Payment information management system, payment information management method, payment terminal, distributed management terminal, and program

Abstract

To provide a payment information management system and a payment information management method with which information on a payment made via a credit card is easily restored.SOLUTION: In a payment information management system 1, a payment terminal 10 obtains information on a credit card that has been used to make a payment, creates payment information according to the card information, sends the payment information and update request information for recording the payment information in ledger information, to a distributed management terminal, and stores the ledger information. The distributed management terminal 30 updates the stored ledger information according to the received update request information and payment information, and sends at least information on the update on the ledger information at least to a payment terminal 10 that differs from the payment terminal 10 via which the update request information has been sent.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present invention relates to a payment information management system, a payment information management method, a payment terminal, a distributed management terminal, and a program. [Background technology]

[0002] 2. Description of the Related Art Various techniques have been proposed for making credit card payments using various terminals connected via the Internet.

[0003] For example, Patent Document 1 below discloses a technology for performing credit card payments using a customer terminal, a business operator terminal, an operator server, and an intermediary server connected via the Internet. In this technology, when a customer requests a card payment using an application downloaded to the customer terminal, the customer terminal makes a payment request to the intermediary server using information about the payment (hereinafter also referred to as "payment information") acquired via the business operator terminal and the operator server. This causes the payment to be performed by the card company's server. However, if the Internet becomes unavailable due to power outages or communication problems during disasters such as earthquakes or typhoons, and it becomes impossible to connect to the card company's server, this technology will be unable to process credit card payments, and customers will be unable to use their credit cards.

[0004] The following Non-Patent Document 1 discloses the operation of credit card payments in the event of a disaster. For example, one operation involves recording payment information such as the credit card number and the amount used on paper. However, when recording on paper, there is a problem that the payment is not made correctly if the payment information is not recorded or the paper is lost. To address this problem, one operation involves recording the payment information on an offline terminal, and then transmitting the payment information recorded on the offline terminal to the credit company's server after the Internet is restored. [Prior art documents] [Patent documents]

[0005] [Patent Document 1] Japanese Patent Application Publication No. 2019-153067 [Non-patent literature]

[0006] [Non-Patent Document 1] PwC Consulting LLC, "Reiwa 2 Regional Cashless Payment Introduction Support Project (Cashless Payment Demonstration and Research Project in Times of Disaster) Project Report," [online], Ministry of Economy, Trade and Industry website, [Retrieved October 5, 2021], Internet<https: / / www.meti.go.jp / policy / mono_info_service / cashless / saigai_report.pdf> Summary of the Invention [Problem to be solved by the invention]

[0007] However, when using offline terminals, payment information recorded on the offline terminal must be retained until the internet is restored. If payment information is lost or tampered with during this time, payments may not be processed correctly even when using offline terminals. Therefore, even if payment information is lost or tampered with, it is desirable to be able to restore the payment information to its state before loss or tampering, but this has been difficult.

[0008] In view of the above-mentioned problems, an object of the present invention is to provide a payment information management system, a payment information management method, a payment terminal, a distributed management terminal, and a program that can easily restore credit card payment information. [Means for solving the problem]

[0009] In order to solve the above-mentioned problems, one aspect of the present invention provides a payment information management system comprising a payment terminal that accepts payments by credit card, and a distributed management terminal that manages ledger information that records payment information indicating the content of the payment, wherein the payment terminal comprises: an acquisition unit that acquires card information of the credit card used for the accepted payment; a generation unit that generates the payment information of the accepted payment based on the card information; an update application unit that transmits the payment information and update application information for requesting recording of the payment information in the ledger information to the distributed management terminal; and a first memory unit that stores the ledger information, wherein the distributed management terminal comprises: a second memory unit that stores the ledger information; a first ledger information update unit that updates the ledger information stored in the second memory unit based on the update application information and the payment information received from the payment terminal; and a ledger information sharing unit that transmits update information indicating at least the update content of the ledger information to at least a payment terminal different from the payment terminal that has transmitted the update application information; a matching unit that compares the ledger information stored in the first storage unit of the payment terminal with the ledger information stored in the second storage unit of the distributed management terminal, and if the comparison detects a difference in the ledger information between the terminals, updates the ledger information so that the difference is eliminated; Equipped with.

[0010] A payment information management method according to one aspect of the present invention is a payment information management method in a payment information management system including a payment terminal that accepts payments by credit card and a distributed management terminal that manages ledger information that records payment information indicating the content of the payment, the method including: an acquisition step in which an acquisition unit of the payment terminal acquires card information of the credit card used for the accepted payment; a generation step in which a generation unit of the payment terminal generates the payment information for the accepted payment based on the card information; an update application step in which an update application unit of the payment terminal transmits the payment information and update application information for requesting recording of the payment information in the ledger information to the distributed management terminal; a first storage step in which a first memory unit of the payment terminal stores the ledger information; a second storage step in which a second memory unit of the distributed management terminal stores the ledger information; and a first ledger information update step in which a ledger information update unit of the distributed management terminal updates the ledger information stored in the second memory unit based on the update application information and the payment information received from the payment terminal. information Update process and ledger of the distributed management terminal informationA shared unit transmits update information indicating at least the update content of the ledger information to a payment terminal different from the payment terminal that transmitted the update application information. information The sharing process and a matching process in which a matching unit of the distributed management terminal matches the ledger information stored in the first memory unit of the payment terminal with the ledger information stored in the second memory unit of the distributed management terminal, and if the matching detects a difference in the ledger information between the terminals, updates the ledger information so that the difference is eliminated; Includes.

[0011] A payment terminal according to one aspect of the present invention is a payment terminal that accepts payments by credit card, and includes: an acquisition unit that acquires card information of the credit card used for the accepted payment; a generation unit that generates payment information indicating the content of the accepted payment based on the card information; an update request unit that transmits the generated payment information and update request information for requesting recording of the generated payment information in the ledger information to a distributed management terminal that manages ledger information that records the payment information; and a first memory unit that stores the ledger information. a second ledger information update unit that, when a difference in the ledger information between the terminals is detected by comparing the ledger information stored in the first storage unit with the ledger information stored in the distributed management terminal, updates the ledger information stored in the first storage unit so that the difference is eliminated; Equipped with.

[0012] A program according to one aspect of the present invention is a program for causing a computer to function as a payment terminal that accepts payments by credit card, the program comprising: an acquisition means for acquiring card information of the credit card used for the accepted payment; a generation means for generating payment information indicating the content of the accepted payment based on the card information; an update request means for transmitting the generated payment information and update request information for requesting recording of the generated payment information in the ledger information to a distributed management terminal that manages ledger information that records the payment information; a first storage means for storing the ledger information; a second ledger information update means for updating the ledger information stored in the first storage means so that the difference is eliminated when a difference in the ledger information between the terminals is detected by comparing the ledger information stored in the first storage means with the ledger information stored in the distributed management terminal; Function as.

