 (S155). Note that the process of step S155 may be omitted.

[0171] FIG. 17 is a schematic diagram showing an example of the offline payment explanation screen G3.

[0172] As shown in FIG. 17, the offline payment explanation screen G3 includes an offline payment explanation display area A3, an explanation screen omission button CB3, and an offline payment determination button B3.

[0173] The offline payment explanation display area A3 is an area where a text for explaining offline electronic payment to the user U[q] is displayed. The explanation screen omission button CB3 is a button for receiving an operation from the user U[q] to omit the display of the offline payment explanation screen G3 from the next time onwards. The offline payment decision button B3 is a button for receiving an operation from the user U[q] to approve the execution of the offline electronic payment.

[0174] Return the explanation to FIG. 15. As shown in FIG. 15, in the offline payment explanation screen G3 displayed on the display device 13 in step S155, when the user U[q] presses the offline payment decision button B3, the code generation unit 113 of the terminal device 1[q] executes an offline code generation process, and based on the offline token KY[q][M] acquired from the storage device 12 in step S153, generates an offline payment code CY[q] (S157). Note that the process of step S157 corresponds to the process of step S53 described above.

[0175] Then, the display control unit 114 of the terminal device 1[q] generates display information for displaying an offline code image GY[q] indicating the offline payment code CY[q], and based on the display information, causes the display device 13 to display the offline code image GY[q] (S159). Note that the process of step S159 corresponds to the process of step S54 described above.

[0176] Next, the control device 11 of the terminal device 1[q] determines whether the user U[q] has executed an end operation using the input device 14 (S161). If the result of the determination in step S161 is affirmative, that is, if an end operation has been performed, the control device 11 of the terminal device 1[q] ends the series of processes according to the flowcharts shown in FIGS. 13 to 16.

[0177] If the result of the determination in step S161 is negative, that is, if no end operation has been performed, the code generation unit 113 of the terminal device 1[q] determines whether an offline code image update opportunity has arrived (S163). Here, the offline code image update opportunity is an opportunity for updating the offline code image GY[q] displayed on the display device 13.

[0178] In the present embodiment, it is assumed that when any one or more of the two update conditions J2, namely the offline code image display condition J22 and the offline code image operation condition J23, are satisfied, it is regarded that an offline code image update opportunity has arrived. Here, the offline code image display condition J22 is a condition that the offline code image display screen G2 including the offline code image GY[q] on the display device 13 transitions from background display to foreground display. Also, the offline code image operation condition J23 is a condition that a pull-down operation is executed while the offline code image display screen G2 including the offline code image GY[q] is displayed on the display device 13.

[0179] If the result of the determination in step S163 is positive, that is, if an offline code image update opportunity has arrived, the control device 11 of the terminal device 1[q] advances the process to step S101 and executes again a series of processes according to the flowcharts shown in FIGS. 13 to 16.

[0180] If the result of the determination in step S163 is negative, that is, if an offline code image update opportunity has not arrived, the code generation unit 113 of the terminal device 1[q] determines whether an update opportunity for the time encryption code TT[q] has arrived due to the update of the terminal time value AG (S165). If the result of the determination in step S165 is negative, that is, if an update opportunity for the time encryption code TT[q] has not arrived, the control device 11 of the terminal device 1[q] returns the process to step S159 and continues to display the offline code image GY[q] on the display device 13.

[0181] When the result of the determination in step S165 is affirmative, that is, when the terminal time value AG is updated and the opportunity to update the time encryption code TT[q] arrives, the code generation unit 113 of the terminal device 1[q] updates the time encryption code TT[q] by encrypting the updated terminal time value AG with the encryption key KS[q][M] (S167).

[0182] Then, the code generation unit 113 of the terminal device 1[q] updates the offline settlement code CY[q] with the updated time encryption code TT[q] (S169), and proceeds with the process to step S159 to cause the display device 13 to display the updated offline code image GY[q]. Specifically, in step S169, the code generation unit 113 arranges the merchant identification token KZ stored in the storage device 12, the latest offline token KY[q][M] stored in the storage device 12, the updated time encryption code TT[q], the appropriation value VJ, and the code type value VV in a predetermined order to generate the updated offline settlement code CY[q].

[0183] As shown in FIG. 16, when the offline blocking state (S151:N) and when there is no valid offline token KY[q] in the storage device 12 (S153:N), etc., when it is difficult to perform the offline code generation process, the display control unit 114 of the terminal device 1[q] causes the display device 13 to display an online payment waiting screen (not shown) which is a screen for notifying the user U[q] that it is waiting for the execution of online electronic payment (S171).

[0184] Then, the information transmission unit 111 of the terminal device 1[q] determines whether the terminal device 1[q] and the settlement device 3 can communicate with each other (S173). And the information transmission unit 111 waits until the terminal device 1[q] and the settlement device 3 can communicate with each other.

[0185] When the terminal device 1[q] and the payment device 3 become communicable (S173: Y), the information transmission unit 111 of the terminal device 1[q] transmits an online token request to the payment device 3 (S175). Then, when there is no response to the online token request from the payment device 3 (S177: N), the control device 11 of the terminal device 1[q] returns the process to step S175 to retransmit the online token request. On the other hand, when the information acquisition unit 112 of the terminal device 1[q] receives the online token KX[q] transmitted from the payment device 3 as a response to the online token request (S177: Y), the information acquisition unit 112 acquires the online token KX[q] (S179).

[0186] Next, the code generation unit 113 of the terminal device 1[q] executes an online code generation process using the online token KX[q] acquired in step S179 to generate an online payment code CX[q] (S181).

[0187] Then, the display control unit 114 of the terminal device 1[q] generates display information for displaying an online code image GX[q] indicating the online payment code CX[q] using the online payment code CX[q] generated in step S181, and causes the display device 13 to display the online code image GX[q] based on the display information (S183).

[0188] Next, the control device 11 of the terminal device 1[q] determines whether or not the user U[q] has performed an end operation using the input device 14 (S185). If the result of the determination in step S185 is affirmative, that is, if the end operation has been performed, the control device 11 of the terminal device 1[q] ends the series of processes according to the flowchart shown in FIGS. 13 to 16.

[0189] If the result of the determination in step S185 is negative, that is, if the end operation has not been performed, the code generation unit 113 of the terminal device 1[q] determines whether or not an online code image update trigger has arrived (S187).

[0190] If the result of the determination in step S187 is negative, that is, if the opportunity to update the online code image has not arrived, the control device 11 returns the process to step S183 and continues to display the online code image GX[q] on the display device 13. If the result of the determination in step S187 is positive, that is, if the opportunity to update the online code image has arrived, the information transmission unit 111 of the terminal device 1[q] transmits an online token request to the settlement device 3 (S189).

[0191] Then, if there is no response from the settlement device 3 to the online token request related to step S189 (S191: N), the control device 11 of the terminal device 1[q] proceeds to step S171. On the other hand, when the information acquisition unit 112 of the terminal device 1[q] receives the online token KX[q] transmitted from the settlement device 3 as a response to the online token request related to step S189 (S191: Y), the online token KX[q] is acquired (S193), and the process proceeds to step S181, and an online settlement code CX[q] is generated based on the online token KX[q] acquired in step S193.

[0192] Thus, according to the present embodiment, when online electronic settlement is difficult, such as in the case of an online closed state (S131: N) and when the acquisition of the online token KX[q] fails (S133: N), offline electronic settlement is executed. Therefore, for example, compared with a mode in which an electronic settlement system can only execute online electronic settlement, when the user U[q] of the terminal device 1[q] receives a service at a store where the store device 5 is installed, the possibility of difficulty in paying the consideration for the service by electronic settlement can be reduced.

[0193] Also, according to this embodiment, when an offline code image GY[q] is being displayed (see step S159) and an opportunity to update the offline code image arrives (S163:Y), an attempt is made again to acquire the online token KX[q] (see step S109). Therefore, according to this embodiment, when online electronic settlement is primarily difficult and offline electronic settlement is being executed, it becomes possible to revert to online electronic settlement.

[0194] Also, according to this embodiment, when in an offline blocked state (S151:N), and when there is no valid offline token KY[q] in the storage device 12 (S153:N), etc., when it is difficult to perform the offline code generation process, an attempt is made to acquire the online token KX[q] again (see step S175). Therefore, compared to a mode where an attempt is not made to acquire the online token KX[q] when it is difficult to perform the offline code generation process, that is, compared to a mode where the code generation process is abandoned when it is difficult to perform the offline code generation process, when the user U[q] of the terminal device 1[q] receives service at a store where the store device 5 is installed, the possibility that it becomes difficult to pay the price of the service by electronic settlement can be reduced.

[0195] <A.5. Operation of Settlement Device 3> Hereinafter, with reference to FIGS. 18 to 21, an outline of the operation of the settlement device 3 when electronic settlement is executed will be described.

[0196] FIG. 18 is a flowchart showing an example of the operation of the settlement device 3 when the online token generation process is executed in the settlement device 3. Here, the online token generation process is a process of generating the online token KX[q] in response to an online token request from the terminal device 1[q] when electronic settlement is executed in the electronic settlement system Sys.

[0197] As shown in FIG. 18, when the information reception unit 312 of the payment device 3 receives an online token request from the terminal device 1[q], it accepts the online token request (S301).

[0198] Next, the control device 31 of the payment device 3 generates an online token KX[q] (S303). Also, the control device 31 of the payment device 3 determines an online token validity period TX[q] (S305). Specifically, in step S305, the control device 31 sets the online token validity period TX[q] as a period starting from the generation time of the online token KX[q] and ending at the time when the online token effective time TSX (for example, 5 minutes) has elapsed since the generation time of the online token KX[q].

[0199] Then, the control device 31 of the payment device 3 updates the online token payout information DKX (S307). Specifically, in step S307, the control device 31 adds a new record to the online token payout information DKX, and stores the user identification information DID[q] corresponding to the user U[q] of the terminal device 1[q], the online token KX[q] generated in step S303, and the online token validity period TX[q] determined in step S305 in the new record.

[0200] Then, the information supply unit 311 of the payment device 3 supplies the online token KX[q] generated in step S303 to the terminal device 1[q] (S309), and ends the online token generation process.

[0201] FIG. 19 is a flowchart showing an example of the operation of the payment device 3 when an offline token generation process is executed in the payment device 3. Here, the offline token generation process is a process of generating an offline token KY[q] in response to an offline token request from the terminal device 1[q] when an electronic payment is executed in the electronic payment system Sys.

[0202] As shown in FIG. 19, when the information reception unit 312 of the settlement device 3 receives an offline token request from the terminal device 1[q], it accepts the offline token request (S321).

[0203] Next, the control device 31 of the settlement device 3 generates an offline token KY[q] (S323). Also, the control device 31 of the settlement device 3 determines an offline token validity period TY[q] (S325). Specifically, in step S325, the control device 31 determines the offline token validity period TY[q] as a period starting from the generation time of the offline token KY[q] and ending at the time when the offline token effective time TSY (for example, one week) has elapsed since the generation time of the offline token KY[q]. Also, the control device 31 of the settlement device 3 generates an encryption key KS[q] (S327).

[0204] Then, the control device 31 of the settlement device 3 updates the offline token payout information DKY (S329). Specifically, in step S329, the control device 31 adds a new record to the offline token payout information DKY, and stores the user identification information DID[q] corresponding to the user U[q] of the terminal device 1[q], the offline token KY[q] generated in step S323, the offline token validity period TY[q] determined in step S325, and the encryption key KS[q] generated in step S327 in the new record.

[0205] Then, the information supply unit 311 of the settlement device 3 supplies the offline token KY[q] generated in step S323 and the encryption key KS[q] generated in step S327 to the terminal device 1[q] (S331), and ends the offline token generation process.

[0206] FIG. 20 and FIG. 21 are flowcharts showing an example of the operation of the settlement device 3 when settlement-related processing is executed in the settlement device 3. Here, the settlement-related processing is processing including processing for confirming the validity of the token KK[q] in the settlement device 3 and settlement processing executed by the settlement device 3. The settlement device 3 starts the settlement-related processing when settlement information DP[q] is supplied from the store device 5.

[0207] As shown in FIG. 20, when the settlement information DP[q] is transmitted from the store device 5, the information reception unit 312 of the settlement device 3 receives the settlement information DP[q] (S341).

[0208] Next, the settlement processing unit 313 of the settlement device 3 extracts a code type value VV from the settlement code CC[q] included in the settlement information DP[q] received in step S341 (S343). Then, the settlement processing unit 313 of the settlement device 3 determines whether or not the code type value VV extracted in step S343 indicates an online code value. That is, in step S345, the settlement processing unit 313 determines whether or not the settlement code CC[q] included in the settlement information DP[q] received in step S341 is the online settlement code CX[q].

