Information processing system, information processing method, and program

Abstract

Provided is an information processing system capable of easily controlling posts from users.　The information processing system includes: a payment means information registration unit for registering, in a payment processing device, payment means information to be used for a payment by a user; a payment information acquisition unit for acquiring, from a store terminal or a store server managed by the store, payment information including at least the monetary amount of the purchases of the user in the store,; an authentication unit for authenticating the store terminal or store server and a user terminal used by the user by a public key authentication method; and a transmission unit for transmitting a user identifier for identifying the user, a store identifier for identifying the store, and the payment information acquired by the payment information acquisition unit to the payment processing device when authentication by the authentication unit is successful. The payment processing device executes payment processing on the basis of the user identifier, the store identifier, the payment information, and the payment means information registered by the payment means information registration unit.

Description

Information processing system, information processing method, and program

[0001] The present invention relates to an information processing system, an information processing method, and a program.

[0002] Patent document 1 discloses an authentication and payment method that enables payment when purchasing goods or services to be made using a single medium by managing a user ID, user password, credit card information, etc. in association with each other.

[0003] Patent No. 4218297

[0004] While payment services for purchasing goods and services require convenience, such as ease of use and time savings, they also require robustness and safety against security risks such as hacking, skimming, and phishing. However, the technical concept of Patent Document 1 associates and manages user passwords with credit card information, raising concerns that if the user password is stolen, the credit card may be used fraudulently. Furthermore, there is also concern that if the user forgets their user password, payment with the credit card may become impossible.

[0005] The present invention has been made in consideration of the above problems, and has an object to provide an information processing system that can achieve both security and convenience in payment.

[0006] The present invention is an information processing system comprising: a payment method information registration unit that registers payment method information used by a user for payment in a payment processing device; a payment information acquisition unit that acquires payment information including at least the amount of purchases the user will make at the store from a store terminal or store server managed by the store; an authentication unit that authenticates the store terminal or store server and the user terminal used by the user using a public key authentication method; and a transmission unit that, if authentication by the authentication unit is successful, transmits to the payment processing device a user identifier that identifies the user, a store identifier that identifies the store, and the payment information acquired by the payment information acquisition unit; and the payment processing device executes payment processing based on the user identifier, the store identifier, the payment information, and the payment method information registered by the payment method information registration unit.

[0007] The information processing system according to the present invention has the effect of achieving both security and convenience in payment.

[0008] 1 is a diagram showing the overall configuration of an information processing system 1.

[0023] FIG. 1 is a diagram showing the hardware configuration of an information processing device 100.

[0024] FIG. 2 is a diagram showing the hardware configuration of a user terminal 200.

[0025] FIG. 3 is a diagram showing the hardware configuration of a store terminal 300.

[0026] FIG. 4 is a diagram showing the hardware configuration of a store server 400.

[0027] FIG. 5 is a diagram showing an example of the functional configuration of a control unit 110 of the information processing device 100.

[0028] FIG. 6 is a flow diagram showing an example of a payment method information registration process executed by the information processing device 100.

[0029] FIG. 7 is a flow diagram showing an example of an authentication information registration process executed by the information processing device 100.

[0030] FIG. 8 is a flow diagram showing an example of a physical store payment process executed by the information processing device 100.

[0031] FIG. 9 is a flow diagram showing an example of a virtual store payment process executed by the information processing device 100.

[0032] FIG. 10 is a diagram showing an example of a menu screen W100 output to a user terminal 200.

[0033] FIG. 11 is a diagram showing an example of a payment method information input screen W200 output to a user terminal 200.

[0034] FIG. 12 is a diagram showing an example of a payment information input screen W300 output to a store terminal 300.

[0035] FIG. 13 is a diagram showing an example of a code output screen W400 output to a store terminal 300.