[0013] A distributed management terminal according to one aspect of the present invention is a distributed management terminal that manages ledger information that records payment information indicating the content of a payment made by credit card, and includes: a second storage unit that stores the ledger information; a first ledger information update unit that updates the ledger information stored in the second storage unit based on payment information generated by the payment terminal and update application information for requesting recording of the payment information in the ledger information, the payment information being received from a payment terminal that has accepted the payment by credit card; and a ledger information update unit that transmits update information indicating at least the update content of the ledger information to at least a payment terminal that is different from the payment terminal that has transmitted the update application information. information The common area and a matching unit that compares the ledger information stored in the payment terminal with the ledger information stored in the second storage unit of the distributed management terminal, and if the comparison detects a difference in the ledger information between the terminals, updates the ledger information so that the difference is eliminated; Equipped with.

[0014] A program according to one aspect of the present invention is a program for causing a computer to function as a distributed management terminal that manages ledger information that records payment information indicating details of payments made by credit card, the program comprising: a second storage means that stores the ledger information; and a first ledger information update unit that updates the ledger information stored by the second storage means based on payment information generated by the payment terminal and update request information for requesting recording of the payment information in the ledger information, the first ledger information being received from a payment terminal that accepts the payment by credit card. information an update unit and a ledger unit that transmits update information indicating at least the update content of the ledger information to a payment terminal different from the payment terminal that transmitted the update application information; information Sharing means, a matching means for comparing the ledger information stored in the payment terminal with the ledger information stored in the second storage means of the distributed management terminal, and, if a difference in the ledger information between the terminals is detected by the comparison, updating the ledger information so that the difference is eliminated; Function as. [Effects of the Invention]

[0015] According to the present invention, credit card payment information can be easily restored. [Brief explanation of the drawings]

[0016] [Figure 1] 1 is a diagram illustrating an example of the configuration of a payment information management system according to an embodiment of the present invention. [Figure 2]FIG. 2 is a block diagram illustrating an example of a functional configuration of a payment terminal according to the present embodiment. [Figure 3] FIG. 2 is a diagram illustrating an example of a data configuration of ledger information according to the embodiment. [Figure 4] FIG. 2 is a block diagram showing an example of the functional configuration of a distributed management terminal according to the present embodiment. [Figure 5] FIG. 10 is a sequence diagram showing an example of the flow of processing performed by the payment information management system according to the present embodiment. [Figure 6] FIG. 10 is a sequence diagram showing an example of the flow of processing performed by the payment information management system according to the present embodiment. [Figure 7] FIG. 10 is a sequence diagram showing an example of the flow of processing performed by the payment information management system according to the present embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0017] Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

[0018] <1. Payment Information Management System Configuration> The configuration of a payment information management system according to this embodiment will be described with reference to Fig. 1. Fig. 1 is a diagram showing an example of the configuration of a payment information management system according to this embodiment. As shown in FIG. 1, payment information management system 1 includes payment terminal 10, communication control device 20, distributed management terminal 30, and payment information management server 40.

[0019] The payment terminal 10, the communication control device 20, and the distributed management terminal 30 are communicatively connected via a network NW1. The network NW1 is, for example, a closed network. The payment terminal 10 and the payment information management server 40 are communicatively connected via a network NW2. The network NW2 is, for example, the Internet. Each communication may be either wired or wireless.

[0020] (1) Payment terminal 10 The payment terminal 10 is a terminal that accepts payments by credit card. The credit card may be either a magnetic card or an IC (Integrated Circuit) card. In the case of an IC (Integrated Circuit) card, it may be a contact IC card or a contactless IC card. The credit card may also be registered in a mobile terminal such as a smartphone for mobile payment. The payment terminal 10 accepts credit card payments when a user performs a payment operation. In the case of a magnetic card, the payment operation is performed by sliding the magnetic stripe portion of the magnetic card over the reading section of the payment terminal 10. In the case of a contact-type IC card, the payment operation is performed by inserting the IC card into the reading section of the payment terminal 10. In the case of a contactless IC card or mobile terminal, the payment operation is performed by holding the IC card or mobile terminal over the reading section of the payment terminal 10. Contactless IC cards and mobile terminals can communicate with the payment terminal 10 using NFC (Near Field Communication). When a payment operation is performed, the payment terminal 10 reads card information (for example, card number) from the credit card.

[0021] As shown in Fig. 1, payment terminals 10 are installed in stores 2-1 to 2-N (N is a natural number) and evacuation shelters 3-1 to 3-M (M is a natural number). The payment terminals 10 installed in stores 2-1 to 2-N are terminals that are used on a daily basis. The payment terminals 10 installed in evacuation shelters 3-1 to 3-M are terminals that are installed in places designated as evacuation shelters in the event of a disaster. The payment terminal 10 transmits payment information indicating the content of the accepted payment to the distributed management terminal 30 via the network NW1. The payment terminal 10 also transmits payment information indicating the content of the accepted payment to the payment information management server 40 via the network NW2.

[0022] The payment terminal 10 has two modes: a normal mode (first mode) and a disaster mode (second mode). The normal mode is a mode in which the payment terminal 10 transmits payment information to a payment information management server 40, which is a terminal of the credit card company. The disaster mode is a mode in which the payment terminal 10 transmits payment information to the distributed management terminal 30. For example, the disaster mode is set during a disaster, and the normal mode is set during times other than a disaster. In the normal mode, every time payment terminal 10 accepts a payment by credit card, it transmits payment information to payment information management server 40 of the credit card company that issued the credit card. In disaster mode, the payment terminal 10 transmits payment information to the distributed management terminal 30 each time a payment is accepted. In the distributed management terminal 30, the payment information transmitted from each payment terminal 10 is collectively managed in ledger information (hereinafter simply referred to as "ledger"). Each payment terminal 10 stores the ledger information managed by the distributed management terminal 30 as a backup. When the payment terminal 10 switches from disaster mode to normal mode, it transmits the payment information of payments accepted while the disaster mode was set to the payment information management server 40. At this time, the payment terminal 10 extracts payment information for each credit card company from the ledger information and transmits the extracted payment information to the payment information management server 40 of each credit card company.

[0023] (2) Communication control device 20 The communication control device 20 is a device that controls communication between the payment terminal 10 and the distributed management terminal 30. For example, the communication control device 20 is a relay device such as a router. 1, the payment terminal 10 installed in store 2-1 is connected to the distributed management terminal 30 via one communication control device 20. The payment terminals 10 installed in store 2-N and shelters 3-1 and 3-N are connected to the distributed management terminal 30 via the communication control device 20 connected to the payment terminal 10 installed in store 2-1 and a communication control device 20 subordinate to that communication control device 20.

[0024] (3) Distributed management terminal 30 The decentralized management terminal 30 is a terminal that manages ledger information that records payment information. The decentralized management terminal 30 is, for example, a PC (Personal Computer). The decentralized management terminal 30 receives payment information from each of the payment terminals 10 installed in the stores 2-1 to 2-N and the evacuation centers 3-1 to 3-M via the network NW1. The decentralized management terminal 30 records and manages the received payment information as ledger information. The decentralized management terminal 30 also transmits update information indicating updates to the ledger information to each payment terminal 10 via the network NW1. As a result, each payment terminal 10 manages the latest ledger information as a backup based on the update information received from the decentralized management terminal 30. In this way, the distributed management terminal 30 can use the ledger information stored in each payment terminal 10 as a backup by managing the ledger information in a distributed manner.