[0209] If the result of the determination in step S345 is negative, that is, if the settlement code CC[q] included in the settlement information DP[q] is the offline settlement code CY[q], the settlement processing unit 313 of the settlement device 3 advances the processing to step S361. If the result of the determination in step S345 is positive, that is, if the settlement code CC[q] included in the settlement information DP[q] is the online settlement code CX[q], the settlement processing unit 313 of the settlement device 3 extracts an online token KX[q] from the online settlement code CX[q] included in the settlement information DP[q] received in step S341 (S347).

[0210] Next, the settlement processing unit 313 of the settlement device 3 determines whether the online token KX[q] extracted in step S347 exists in the online token payout information DKX (S349). If the result of the determination in step S349 is negative, that is, if the online token KX[q] extracted in step S347 does not exist in the online token payout information DKX, the settlement processing unit 313 of the settlement device 3 advances the process to step S357.

[0211] If the result of the determination in step S349 is positive, that is, if the online token KX[q] extracted in step S347 exists in the online token payout information DKX, the settlement processing unit 313 of the settlement device 3 refers to the online token payout information DKX to determine whether the online token validity period TX[q] corresponding to the online token KX[q] extracted in step S347 is a period including the current time (S351). If the result of the determination in step S351 is negative, that is, if the online token validity period TX[q] corresponding to the online token KX[q] extracted in step S347 does not include the current time, the settlement processing unit 313 of the settlement device 3 advances the process to step S357.

[0212] If the result of the determination in step S351 is positive, that is, if the online token validity period TX[q] corresponding to the online token KX[q] extracted in step S347 includes the current time, the settlement processing unit 313 of the settlement device 3 executes online settlement processing (S353), and determines the payment to the store where the store device 5 that sent the settlement information DP[q] in step S341 is provided from the user U[q] corresponding to the online token KX[q] extracted in step S347. Then, the information supply unit 311 of the settlement device 3 transmits a register billing response, which is a notification that the payment from the user U[q] based on the settlement information DP[q] has been determined, to the store where the store device 5 that sent the settlement information DP[q] in step S341 is provided (S355), and ends the settlement-related processing.

[0213] On the other hand, when the result of the determination in step S349 is negative and when the result of the determination in step S351 is negative, the information supply unit 311 of the settlement device 3 transmits a notice (S357) to the store where the store device 5 that sent the settlement information DP[q] in step S341 is provided, indicating that the payment from the user U[q] based on the settlement information DP[q] has failed, and ends the settlement-related process.

[0214] As shown in FIG. 21, when the result of the determination in step S345 is negative, that is, when the settlement code CC[q] included in the settlement information DP[q] is the offline settlement code CY[q], the settlement processing unit 313 of the settlement device 3 extracts the offline token KY[q] from the offline settlement code CY[q] included in the settlement information DP[q] received in step S341 (S361).

[0215] Next, the settlement processing unit 313 of the settlement device 3 determines whether the offline token KY[q] extracted in step S361 exists in the offline token payout information DKY (S363). When the result of the determination in step S363 is negative, that is, when the offline token KY[q] extracted in step S361 does not exist in the offline token payout information DKY, the settlement processing unit 313 of the settlement device 3 proceeds to step S381.

[0216] When the result of the determination in step S363 is positive, that is, when the offline token KY[q] extracted in step S361 exists in the offline token payout information DKY, the settlement processing unit 313 of the settlement device 3 refers to the offline token payout information DKY to determine whether the offline token validity period TY[q] corresponding to the offline token KY[q] extracted in step S361 is a period including the current time (S365). If the result of the determination in step S365 is negative, that is, if the offline token validity period TY[q] corresponding to the offline token KY[q] extracted in step S361 does not include the current time, the settlement processing unit 313 of the settlement device 3 proceeds with the processing to step S381.

[0217] If the result of the determination in step S365 is positive, that is, if the offline token validity period TY[q] corresponding to the offline token KY[q] extracted in step S361 includes the current time, the settlement processing unit 313 of the settlement device 3 determines whether the same offline token KY[q] as the offline token KY[q] included in the settlement information DP[q] received in step S341 was supplied during the period from the time that is twice the update unit time TC before the time when the settlement information DP[q] was received in step S341 (for example, two minutes before the current time) to the time when the settlement information DP[q] was received in step S341 (hereinafter sometimes referred to as the "same token prohibition period") (S367). If the result of the determination in step S367 is positive, that is, if the same offline token KY[q] as the offline token KY[q] included in the settlement information DP[q] received in step S341 was received during the same token prohibition period, the settlement processing unit 313 of the settlement device 3 proceeds with the processing to step S381.

[0218] If the result of the determination in step S367 is negative, that is, if the same offline token KY[q] as the offline token KY[q] included in the settlement information DP[q] received in step S341 was not received during the same token prohibition period, the settlement processing unit 313 of the settlement device 3 extracts the time encryption code TT[q] from the offline settlement code CY[q] included in the settlement information DP[q] received in step S341 (S369).

[0219] In addition, the settlement processing unit 313 of the settlement device 3 identifies the encryption key KS[q] corresponding to the offline token KY[q] extracted in step S361 by referring to the offline token payout information DKY (S371).

[0220] Next, the settlement processing unit 313 of the settlement device 3 encrypts the server time value AM, the future time value AMf, and the past time value AMp using the encryption key KS[q] identified in step S371 (S373).

[0221] Here, the server time value AM is a value based on the server time TM, which is the current time managed by the settlement device 3, and is a value updated at the cycle of the update unit time TC. Specifically, in this embodiment, as an example, it is assumed that the server time value AM is a value representing the server time TM in the order of "minutes". For example, in this embodiment, when the server time TM is "18:25:37", the server time value AM may be "1825" obtained by deleting "37 seconds" from the server time TM. Therefore, if the server time TM and the terminal time TG are the same time, the server time value AM will be the same as the terminal time value AG. However, in reality, there may be some errors between the server time TM and the terminal time TG. In this case, the server time value AM and the terminal time value AG may be different values. In addition, the future time value AMf is a value based on a time that is one update unit time TC later than the server time TM. Specifically, in this embodiment, as an example, it is assumed that the future time value AMf is a value representing, in the order of "minutes", the time that is one update unit time TC (for example, 1 minute) later than the server time TM. For example, when the server time TM is "18:25:37", the future time value AMf may be "1826" obtained by deleting "37 seconds" from the future time "18:26:37" that is one minute later than the server time TM. The past time value AMp is a value based on a time that is earlier than the server time TM by the update unit time TC. Specifically, in this embodiment, as an example, it is assumed that the past time value AMp is a value representing, in the order of "minutes", a time that is earlier than the server time TM by the update unit time TC (for example, 1 minute). For example, when the server time TM is "18:25:37", the past time value AMp may be "1824" obtained by deleting "37 seconds" from the time "18:24:37" which is "1 minute" earlier than the server time TM.

[0222] Note that hereinafter, the value obtained by encrypting the server time value AM with the encryption key KS[q] is referred to as the server time encryption code CM (an example of the "first time code"), the value obtained by encrypting the future time value AMf with the encryption key KS[q] is referred to as the future time encryption code CMf (an example of the "second time code"), and the value obtained by encrypting the past time value AMp with the encryption key KS[q] is referred to as the past time encryption code CMp (an example of the "third time code"). Also, hereinafter, the server time encryption code CM, the future time encryption code CMf, and the past time encryption code CMp may be collectively referred to as the time encryption code CMM (an example of the "time code"). That is, in step S373, the settlement processing unit 313 of the settlement device 3 generates three time encryption codes CMM, namely, the server time encryption code CM obtained by encrypting the server time value AM with the encryption key KS[q], the future time encryption code CMf obtained by encrypting the future time value AMf with the encryption key KS[q], and the past time encryption code CMp obtained by encrypting the past time value AMp with the encryption key KS[q].

[0223] Next, the settlement processing unit 313 of the settlement device 3 determines whether any one of the three time encryption codes CMM generated in step S373 matches the time encryption code TT[q] extracted in step S369 (S375).

[0224] If the result of the determination in step S375 is affirmative, that is, if the time encryption code CMM generated in step S373 matches the time encryption code TT[q] extracted in step S369, the settlement processing unit 313 of the settlement device 3 executes an offline settlement process (S377), and determines the payment to the store where the store device 5 provided with the offline token KY[q] extracted in step S361 is installed, from the user U[q] who sent the settlement information DP[q] in step S341. Then, the information supply unit 311 of the settlement device 3 transmits a register billing response, which is a notification that the payment from the user U[q] based on the settlement information DP[q] has been determined, to the store where the store device 5 provided with the settlement information DP[q] in step S341 is installed (S379), and terminates the settlement-related process.

[0225] On the other hand, when the result of the determination in step S363 is negative, when the result of the determination in step S365 is negative, when the result of the determination in step S367 is affirmative, and when the result of the determination in step S375 is negative, the information supply unit 311 of the settlement device 3 transmits a notification that the payment from the user U[q] based on the settlement information DP[q] has failed, to the store where the store device 5 provided with the settlement information DP[q] in step S341 is installed (S381), and terminates the settlement-related process.

[0226] As described above, in this embodiment, the settlement device 3 can execute two types of settlement processes: an online settlement process and an offline settlement process. Therefore, for example, the convenience of the user U[q] using electronic settlement can be improved as compared with a mode in which the settlement device 3 can only execute an online settlement process.

[0227] In addition, in this embodiment, when two or more pieces of settlement information DP[q] including the same offline token KY[q] are supplied during the same token prohibition period having a time length twice that of the update unit time TC, the settlement device 3 restricts the offline settlement process based on the settlement information DP[q] supplied after the second time. Therefore, according to this embodiment, it is possible to restrict fraudulent settlements using the offline token KY[q], and it is possible to reduce the security risk in the case where the offline token KY[q] is leaked or the like.

[0228] In addition, in this embodiment, in the settlement-related process, the settlement device 3 uses the future time value AMf and the past time value AMp in addition to the server time value AM to verify the validity of the time encryption code TT[q] included in the offline settlement code CY[q]. Therefore, according to this embodiment, even if there is an error between the terminal time TG managed by the terminal device 1[q] and the server time TM managed by the settlement device 3, the user U[q] of the terminal device 1[q] can use offline electronic settlement. As a result, according to this embodiment, for example, in the settlement-related process, compared with the mode of verifying the validity of the time encryption code TT[q] based only on the server time value AM, the possibility that the user U[q] can use electronic settlement can be improved, and the convenience of the user U[q] using electronic settlement can be improved.

[0229] <B. Second Embodiment> Hereinafter, the second embodiment of the present invention will be described with reference to FIGS. 22 to 27. Note that, for elements whose operations and functions are the same as those in the first embodiment in each of the embodiments illustrated below, the reference numerals used in the description of the first embodiment are reused, and the detailed description of each is appropriately omitted.

[0230] The electronic payment system Sys according to the second embodiment has the same configuration as the electronic payment system Sys according to the first embodiment. In the electronic payment system Sys according to the first embodiment, when performing online electronic payment, in the terminal device 1[q], after obtaining the offline token KY[q], the generation of the online payment code CX[q] and the display of the online code image GX[q] were performed. However, in the electronic payment system Sys according to the second embodiment, when performing online electronic payment, in the terminal device 1[q], the generation of the online payment code CX[q] and the display of the online code image GX[q] are executed with priority over the acquisition of the offline token KY[q].

[0231] FIG. 22 is a sequence chart showing an example of the operation of the electronic payment system Sys when the electronic payment system Sys according to the second embodiment executes online electronic payment.

[0232] As described above, in the sequence chart of the online electronic payment according to the first embodiment shown in FIG. 4, in the electronic payment system Sys, after the processes of steps S21 to S24 related to the acquisition of the online token KX[q] by the terminal device 1[q] and the processes of steps S31 to S35 related to the acquisition of the offline token KY[q] by the terminal device 1[q], the processes of steps S41 to S43 related to the display of the online code image GX[q] by the terminal device 1[q] were executed. On the other hand, in the sequence chart of the online electronic payment according to the second embodiment shown in FIG. 22, in the electronic payment system Sys, after the processes of steps S21 to S24 related to the acquisition of the online token KX[q] by the terminal device 1[q] and the processes of steps S41 to S43 related to the display of the online code image GX[q] by the terminal device 1[q], the processes of steps S31 to S35 related to the acquisition of the offline token KY[q] by the terminal device 1[q] are executed, which is different from the first embodiment.