[0036] FIG. 14 is a diagram showing an example of a code input screen W500 output to a user terminal 200. 1 is a diagram showing an example of a code reading screen W600 output to the user terminal 200. FIG. 2 is a diagram showing an example of a payment approval screen W700 output to the user terminal 200. FIG. 3 is a diagram showing an example of a payment completion screen W800 output to the user terminal 200 and the store terminal 300.

[0009] DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS The present invention will be described below with reference to the accompanying drawings. Various features shown in the following embodiments can be combined with each other.

[0010] Incidentally, the program for realizing the software appearing in this embodiment may be provided as a non-transitory computer-readable recording medium, or may be provided so as to be downloadable from an external server, or may be provided so that the program is started on an external computer and its functions are realized on a client terminal (so-called cloud computing).

[0011] In this embodiment, the term "unit" may include, for example, a combination of hardware resources implemented by a circuit in the broad sense and software information processing that can be specifically realized by these hardware resources. In addition, various types of information are handled in this embodiment, and this information may be represented by, for example, physical values ​​of signal values ​​representing voltages and currents, high and low signal values ​​as a binary bit set consisting of 0 or 1, or quantum superposition (so-called quantum bits), and communication and calculations may be performed on a circuit in the broad sense.

[0012] Furthermore, a circuit in the broad sense is a circuit realized by at least an appropriate combination of a circuit, circuitry, a processor, a memory, etc. That is, it includes an application specific integrated circuit (ASIC), a programmable logic device (e.g., a simple programmable logic device (SPLD), a complex programmable logic device (CPLD), and a field programmable gate array (FPGA)), etc.

[0013] 1. Hardware Configuration In Section 1, the hardware configuration of the information processing system 1 according to this embodiment will be described.

[0014] FIG. 1 is a diagram showing an example of the overall configuration of an information processing system 1 according to this embodiment. As shown in FIG. 1, the information processing system 1 includes an information processing device 100, a user terminal 200, a store terminal 300, a store server 400, and a payment processing device 500, which are connected via a network NW. These components will be further described. Here, the system exemplified as the information processing system 1 is composed of one or more devices or components. Therefore, for example, even the information processing device 100 alone can be an example of the information processing system 1. Furthermore, FIG. 1 is merely an example for explaining the invention, and for example, the number of user terminals 200, the number of store terminals 300, and the number of store servers 400 are not limited to those shown in FIG. 1.

[0015] 1-1. Information Processing Device 100 Fig. 2 is a diagram showing the hardware configuration of the information processing device 100. As shown in Fig. 2, the information processing device 100 includes a control unit 110, a storage unit 120, and a communication unit 130, and these components are electrically connected via a communication bus 160 inside the information processing device 100. Each component will be further described.

[0016] The control unit 110 processes and controls the overall operations related to the information processing device 100. The control unit 110 is, for example, a central processing unit (CPU) (not shown). The control unit 110 realizes various functions related to the information processing device 100 by reading out predetermined programs stored in the storage unit 120. In other words, information processing by software stored in the storage unit 120 is specifically realized by the control unit 110, which is an example of hardware, and can be executed as each functional unit included in the control unit 110. This will be described in further detail in the next section. Note that the control unit 110 is not limited to being a single unit, and multiple control units 110 may be provided for each function. A combination of these may also be used.

[0017] The storage unit 120 stores various information necessary for information processing by the information processing device 100. This may be implemented, for example, as a storage device such as a solid state drive (SSD) that stores various programs related to the information processing device 100 executed by the control unit 110, or as a memory such as a random access memory (RAM) that stores temporarily required information related to program calculations (arguments, arrays, etc.), or may be a combination of these.

[0018] The communication unit 130 preferably uses a wired communication means such as USB, IEEE 1394, Thunderbolt (registered trademark), or wired LAN network communication, but may also use wireless LAN network communication, mobile communication such as 5G / LTE / 3G, or BLUETOOTH (registered trademark) communication as needed. In other words, it is more preferable to implement the communication unit 130 as a combination of multiple communication means. That is, the communication unit 130 communicates various information with the user terminal 200, the store terminal 300, the store server 400, and the payment processing device 500 via the network NW.