[0025] A distributed management terminal 30 is provided for each predetermined area. The distributed management terminal 30 manages payment information within the area in which it is provided in a single ledger. That is, the distributed management terminal 30 receives payment information from all payment terminals 10 provided within the area in which it is provided, and records all of the received payment information in the ledger. The predetermined area may be, for example, an area that includes only one store or evacuation shelter where a payment terminal 10 is provided, an area that includes multiple stores or evacuation shelters, or an area on a city, ward, town, or village basis.

[0026] (4) Payment information management server 40 Payment information management server 40 is a terminal of a credit card company that manages payment information. Payment information management server 40 is, for example, a PC. As shown in Figure 1, payment information management server 40 is provided at card companies 4-1 to 4-L (L is a natural number). Payment information management server 40 receives payment information from each of payment terminals 10 installed in stores 2-1 to 2-N and shelters 3-1 to 3-M via network NW2. Payment information management server 40 performs payment processing based on the received payment information.

[0027] <2. Functional configuration of payment terminal> The configuration of the payment information management system 1 according to this embodiment has been described above. Next, the functional configuration of the payment terminal 10 according to this embodiment will be described with reference to Figures 2 and 3. Figure 2 is a block diagram showing an example of the functional configuration of the payment terminal 10 according to this embodiment. As shown in FIG. 2, payment terminal 10 includes communication unit 110, input unit 120, storage unit 130 (first storage unit), control unit 140, and output unit 150.

[0028] (1) Communications Unit 110 The communication unit 110 has the function of transmitting and receiving various information. For example, the communication unit 110 communicates with the distributed management terminal 30 via the network NW1, relaying through the communication control device 20. In communication with the distributed management terminal 30, the communication unit 110 transmits payment information and update application information and receives update information. The communication unit 110 also communicates with the payment information management server 40 via the network NW2. In communication with the payment information management server 40, the communication unit 110 transmits payment information.

[0029] (2) Input unit 120 The input unit 120 has a function of accepting input. For example, the input unit 120 accepts input of information entered by operating a numeric keypad or a touch panel provided in the payment terminal 10. As an example, the input unit 120 accepts input of a usage amount, a credit card PIN number, a card number, etc.

[0030] (3) Storage section 130 The storage unit 130 has a function of storing various information. The storage unit 130 is configured by a storage medium provided as hardware in the payment terminal 10, such as a hard disk drive (HDD), a solid state drive (SSD), a flash memory, an electrically erasable programmable read-only memory (EEPROM), a random access read / write memory (RAM), a read-only memory (ROM), or any combination of these storage media. The memory unit 130 stores, for example, payment information for accepted payments, ledger information updated by update information received by the communication unit 110 from the distributed management terminal 30, and information indicating the maximum amount that can be used with a credit card in disaster mode (hereinafter also referred to as the ``usage limit'') (hereinafter also referred to as ``limit information'').

[0031] Here, the data configuration according to this embodiment will be described with reference to Fig. 3. Fig. 3 is a diagram showing an example of the data configuration of ledger information according to this embodiment. As shown in Figure 3, the ledger information has a data structure including a terminal management number, a usage date and time, a card number, and a usage amount. The terminal management number is the management number of the payment terminal 10 where the credit card was used (the payment terminal 10 where the payment was made), and is identification information of the payment terminal 10. The usage date and time is the date and time when the credit card was used (the date and time when the payment was made). The card number is the number of the credit card used, and is identification information of the credit card. The usage amount is the amount used (the amount paid), and is expressed in yen.

[0032] From the information recorded in the first record of the ledger information shown in Figure 3, it can be seen that a payment of 1,200 yen was made at the payment terminal 10 with the terminal management number "M60521" on the date and time of "2021 / 09 / 10 11:20" using a credit card with the card number "J0025". Furthermore, the information recorded in the second record reveals that a payment of 820 yen was made at the payment terminal 10 with the terminal management number "M05980" on the date and time of "2021 / 09 / 10 14:25" using the credit card with the card number "M1098." Furthermore, the information recorded in the third record reveals that a payment of 2,500 yen was made at the payment terminal 10 with the terminal management number "S65248" on the date and time of "2021 / 09 / 11 09:30" using the credit card with the card number "J1525." Furthermore, the information recorded in the fourth record reveals that a payment of 480 yen was made at the payment terminal 10 with the terminal management number "M60521" on the date and time of "2021 / 09 / 11 12:40" using the credit card with the card number "J0025."

[0033] (4) Control unit 140 Control unit 140 has a function of controlling the overall operation of payment terminal 10. Control unit 140 is realized, for example, by causing a CPU (Central Processing Unit) provided as hardware in payment terminal 10 to execute a program. As shown in Figure 2, the control unit 140 includes a mode switching unit 141, an acquisition unit 142, an available balance confirmation unit 143, a generation unit 144, an update application unit 145, a payment unit 146, a ledger information update unit 147 (second ledger information update unit), a payment information sharing unit 148, and an output processing unit 149.

[0034] (4-1) Mode switching unit 141 Mode switching unit 141 has a function of switching the mode of payment terminal 10. For example, mode switching unit 141 switches the mode of payment terminal 10 between a normal mode and a disaster mode based on the communication environment of payment terminal 10. As an example, mode switching unit 141 detects whether payment terminal 10 can communicate with payment information management server 40 as the communication environment of payment terminal 10. If the communication environment is such that communication unit 110 can transmit payment information to payment information management server 40, mode switching unit 141 sets the normal mode. On the other hand, if the communication environment is such that communication unit 110 cannot transmit payment information to payment information management server 40, mode switching unit 141 sets the disaster mode. A communication environment in which communication unit 110 cannot transmit payment information to payment information management server 40 may occur, for example, when the Internet is unavailable due to a disaster. Therefore, mode switching unit 141 sets the disaster mode when payment terminal 10 and payment information management server 40 cannot communicate via the Internet due to a disaster.

[0035] (4-2) Acquisition part 142 The acquisition unit 142 has a function of acquiring various information. For example, the acquisition unit 142 acquires card information of the credit card used for the accepted payment. As an example, the acquisition unit 142 acquires the card number and the amount used as the card information. The acquisition unit 142 acquires the card number from the credit card and the amount used from the input unit 120. If necessary, the acquiring unit 142 may acquire the card number input to the input unit 120. For example, the acquiring unit 142 acquires the card number from the input unit 120 when the card number cannot be read from the credit card.