[0233] That is, in the second embodiment, the display of the online code image GX[q] is preferentially executed rather than the acquisition of the offline token KY[q]. Therefore, according to the second embodiment, compared with the mode of displaying the online code image GX[q] after the acquisition of the offline token KY[q], the time until the online code image GX[q] is displayed is shortened, and rapid execution of online electronic payment becomes possible. In the second embodiment, the token response waiting period TW may be, for example, the period from the start to the end of the payment application. Alternatively, the token response waiting period TW may be, for example, a period including the period from the start of the payment application until the token response waiting time TSW elapses and the period from the start or end of the display of the online code image GX[q] until a predetermined time elapses.

[0234] FIGS. 23 to 27 are flowcharts showing an example of the operation of the terminal device 1[q] when electronic payment is executed in the electronic payment system Sys according to the second embodiment. The flowcharts shown in FIGS. 23 to 27 start when the payment application is launched in the terminal device 1[q]. The flowcharts shown in FIGS. 23 to 27 differ from the flowchart according to the first embodiment shown in FIGS. 13 to 16 in that the processes of steps S115 to S125 do not exist and the processes of steps S201 to S231 exist.

[0235] As shown in FIG. 23, when the payment application is launched in the terminal device 1[q], the control device 11 of the terminal device 1[q] executes the processes of the above-described steps S101 to S113. Specifically, the control device 11 of the terminal device 1[q] first determines whether the communication state of the terminal device 1[q] is in an online state (S101). If the result of the determination in step S101 is negative, the control device 11 of the terminal device 1[q] proceeds to step S151. When the result of the determination in step S101 is positive, the information transmission unit 111 of the terminal device 1[q] transmits an online congestion information request to the settlement device 3 (S103). Then, when the online congestion information DHX is received (S105:Y), the information acquisition unit 112 of the terminal device 1[q] acquires the online congestion information DHX (S107). Also, the information transmission unit 111 of the terminal device 1[q] transmits an online token request to the settlement device 3 (S109). Then, when the online token KX[q] is received (S111:Y), the information acquisition unit 112 of the terminal device 1[q] acquires the online token KX[q] (S113).

[0236] Next, the control device 11 of the terminal device 1[q] executes the processes of steps S131 to S133 described above. Specifically, the control device 11 of the terminal device 1[q] determines whether the settlement device 3 is not in an online congestion state (S131). If the result of the determination in step S131 is negative, the control device 11 of the terminal device 1[q] proceeds to step S221. Even when the result of the determination in step S131 is positive, if the information acquisition unit 112 has not acquired the online token KX[q] in step S113 (S133:N), the control device 11 of the terminal device 1[q] proceeds to step S221.

[0237] As shown in FIG. 24, the control device 11 of the terminal device 1[q] executes the processes of steps S135 to S139 described above. Specifically, when the result of the determination in step S131 is affirmative and the information acquisition unit 112 acquires the online token KX[q] in step S113 (S133: Y), the code generation unit 113 of the terminal device 1[q] generates an online payment code CX[q] (S135). Then, the display control unit 114 of the terminal device 1[q] causes the display device 13 to display the online code image GX[q] (S137). Next, the control device 11 of the terminal device 1[q] determines whether an end operation has been executed (S139).

[0238] Next, when the result of the determination in step S139 is affirmative, the control device 11 of the terminal device 1[q] executes the processes of steps S201 to S211. Specifically, the information transmission unit 111 of the terminal device 1[q] transmits an offline block information request to the settlement device 3 (S201). Note that the process of step S201 corresponds to the process of step S31 described above. Then, when there is no response to the offline block information request from the settlement device 3 (S203: N), the control device 11 of the terminal device 1[q] advances the process to step S207. On the other hand, when the information acquisition unit 112 of the terminal device 1[q] receives the offline block information DHY transmitted from the settlement device 3 by the communication device 15 as a response to the offline block information request (S203: Y), the information acquisition unit 112 acquires the offline block information DHY (S205). Further, the information transmission unit 111 of the terminal device 1[q] transmits an offline token request to the settlement device 3 (S207). Note that the process of step S207 corresponds to the process of step S33 described above. Then, when there is no response to the offline token request from the settlement device 3 (S209: N), the control device 11 of the terminal device 1[q] ends the series of processes according to the flowchart shown in FIGS. 23 to 27. On the other hand, when the information acquisition unit 112 of the terminal device 1[q] receives the offline token KY[q] and the encryption key KS[q] transmitted from the settlement device 3 by the communication device 15 as a response to the offline token request (S209: Y), the information acquisition unit 112 stores the offline token KY[q] and the encryption key KS[q] in the storage device 12 (S211), and ends the series of processes according to the flowchart shown in FIGS. 23 to 27.

[0239] Also, when the result of the determination in step S139 is negative, the control device 11 of the terminal device 1[q] executes the processes of steps S141 to S147 described above. Specifically, the code generation unit 113 of the terminal device 1[q] determines whether an online code image update trigger has occurred (S141). If the result of the determination in step S141 is negative, the control device 11 returns the process to step S137 and continues to display the online code image GX[q] on the display device 13. If the result of the determination in step S141 is positive, the information transmission unit 111 of the terminal device 1[q] transmits an online token request to the payment device 3 (S143). Then, when there is no response to the online token request related to step S143 from the payment device 3 (S145: N), the control device 11 of the terminal device 1[q] proceeds to step S151. On the other hand, when the information acquisition unit 112 of the terminal device 1[q] receives the online token KX[q] transmitted by the communication device 15 from the payment device 3 as a response to the online token request related to step S143 (S145: Y), the information acquisition unit 112 acquires the online token KX[q] (S147), proceeds to step S135, and in step S135, generates an online payment code CX[q] based on the online token KX[q] acquired in step S147.

[0240] As shown in FIG. 25, when the result of the determination in step S131 is negative or the result of the determination in step S133 is negative, the control device 11 of the terminal device 1[q] executes the processes of steps S221 to S231. Specifically, the information transmission unit 111 of the terminal device 1[q] transmits an offline occlusion information request to the settlement device 3 (S221). Then, when there is no response to the offline occlusion information request from the settlement device 3 (S223:N), the control device 11 of the terminal device 1[q] advances the process to step S227. On the other hand, when the information acquisition unit 112 of the terminal device 1[q] receives the offline occlusion information DHY transmitted from the settlement device 3 as a response to the offline occlusion information request (S223:Y), the information acquisition unit 112 acquires the offline occlusion information DHY (S225). Also, the information transmission unit 111 of the terminal device 1[q] transmits an offline token request to the settlement device 3 (S227). Then, when there is no response to the offline token request from the settlement device 3 (S229:N), the control device 11 of the terminal device 1[q] advances the process to step S151. On the other hand, when the information acquisition unit 112 of the terminal device 1[q] receives the offline token KY[q] and the encryption key KS[q] transmitted from the settlement device 3 as a response to the offline token request (S229:Y), the information acquisition unit 112 stores the offline token KY[q] and the encryption key KS[q] in the storage device 12 (S231).

[0241] Next, the control device 11 of the terminal device 1[q] executes the processes of steps S151 to S155 described above. Specifically, the code generation unit 113 of the terminal device 1[q] determines whether the settlement device 3 is not in an offline occlusion state (S151). If the result of the determination in step S151 is negative, the control device 11 of the terminal device 1[q] advances the process to step S171. If the result of the determination in step S151 is positive, the code generation unit 113 of the terminal device 1[q] determines whether the latest offline token KY[q][M] stored in the storage device 12 is valid (S153). If the result of the determination in step S153 is negative, the control device 11 of the terminal device 1[q] advances the process to step S171. If the result of the determination in step S153 is positive, the display control unit 114 of the terminal device 1[q] causes the display device 13 to display the offline settlement explanation screen G3 (S155), and advances the process to step S157.

[0242] As shown in FIG. 26, the control device 11 of the terminal device 1[q] executes the processes of steps S157 to S169. Specifically, the code generation unit 113 of the terminal device 1[q] generates an offline settlement code CY[q] based on the offline token KY[q][M] stored in the storage device 12 (S157). Note that the process of step S157 corresponds to the process of step S53 described above. Then, the display control unit 114 of the terminal device 1[q] causes an offline code image GY[q] to be displayed based on the generated offline settlement code CY[q] (S159). Note that the process of step S159 corresponds to the process of step S54 described above. Next, the control device 11 of the terminal device 1[q] determines whether an end operation has been executed (S161). If the result of the determination in step S161 is affirmative, the control device 11 of the terminal device 1[q] ends a series of processes according to the flowchart shown in FIGS. 23 to 27. If the result of the determination in step S161 is negative, the code generation unit 113 of the terminal device 1[q] determines whether an opportunity to update the offline code image has arrived (S163). If the result of the determination in step S163 is affirmative, the control device 11 of the terminal device 1[q] advances the process to step S101 and executes again a series of processes according to the flowchart shown in FIGS. 23 to 27. If the result of the determination in step S163 is negative, the code generation unit 113 of the terminal device 1[q] determines whether an opportunity to update the time encryption code TT[q] due to an update of the terminal time value AG has arrived (S165). If the result of the determination in step S165 is negative, the control device 11 of the terminal device 1[q] returns the process to step S159 and continues to display the offline code image GY[q] on the display device 13. If the result of the determination in step S165 is affirmative, the code generation unit 113 of the terminal device 1[q] updates the time encryption code TT[q] by encrypting the updated terminal time value AG with the encryption key KS[q][M] (S167). Then, the code generation unit 113 of the terminal device 1[q] updates the offline settlement code CY[q] with the updated time encryption code TT[q] (S169), and advances the process to step S159 to cause the updated offline code image GY[q] to be displayed on the display device 13.

[0243] As shown in FIG. 27, when the determination result in step S151 is negative, or when the determination result in step S153 is negative, the control device 11 of the terminal device 1[q] executes the processes of steps S171 to S193. Specifically, the display control unit 114 of the terminal device 1[q] causes the display device 13 to display an online payment waiting screen (S171). Then, the information transmission unit 111 of the terminal device 1[q] waits until the terminal device 1[q] and the payment device 3 can communicate with each other (S173). After that, when the terminal device 1[q] and the payment device 3 can communicate with each other, the information transmission unit 111 of the terminal device 1[q] transmits an online token request to the payment device 3 (S175). And when the information acquisition unit 112 of the terminal device 1[q] receives the online token KX[q] transmitted from the payment device 3 by the communication device 15 (S177:Y), the online token KX[q] is acquired (S179). Next, the code generation unit 113 of the terminal device 1[q] generates an online payment code CX[q] based on the acquired online token KX[q] (S181). Then, the display control unit 114 of the terminal device 1[q] causes the display device 13 to display an online code image GX[q] based on the generated online payment code CX[q] (S183). Next, the control device 11 of the terminal device 1[q] determines whether an end operation has been executed (S185). If the result of the determination in step S185 is affirmative, the control device 11 of the terminal device 1[q] ends a series of processes according to the flowchart shown in FIGS. 23 to 27. If the result of the determination in step S185 is negative, the code generation unit 113 of the terminal device 1[q] determines whether an opportunity to update the online code image has arrived (S187). If the result of the determination in step S187 is negative, the control device 11 returns the process to step S183 and continues to display the online code image GX[q] on the display device 13. If the result of the determination in step S187 is affirmative, the information transmission unit 111 of the terminal device 1[q] transmits an online token request to the payment device 3 (S189). And when the control device 11 of the terminal device 1[q] does not receive a response from the payment device 3 to the online token request related to step S189 (S191:N), the process proceeds to step S171.When the information acquisition unit 112 of the other party's terminal device 1[q] receives the online token KX[q] transmitted from the communication device 15 from the settlement device 3 as a response to the online token request according to step S189 (S191: Y), it acquires the online token KX[q] (S193), advances the process to step S181, and generates an online settlement code CX[q] based on the online token KX[q] acquired in step S193.

[0244] As described above, in the second embodiment, the terminal device 1[q] preferentially executes the acquisition of the online token KX[q] (steps S101 to S113) and the display of the online code image GX[q] (steps S131 to S137) rather than the acquisition of the offline token KY[q] (steps S201 to S211). Therefore, according to the second embodiment, compared with the mode of displaying the online code image GX[q] after acquiring the offline token KY[q], the time until the online code image GX[q] is displayed is shortened, and rapid execution of online electronic settlement becomes possible.

[0245] <C. Variation> Each of the above embodiments can be variously modified. Specific modification modes are exemplified below. Two or more modes arbitrarily selected from the following examples can be appropriately combined within a range where they do not conflict with each other. In the variation examples exemplified below, for elements whose operations and functions are equivalent to those of the embodiments, the reference numerals referred to in the above description are reused, and the detailed description of each is appropriately omitted.