[0019] 1-2. User Terminal 200 The user terminal 200 is a terminal device used by a user (hereinafter referred to as "user US"). The user terminal 200 may be a fixed terminal or a mobile terminal realized by a computer device. Examples of the user terminal 200 include a smartphone, a mobile phone, a PC (personal computer), a notebook PC, and a tablet PC. The user terminal 200 may be realized as the user terminal 200 of this embodiment by installing, for example, an application on a general terminal device.

[0020] Fig. 3 is a diagram showing the hardware configuration of the user terminal 200. As shown in Fig. 3, the user terminal 200 includes a control unit 210, a storage unit 220, a communication unit 230, an input unit 240, and an output unit 250, and these components are electrically connected via a communication bus 260 inside the user terminal 200. The explanation of the control unit 210, the storage unit 220, and the communication unit 230 is omitted because they are substantially the same as the explanation of the control unit 110, the storage unit 120, and the communication unit 130 in the information processing device 100.

[0021] The input unit 240 is used to input various information to the user terminal 200, and receives signals input from a mouse, keyboard, pointing device, touch display, camera, etc. Operational input to the input unit 240 is transferred as a command signal to the control unit 210 via the communication bus 260. The control unit 210 can then execute predetermined control and calculations as necessary.

[0022] The output unit 250 displays text and images, and generates information to be displayed on a display device such as a CRT display, a liquid crystal display, an organic EL display, a plasma display, or a touch display.

[0023] 1-3. Shop Terminal 300 The shop terminal 300 is a terminal device managed by a shop (hereinafter referred to as "shop SP"). The explanation of the shop terminal 300 is omitted here as it is substantially the same as the explanation of the user terminal 200.

[0024] Fig. 4 is a diagram showing the hardware configuration of the store terminal 300. As shown in Fig. 4, the store terminal 300 includes a control unit 310, a storage unit 320, a communication unit 330, an input unit 340, and an output unit 350, and these components are electrically connected via a communication bus 360 inside the store terminal 300. Descriptions of the control unit 310, storage unit 320, communication unit 330, input unit 340, and output unit 350 are omitted because they are substantially the same as the descriptions of the control unit 210, storage unit 220, communication unit 230, input unit 240, and output unit 250 in the user terminal 200.

[0025] 1-4. Store Server 400 The store server 400 is a server device managed by the store SP, and is, for example, an API (Application Programming Interface) server or a Web server.

[0026] Fig. 5 is a diagram showing the hardware configuration of the store server 400. As shown in Fig. 5, the store server 400 includes a control unit 410, a storage unit 420, and a communication unit 430, and these components are electrically connected via a communication bus 460 inside the store server 400. The explanation of the control unit 410, the storage unit 420, and the communication unit 430 is omitted because they are substantially the same as the explanation of the control unit 110, the storage unit 120, and the communication unit 130 in the information processing device 100.

[0027] 1-5. Payment Processing Device 500 The payment processing device 500 is a device that executes payment processing, and is, for example, an API (Application Programming Interface) server, a web server, etc. The payment processing device 500 may be a server managed by a payment service provider (such as a credit card company, convenience store, bank, or telecommunications carrier) that offers payment services using various payment methods, or a payment agency.

[0028] Figure 6 is a diagram showing the hardware configuration of payment processing device 500. As shown in Figure 6, payment processing device 500 includes a control unit 510, a memory unit 520, and a communication unit 530, and these components are electrically connected via a communication bus 560 inside payment processing device 500. Descriptions of control unit 510, memory unit 520, and communication unit 530 are omitted here as they are substantially the same as the descriptions of control unit 110, memory unit 120, and communication unit 130 in information processing device 100.