[0036] (4-3) Available Balance Confirmation Unit 143 The available balance confirmation unit 143 has a function of confirming the available balance of a credit card. In the payment information management system 1, a credit card usage limit is set for each area where a distributed management terminal 30 is installed. The set usage limit is registered in each payment terminal 10. The available balance confirmation unit 143 calculates the available balance of the used credit card by referring to ledger information based on the terminal number of the payment terminal 10 and the card number of the used credit card. Specifically, the available balance confirmation unit 143 calculates the total amount of past usage of the used credit card by referring to the ledger information stored in the memory unit 130. The available balance confirmation unit 143 then calculates the difference between the upper limit amount stored in the memory unit 130 and the calculated total amount of past usage as the available balance. If there is an available balance, the available balance confirmation unit 143 performs processing to perform the payment process. On the other hand, if there is no available balance, the available balance confirmation unit 143 performs processing not to perform the payment process.

[0037] Here, an example of calculating the available balance will be described with reference to the ledger information shown in Figure 3. For example, suppose a user attempts to make a payment of 1,400 yen using a credit card with card number "J0025" at "2021 / 09 / 12 10:10" on payment terminal 10 with terminal management number "M60521." According to the information in the first and fourth records of the ledger information, payments of "1200 yen" and "480 yen" have already been made using the credit card with card number "J0025" at the payment terminal 10. In other words, the total amount of past payments using the credit card with card number "J0025" at the payment terminal 10 with terminal management number "M60521" is "1680 yen." If the credit card with card number "J0025" in the area where the payment terminal 10 with terminal management number "M60521" is installed has a spending limit set to "3000 yen," the available balance will be "1320 yen." Therefore, the user cannot make a payment of "1400 yen." On the other hand, if the credit card with card number "J0025" in the area where the payment terminal 10 with terminal management number "M60521" is installed has a spending limit set to "3500 yen," the available balance will be "1820 yen." Therefore, the user can make a payment of "1400 yen."

[0038] (4-4) Generation unit 144 The generation unit 144 has a function of generating payment information. For example, the generation unit 144 generates payment information for an accepted payment based on card information. The payment information is information including, for example, the date and time of credit card use, the card number, and the amount used.

[0039] (4-5) Renewal application department 145 The update request unit 145 has a function of making a request to update ledger information (hereinafter also referred to as an "update request"). For example, the update request unit 145 transmits payment information and update request information for requesting recording of the payment information in the ledger information to the distributed management terminal 30. The update application unit 145 transmits the update application information together with the digital signature of the payment terminal 10. This allows the distributed management terminal 30 to determine whether the payment terminal 10 has been spoofed based on the digital signature.

[0040] (4-6) Payment Department 146 The settlement unit 146 has a function of making a settlement. For example, when the settlement is permitted by the distributed management terminal 30 (when the ledger information is updated), the settlement unit 146 makes a settlement using the settlement information generated by the generation unit 144.

[0041] (4-7) Ledger information update unit 147 The ledger information update unit 147 has a function of updating ledger information. For example, the ledger information update unit 147 updates the ledger information stored in the memory unit 130. Specifically, when the ledger information update unit 147 is the payment terminal 10 that sent the update application information to the distributed management terminal 30, the ledger information update unit 147 updates the ledger information stored in the memory unit 130 based on the payment information generated by the generation unit 144. On the other hand, when the ledger information update unit 147 is a payment terminal 10 different from the payment terminal 10 that sent the update application information to the distributed management terminal 30, the ledger information update unit 147 updates the ledger information stored in the memory unit 130 based on the update information received by the communication unit 110 from the distributed management terminal 30.

[0042] (4-8) Payment information sharing section 148 The payment information sharing unit 148 has a function of sharing payment information. For example, the payment information sharing unit 148 transmits payment information to the payment information management server 40. Specifically, when the mode of the payment terminal 10 switches from disaster mode to normal mode, the payment information sharing unit 148 transmits the payment information of the payment accepted by the terminal itself, which is included in the ledger information, to the payment information management server 40.

[0043] Before sending the payment information, the payment information sharing unit 148 compares the ledger information stored in the memory unit 130 with the ledger information managed by the distributed management terminal 30. If the comparison reveals an inconsistency in the ledger information between the terminals, the payment information sharing unit 148 instructs the ledger information update unit 147 to update the ledger stored in the memory unit 130 with the latest ledger information. After the update, the payment information sharing unit 148 extracts the payment information of the payment accepted by its own terminal from the latest ledger information and sends it to the payment information management server 40.

[0044] (4-9) Output processing unit 149 The output processing unit 149 has a function of controlling various outputs. For example, the output processing unit 149 causes the output unit 150 to display information indicating the amount used and whether the payment has been successful. The output processing unit 149 may also cause the output unit 150 to output a sound indicating whether the payment has been successful. If the payment terminal 10 is a terminal having a touch panel, the output processing unit 149 causes the output unit 150 to display a menu screen, a numeric keypad, and the like.

[0045] (5) Output unit 150 The output unit 150 has a function of outputting various information. The output unit 150 is realized, for example, by a display device such as a display or a touch panel, or an audio output device such as a speaker, which are provided as hardware in the payment terminal 10. The output unit 150 outputs, for example, a screen or audio in response to an input from the output processing unit 149.

[0046] <3. Functional configuration of distributed management terminal> The functional configuration of the payment terminal 10 according to this embodiment has been described above. Next, the functional configuration of the distributed management terminal 30 according to this embodiment will be described with reference to Fig. 4. Fig. 4 is a block diagram showing an example of the functional configuration of the distributed management terminal 30 according to this embodiment. As shown in FIG. 4, the distributed management terminal 30 includes a communication unit 310, an input unit 320, a storage unit 330 (second storage unit), a control unit 340, and an output unit 350.

[0047] (1) Communications unit 310 The communication unit 310 has a function of transmitting and receiving various information. For example, the communication unit 310 communicates with the payment terminal 10 via the network NW1, relaying through the communication control device 20. In communication with the payment terminal 10, the communication unit 310 transmits ledger information and update information, and receives payment information and update application information.

[0048] (2) Input unit 320 The input unit 320 has a function of accepting input. For example, the input unit 320 accepts input of information entered by the distributed management terminal 30 using hardware input devices such as a mouse, keyboard, or touch panel. As an example, the input unit 320 accepts input of a usage upper limit set by a person such as an administrator.

[0049] (3) Storage section 330 The storage unit 330 has the function of storing various types of information. The storage unit 330 is configured by a storage medium provided as hardware in the distributed management terminal 30, such as an HDD, SSD, flash memory, EEPROM, RAM, ROM, or any combination of these storage media. The storage unit 330 stores, for example, ledger information and credit card limit information in disaster mode.

[0050] (4) Control unit 340 The control unit 340 has a function of controlling the overall operation of the distributed management terminal 30. The control unit 340 is realized, for example, by causing a CPU provided as hardware in the distributed management terminal 30 to execute a program. As shown in Figure 4, the control unit 340 includes a ledger information creation unit 341, an upper limit setting unit 342, a matching unit 343, a ledger information update unit 344 (first ledger information update unit), a ledger information sharing unit 345, and an output processing unit 346.