[0246] <C.1. Variation 1> In the first and second embodiments described above, the mode in which the terminal device 1[q] acquires the offline token KY[q] after acquiring the online token KX[q] during electronic settlement has been exemplified and described. However, the present invention is not limited to such a mode. The terminal device 1[q] may acquire the online token KX[q] after acquiring the offline token KY[q] during electronic settlement.

[0247] FIG. 28 is a sequence chart showing an example of the operation of the electronic payment system Sys according to Modification Example 1 when performing online electronic payment.

[0248] As shown in FIG. 28, in the sequence chart of the online electronic payment according to this modification example, in the electronic payment system Sys, after the processes of steps S31 to S34 related to the acquisition of the offline token KY[q] by the terminal device 1[q], the processes of steps S21 to S24 related to the acquisition of the online token KX[q] by the terminal device 1[q] are executed. This is different from the sequence chart of the online electronic payment according to the first embodiment shown in FIG. 4.

[0249] According to this modification example, at the timing of performing the electronic payment, the offline token KY[q] is acquired from the payment device 3 and the offline token KY[q] is stored in the storage device 12. Therefore, according to this embodiment, when it is difficult to perform online electronic payment due to communication failure or the like, the possibility that it is even difficult to perform offline electronic payment can be reduced.

[0250] <C.2. Modification Example 2> In the above-described first embodiment, second embodiment, and modification example 1, the mode in which the terminal device 1[q] executes the acquisition of the online token KX[q] and the acquisition of the offline token KY[q] at different timings during the electronic payment has been exemplified and described. However, the present invention is not limited to such a mode. The terminal device 1[q] may acquire the online token KX[q] and the offline token KY[q] simultaneously during the electronic payment.

[0251] FIG. 29 is a sequence chart showing an example of the operation of the electronic payment system Sys according to Modification Example 2 when performing online electronic payment.

[0252] As shown in FIG. 29, in the sequence chart of the online electronic payment according to this modification example, in the electronic payment system Sys, the processes of steps S71 to S74 are executed instead of the processes of steps S21 to S24 and steps S31 to S34, which is different from the sequence chart of the online electronic payment according to the first embodiment shown in FIG. 4.

[0253] Specifically, as shown in FIG. 29, in this modification example, after the control device 11 of the terminal device 1[q] executes the process of step S12, it transmits a block information request to the payment device 3 (S71). Here, the block information request is a telegram for requesting the online block information DHX and the offline block information DHY. Then, the control device 31 of the payment device 3 supplies the online block information DHX and the offline block information DHY to the terminal device 1[q] as a response to the block information request supplied from the terminal device 1[q] in step S71 (S72).

[0254] Next, the control device 11 of the terminal device 1[q] transmits a token request to the payment device 3 (S73). Here, the token request is a telegram for requesting the online token KX[q] and the offline token KY[q]. Then, the control device 31 of the payment device 3 supplies the online token KX[q], the offline token KY[q], and the encryption key KS[q] to the terminal device 1[q] as a response to the token request supplied from the terminal device 1[q] in step S73 (S74). Thereafter, the electronic payment system Sys executes the processes of step S35, steps S41 to S44, and steps S61 to S65.

[0255] According to this modification example, at the timing when the electronic payment is performed, the offline token KY[q] is acquired from the payment device 3 and the offline token KY[q] is stored in the storage device 12. Therefore, according to this embodiment, when it is difficult to perform online electronic payment due to a communication failure or the like, it is possible to reduce the possibility that it is even difficult to execute offline electronic payment.

[0256] <C.3. Variant Example 3> In the above-described first embodiment, second embodiment, and variant examples 1 and 2, when the terminal device 1[q] performs an electronic payment, it has been exemplified and described that the terminal device 1[q] transmits an online congestion information request (or an offline congestion information request, or a congestion information request) to the payment device 3 separately from the online token request (or the offline token request, or the token request). However, the present invention is not limited to such a mode. The terminal device 1[q] may transmit the online token request and the online congestion information request as the same message during an electronic payment.

[0257] FIG. 30 is a sequence chart showing an example of the operation of the electronic payment system Sys according to Variant Example 3 when performing an online electronic payment.

[0258] As shown in FIG. 30, in the sequence chart of the online electronic payment according to this variant example, in the electronic payment system Sys, the process of step S81 is executed instead of the processes of steps S21, S23, S31, and S33, and the processes of steps S14 and S16 are executed. This is different from the sequence chart of the online electronic payment according to the first embodiment shown in FIG. 4.

[0259] Specifically, as shown in FIG. 30, in this variant example, after the control device 11 of the terminal device 1[q] executes the process of step S12, it transmits a payment application start notification to the payment device 3 (S81). Here, as described above, the payment application start notification is a notification indicating that the payment application has been started in the terminal device 1[q]. Then, in response to the payment app startup notification supplied from the terminal device 1[q] in step S81, the control device 31 of the payment device 3 executes the supply of the setting information DS to the terminal device 1[q] (S14), the supply of the operator identification token KZ (S16), the supply of the online block information DHX (S22), the supply of the online token KX[q] (S24), the supply of the offline block information DHY (S32), and the supply of the offline token KY[q] and the encryption key KS[q] (S34). Thereafter, the electronic payment system Sys executes the processes of step S35, steps S41 to S44, and steps S61 to S65.

[0260] According to this modification example, in response to the payment app startup notification transmitted from the terminal device 1[q] to the payment device 3, various types of information including the online token KX[q] and the offline token KY[q] are supplied from the payment device 3 to the terminal device 1[q]. Therefore, according to this modification example, for example, compared with a mode in which the terminal device 1[q] transmits an online block information request separately from the online token request to the payment device 3, the control in the terminal device 1[q] can be simplified.

[0261] <C.4. Modification Example 4> In the above-described first embodiment, second embodiment, and modification examples 1 to 3, the token response waiting time TSW, the online token valid time TSX, the offline token valid time TSY, and the update unit time TC are exemplified and described as being notified from the payment device 3 as the setting information DS. However, the present invention is not limited to such a mode. Some or all of the token response waiting time TSW, the online token valid time TSX, the offline token valid time TSY, and the update unit time TC may be stored as fixed values in the storage device 12 of the terminal device 1[q].

[0262] <C.5. Modification Example 5> In the above-described first and second embodiments and Modifications 1 to 4, the case where the blockage information DH is information indicating whether or not the settlement device 3 can execute settlement processing has been exemplified and described. However, the present invention is not limited to such an aspect. The blockage information DH may be information indicating whether or not the settlement device 3 can execute settlement processing by each payment method.

[0263] Specifically, in this modification, the online blockage information DHX includes online combined payment blockage information DHX1 indicating whether or not online settlement processing by combined telephone bill payment can be executed, online balance payment blockage information DHX2 indicating whether or not online settlement processing by prepaid balance payment can be executed, and online card payment blockage information DHX3 indicating whether or not online settlement processing by credit card payment can be executed. Here, the online combined payment blockage information DHX1 may be information indicating whether or not the function of the settlement device 3 for executing online settlement processing by combined telephone bill payment is operating without being blocked. Further, the online balance payment blockage information DHX2 may be information indicating whether or not the function of the settlement device 3 for executing online settlement processing by prepaid balance payment is operating without being blocked. Further, the online card payment blockage information DHX3 may be information indicating whether or not the function of the settlement device 3 for executing online settlement processing by credit card payment is operating without being blocked. In the following, the online combined payment blockage information DHX1, the online balance payment blockage information DHX2, and the online card payment blockage information DHX3 may be collectively referred to as individual online blockage information DHX0. Also, in this modified example, the offline block information DHY includes an offline combined payment block information DHY1 indicating whether offline settlement processing by combined telephone bill payment is executable, an offline balance payment block information DHY2 indicating whether offline settlement processing by prepaid balance payment is executable, and an offline card payment block information DHY3 indicating whether offline settlement processing by credit card payment is executable. Here, the offline combined payment block information DHY1 may be information indicating whether the function of the settlement device 3 for executing offline settlement processing by combined telephone bill payment is operating without being blocked. Also, the offline balance payment block information DHY2 may be information indicating whether the function of the settlement device 3 for executing offline settlement processing by prepaid balance payment is operating without being blocked. Also, the offline card payment block information DHY3 may be information indicating whether the function of the settlement device 3 for executing offline settlement processing by credit card payment is operating without being blocked. Note that hereinafter, the offline combined payment block information DHY1, the offline balance payment block information DHY2, and the offline card payment block information DHY3 may be collectively referred to as individual offline block information DHY0.

[0264] And, in this modified example, in response to an online block information request from the terminal device 1[q], the settlement device 3 may supply the terminal device 1[q] with the individual online block information DHX0 corresponding to the payment method selected by the user U[q] of the terminal device 1[q] among the three individual online block information DHX0 included in the online block information DHX. Also, in this modified example, in response to an offline block information request from the terminal device 1[q], the settlement device 3 may supply the terminal device 1[q] with the individual offline block information DHY0 corresponding to the payment method selected by the user U[q] of the terminal device 1[q] among the three individual offline block information DHY0 included in the offline block information DHY. Also, in this modified example, in response to an offline block information request from the terminal device 1[q], the settlement device 3 may supply the terminal device 1[q] with the three individual offline block information DHY0 included in the offline block information DHY.

[0265] Also, in the above-described first embodiment, second embodiment, and modification examples 1 to 4, the settlement device 3 supplies the terminal device 1[q] with an online token KX[q] common to a plurality of payment methods and an offline token KY[q] common to a plurality of payment methods, regardless of the payment method selected by the user U[q] of the terminal device 1[q]. However, the present invention is not limited to such an aspect. For example, the settlement device 3 may supply the terminal device 1[q] with one or more offline tokens KY[q] that correspond one-to-one to one or more payment methods that can be selected by the user U[q] of the terminal device 1[q].

[0266] Specifically, in this modification example, in response to an offline token request from the terminal device 1[q], the settlement device 3 supplies the terminal device 1[q] with a combined payment offline token KY1[q] that is an offline token KY[q] corresponding to combined telephone bill payment, a balance payment offline token KY2[q] that is an offline token KY[q] corresponding to prepaid balance payment, and a card payment offline token KY3[q] that is an offline token KY[q] corresponding to credit card payment. Hereinafter, the combined payment offline token KY1[q], the balance payment offline token KY2[q], and the card payment offline token KY3[q] may be collectively referred to as individual offline tokens KY0[q]. That is, in this modification example, in response to an offline token request from the terminal device 1[q], the settlement device 3 supplies the terminal device 1[q] with three individual offline tokens KY0[q] that correspond one-to-one to three types of payment methods that can be selected by the user U[q] of the terminal device 1[q].

[0267] And in this modified example, the code generation unit 113 of the terminal device 1[q] generates an offline settlement code CY[q] based on an individual offline token KY0[q] corresponding to the payment method selected by the user U[q] of the terminal device 1[q]. Specifically, in this modified example, when the payment method selected by the user U[q] of the terminal device 1[q] is combined telephone bill payment, the code generation unit 113 of the terminal device 1[q] generates an offline settlement code CY[q] based on the combined payment offline token KY1[q]; when the payment method selected by the user U[q] of the terminal device 1[q] is prepaid balance payment, the code generation unit 113 of the terminal device 1[q] generates an offline settlement code CY[q] based on the balance payment offline token KY2[q]; and when the payment method selected by the user U[q] of the terminal device 1[q] is credit card payment, the code generation unit 113 of the terminal device 1[q] generates an offline settlement code CY[q] based on the card payment offline token KY3[q].

[0268] Also, in this modified example, the display control unit 114 of the terminal device 1[q] determines whether to display an offline code image GY[q] based on the individual offline token KY0[q] corresponding to the payment method selected by the user U[q] of the terminal device 1[q] on the display device 13 based on individual offline occlusion information DHY0 corresponding to the payment method selected by the user U[q] of the terminal device 1[q]. Specifically, in this modified example, when the payment method selected by the user U[q] of the terminal device 1[q] is combined telephone bill payment, the display control unit 114 of the terminal device 1[q] determines whether to display the offline code image GY[q] based on the combined payment offline token KY1[q] according to the combined payment offline occlusion information DHY1; when the payment method selected by the user U[q] of the terminal device 1[q] is prepaid balance payment, the display control unit 114 of the terminal device 1[q] determines whether to display the offline code image GY[q] based on the balance payment offline token KY2[q] according to the balance payment offline occlusion information DHY2; and when the payment method selected by the user U[q] of the terminal device 1[q] is credit card payment, the display control unit 114 of the terminal device 1[q] determines whether to display the offline code image GY[q] based on the card payment offline token KY3[q] according to the card payment offline occlusion information DHY3.