[0029] 2. Functional Configuration The functional configuration of this embodiment will be described in Section 2. As described above, information processing by software stored in the storage unit 120 is specifically realized by the control unit 110, which is an example of hardware, and can be executed as each functional unit included in the control unit 110.

[0030] 7 is a block diagram showing functions realized by information processing device 100 (control unit 110). Specifically, information processing device 100 (control unit 110) includes payment method information registration unit 111, authentication information registration unit 112, payment information acquisition unit 113, authentication unit 114, transmission unit 115, payment approval acquisition unit 116, and personal authentication request unit 117.

[0031] (Payment method information registration unit 111) The payment method information registration unit 111 is configured to be able to register various payment method information. For example, the payment method information registration unit 111 is configured to be able to register payment method information used by the user US for payment (hereinafter referred to as "payment method information PY") in the payment processing device 500. Furthermore, for example, the payment method information registration unit 111 may be configured to be able to register a user identifier (hereinafter referred to as "user identifier USID") that identifies the user US in the payment processing device 500.

[0032] Here, "user US" includes any user (end user) who purchases a product or service. "User identifier USID" includes any letter, number, symbol, or combination thereof that can identify user US, such as a user ID.

[0033] "Payment method information PY" includes information necessary for payment processing for all payment methods, such as prepaid payment methods, immediate payment methods, and deferred payment methods. For example, the information below is included, and this information is registered by the user in the payment processing device. A prepaid payment method is a payment method that allows users to pay up to the amount charged by loading cash or electronic money into the card before purchasing a product or service. Examples include gift certificates, catalog gift certificates, magnetic or IC prepaid cards, and prepaid cards used online. More specifically, for gift certificates and catalog gift certificates, the information includes the number, expiration date, and security code assigned to the card. For prepaid cards, the information includes the cardholder's name, card number, card expiration date, and security code. Prepaid payment methods include mobile types (e.g., Suica®), QR code types (e.g., PayPay®), and server types (e.g., Apple® Gift), and the information necessary for registering these registrations for payment processing is also included. Immediate payment means refers to a payment means in which the payment amount is immediately deducted from a bank account, electronic money account, or cryptocurrency account when a product or service is purchased, and examples thereof include debit cards. More specifically, for debit cards, examples include the cardholder's name, card number, card expiration date, and security code. Deferred payment means refers to a payment means in which cash or electronic money is paid in one lump sum after a product or service is purchased, and examples include credit cards, bank transfers, and account transfers. More specifically, for credit cards, examples include the credit card holder's name, credit card number, credit card expiration date, security code, and payment method (e.g., lump sum payment, installment payment, etc.). For bank transfers, examples include the financial institution name, branch name, deposit type, account number, and account holder name. For account transfers, examples include the financial institution name, branch name, deposit type, account number, account holder name, furigana, address, and telephone number.In addition, there are also postpaid payment methods such as mobile types (e.g., iD (registered trademark)) and QR code types (e.g., PayPay (registered trademark)), and the registration information for these methods is also included in the information required for registering them in the payment process.

[0034] In addition, "registration" includes storing the payment method information PY input by the user US in the memory unit 520 of the payment processing device 500, and may include, for example, storing the payment method information PY input into an application or website provided by the payment processing device 500 in the memory unit 520 of the payment processing device 500, or sending the payment method information PY input into an application or website provided by the information processing device 100 to the payment processing device 500 and storing it in the memory unit 520 of the payment processing device 500.

[0035] (Authentication Information Registration Unit 112) The authentication information registration unit 112 is configured to be able to register various types of authentication information. For example, the authentication information registration unit 112 is configured to be able to register authentication information for authenticating the user terminal 200 and the store terminal 300 or the store server 400.

[0036] Here, "authentication" includes entity authentication, which verifies whether a communication partner is genuine. Furthermore, examples of "authentication" methods include authentication methods using reversible encryption and authentication methods using irreversible encryption. An authentication method using reversible encryption refers to an authentication method using an encryption method that allows encrypted information to be decrypted, such as a common key authentication method or a public key authentication method. An authentication method using irreversible encryption refers to an authentication method using an encryption method that makes it impossible to decrypt encrypted information, such as an authentication method using an ID or password.