[0051] (4-1) Ledger Information Creation Unit 341 The ledger information creation unit 341 has a function of creating ledger information. For example, the ledger information creation unit creates new ledger information when the distributed management terminal 30 is initially set up or when the payment terminal 10 switches from normal mode to disaster mode. The ledger information creation unit 341 stores the created ledger information in the storage unit 330. Thereafter, payment information transmitted from the payment terminal 10 is recorded in the ledger information.

[0052] (4-2) Upper limit setting unit 342 The upper limit setting unit 342 has a function of setting a credit card usage upper limit. For example, the upper limit setting unit 342 sets a credit card usage upper limit when the disaster mode is set in the payment terminal 10. As an example, the upper limit setting unit 342 obtains the usage upper limit input by the input unit 320 and stores it in the memory unit 330 as upper limit information. Furthermore, the upper limit setting unit 342 transmits the upper limit information to all payment terminals 10 installed within the area where the distributed management terminal 30 is installed.

[0053] (4-3) Joint 343 The matching unit 343 has a function of matching the ledger information held by the distributed management terminal 30 with the ledger information held by the payment terminal 10. For example, the matching unit 343 transmits the ledger information stored in the memory unit 330 to each payment terminal 10, and causes each payment terminal 10 to perform matching. The matching unit 343 then obtains the matching results from each payment terminal 10. The matching unit 343 may also obtain the ledger information stored in the memory unit 130 of each payment terminal 10 from each payment terminal 10. The matching unit 343 may then perform matching at its own terminal and obtain the matching results. If the matching detects a difference in the ledger information between the terminals, the matching unit 343 updates the ledger information to eliminate the difference. Differences in the ledger information between the terminals can occur, for example, when a communication error occurs in some of the payment terminals 10 and the ledger information is not updated properly. Therefore, if the matching unit 343 detects a difference in the ledger information between the terminals by matching, it first checks the status of each payment terminal 10 to see if a malfunction such as a communication error has occurred. Then, the matching unit 343 determines the correct ledger information from the ledger information stored in each terminal, taking into consideration whether or not a malfunction has occurred in each payment terminal 10, and updates the other ledger information with the determined ledger information. As an example, the matching unit 343 determines, as the correct ledger information, the ledger information stored in each terminal, in which the number of ledger information pieces whose contents are identical to other ledger information accounts for a majority. In this way, the matching unit 343 detects inconsistencies in ledger information between terminals and updates each ledger information to ensure consistency. This allows the matching unit 343 to detect the occurrence of abnormal processing at the payment terminal 10 or tampering with payment information at the payment terminal 10. The matching unit 343 can also restore tampered payment information to the payment information before tampering. The matching unit 343 periodically matches the ledger information between the terminals.

[0054] (4-4) Ledger information update unit 344 The ledger information update unit 344 has a function of updating the ledger information. For example, the ledger information update unit 344 updates the ledger information stored in the storage unit 330 based on the update application information and payment information received by the communication unit 310 from the payment terminal 10. First, the ledger information update unit 344 determines whether the payment terminal 10 is an unauthorized terminal (for example, a spoofed terminal) based on the update application information. The update application information received from the payment terminal 10 includes the digital signature of the payment terminal 10. The ledger information update unit 344 determines whether the payment terminal 10 that sent the update application information is an unauthorized terminal based on the digital signature. If it is determined that the payment terminal 10 is not an unauthorized terminal, the ledger information update unit 344 permits the payment. Then, the ledger information update unit 344 transmits information indicating that the payment is permitted to the payment terminal 10, and causes the payment terminal 10 to execute the payment process. In addition, the ledger information update unit 344 updates the ledger information stored in the memory unit 330 with the update information. On the other hand, if it is determined that the payment terminal 10 is an unauthorized terminal, the ledger information update unit 344 does not permit the payment. Then, the ledger information update unit 344 transmits information indicating that the payment is not permitted to the payment terminal 10, and does not allow the payment terminal 10 to execute the payment process. In addition, the ledger information update unit 344 does not update the ledger information stored in the memory unit 330 with the update information. This allows the ledger information update unit 344 to prevent payments from being made using unauthorized terminals.

[0055] (4-5) Ledger information sharing section 345 The ledger information sharing unit 345 has a function of sharing ledger information with the payment terminal 10. For example, the ledger information sharing unit 345 transmits at least update information to a payment terminal 10 different from the payment terminal 10 that transmitted the update application information. As an example, when the ledger information update unit 344 determines that the payment terminal 10 that transmitted the update application information is not an unauthorized terminal and the ledger information stored in the storage unit 330 is updated, the ledger information sharing unit 345 transmits update information to a terminal different from the payment terminal 10. Note that the ledger information sharing unit 345 may transmit update information to multiple payment terminals 10.

[0056] Furthermore, the ledger information sharing unit 345 permits the payment terminal 10 that has made an application to share the ledger information among the payment terminals 10 that have switched from normal mode to disaster mode. In other words, the ledger information sharing unit 345 permits the payment terminal 10 that has made the application to participate as a node in the area managed by the distributed management terminal 30.

[0057] (4-6) Output processing unit 346 The output processing unit 346 has a function of controlling various outputs. For example, the output processing unit 346 causes the output unit 350 to display payment information and ledger information.

[0058] (5) Output unit 350 The output unit 350 has a function of outputting various types of information. The output unit 350 is realized, for example, by a display device such as a display or touch panel, or an audio output device such as a speaker, which are provided as hardware in the distributed management terminal 30. The output unit 350 outputs, for example, a screen or audio in response to input from the output processing unit 346.

[0059] <4. Processing flow> The functional configuration of the distributed management terminal 30 according to this embodiment has been described above. Next, the flow of processing performed by the payment information management system 1 according to this embodiment will be described with reference to Figures 5 to 7. Figures 5 to 7 are sequence diagrams showing an example of the flow of processing performed by the payment information management system 1 according to this embodiment.

[0060] First, with reference to FIG. 5, the process of switching to disaster mode in the payment terminal 10, and the initial process and periodic process in the distributed management terminal 30 will be described. As shown in FIG. 5, the ledger information creating unit 341 of the distributed management terminal 30 creates ledger information (step S101). Next, the upper limit setting unit 342 of the distributed management terminal 30 creates ledger information for setting the upper limit of usage (step S102).

[0061] The mode switching unit 141 of the payment terminal 10 determines whether or not it is necessary to switch to the disaster mode (step S103). If switching is not necessary (step S103 / NO), the mode switching unit 141 repeats the process of step S103. On the other hand, if switching is necessary (step S103 / YES), the mode switching unit 141 switches the mode of the payment terminal 10 from the normal mode to the disaster mode (step S104).

[0062] After switching the mode, the mode switching unit 141 transmits a mode switching request to the distributed management terminal 30 (step S105). When the communication unit 310 of the distributed management terminal 30 receives a mode switching request from the payment terminal 10, the ledger information sharing unit 345 of the distributed management terminal 30 sends information indicating that ledger information sharing and node participation are permitted to the payment terminal 10 that sent the mode switching request (step S106). Note that the distributed management terminal 30 may also send upper limit information to the payment terminal 10 in step S106.