[0269] In this modification example, the settlement device 3 may supply three online tokens KX[q] to the terminal device 1[q], which correspond one-to-one to three types of payment methods that the user U[q] of the terminal device 1[q] can select. Further, in this modification example, the settlement device 3 may supply, to the terminal device 1[q], one online token KX[q] that corresponds to one payment method selected by the user U[q] of the terminal device 1[q] among the three online tokens KX[q] that correspond one-to-one to the three types of payment methods that the user U[q] of the terminal device 1[q] can select.

[0270] Thus, according to this modification example, since the display presence or absence of the offline code image GY[q] can be finely controlled according to the blockage status for each payment method selected by the user U[q] of the terminal device 1[q], it is possible to reduce the labor of the user U[q] and improve the convenience of the user U[q] as compared with an aspect that does not consider the payment method.

[0271] <D. Supplementary Note> Aspects related to the above embodiments and modification examples are appended below. Note that, in order to facilitate the understanding of each aspect, in the following, descriptions with reference signs of the drawings are given, but this is not intended to limit the present invention to the illustrated aspects.

[0272] <D.1. Supplementary Note 1> Hereinafter, Supplementary Note 1 will be described.

[0273] <Supplementary Note 1-1> The electronic payment program PG-T according to Supplementary Note 1-1 is an electronic payment program PG-T installed in the terminal device 1[q], which causes the processor of the terminal device 1[q] to send requests for two types of tokens KK[q], namely the online token KX[q] and the offline token KY[q], during the token response waiting period TW from the start of the activation of the electronic payment program PG-T until the token response waiting time TSW elapses. It functions as an information transmission unit 111, an information acquisition unit 112 that acquires the token KK[q] supplied in response to the transmission of the request from the information transmission unit 111, and a display control unit 114 that causes the display device 13 to display the code image GG[q] based on the token KK[q]. When the information acquisition unit 112 acquires the offline token KY[q], the information acquisition unit 112 stores the offline token KY[q] in the storage device 12. When the information acquisition unit 112 acquires the online token KX[q] during the token response waiting period TW, the display control unit 114 causes the display device 13 to display the code image GG[q] based on the online token KX[q]. When the information acquisition unit 112 does not acquire the token KK[q] during the token response waiting period TW, the display control unit 114 causes the display device 13 to display the code image GG[q] based on the offline token KY[q] stored in the storage device 12. This is the feature of the present invention. In Supplementary Note 1, the token response waiting time TSW is an example of the "first time", the token response waiting period TW is an example of the "first period", the online token KX[q] is an example of the "first token", and the offline token KY[q] is an example of the "second token".

[0274] According to Supplementary Note 1-1, at the timing of electronic payment, the online token KX[q] and the offline token KY[q] are acquired, and the acquired offline token KY[q] is stored in the storage device 12. Therefore, it is not necessary to execute the process of acquiring the offline token KY[q] separately from the timing of electronic payment. For this reason, it is not necessary to adjust the timing of executing the process of acquiring the offline token KY[q] separately from the timing of electronic payment. Also, according to Supplementary Note 1-1, even when the online token KX[q] or the offline token KY[q] cannot be obtained during the token response waiting period TW, the code image GG[q] can be displayed based on the offline token KY[q] stored in the storage device 12, so that electronic payment is possible regardless of the communication state.

[0275] In Supplementary Note 1-1, the "request for two types of tokens KK[q]" means that the terminal device 1[q] makes two requests. For example, the request for the offline token KY[q] may be made separately from the request for the online token KX[q]. In this case, the information acquisition unit 112 may acquire the online token KX[q] supplied in response to the request for the online token KX[q] and the offline token KY[q] supplied in response to the request for the offline token KY[q]. Also, in Supplementary Note 1-1, the "request for two types of tokens KK[q]" means that the terminal device 1[q] makes a single request. For example, it may be a request for the token KK[q] or a notification to start the payment application. In this case, the information acquisition unit 112 may acquire the online token KX[q] and the offline token KY[q] supplied in response to the request for the token KK[q] or the notification to start the payment application.

[0276] <Supplementary Note 1-2> The electronic payment program PG-T according to Supplementary Note 1-2 is an electronic payment program PG-T installed in the terminal device 1[q], which causes the processor of the terminal device 1[q] to transmit requests for two types of tokens KK[q], namely, the online token KX[q] and the offline token KY[q], during the token response waiting period TW from the start of the activation of the electronic payment program PG-T until the token response waiting time TSW elapses. It functions as an information transmission unit 111, an information acquisition unit 112 that acquires the token KK[q] supplied in response to the transmission of the request from the information transmission unit 111, and a display control unit 114 that causes the display device 13 to display the code image GG[q] based on the token KK[q]. When the information acquisition unit 112 acquires the offline token KY[q], the information acquisition unit 112 stores the offline token KY[q] in the storage device 12. When the information acquisition unit 112 acquires the online token KX[q] during the token response waiting period TW, the display control unit 114 causes the display device 13 to display the code image GG[q] based on the online token KX[q]. When the communication state of the terminal device 1[q] is in the offline state during the token response waiting period TW, the display control unit 114 causes the display device 13 to display the code image GG[q] based on the offline token KY[q] stored in the storage device 12. This is the feature.

[0277] According to Supplementary Note 1-2, at the timing of electronic payment, the online token KX[q] and the offline token KY[q] are acquired, and the acquired offline token KY[q] is stored in the storage device 12. Therefore, there is no need to execute a process of acquiring the offline token KY[q] separately from the timing of electronic payment. For this reason, there is no need to adjust the timing of executing the process of acquiring the offline token KY[q] separately from the timing of electronic payment. Also, according to Supplementary Note 1-2, even when the communication state is poor during the token response waiting period TW, the code image GG[q] can be displayed based on the offline token KY[q] stored in the storage device 12. Therefore, electronic payment is possible regardless of the communication state.

[0278] <Supplementary Note 1-3> The electronic payment program PG-T according to Supplementary Note 1-3 is the electronic payment program PG-T described in Supplementary Note 1-2. The display control unit 114 causes the display device 13 to display a code image GG[q] based on an offline token KY[q] stored in the storage device 12 when the communication state of the terminal device 1[q] is in an online state during the token response waiting period TW and the information acquisition unit 112 fails to acquire the token KK[q] during the token response waiting period TW. This is the gist of the invention.

[0279] According to Supplementary Note 1-3, even when the online token KX[q] or the offline token KY[q] cannot be acquired during the token response waiting period TW, the code image GG[q] can be displayed based on the offline token KY[q] stored in the storage device 12, so that electronic payment is possible regardless of the communication state.

[0280] <Supplementary Note 1-4> The electronic payment program PG-T according to Supplementary Note 1-4 is the electronic payment program PG-T described in Supplementary Notes 1-1 to 1-3. The information acquisition unit 112 acquires an online token KX[q] and an offline token KY[q] from the payment device 3. The online token KX[q] is a token KK[q] used in the payment device 3 to determine the execution of payment processing corresponding to the user U[q] of the terminal device 1[q] when the terminal device 1[q] is in a state where it can communicate with the payment device 3. The offline token KY[q] is a token KK[q] used in the payment device 3 to determine the execution of payment processing corresponding to the user U[q] of the terminal device 1[q] when the terminal device 1[q] is in a state where it cannot communicate with the payment device 3. This is the gist of the invention.

[0281] According to Supplementary Note 1-4, the online token KX[q] and the offline token KY[q] are acquired at the timing of electronic payment, so there is no need to acquire the offline token KY[q] separately from the timing of electronic payment. For this reason, compared with the mode of acquiring the offline token KY[q] separately from the timing of electronic payment, the timing adjustment of the processing in the terminal device 1[q] is simplified. Also, according to Supplementary Note 1-4, at the timing of electronic settlement, in addition to the online token KX[q], an offline token KY[q] is acquired. Therefore, in the case where it becomes difficult to perform online electronic settlement due to a poor communication state, it is possible to make preparations in advance so that offline electronic settlement becomes possible.

[0282] <Supplementary Note 1-5> The electronic settlement program PG-T according to Supplementary Note 1-5 is the electronic settlement program PG-T described in Supplementary Notes 1-1 to 1-4. The information acquisition unit 112 acquires the online token KX[q] and the offline token KY[q] from the settlement device 3, and acquires token response information DSW indicating the token response waiting time TSW from the settlement device 3. This is the feature. In Supplementary Note 1, the token response information DSW is an example of "time information".

[0283] According to Supplementary Note 1-5, since the settlement device 3 can adjust the token response waiting time TSW, it is possible to dynamically switch the display mode of the code image GG[q] according to the situation where the terminal device 1[q] is placed.

[0284] <Supplementary Note 1-6> The electronic settlement program PG-T according to Supplementary Note 1-6 is the electronic settlement program PG-T described in Supplementary Notes 1-1 to 1-5. The information transmission unit 111 issues an offline token request for requesting the offline token KY[q] after issuing an online token request for requesting the online token KX[q] during the token response waiting period TW. This is the feature. In Supplementary Note 1, the online token request is an example of the "first token request", and the offline token request is an example of the "second token request".

[0285] According to Supplementary Note 1-6, an online token request is issued prior to the offline token request during the token response waiting period TW. For this reason, during the token response waiting period TW, the code image GG[q] can be displayed based on the first acquired token KK[q]. As a result, compared with the mode of displaying the code image GG[q] based on the last acquired token KK[q] during the token response waiting period TW, it is possible to shorten the time until the display of the code image GG[q].

[0286] <Supplementary Note 1-7> The electronic payment program PG-T according to Supplementary Note 1-7 is the electronic payment program PG-T described in Supplementary Notes 1-1 to 1-6, wherein the information acquisition unit 112 acquires the offline token KY[q] after acquiring the online token KX[q] during the token response waiting period TW. This is the gist of the invention.

[0287] According to Supplementary Note 1-7, compared with the mode of displaying the code image GG[q] based on the offline token KY[q] acquired last during the token response waiting period TW, it is possible to shorten the time until the display of the code image GG[q].

[0288] <Supplementary Note 1-8> The settlement device 3 according to Supplementary Note 1-8 is a settlement device 3 capable of communicating with the terminal device 1[q], and includes an information reception unit 312 that receives a token request for requesting the issuance of a token KK[q] from the terminal device 1[q], and an information supply unit 311 that supplies two types of tokens KK[q], namely, an online token KX[q] and an offline token KY[q], associated with the user U[q] of the terminal device 1[q], to the terminal device 1[q] when the information reception unit 312 receives the token request. The online token KX[q] is a token KK[q] used in the settlement device 3 to determine the execution of settlement processing corresponding to the user U[q] when the settlement device 3 can communicate with the terminal device 1[q], and the offline token KY[q] is a token KK[q] used in the settlement device 3 to determine the execution of settlement processing corresponding to the user U[q] when the settlement device 3 has difficulty communicating with the terminal device 1[q]. This is the feature.

[0289] According to Supplementary Note 1-8, since the offline token KY[q] is acquired at a timing corresponding to the timing when the terminal device 1[q] acquires the online token KX[q], there is no need to adjust the acquisition timing of the offline token KY[q] separately from the acquisition timing of the online token KX[q]. For this reason, according to Supplementary Note 1-8, it becomes easy to adjust the processing schedule in the terminal device 1[q]. Also, according to Supplementary Note 1-8, since the offline token KY[q] is acquired at a timing corresponding to the timing when the terminal device 1[q] acquires the online token KX[q], it is possible to make prior preparations so that offline electronic settlement is possible even when the communication state in the terminal device 1[q] deteriorates and online electronic settlement becomes difficult.

[0290] <D.2. Supplementary Note 2> Hereinafter, Supplementary Note 2 will be described.

[0291] <Supplementary Note 2-1> The electronic payment program PG-T according to Supplementary Note 2-1 causes the processor of the terminal device 1[q] capable of communicating with the payment device 3 to use an offline token KY[q] used for offline payment processing executed in the payment device 3 when communication between the payment device 3 and the terminal device 1[q] is difficult, and offline occlusion information DHY indicating whether or not the offline payment processing can be executed in the payment device 3. The electronic payment program PG-T includes an information acquisition unit 112 that acquires the information from the payment device 3, and a display control unit 114 that causes the display device 13 to display an offline code image GY[q] based on the offline token KY[q] when the offline occlusion information DHY indicates that the payment device 3 can execute the offline payment processing. This is the gist of the invention.

[0292] According to Supplementary Note 2-1, when the offline occlusion information DHY indicates that the payment device 3 can execute the offline payment processing, the terminal device 1[q] displays the offline code image GY[q]. That is, according to Supplementary Note 2-1, when it is difficult for the payment device 3 to execute the offline payment processing, the display of the offline code image GY[q] on the terminal device 1[q] can be suppressed. Therefore, even when it is difficult for the payment device 3 to execute the offline payment processing, it is possible to reduce the possibility of causing unnecessary trouble to the user U[q] of the terminal device 1[q] as compared with the mode in which the terminal device 1[q] displays the offline code image GY[q].