[0037] From the viewpoint of achieving both convenience and security in payments, the authentication method in the present invention is preferably an authentication method using reversible encryption, more preferably a public key authentication method, and even more preferably a two-way public key authentication method. The "public key authentication method" refers to a method in which one device (terminal) generates a public key and a private key and transmits the generated public key to the other device (terminal) for authentication. The "two-way public key authentication method" refers to a method in which one device (terminal) and the other device (terminal) each generate a public key and a private key and exchange the generated public keys to authenticate each other.

[0038] When the authentication method is public key authentication, the authentication information registration unit 112 may be configured to register an authentication key for authenticating the user terminal 200 and the store terminal 300 or the store server 400. For example, the authentication information registration unit 112 may be configured to register, in the store terminal 300 or the store server 400, the user private key (hereinafter referred to as the "user private key USSC") and the user public key (hereinafter referred to as the "user public key USOP") generated by the user terminal 200. The authentication information registration unit 112 may also be configured to register, in the user terminal 200, the store public key SPOP, in the user terminal 200, of the store private key (hereinafter referred to as the "store private key SPSC") and the store public key (hereinafter referred to as the "store public key SPOP") generated by the store terminal 300 or the store server 400.

[0039] Furthermore, when the authentication method is a two-way public key authentication method, the authentication information registration unit 112 may be configured to register the user public key USOP in the store terminal 300 or the store server 400, and to register the store public key SPOP in the user terminal 200. This allows two-way public key authentication to be performed between the user terminal 200 and the store terminal 300 or the store server 400, thereby further achieving both convenience and security in payment.

[0040] It should be noted that "registration" includes storing predetermined authentication information in the storage unit 220 of the user terminal 200, the storage unit 320 of the store terminal 300, or the storage unit 420 of the store server 400.

[0041] (Payment Information Acquisition Unit 113) The payment information acquisition unit 113 is configured to be able to acquire various payment information. For example, the payment information acquisition unit 113 is configured to be able to acquire payment information (hereinafter referred to as "payment information GS") including at least the amount of purchases made by the user US at the store SP from the store terminal 300 or store server 400 managed by the store SP. Furthermore, for example, the payment information acquisition unit 113 may be configured to be able to acquire a store identifier (hereinafter referred to as "store identifier SPID") that identifies the store SP from the store terminal 300 or store server 400 managed by the store SP.

[0042] "Store SP" includes a physically existing store or a virtual store on a website (EC (Electronic Commerce) site) that conducts electronic commerce. "Store identifier SPID" includes any letters, numbers, symbols, or combinations thereof that can identify the store SP, such as a store ID. "Management" includes ownership, possession, occupancy, borrowing, contracting, or use by an employee or staff of the store SP, or a business operator commissioned by the store SP.

[0043] "Payment information GS" includes all payment information for products or services, such as the product or service's identification ID, name, price, unit price, quantity, discount rate, discount amount, or other information. The type of product or service is not particularly limited, and includes, for example, any product or service, such as clothing, food, daily necessities, electrical appliances, financial products, furniture, books, beauty treatments, training, seminars, travel, chiropractic, massage, etc.

[0044] Note that "obtaining" includes receiving the payment information GS from the store terminal 300 or the store server 400, and may also include storing the received payment information GS in the storage unit 120.

[0045] (Authentication Unit 114) The authentication unit 114 is configured to be able to authenticate various terminals and servers. For example, the authentication unit 114 is configured to be able to authenticate the store terminal 300 or the store server 400 and the user terminal 200 used by the user US. As described above, "authentication" includes entity authentication, which verifies whether the other party in communication is genuine. As described above, the "authentication" method is preferably an authentication method using reversible encryption, more preferably a public key authentication method, and even more preferably a two-way public key authentication method, from the perspective of achieving both convenience and security in payment.