[0063] The matching unit 343 of the distributed management terminal 30 periodically matches ledger information with the payment terminals 10 that have been permitted to share ledger information and participate as nodes by the ledger information sharing unit 345. For example, the matching unit 343 transmits ledger information stored in the memory unit 330 of the distributed management terminal 30 to the payment terminal 10, causing the payment terminal 10 to perform matching (step S107). The matching unit 343 then obtains the matching results from the payment terminal 10 (step S108). The matching unit 343 also transmits ledger information stored in the memory unit 330 of the distributed management terminal 30 to the other payment terminals 10, causing the other payment terminals 10 to perform matching (step S109). The matching unit 343 then obtains the matching results from the other payment terminals 10 (step S110). If the matching results obtained from each payment terminal 10 detect a difference in the ledger information between the terminals, the matching unit 343 updates the ledger information to eliminate the difference, taking into account whether or not a malfunction has occurred in each payment terminal 10.

[0064] Next, with reference to FIG. 6, a process when a payment operation is performed on the payment terminal 10 will be described. As shown in FIG. 6, the user performs a payment operation with a credit card at the payment terminal 10 (step S201). The acquisition unit 142 of the payment terminal 10 requests card information from the credit card that performed the payment operation (step S202). The credit card that received the request transmits the card information to the payment terminal 10 (step S203).

[0065] Next, the available balance confirmation unit 143 of the payment terminal 10 confirms the available balance of the credit card used for the payment operation (step S204). If there is a usable balance (step S204 / YES), the process proceeds to step S205. On the other hand, if there is no usable balance (step S204 / NO), the process proceeds to step S212.

[0066] When the process proceeds to step S205, the generation unit 144 of the payment terminal 10 generates payment information (step S205). Next, the update application unit 145 of the payment terminal 10 transmits the payment information generated by the generation unit 144 and update application information including the digital signature of the payment terminal 10 to the distributed management terminal 30 (step S206).

[0067] When the distributed management terminal 30 receives payment information and update application information from the payment terminal 10, the ledger information update unit 344 of the distributed management terminal 30 determines whether the payment terminal 10 is impersonating someone else based on the electronic signature included in the update application information (step S207). If the ledger information update unit 344 determines that the payment terminal 10 is not a spoofed terminal (step S207 / NO), the process proceeds to step S208. On the other hand, if the ledger information update unit 344 determines that the payment terminal 10 is a spoofed terminal (step S207 / YES), the process proceeds to step S209.

[0068] If the process proceeds to step S208, the ledger information update unit 344 records the payment information received from the payment terminal 10 in the ledger information stored in the storage unit 330, and updates the ledger information (step S208). After updating, the process proceeds to step S209.

[0069] If the process proceeds to step S209, the ledger information update unit 344 transmits the result of the spoofing determination to the payment terminal 10 (step S209). For example, if the payment terminal 10 is not a spoofed terminal, the ledger information update unit 344 transmits information indicating that the payment is permitted to the payment terminal 10. On the other hand, for example, if the payment terminal 10 is a spoofed terminal, the ledger information update unit 344 transmits information indicating that the payment is not permitted to the payment terminal 10. After transmission, the process proceeds to step S215.

[0070] When the payment terminal 10 receives the result of the spoofing determination from the decentralized management terminal 30, the payment unit 146 of the payment terminal 10 determines whether or not the payment is permitted (step S210). If the payment is permitted (step S210 / YES), the process proceeds to step S211. On the other hand, if the payment is not permitted (step S210 / NO), the process proceeds to step S212.

[0071] If the process proceeds to step S211, the settlement unit 146 executes the settlement process (step S212). After the settlement process, the process proceeds to step S212. If the process proceeds to step S212 from step S204 or step S210, step S211 is skipped, and the settlement process is not executed.

[0072] When the process proceeds to step S212, the output processing unit 149 of the payment terminal 10 causes the output unit 150 to output information indicating the payment result (step S212). For example, the output processing unit 149 causes the output unit 150 to output information indicating whether the payment was successful or not, or information indicating that the payment was not executed.

[0073] Next, the ledger information update unit 147 of the payment terminal 10 checks whether the payment process has been executed (step S213). If the payment process has been executed (step S213 / YES), the process proceeds to step S213. On the other hand, if the payment process has not been executed (step S213 / NO), the payment terminal 10 skips step S213 and ends the process.

[0074] If the process proceeds to step S214, the ledger information update unit 147 updates the ledger information stored in the storage unit 130 based on the payment information generated by the generation unit 144. After the update, the payment terminal 10 ends the process. If the user performs another credit card payment operation after the process is completed, the payment terminal 10 repeats the process from step S202.

[0075] When the process proceeds to step S215, the ledger information sharing unit 345 of the distributed management terminal 30 checks whether the ledger information stored in the storage unit 330 has been updated (step S215). If the ledger information has been updated (step S215 / YES), the process proceeds to step S216. On the other hand, if the ledger information has not been updated (step S215 / NO), step S216 is skipped and the process ends.

[0076] If the process proceeds to step S216, the ledger information sharing unit 345 transmits the update information to the other payment terminals 10 (step S216). After transmission, the distributed management terminal 30 ends the process. It should be noted that if the distributed management terminal 30 receives payment information and renewal application information again from the payment terminal 10 after the processing is completed, the distributed management terminal 30 repeats the processing from step S207.

[0077] When another payment terminal 10 receives update information from the distributed management terminal 30, the ledger information update unit 147 of the other payment terminal 10 updates the ledger information stored in the memory unit 130 based on the update information received from the distributed management terminal 30 (step S217). When a payment operation is performed on the other payment terminal 10, the other payment terminal 10 executes the process from step S202, similar to the payment terminal 10.

[0078] Next, the process of switching to the normal mode in payment terminal 10 will be described with reference to FIG. As shown in FIG. 7, mode switching unit 141 of payment terminal 10 determines whether or not switching to the normal mode is possible (step S301). If the switching is not possible (step S301 / NO), the mode switching unit 141 repeats the process of step S301. On the other hand, if the switching is possible (step S301 / YES), the process proceeds to step S302.

[0079] When the process proceeds to step S302, the payment information sharing unit 148 of the payment terminal 10 transmits the ledger information stored in the memory unit 130 of the payment terminal 10 to the distributed management terminal 30, and causes the distributed management terminal 30 to perform a reconciliation (step S302). Then, the payment information sharing unit 148 acquires the reconciliation result from the distributed management terminal 30 (step S303). Based on the obtained matching result, the settlement information sharing unit 148 checks whether the ledger information stored in the storage unit 130 is the latest information (step S304). If the ledger information is not the latest (step S304 / NO), the process proceeds to step S305. On the other hand, if the ledger information is the latest (step S304 / YES), the process proceeds to step S306.

[0080] If the process proceeds to step S305, the ledger information update unit 147 updates the ledger information stored in the storage unit 130 to the latest information (step S305). After updating, the process proceeds to step S306.