[0293] Note that the electronic payment program PG-T related to Supplementary Note 2-1 causes the processor of the terminal device 1[q] capable of communicating with the payment device 3 to use the offline token KY[q] used for offline payment processing executed by the payment device 3 when communication between the payment device 3 and the terminal device 1[q] is difficult, and the offline block information DHY indicating whether offline payment processing can be executed in the payment device 3. It also has an information acquisition unit 112 that acquires these from the payment device 3, and a display control unit 114 that causes the display device 13 to display an offline code image GY[q] based on the offline token KY[q] when communication between the payment device 3 and the terminal device 1[q] is possible but execution of online payment processing executed by the payment device 3 is difficult, and the offline block information DHY indicates that the payment device 3 can execute offline payment processing. It may be characterized by functioning as such. Further, the electronic payment program PG-T related to Supplementary Note 2-1 causes the processor of the terminal device 1[q] capable of communicating with the payment device 3 to use the online token KX[q] used for online payment processing executed by the payment device 3 when communication between the payment device 3 and the terminal device 1[q] is possible, the offline token KY[q] used for offline payment processing executed by the payment device 3 when communication between the payment device 3 and the terminal device 1[q] is difficult, the online block information DHX indicating whether online payment processing can be executed in the payment device 3, and the offline block information DHY indicating whether offline payment processing can be executed in the payment device 3. It has an information acquisition unit 112 that acquires these from the payment device 3, and when the online block information DHX indicates that the payment device 3 can execute online payment processing, it causes the display device 13 to display an online code image GX[q] based on the online token KX[q], and when execution of online payment processing is difficult and the offline block information DHY indicates that the payment device 3 can execute offline payment processing, it causes the display device 13 to display an offline code image GY[q] based on the offline token KY[q]. It may be characterized by functioning as such.

[0294] <Supplementary Note 2-2> The electronic payment program PG-T according to Supplementary Note 2-2 is the electronic payment program PG-T described in Supplementary Note 2-1. When the offline blockage information DHY indicates that it is difficult for the payment device 3 to execute offline payment processing, the information acquisition unit 112 waits until the payment device 3 and the terminal device 1[q] can communicate with each other. When the payment device 3 and the terminal device 1[q] can communicate with each other, the information acquisition unit 112 acquires an online token KX[q] used for the online payment processing executed in the payment device 3 when the payment device 3 and the terminal device 1[q] can communicate with each other from the payment device 3. When the information acquisition unit 112 acquires the online token KX[q], the display control unit 114 causes the display device 13 to display an online code image GX[q] based on the online token KX[q]. This is the gist of the invention.

[0295] According to Supplementary Note 2-2, when it is difficult for the payment device 3 to execute offline payment processing, the terminal device 1[q] can execute an electronic payment of a type corresponding to the operating status of the payment device 3 in order to display an online code image GX[q] corresponding to the online payment processing.

[0296] <Supplementary Note 2-3> The electronic payment program PG-T according to Supplementary Note 2-3 is the electronic payment program PG-T described in Supplementary Note 2-1 or Supplementary Note 2-2. The payment device 3 can execute offline payment processing by one or more payment methods including one payment method. The offline blockage information DHY indicates whether offline payment processing by each of the one or more payment methods in the payment device 3 can be executed. The information acquisition unit 112 acquires one or more individual offline tokens KY0[q] corresponding to the one or more payment methods from the payment device 3. When the offline blockage information DHY indicates that the payment device 3 can execute offline payment processing by one payment method, the display control unit 114 causes the display device 13 to display an offline code image GY[q] based on one individual offline token KY0[q] used for one payment method among the one or more individual offline tokens KY0[q]. This is the gist of the invention. In Supplementary Note 2, one payment method is an example of the "First Settlement Method", the individual offline token KY0[q] is an example of an "offline token", and one individual offline token KY0[q] is an example of a "First Offline Token".

[0297] According to Supplementary Note 2-3, when the offline blockage information DHY indicates that the settlement device 3 can execute offline settlement processing by one payment method, the terminal device 1[q] displays an offline code image GY[q] corresponding to the one payment method. That is, according to Supplementary Note 2-3, when it is difficult for the settlement device 3 to execute offline settlement processing by one payment method, the display of the offline code image GY[q] corresponding to the one payment method on the terminal device 1[q] can be suppressed. Therefore, even when it is difficult for the settlement device 3 to execute offline settlement processing by one payment method, compared with the mode in which the terminal device 1[q] displays the offline code image GY[q] corresponding to the one payment method, the possibility of causing unnecessary trouble to the user U[q] of the terminal device 1[q] can be reduced.

[0298] <Supplementary Note 2-4> The electronic settlement program PG-T according to Supplementary Note 2-4 is the electronic settlement program PG-T described in Supplementary Note 2-3. When the settlement device 3 executes offline settlement processing, the one or more payment methods that the settlement device 3 can handle include other payment methods different from the one payment method. The display control unit 114 restricts the display of the offline code image GY[q] based on the other individual offline token KY0[q] corresponding to the other payment method among the one or more individual offline tokens KY0[q] on the display device 13 when the offline blockage information DHY indicates that it is difficult for the settlement device 3 to execute offline settlement processing by the other payment method. In Supplementary Note 2, the other payment method is an example of the "Second Settlement Method", and the other individual offline token KY0[q] is an example of a "Second Offline Token".

[0299] According to Supplementary Note 2-4, when the offline blockage information DHY indicates that it is difficult for the settlement device 3 to execute offline settlement processing using other payment methods, the terminal device 1[q] restricts the display of the offline code image GY[q] corresponding to other payment methods. For this reason, even when it is difficult for the settlement device 3 to execute offline settlement processing using other payment methods, the possibility of causing unnecessary trouble to the user U[q] of the terminal device 1[q] can be reduced as compared with the mode in which the terminal device 1[q] displays the offline code image GY[q] corresponding to other payment methods.

[0300] <Supplementary Note 2-5> The electronic settlement program PG-T according to Supplementary Note 2-5 is the electronic settlement program PG-T described in Supplementary Notes 2-1 to 2-4, and an offline token validity period TY[q] is set for the offline token KY[q]. The display control unit 114 causes the display device 13 to display the offline code image GY[q] based on the offline token KY[q] when it is within the offline token validity period TY[q] of the offline token KY[q]. Note that in Supplementary Note 2, the offline token validity period TY[q] is an example of the "validity period".

[0301] According to Supplementary Note 2-5, when the terminal device 1[q] has an offline token KY[q] within the validity period, the terminal device 1[q] displays the offline code image GY[q] based on the offline token KY[q]. That is, when the terminal device 1[q] does not have an offline token KY[q] within the validity period, the terminal device 1[q] can restrict the display of the offline code image GY[q] based on the offline token KY[q]. For this reason, even when the terminal device 1[q] does not have an offline token KY[q] within the validity period, the possibility of causing unnecessary trouble to the user U[q] of the terminal device 1[q] can be reduced as compared with the mode of displaying the offline code image GY[q] based on the offline token KY[q].

[0302] <Supplementary Note 2-6> The electronic payment program PG-T according to Supplementary Note 2-6 is the electronic payment program PG-T described in Supplementary Notes 2-1 to 2-5. The information acquisition unit 112 acquires offline token validity information DSY regarding the offline token validity period TY[q] corresponding to the offline token KY[q]. When the elapsed time since the information acquisition unit 112 acquired the offline token KY[q] is less than or equal to the offline token valid time TSY, which is the time length of the offline token validity period TY[q], the display control unit 114 causes the offline code image GY[q] based on the offline token KY[q] to be displayed on the display device 13. This is the gist of the invention. In Supplementary Note 2, the offline token validity information DSY is an example of "token validity information", and the offline token valid time TSY is an example of "the time length of the validity period".

[0303] According to Supplementary Note 2-6, even when not having the offline token KY[q] within the validity period, it is possible to reduce the possibility of causing unnecessary trouble to the user U[q] of the terminal device 1[q] as compared with the mode of displaying the offline code image GY[q] based on the offline token KY[q].

[0304] <Supplementary Note 2-7> The electronic payment program PG-T according to Supplementary Note 2-7 causes the processor of the terminal device 1[q] capable of communicating with the payment device 3 to function as an information acquisition unit 112 that acquires from the payment device 3 a token KK[q] used for the payment process executed in the payment device 3 and blockage information DH indicating whether the payment process in the payment device 3 can be executed, and a display control unit 114 that causes the code image GG[q] based on the token KK[q] to be displayed on the display device 13 when the blockage information DH indicates that the payment device 3 can execute the payment process. This is the gist of the invention.

[0305] According to Supplementary Note 2-7, when the block information DH indicates that the payment device 3 can execute the payment process, the terminal device 1[q] displays the code image GG[q]. That is, according to Supplementary Note 2-7, when it is difficult for the payment device 3 to execute the payment process, the display of the code image GG[q] on the terminal device 1[q] can be suppressed. Therefore, even when it is difficult for the payment device 3 to execute the payment process, compared with the mode in which the terminal device 1[q] displays the code image GG[q], the possibility of causing unnecessary trouble to the user U[q] of the terminal device 1[q] can be reduced.

[0306] <Supplementary Note 2-8> The payment device 3 according to Supplementary Note 2-8 is a payment device 3 capable of communicating with the terminal device 1[q], and includes a payment processing unit 313 that executes an offline payment process when it is difficult for the terminal device 1[q] and the payment device 3 to communicate, offline block information DHY indicating whether the offline payment process in the payment processing unit 313 can be executed, and an information supply unit 311 that supplies the offline token KY[q] used for the offline payment process to the terminal device 1[q]. The terminal device 1[q] is characterized in that when the offline block information DHY indicates that the payment device 3 can execute the offline payment process, it can display an offline code image GY[q] based on the offline token KY[q].

[0307] According to Supplementary Note 2-8, in order to supply the offline block information DHY indicating whether the offline payment process in the payment device 3 can be executed from the payment device 3 to the terminal device 1[q], when it is difficult for the payment device 3 to execute the offline payment process, the display of the offline code image GY[q] on the terminal device 1[q] can be suppressed. Therefore, even when it is difficult for the payment device 3 to execute the offline payment process, compared with the mode in which the terminal device 1[q] displays the offline code image GY[q], the possibility of causing unnecessary trouble to the user U[q] of the terminal device 1[q] can be reduced.

[0308] <Supplementary Note 2-9> The settlement device 3 according to Supplementary Note 2-9 is the settlement device 3 described in Supplementary Note 2-8, wherein the settlement processing unit 313 is capable of performing offline settlement processing using a plurality of payment methods, the information supply unit 311 supplies a plurality of individual offline tokens KY0[q] corresponding to the plurality of payment methods to the terminal device 1[q], and the offline block information DHY indicates whether offline settlement processing by each of the plurality of payment methods can be executed, which is characterized by this.

[0309] According to Supplementary Note 2-9, when it is difficult for the settlement device 3 to execute offline settlement processing using one payment method, the display of the offline code image GY[q] corresponding to one payment method on the terminal device 1[q] can be suppressed. Therefore, even when it is difficult for the settlement device 3 to execute offline settlement processing using one payment method, compared with the mode in which the terminal device 1[q] displays the offline code image GY[q] corresponding to one payment method, the possibility of causing unnecessary trouble to the user U[q] of the terminal device 1[q] can be reduced.

[0310] <Supplementary Note 2-10> The settlement device 3 according to Supplementary Note 2-10 is the settlement device 3 described in Supplementary Note 2-8 or Supplementary Note 2-9, wherein the information supply unit 311 supplies offline token validity information DSY regarding the offline token validity period TY[q], which is the validity period of the offline token KY[q], to the terminal device 1[q], which is characterized by this.

[0311] According to Supplementary Note 2-10, the settlement device 3 can adjust the validity period of the offline token KY[q].

[0312] <D.3. Supplementary Note 3> Hereinafter, Supplementary Note 3 will be described.