[0046] That is, the authentication unit 114 is configured to be able to authenticate the store terminal 300 or the store server 400 and the user terminal 200 used by the user US using a public key authentication method. For example, the authentication unit 114 is configured to be able to authenticate the user terminal 200 using a user-side public key USOP registered in the store terminal 300 or the store server 400. Also, for example, the authentication unit 114 is configured to be able to authenticate the store terminal 300 or the store server 400 using a store-side public key SPOP registered in the user terminal 200.

[0047] Furthermore, the authentication unit 114 is configured to be able to authenticate the store terminal 300 or the store server 400 and the user terminal 200 used by the user US using a bidirectional public key authentication method. For example, the authentication unit 114 is configured to be able to authenticate the user terminal 200 using a user-side public key USOP registered in the store terminal 300 or the store server 400, and to be able to authenticate the store terminal 300 or the store server 400 using a store-side public key SPOP registered in the user terminal 200. Details of the authentication method will be described later.

[0048] (Transmission unit 115) The transmission unit 115 is configured to be able to transmit various information. For example, when authentication by the authentication unit 114 is successful, the transmission unit 115 is configured to be able to transmit to the payment processing device 500 a user identifier USID that identifies the user US, a store identifier SPID that identifies the store SP, and payment information GS acquired by the payment information acquisition unit 113.

[0049] Furthermore, for example, the transmitting unit 115 can be configured to be unable to transmit the user identifier USID, the store identifier SPID, and the payment information GS to the payment processing device 500 if authentication by the authenticating unit 114 fails.

[0050] Here, when the user terminal 200 and the store terminal 300 or the store server 400 are authenticated using a two-way public key authentication method, "if authentication is successful" means if authentication of the user terminal 200 is successful using the user-side public key USOP registered in the store terminal 300 or the store server 400, and if authentication of the store terminal 300 or the store server 400 is successful using the store-side public key SPOP registered in the user terminal 200.

[0051] (Payment Approval Acquisition Unit 116) The payment approval acquisition unit 116 is configured to be able to acquire various payment approvals. For example, the payment approval acquisition unit 116 is configured to be able to acquire payment approval (hereinafter referred to as “payment approval AG”) for the payment information GS from the user terminal 200.

[0052] Here, the method for acquiring the payment approval AG is not particularly limited, but for example, the payment approval acquisition unit 116 may display the payment information GS on the user terminal 200 and accept input of the payment approval AG by the user US. Note that input of the payment approval AG may include, for example, tapping or clicking a payment approval button.

[0053] (Personal authentication request unit 117) The personal authentication request unit 117 is configured to be able to request various types of personal authentication. For example, the personal authentication request unit 117 is configured to be able to request personal authentication (hereinafter referred to as "personal authentication CF") from the user terminal 200. Here, the "personal authentication CF" includes any authentication that can confirm that the person operating the user terminal 200 is the user US. For example, the "identity authentication CF" includes knowledge authentication that authenticates an individual using stored information stored by the user US, possession authentication that authenticates an individual using possession information possessed by the user US, biometric authentication that authenticates an individual using biometric information of the user US, or multi-factor authentication that combines these, and may further include, for example, password authentication, authentication using secret questions (security questions), fingerprint authentication, face authentication, iris authentication, vocal cord authentication, vein authentication, PIN (Personal Identification Number) code authentication, one-time password authentication, mnemonic authentication, CAPTCHA authentication, 3D Secure authentication, SMS authentication, or other authentication.

[0054] 3. Information Processing Section 3 describes the flow of operations of the information processing system 1 configured as described above. Figures 8 to 11 are flow diagrams showing an example of information processing in the information processing system 1 according to this embodiment.

[0055] 3-1. Payment Method Information Registration Process FIG. 8 is a flow diagram showing an example of payment method information registration process in the information processing system 1 according to this embodiment (steps S101 to S105).