[0081] When the process proceeds to step S306, the payment information sharing unit 148 extracts the payment information of the payment accepted by its own terminal from the latest ledger information (step S306). Next, before switching the mode of the payment terminal 10 from disaster mode to normal mode, the mode switching unit 141 sends a notification indicating that the mode will be switched to normal mode (hereinafter also referred to as a "normal mode switching notification") to the distributed management terminal 30 (step S307). When the distributed management terminal 30 receives a normal mode switching notification from the payment terminal 10, it records that the payment terminal 10 that sent the normal mode switching notification has ended its participation in the node, and then sends a response notification to the payment terminal 10 (step S308). The mode switching unit 141, which has received the response notification from the distributed management terminal 30, switches the mode of the payment terminal 10 from the disaster mode to the normal mode (step S309). After switching the mode, the payment information sharing unit 148 transmits the extracted payment information to the payment information management server 40 (step S310). Upon receiving the payment information, payment information management server 40 transmits the reception result or the result of processing after reception to payment terminal 10 (step S311). If a payment terminal 10 in disaster mode exists a certain time after the internet is restored, the distributed management terminal 30 may display an alert on the display device to check the status of that payment terminal 10. For example, by checking the reception status of the normal mode switching notification a certain time after the internet is restored, the distributed management terminal 30 can determine that a payment terminal 10 that has not yet received the normal mode switching notification is a payment terminal 10 that is still in disaster mode. In addition, if there is a payment terminal 10 that is unable to send payment information to the payment information management server 40, including due to a malfunction of the payment terminal 10, it is possible that in some cases the distributed management terminal 30 may send the payment information related to that payment terminal 10 to the payment information management server 40 on its behalf.

[0082] As described above, the payment information management system 1 of this embodiment comprises a payment terminal 10 that accepts payments by credit card, and a distributed management terminal 30 that manages ledger information that records payment information indicating the details of the payment. The payment terminal 10 comprises an acquisition unit 142, a generation unit 144, an update request unit 145, and a memory unit 130 (first memory unit). The acquisition unit 142 acquires card information of the credit card used for the accepted payment. The generation unit 144 generates payment information for the accepted payment based on the card information. The update request unit 145 transmits the payment information and update request information for requesting recording of the payment information in ledger information to the distributed management terminal 30. The memory unit 130 stores the ledger information. The distributed management terminal 30 comprises a memory unit 330 (second memory unit), a ledger information update unit 344 (first ledger information update unit), and a ledger information sharing unit 345. The memory unit 330 stores ledger information. The ledger information update unit 344 updates the ledger information stored in the memory unit 330 based on the update application information and payment information received from the payment terminal 10. The ledger information sharing unit 345 transmits update information indicating at least the update contents of the ledger information to at least a payment terminal 10 different from the payment terminal 10 that transmitted the update application information.

[0083] With this configuration, ledger information is managed in a distributed manner by payment terminal 10 and distributed management terminal 30. Furthermore, the ledger information managed by each terminal is updated to include the details of the payment at each terminal each time a payment is accepted at payment terminal 10. As a result, even if payment information at a payment terminal 10 is lost or tampered with, it can be restored to the most recent state before the loss or tampering occurred by using ledger information managed by other payment terminals 10 or distributed management terminal 30.

[0084] Therefore, the payment information management system 1 according to this embodiment makes it possible to easily restore credit card payment information.

[0085] <5. Variations> The above describes an embodiment of the present invention. Next, modifications of the embodiment of the present invention will be described. Note that each modification described below may be applied alone to the embodiment of the present invention, or may be applied in combination to the embodiment of the present invention. Furthermore, each modification may be applied in place of the configuration described in the embodiment of the present invention, or may be applied in addition to the configuration described in the embodiment of the present invention.

[0086] In the above embodiment, an example has been described in which the mode of payment terminal 10 is switched by mode switching unit 141, but the present invention is not limited to such an example. For example, the mode of payment terminal 10 may be manually switched by a person such as an administrator based on the judgment of the person.

[0087] In the above embodiment, an example has been described in which the distributed management terminal 30 transmits update information to each payment terminal 10, but the present invention is not limited to such an example. For example, the distributed management terminal 30 may transmit the entire updated ledger information to each payment terminal 10.

[0088] The above describes the modified examples of the embodiment of the present invention. It should be noted that the payment information management system 1, payment terminal 10, and distributed management terminal 30 in the above-described embodiment may be partly or entirely implemented by a computer. In this case, a program for implementing this function may be recorded on a computer-readable recording medium, and the program recorded on this recording medium may be read into a computer system and executed to implement the function. The term "computer system" as used herein includes hardware such as an operating system and peripheral devices. The term "computer-readable recording medium" refers to portable media such as flexible disks, optical magnetic disks, ROMs, and CD-ROMs, as well as storage devices such as hard disks built into computer systems. The term "computer-readable recording medium" may also include devices that dynamically store programs for a short period of time, such as communication lines used when transmitting programs over networks like the Internet or over communication lines like telephone lines, or devices that store programs for a fixed period of time, such as volatile memory within a computer system that serves as a server or client. The program may be designed to implement some of the functions described above, or may be capable of implementing the functions in combination with a program already stored in the computer system, or may be implemented using a programmable logic device such as an FPGA (Field Programmable Gate Array).

[0089] The embodiments of the present invention have been described in detail above with reference to the drawings, but the specific configuration is not limited to that described above, and various design changes can be made within the scope that does not deviate from the gist of the present invention. [Explanation of symbols]

[0090] 1...payment information management system, 2-1 to 2-N...store, 3-1 to 3-M...shelter, 4-1 to 4-L...card company, 10...payment terminal, 20...communication control device, 30...distributed management terminal, 40...payment information management server, 110...communication unit, 120...input unit, 130...storage unit, 140...control unit, 141...mode switching unit, 142...acquisition unit, 143...available balance confirmation unit, 144...generation unit, 145...update application unit, 1 46...Settlement unit, 147...Ledger information update unit, 148...Settlement information sharing unit, 149...Output processing unit, 150...Output unit, 310...Communication unit, 320...Input unit, 330...Memory unit, 340...Control unit, 341...Ledger information creation unit, 342...Upper limit setting unit, 343...Matching unit, 344...Ledger information update unit, 345...Ledger information sharing unit, 346...Output processing unit, 350...Output unit, NW1...Network, NW2...Network

Claims

1. A payment information management system including a payment terminal that accepts payments by credit card and a distributed management terminal that manages ledger information that records payment information indicating the content of the payment, The payment terminal is an acquisition unit that acquires card information of the credit card used for the accepted payment; a generation unit that generates the payment information for the accepted payment based on the card information; an update request unit that transmits the payment information and update request information for requesting recording of the payment information in the ledger information to the distributed management terminal; a first storage unit that stores the ledger information; Equipped with The distributed management terminal a second storage unit that stores the ledger information; a first ledger information update unit that updates ledger information stored in the second storage unit based on the renewal application information and the payment information received from the payment terminal; a ledger information sharing unit that transmits update information indicating at least the update content of the ledger information to at least a payment terminal different from the payment terminal that transmitted the update application information; a matching unit that compares the ledger information stored in the first storage unit of the payment terminal with the ledger information stored in the second storage unit of the distributed management terminal, and, if the comparison detects a difference in the ledger information between the terminals, updates the ledger information so that the difference is eliminated; Equipped with Payment information management system.