[0313] <Supplementary Note 3-1> The electronic payment program PG-T according to Supplementary Note 3-1 causes the processor of the terminal device 1[q] capable of communicating with the payment device 3 to obtain, from the payment device 3, an offline token KY[q] associated with the user U[q] of the terminal device 1[q], and an encryption key KS[q]. The display control unit 114 causes the display device 13 to display an offline code image GY[q] based on the offline token KY[q], a merchant identification token KZ for identifying the payment merchant related to the payment device 3, and a time encryption code TT[q] obtained by encrypting, with the encryption key KS[q], a terminal time value AG based on the terminal time TG which is the current time of the terminal device 1[q]. This is the gist of the invention. In Supplementary Note 3, the offline token KY[q] is an example of the "first token", the merchant identification token KZ is an example of the "second token", the terminal time TG is an example of the "current time of the terminal", the terminal time value AG is an example of the "value based on the current time of the terminal", the time encryption code TT[q] is an example of the "encryption code", and the offline code image GY[q] is an example of the "first code image".

[0314] According to Supplementary Note 3-1, since the time encryption code TT[q] is determined based on the terminal time TG, it can be made shorter than the update period of the offline token KY[q]. Therefore, according to Supplementary Note 3-1, compared with the mode in which the offline code image GY[q] is generated based only on the offline token KY[q], the security of electronic payment using the offline code image GY[q] can be enhanced. Also, in Supplementary Note 3-1, in addition to the offline token KY[q], the offline code image GY[q] is displayed based on the merchant identification token KZ. Therefore, compared with the mode in which the offline code image GY[q] is displayed based only on the offline token KY[q], the security of electronic payment using the offline code image GY[q] can be enhanced.

[0315] <Supplementary Note 3-2> The electronic payment program PG-T according to Supplementary Note 3-2 is the electronic payment program PG-T described in Supplementary Note 3-1, wherein the terminal time value AG is updated every update unit time TC, and the update unit time TC is shorter than the offline token validity period TY[q] which is the validity period of the offline token KY[q]. In Supplementary Note 3, the update unit time TC is an example of the "unit time".

[0316] According to Supplementary Note 3-2, the offline code image GY[q] is displayed using the time encryption code TT[q] updated at a cycle shorter than the expiration date of the offline token KY[q]. Therefore, according to Supplementary Note 3-2, even when the offline code image GY[q] is displayed based on the offline token KY[q], the offline code image GY[q] can be updated every update unit time TC, and the security of the electronic payment using the offline code image GY[q] can be enhanced.

[0317] <Supplementary Note 3-3> The electronic payment program PG-T according to Supplementary Note 3-3 is the electronic payment program PG-T described in Supplementary Note 3-2, wherein the time encryption code TT[q] is updated when at least (at the latest) the update unit time TC has elapsed since the offline code image GY[q] was displayed on the display device 13, and the display control unit 114 updates the offline code image GY[q] displayed on the display device 13 based on the updated time encryption code TT[q], the offline token KY[q], and the operator identification token KZ when at least (at the latest) the update unit time TC has elapsed since the offline code image GY[q] was displayed on the display device 13.

[0318] According to Supplementary Note 3-2, since the offline code image GY[q] can be updated every update unit time TC, the security of the electronic payment using the offline code image GY[q] can be enhanced.

[0319] <Supplementary Note 3-4> The electronic payment program PG-T according to Supplementary Note 3-4 is the electronic payment program PG-T described in Supplementary Note 3-2 or Supplementary Note 3-3, wherein the information acquisition unit 112 acquires update time information DSC indicating the update unit time TC from the payment device 3. In Supplementary Note 3, the update time information DSC is an example of "time information".

[0320] According to Supplementary Note 3-4, since the update cycle of the offline code image GY[q] can be adjusted by the payment device 3, flexible operation regarding the security of electronic payment becomes possible.

[0321] <Supplementary Note 3-5> The electronic payment program PG-T according to Supplementary Note 3-5 is the electronic payment program PG-T described in Supplementary Notes 3-1 to 3-4, wherein the information acquisition unit 112 acquires an online token KX[q] associated with the user U[q] of the terminal device 1[q] from the payment device 3, and the display control unit 114 causes the offline code image GY[q] to be displayed on the display device 13 when communication between the terminal device 1[q] and the payment device 3 is difficult, and causes the online code image GX[q] based on the online token KX[q] and the operator identification token KZ to be displayed on the display device 13 when communication between the terminal device 1[q] and the payment device 3 is possible. In Supplementary Note 3, the online token KX[q] is an example of the "third token", and the online code image GX[q] is an example of the "second code image".

[0322] According to Supplementary Note 3-5, the offline code image GY[q] displayed during offline electronic payment is made different from the online code image GX[q] displayed during online electronic payment. Therefore, in this aspect, flexible operation considering the characteristics of both offline and online electronic payments is possible from the viewpoint of the security of electronic payment.

[0323] <Supplementary Note 3-6> The electronic payment program PG-T according to Supplementary Note 3-6 is the electronic payment program PG-T described in Supplementary Note 3-5, characterized in that the number of digits LX of the online token KX[q] is the same as the total number of digits of the number of digits LY of the offline token KY[q] and the number of digits LZ of the operator identification token KZ.

[0324] According to Supplementary Note 3-6, in order to make the number of digits of the tokens included in the offline code image GY[q] displayed during offline electronic payment the same as the number of digits of the tokens included in the online code image GX[q] displayed during online electronic payment, compared with the mode in which the number of digits of both is different, the processing in the terminal device 1[q] can be simplified.

[0325] <Supplementary Note 3-7> The electronic payment program PG-T according to Supplementary Note 3-7 is the electronic payment program PG-T described in Supplementary Note 3-6, characterized in that the display control unit 114 causes the display device 13 to display an offline code image GY[q] based on an offline payment code CY[q] including the offline token KY[q], the operator identification token KZ, and the time encryption code TT[q] when the terminal device 1[q] and the payment device 3 have difficulty communicating, and causes the display device 13 to display an online code image GX[q] based on an online payment code CX[q] including the online token KX[q] and the operator identification token KZ when the terminal device 1[q] and the payment device 3 can communicate, and the number of digits of the offline payment code CY[q] is the same as the number of digits of the online payment code CX[q]. In Supplementary Note 3, the offline payment code CY[q] is an example of the "first payment code", and the online payment code CX[q] is an example of the "second payment code".

[0326] According to Supplementary Note 3-7, in order to make the number of digits of the offline settlement code CY[q] indicated by the offline code image GY[q] displayed during offline electronic settlement the same as the number of digits of the online settlement code CX[q] indicated by the online code image GX[q] displayed during online electronic settlement, compared with a mode in which the number of digits of both is different, the processing in the store device 5 that reads the code image GG[q] (online code image GX[q] or offline code image GY[q]) can be simplified, and also, the processing in the settlement device 3 that executes the processing related to electronic settlement based on the settlement code CC[q] (online settlement code CX[q] or offline settlement code CY[q]) can be simplified.

[0327] <Supplementary Note 3-8> The terminal device 1[q] according to Supplementary Note 3-8 is a terminal device 1[q] capable of communicating with the settlement device 3, and includes an information acquisition unit 112 that acquires an offline token KY[q] associated with the user U[q] of the terminal device 1[q] and a cryptographic key KS[q] from the settlement device 3, and a display control unit 114 that causes the display device 13 to display the offline code image GY[q] based on the offline token KY[q], a merchant identification token KZ that identifies the settlement merchant related to the settlement device 3, and a time encryption code TT[q] obtained by encrypting a terminal time value AG based on the terminal time TG which is the current time of the terminal device 1[q] with the cryptographic key KS[q].

[0328] According to Supplementary Note 3-8, since the time encryption code TT[q] is determined based on the terminal time TG, it can be made shorter than the update period of the offline token KY[q]. Therefore, compared with a mode in which the offline code image GY[q] is generated based only on the offline token KY[q], the security of electronic settlement using the offline code image GY[q] can be enhanced.

[0329] <Supplementary Note 3-9> The settlement device 3 according to Supplementary Note 3-9 is a settlement device capable of communicating with the terminal device 1[q], and includes an information supply unit 311 that supplies the offline token KY[q] associated with the user U[q] of the terminal device 1[q] and the encryption key KS[q] associated with the offline token KY[q] among a plurality of encryption keys KS to the terminal device 1[q]; an offline code image GY[q] displayed on the terminal device 1[q], which is based on the offline token KY[q], a merchant identification token KZ that identifies the settlement merchant related to the settlement device 3, and a time encryption code TT[q] obtained by encrypting the terminal time value AG of the terminal device 1[q] updated every update unit time TC using the encryption key KS[q]. An information reception unit 312 that receives one settlement information DP[q] including the offline token KY[q] and the time encryption code TT[q] from the store device 5 that has read the offline code image GY[q]; based on the offline token KY[q] included in the one settlement information DP[q], using the encryption key KS[q] specified from among the plurality of encryption keys KS, an encryption key KS[q] is used to encrypt the server time value AM based on the server time TM managed by the settlement device 3 to obtain a server time encryption code CM, and a future time value AMf based on a time that is one update unit time TC later than the server time TM is encrypted using the encryption key KS[q] to obtain a future time encryption code CMf, and a past time value AMp based on a time that is one update unit time TC earlier than the server time TM is encrypted using the encryption key KS[q] to obtain a past time encryption code CMp. When any one of the three time encryption codes CMM matches the time encryption code TT[q] indicated by the one settlement information DP[q], a settlement processing unit 313 that executes a settlement process corresponding to the user U[q] of the terminal device 1[q]. It is characterized by this. In Supplementary Note 3, the server time encryption code CM is an example of the "first time code", the future time encryption code CMf is an example of the "second time code", the past time encryption code CMp is an example of the "third time code", and the time encryption code CMM is an example of the "time code".

[0330] According to Supplementary Note 3-9, since the time encryption code TT[q] is determined based on the terminal time TG, it can be made shorter than the update period of the offline token KY[q]. Therefore, compared with the mode in which the offline code image GY[q] is generated only based on the offline token KY[q], the security of electronic payment using the offline code image GY[q] can be enhanced.

[0331] <Supplementary Note 3-10> The payment device 3 according to Supplementary Note 3-10 is the payment device 3 described in Supplementary Note 3-9. The payment processing unit 313 does not execute the payment processing based on the other payment information DP[q] including the offline token KY[q] and the time encryption code TT[q] during the same token prohibition period until two times the update unit time TC has elapsed after the information reception unit 312 receives one payment information DP[q].

[0332] According to Supplementary Note 3-10, in order to restrict the execution of the payment processing based on the other payment information DP[q], the possibility of unauthorized electronic payment can be reduced compared with the mode without restriction.

[0333] <Supplementary Note 3-11> The settlement device 3 according to Supplementary Note 3-11 is a settlement device capable of communicating with the terminal device 1[q], and includes an information supply unit 311 that supplies the offline token KY[q] associated with the user U[q] of the terminal device 1[q] and the encryption key KS[q] to the terminal device 1[q]; and an offline code image GY[q] displayed on the terminal device 1[q], which is based on the offline token KY[q], a merchant identification token KZ that identifies the settlement merchant related to the settlement device 3, and a time encryption code TT[q] obtained by encrypting the terminal time value AG of the terminal device 1[q] updated every update unit time TC using the encryption key KS[q]. The information reception unit 312 receives a single settlement information DP[q] including the offline token KY[q] and the time encryption code TT[q] from the store device 5 that has read the offline code image GY[q]. The settlement processing unit 313 executes a settlement process corresponding to the user U[q] of the terminal device 1[q] based on the single settlement information DP[q]. The settlement processing unit 313 does not execute a settlement process based on another settlement information DP[q] including the offline token KY[q] and the time encryption code TT[q] during the same token prohibition period from when the information reception unit 312 receives the single settlement information DP[q] until a time twice the update unit time TC has elapsed. This is the feature of the present invention.

[0334] According to Supplementary Note 3-11, in order to restrict the execution of the settlement process based on other settlement information DP[q], it is possible to reduce the possibility of unauthorized electronic settlement compared to the non-restricted mode.

[0335] <D.4. Supplementary Note 4> Hereinafter, Supplementary Note 4 will be described.

[0336] <Supplementary Note 4-1> The electronic payment program PG-T according to Supplementary Note 4-1 causes the processor of the terminal device 1[q] to obtain, from the payment device 3, the token KK[q] (online token KX[q] or offline token KY[q]) associated with the user U[q] of the terminal device 1[q] and the merchant identification token KZ at different timings, and causes the display control unit 114 to display the code image GG[q] (online code image GX[q] or offline code image GY[q]) based on the token KK[q] and the merchant identification token KZ on the display device 13, which is characterized by this. In Supplementary Note 4, the token KK[q] is an example of the "first token", the merchant identification token KZ is an example of the "second token", and the offline code image GY[q] is an example of the "code image".

[0337] According to Supplementary Note 4-1, in addition to the token KK[q], the code image GG[q] is displayed based on the merchant identification token KZ obtained at a timing different from that of the token KK[q]. Therefore, according to Supplementary Note 4-1, compared with the mode in which the code image GG[q] is generated based only on the token KK[q], the security of the electronic payment using the code image GG[q] can be enhanced.