[0056] In step S101, the control unit 210 of the user terminal 200 requests the information processing device 100 to register payment method information PY. Step S101 consists of the following five stages of information processing: (1) The control unit 210 of the user terminal 200 launches a predetermined application. (2) The output unit 250 of the user terminal 200 outputs a menu screen (hereinafter referred to as "menu screen W100") from which the user can request registration of payment method information PY. (3) The input unit 240 of the user terminal 200 accepts the registration request for payment method information PY. (4) The input unit 240 of the user terminal 200 transfers the input registration request for payment method information PY to the control unit 210 via the communication bus 260. (5) The control unit 210 of the user terminal 200 transmits the registration request for payment method information PY to the information processing device 100 via the communication unit 230.

[0057] In step S102, the payment method information registration unit 111 of the information processing device 100 requests the payment processing device 500 to accept input of the payment method information PY. Step S102 consists of the following three stages of information processing: (1) The communication unit 130 of the information processing device 100 receives a request to register the payment method information PY from the user terminal 200. (2) The communication unit 130 of the information processing device 100 transfers the request to register the payment method information PY to the payment method information registration unit 111 via the communication bus 160. (3) The payment method information registration unit 111 of the information processing device 100 sends a request to accept input of the payment method information PY to the payment processing device 500 via the communication unit 130.

[0058] In step S103, the control unit 510 of the payment processing device 500 accepts input of payment method information PY from the user terminal 200. Step S103 consists of the following three stages of information processing: (1) The communication unit 530 of the payment processing device 500 receives a request to accept input of payment method information PY from the information processing device 100. (2) The communication unit 530 of the payment processing device 500 transfers the request to accept input of payment method information PY to the control unit 510 via the communication bus 560. (3) The control unit 510 of the payment processing device 500 transmits a payment method information input screen (hereinafter referred to as "payment method information input screen W200") on which the payment method information PY can be input to the user terminal 200 via the communication unit 530.

[0059] In step S104, the control unit 210 of the user terminal 200 transmits the payment method information PY input by the user US to the payment processing device 500. Step S104 consists of the following six stages of information processing: (1) The communication unit 230 of the user terminal 200 receives the payment method information input screen W200 from the payment processing device 500. (2) The communication unit 230 of the user terminal 200 transfers the payment method information input screen W200 to the control unit 210 via the communication bus 260. (3) The control unit 210 of the user terminal 200 outputs the payment method information input screen W200 to the output unit 250. (4) The input unit 240 of the user terminal 200 accepts input of the payment method information PY. (5) The input unit 240 of the user terminal 200 transfers the input payment method information PY to the control unit 210 via the communication bus 260. (6) The control unit 210 of the user terminal 200 transmits the payment method information PY to the payment processing device 500 via the communication unit 230.

[0060] In step S105, the control unit 510 of the payment processing device 500 registers the payment method information PY. Step S105 consists of the following three stages of information processing: (1) The communication unit 530 of the payment processing device 500 receives the payment method information PY from the user terminal 200. (2) The communication unit 530 of the payment processing device 500 transfers the payment method information PY to the control unit 510 via the communication bus 560. (3) The control unit 510 of the payment processing device 500 stores the payment method information PY in the memory unit 520.

[0061] In another embodiment, the payment method information registration unit 111 of the information processing device 100 may be configured to send the payment method information input screen W200 to the user terminal 200, and to be able to send the payment method information PY entered on the payment method information input screen W200 to the payment processing device 500.

[0062] 3-2. Authentication Information Registration Processing Fig. 9 is a flow diagram showing an example of authentication information registration processing in the information processing system 1 according to this embodiment (steps S201 to S207).