2. The matching unit determines, among the ledger information stored in each terminal, the ledger information in which the number of pieces of ledger information whose contents are identical to other pieces of ledger information accounts for a majority, as the correct ledger information, and updates the other pieces of ledger information using the correct ledger information. The payment information management system according to claim 1 .

3. The payment terminal is a second ledger information update unit that updates the ledger information stored in the first storage unit; Furthermore, The second ledger information update unit If the payment terminal is the terminal that transmitted the renewal application information, update the ledger information stored in the first storage unit based on the payment information; If the payment terminal is different from the terminal that transmitted the renewal application information, update the ledger information stored in the first storage unit based on the renewal information. The payment information management system according to claim 1 .

4. The payment terminal is a mode switching unit that switches the mode of the payment terminal between a first mode and a second mode based on the communication environment of the payment terminal; Furthermore, the first mode is a mode in which the payment terminal transmits the payment information to a terminal of a credit card company, The second mode is a mode in which the payment terminal transmits the payment information to the distributed management terminal. The payment information management system according to claim 1 or 3.

5. The mode switching unit When the payment terminal is in a communication environment in which the payment information can be transmitted to the terminal of the credit card company, the first mode is set; When the payment terminal is in a communication environment in which the payment information cannot be transmitted to the terminal of the credit card company, the second mode is set. The payment information management system according to claim 4 .

6. the payment terminal and the distributed management terminal are communicably connected via a closed network, the payment terminal and the credit card company terminal are connected to each other via the Internet so that they can communicate with each other; the mode switching unit sets the second mode when the payment terminal and the credit card company cannot communicate via the Internet. The payment information management system according to claim 4 or 5.

7. the mode switching unit sets the second mode when a disaster occurs. The payment information management system according to any one of claims 4 to 6.

8. the ledger information sharing unit permits the payment terminal that has made an application to share the ledger information among the payment terminals that have switched from the first mode to the second mode. The payment information management system according to any one of claims 4 to 7.

9. The payment terminal is a payment information sharing unit that transmits the payment information to the terminal of the credit card company; Furthermore, The payment information sharing unit When the mode of the payment terminal is switched from the second mode to the first mode, payment information of the payment accepted by the terminal among the payment information included in the ledger information is transmitted to the terminal of the credit card company. The payment information management system according to any one of claims 4 to 8.

10. The distributed management terminal an upper limit setting unit that sets an upper limit for the amount that can be used with the credit card when the second mode is set in the payment terminal; The payment information management system according to any one of claims 4 to 9, further comprising:

11. The renewal application information includes an electronic signature of the payment terminal, The first ledger information update unit determines whether the payment terminal that has transmitted the update application information is an unauthorized terminal based on the electronic signature, and permits the payment if the payment terminal is not an unauthorized terminal. The payment information management system according to any one of claims 1 to 10.

12. A payment information management method in a payment information management system including a payment terminal that accepts payments by credit card and a distributed management terminal that manages ledger information that records payment information indicating the content of the payment, an acquisition step in which an acquisition unit of the payment terminal acquires card information of the credit card used for the accepted payment; a generation step in which a generation unit of the payment terminal generates the payment information for the accepted payment based on the card information; an update application process in which an update application unit of the payment terminal transmits the payment information and update application information for requesting recording of the payment information in the ledger information to the distributed management terminal; a first storage step in which a first storage unit of the payment terminal stores the ledger information; Including, a second storage step in which a second storage unit of the distributed management terminal stores the ledger information; a first ledger information update process in which a ledger information update unit of the distributed management terminal updates the ledger information stored in the second storage unit based on the update application information and the payment information received from the payment terminal; a ledger information sharing process in which a ledger information sharing unit of the distributed management terminal transmits update information indicating at least the update content of the ledger information to a payment terminal different from the payment terminal that transmitted the update application information; a matching process in which a matching unit of the distributed management terminal matches the ledger information stored in the first memory unit of the payment terminal with the ledger information stored in the second memory unit of the distributed management terminal, and if the matching detects a difference in the ledger information between the terminals, updates the ledger information so that the difference is eliminated; Including, Payment information management methods.

13. A payment terminal that accepts payments by credit card, an acquisition unit that acquires card information of the credit card used for the accepted payment; a generation unit that generates payment information indicating details of the accepted payment based on the card information; an update request unit that transmits the generated payment information and update request information for requesting recording of the generated payment information in the ledger information to a distributed management terminal that manages ledger information in which the payment information is recorded; a first storage unit that stores the ledger information; a second ledger information update unit that, when a difference in the ledger information between the terminals is detected by comparing the ledger information stored in the first storage unit with the ledger information stored in the distributed management terminal, updates the ledger information stored in the first storage unit so that the difference is eliminated; A payment terminal comprising:

14. A program for causing a computer to function as a payment terminal that accepts payments by credit card, The computer an acquisition means for acquiring card information of the credit card used for the accepted payment; a generating means for generating payment information indicating the content of the accepted payment based on the card information; an update application means for transmitting the generated payment information and update application information for requesting recording of the generated payment information in the ledger information to a distributed management terminal that manages ledger information in which the payment information is recorded; a first storage means for storing the ledger information; a second ledger information update means for updating the ledger information stored in the first storage means so that the difference is eliminated when a difference in the ledger information between the terminals is detected by comparing the ledger information stored in the first storage means with the ledger information stored in the distributed management terminal; A program to function as a

15. A distributed management terminal that manages ledger information that records payment information indicating the content of payments made by credit card, a second storage unit that stores the ledger information; a first ledger information update unit that updates the ledger information stored in the second storage unit based on payment information generated by the payment terminal and received from the payment terminal that accepted the payment by credit card, and update application information for requesting recording of the payment information in the ledger information; a ledger information sharing unit that transmits update information indicating at least the update content of the ledger information to at least a payment terminal different from the payment terminal that transmitted the update application information; a matching unit that compares the ledger information stored in the payment terminal with the ledger information stored in the second storage unit of the distributed management terminal, and if the comparison detects a difference in the ledger information between the terminals, updates the ledger information so that the difference is eliminated; A distributed management terminal comprising:

16. A program for causing a computer to function as a distributed management terminal that manages ledger information that records payment information indicating the content of credit card payments, The computer a second storage means for storing the ledger information; a first ledger information update means for updating the ledger information stored in the second storage means based on payment information generated by the payment terminal and received from the payment terminal that accepted the payment by credit card, and update application information for requesting recording of the payment information in the ledger information; A ledger information sharing means for transmitting update information indicating at least the update content of the ledger information to at least a payment terminal different from the payment terminal that has transmitted the update application information; a matching means for matching the ledger information stored in the payment terminal with the ledger information stored in the second storage means of the distributed management terminal, and, if a difference in the ledger information between the terminals is detected by the matching, updating the ledger information so that the difference is eliminated; A program to function as a

Images