[0338] <Supplementary Note 4-2> The electronic payment program PG-T according to Supplementary Note 4-2 is the electronic payment program PG-T described in Supplementary Note 4-1, characterized in that the frequency at which the information acquisition unit 112 acquires the token KK[q] from the payment device 3 is higher than the frequency at which the information acquisition unit 112 acquires the merchant identification token KZ from the payment device 3.

[0339] According to Supplementary Note 4-2, compared with the mode of acquiring the token KK[q] and the merchant identification token KZ at the same frequency, the security of the electronic payment can be enhanced.

[0340] <Supplementary Note 4-3> The electronic payment program PG-T according to Supplementary Note 4-3 is the electronic payment program PG-T described in Supplementary Note 4-1 or Supplementary Note 4-2. When the information acquisition unit 112 acquires the token KK[q] from the payment device 3 at a plurality of different timings and acquires the merchant identification token KZ from the payment device 3 at a plurality of different timings, the display control unit 114 causes the display device 13 to display a code image GG[q] based on the latest token KK[q] among the plurality of tokens KK[q] acquired by the information acquisition unit 112 and the latest merchant identification token KZ among the plurality of merchant identification tokens KZ acquired by the information acquisition unit 112. This is the gist of the invention.

[0341] According to Supplementary Note 4-3, even when one or both of the token KK[q] and the merchant identification token KZ leak from the terminal device 1[q], the code image GG[q] is displayed using the latest token KK[q] and the latest merchant identification token KZ acquired thereafter. Therefore, according to Supplementary Note 4-3, the security of electronic payment can be enhanced as compared with a mode in which the token KK[q] and the merchant identification token KZ are not updated.

[0342] <Supplementary Note 4-4> The electronic payment program PG-T according to Supplementary Note 4-4 is the electronic payment program PG-T described in Supplementary Note 4-1 to Supplementary Note 4-3, and the merchant identification token KZ includes merchant identification information DKZ for identifying the payment merchant who manages the payment device 3. This is the gist of the invention.

[0343] According to Supplementary Note 4-4, even when the merchant identification information DKZ for identifying the payment merchant is changed, electronic payment using the terminal device 1[q] can be made only by supplying the merchant identification token KZ from the payment device 3 to the terminal device 1[q] without modifying the electronic payment program PG-T.

[0344] <Supplementary Note 4-5> The electronic payment program PG-T according to Supplementary Note 4-5 is the electronic payment program PG-T described in Supplementary Note 4-4. After the electronic payment program PG-T is installed in the terminal device 1[q], when the electronic payment program PG-T is started for the first time, the information acquisition unit 112 acquires the merchant identification token KZ from the payment device 3. When the information acquisition unit 112 acquires the merchant identification token KZ from the payment device 3 at a plurality of different timings, the display control unit 114 causes the display device 13 to display the code image GG[q] based on the latest merchant identification token KZ among the plurality of merchant identification tokens KZ acquired by the information acquisition unit 112. This is the gist of the invention.

[0345] According to Supplementary Note 4-5, even when the merchant identification information DKZ for identifying the payment merchant is changed, it is possible to perform electronic payment using the terminal device 1[q] only by supplying the merchant identification token KZ from the payment device 3 to the terminal device 1[q] without modifying the electronic payment program PG-T.

[0346] <Supplementary Note 4-6> The electronic payment program PG-T according to Supplementary Note 4-6 is the electronic payment program PG-T described in Supplementary Notes 4-1 to 4-5. When communication between the terminal device 1[q] and the payment device 3 is difficult, the display control unit 114 causes the display device 13 to display the code image GG[q] (offline code image GY[q]). This is the gist of the invention.

[0347] <E. Others> (1) In the above-described embodiments (including modifications. The same shall apply hereinafter), the storage devices 12 and 32 are exemplified by ROM, RAM, etc., but may be flexible disks, magneto-optical disks (e.g., compact disks, digital versatile disks, Blu-ray (registered trademark) disks), smart cards, flash memory devices (e.g., cards, sticks, key drives), CD-ROM (Compact Disc-ROM), registers, removable disks, hard disks, floppy (registered trademark) disks, magnetic strips, databases, servers, and other appropriate storage media. Also, the program may be transmitted from a network via a telecommunication line. Further, the program may be transmitted from the communication network NET via a telecommunication line.

[0348] (2) In the above-described embodiments, the information, signals, etc. described may be represented using any of various different technologies. For example, data, instructions, commands, information, signals, bits, symbols, chips, etc. that may be referred to throughout the above description may be represented by voltage, current, electromagnetic waves, magnetic fields or magnetic particles, optical fields or photons, or any combination thereof.

[0349] (3) In the above-described embodiments, the input / output information, etc. may be stored in a specific location (e.g., memory) or may be managed using a management table. The input / output information, etc. may be overwritten, updated, or appended. The output information, etc. may be deleted. The input information, etc. may be transmitted to other devices.

[0350] (4) In the above-described embodiments, the determination may be made based on a value represented by 1 bit (0 or 1), may be made based on a truth value (Boolean: true or false), or may be made by comparing numerical values (e.g., comparison with a predetermined value).

[0351] (5) The processing procedures, sequences, flowcharts, etc. exemplified in the above-described embodiments may be reordered as long as there is no contradiction. For example, for the methods described in the present disclosure, the elements of various steps are presented using an exemplary order and are not limited to the specific order presented.

[0352] (6) Each function exemplified in FIGS. 2 and 3 is realized by any combination of at least one of hardware and software. Also, the method of realizing each functional block is not particularly limited. That is, each functional block may be realized using one physically or logically combined device, or two or more physically or logically separated devices may be directly or indirectly (e.g., using wired, wireless, etc.) connected and realized using these multiple devices. The functional block may be realized by combining software with the above one device or the above multiple devices.

[0353] (7) The programs exemplified in the above-described embodiments should be broadly interpreted to mean instructions, instruction sets, codes, code segments, program codes, programs, subprograms, software modules, applications, software applications, software packages, routines, subroutines, objects, executable files, execution threads, procedures, functions, etc., regardless of whether they are called by the names of software, firmware, middleware, microcode, hardware description language, or other names.

[0354] Also, software, instructions, information, etc. may be transmitted and received via a transmission medium. For example, when software is transmitted from a website, server, or other remote source using at least one of wired technologies (coaxial cable, optical fiber cable, twisted pair, digital subscriber line (DSL), etc.) and wireless technologies (infrared, microwave, etc.), at least one of these wired and wireless technologies is included within the definition of the transmission medium.

[0355] (8) In each of the above-described embodiments, the terms "system" and "network" are used interchangeably.

[0356] (9) The information, parameters, etc. described in the present disclosure may be represented using absolute values, relative values from a predetermined value, or another corresponding piece of information.

[0357] (10) In the above-described embodiments, the terminal device 1[q] may include a case where it is a mobile station (MS: Mobile Station). A mobile station may be referred to by those skilled in the art as a subscriber station, mobile unit, subscriber unit, wireless unit, remote unit, mobile device, wireless device, wireless communication device, remote device, mobile subscriber station, access terminal, mobile terminal, wireless terminal, remote terminal, handset, user agent, mobile client, client, or some other suitable term. Also, in the present disclosure, terms such as "mobile station", "user terminal", "user equipment (UE)", "terminal", etc. may be used interchangeably.

[0358] (11) In the above-described embodiments, the terms "connected" and "coupled", or any variations thereof, mean any direct or indirect connection or coupling between two or more elements, and can include the presence of one or more intermediate elements between two elements that are "connected" or "coupled" to each other. The coupling or connection between elements can be a physical coupling or connection, a logical coupling or connection, or a combination thereof. For example, "connected" may be read as "accessed". As used in this disclosure, two elements can be considered to be "connected" or "coupled" to each other using at least one of one or more wires, cables, and printed electrical connections, and also, as some non-limiting and non-exhaustive examples, electromagnetic energy having wavelengths in the radio frequency region, microwave region, and optical (both visible and invisible) region, etc.

[0359] (12) In the above-described embodiments, the description "based on" does not mean "based only on" unless otherwise specified. In other words, the description "based on" means both "based only on" and "based at least on".

[0360] (13) As used in this disclosure, the terms "determining" may encompass a wide variety of operations. "Determining" may include, for example, judging, calculating, computing, processing, deriving, investigating, looking up (e.g., searching in a table, database, or another data structure), ascertaining, and considering something as having "determined" the ascertained matter. Also, "determining" may include considering something as having "determined" the received (e.g., receiving information), transmitted (e.g., transmitting information), input, output, accessed (e.g., accessing data in a memory) matter. Further, "determining" may include considering something as having "determined" the resolved, selected, chosen, established, compared, etc. matter. That is, "determining" may include considering that some operation has been "determined". Also, "determining" may be read as "assuming", "expecting", "considering", etc.

[0361] (14) In the above-described embodiments, when the terms "include", "including" and their variants are used, these terms are intended to be inclusive, similar to the term "comprising". Further, the term "or" used in this disclosure is not intended to be an exclusive disjunction.

[0362] (15) In the present disclosure, for example, when an article is added by translation like a, an, and the in English, the present disclosure may include that the noun following these articles is in the plural form.

[0363] (16) In the present disclosure, the term "A and B are different" may mean that "A and B are different from each other". Note that the term may also mean that "A and B are each different from C". Terms such as "separate", "coupled", etc. may also be interpreted in the same way as "different".

[0364] (17) Each aspect / embodiment described in the present disclosure may be used alone, in combination, or switched and used during execution. Also, the notification of predetermined information (for example, the notification of "being X") is not limited to the explicitly made notification, and may be made implicitly (for example, by not making the notification of the predetermined information).

[0365] As described in detail above about the present disclosure, it is clear to those skilled in the art that the present disclosure is not limited to the embodiments described in the present disclosure. The present disclosure can be implemented as modified and changed aspects without departing from the spirit and scope of the present disclosure defined by the claims. Therefore, the description of the present disclosure is for the purpose of illustrative explanation and has no restrictive meaning for the present disclosure.

Description of Reference Numerals

[0366] 1[q]... Terminal device, 3... Settlement device, 5... Store device, 11... Control device, 12... Storage device, 13... Display device, 14... Input device, 15... Communication device, 31... Control device, 32... Storage device, 35... Communication device, 111... Information transmission unit, 112... Information acquisition unit, 113... Code generation unit, 114... Display control unit, 311... Information supply unit, 312... Information reception unit, 313... Settlement processing unit.

Claims

1. A processor of a terminal used by a user and capable of communicating with a payment device, an acquisition unit that acquires from the payment device an offline token used for offline payment processing executed in the payment device when communication between the payment device and the terminal is difficult, and offline blockage information indicating whether the offline payment processing can be executed in the payment device; a display control unit that causes a code image based on the offline token to be displayed on a display device of the terminal only when the offline blockage information indicates that the payment device is capable of executing the offline payment process; and make it function. An electronic payment program comprising:

2. The acquisition unit is When the offline blockage information indicates that the payment device is unable to execute the offline payment process, Waiting until the settlement device and the terminal are able to communicate with each other; When the payment device and the terminal are able to communicate with each other, acquiring, from the payment device, an online token used in an online payment process executed by the payment device when the payment device and the terminal are capable of communicating with each other; The display control unit is When the acquisition unit acquires the online token, a code image based on the online token is displayed on the display device.

2. The electronic payment program according to claim 1.

3. the payment device is capable of processing the offline payment using one or more payment methods including a first payment method; the offline blockage information indicates whether the offline payment process can be executed by each of the one or more payment methods in the payment device, The acquisition unit acquires one or more offline tokens corresponding to the one or more payment methods from the payment device, the display control unit, when the offline blockage information indicates that the payment device is capable of executing the offline payment process by the first payment method, causes the display device to display a code image based on a first offline token used for the first payment method, among the one or more offline tokens; 2. The electronic payment program according to claim 1.

4. The one or more payment methods include a second payment method; the display control unit, when the offline blockage information indicates that it is difficult for the payment device to execute the offline payment process by the second payment method, does not display, on the display device, a code image based on a second offline token used for the second payment method, among the one or more offline tokens.

4. The electronic payment program according to claim 3.

5. The offline token has a validity period set, the display control unit causes the display device to display a code image based on the offline token when the offline token is within a validity period.

2. The electronic payment program according to claim 1.

6. The acquisition unit acquires token validity information regarding a validity period of the offline token, the display control unit causes the display device to display a code image based on the offline token when the elapsed time since the acquisition unit acquired the offline token is equal to or less than the validity period.

2. The electronic payment program according to claim 1.

Images