[0063] In step S201, the control unit 210 of the user terminal 200 requests the store server 400 to register an authentication key for logging in to the store server 400. Step S201 consists of the following three stages of information processing: (1) The input unit 240 of the user terminal 200 accepts an authentication key registration request from the user US. (2) The input unit 240 of the user terminal 200 transfers the input authentication key registration request to the control unit 210 via the communication bus 260. (3) The control unit 210 of the user terminal 200 transmits the authentication key registration request to the store server 400 via the communication unit 230.

[0064] In step S202, the control unit 410 of the store server 400 generates a store private key SPSC and a store public key SPOP. Step S202 consists of the following eight stages of information processing: (1) The control unit 410 of the store server 400 generates a code (hereinafter referred to as "code CD") and transmits the generated code CD to the user terminal 200 via the communication unit 430. (2) The communication unit 230 of the user terminal 200 receives the code CD and transfers it to the control unit 210 via the communication bus 260. (3) The control unit 210 of the user terminal 200 outputs the code CD to the output unit 250. (4) The input unit 240 of the user terminal 200 accepts input or reading of the code CD. (5) The input unit 240 of the user terminal 200 transfers the input or read code CD to the control unit 210 via the communication bus 260. (6) The control unit 210 of the user terminal 200 transmits the code CD to the store server 400 via the communication bus 260. (7) The communication unit 430 of the store server 400 receives the code CD and transfers it to the control unit 410 via the communication bus 460. (8) If the codes CD match, the control unit 410 of the store server 400 generates a store private key SPSC and a store public key SPOP and stores the generated store private key SPSC and store public key SPOP in the storage unit 420.

[0065] Here, the "code CD" includes any code that can be input or read by the user terminal 200 and that can connect the user terminal 200 to the store terminal 300 or the store server 400, such as any numeric string, character string, symbol string, or combination thereof, one-dimensional code, two-dimensional code, or other code. One-dimensional codes include, for example, barcodes, specifically JAN / EAN / UPC, ITF, CODE39, NW-7 (CODABAR), CODE128, or other barcodes. Two-dimensional codes include, for example, stacked two-dimensional codes or matrix two-dimensional codes, specifically QR Code (registered trademark), PDF417, Data Matrix, Maxi Code, Aztec Code, EAN / UCC Composite, or other two-dimensional codes. From the viewpoint of achieving both convenience and security, it is preferable that the code CD has a one-time property of being updated every time a certain period of time elapses.

[0066] In step S203, the control unit 410 of the store server 400 transmits the store identifier SPID and the store public key SPOP to the information processing device 100. Step S203 consists of the following three stages of information processing: (1) The control unit 410 of the store server 400 transmits the store identifier SPID and the store public key SPOP to the information processing device 100 via the communication unit 430. (2) The communication unit 130 of the information processing device 100 receives the store identifier SPID and the store public key SPOP and transfers them to the authentication information registration unit 112 via the communication bus 160. (3) The authentication information registration unit 112 of the information processing device 100 stores the store identifier SPID and the store public key SPOP in the storage unit 120.

[0067] In step S204, the authentication information registration unit 112 of the information processing device 100 transmits the store identifier SPID and the store public key SPOP to the user terminal 200. Step S204 consists of the following three stages of information processing: (1) The authentication information registration unit 112 of the information processing device 100 transmits the store identifier SPID and the store public key SPOP to the user terminal 200 via the communication unit 130. (2) The communication unit 230 of the user terminal 200 receives the store identifier SPID and the store public key SPOP and transfers them to the control unit 210 via the communication bus 260. (3) The control unit 210 of the user terminal 200 stores the store identifier SPID and the store public key SPOP in the memory unit 220.

[0068] In step S205, the control unit 210 of the user terminal 200 generates a user-side private key USSC and a user-side public key USOP. Step S205 consists of the following six stages of information processing: (1) The control unit 210 of the user terminal 200 generates a code CD and transmits the generated code CD to the store server 400 via the communication unit 230. (2) The communication unit 430 of the store server 400 receives the code CD and transfers it to the control unit 410 via the communication bus 460. (3) The control unit 410 of the store server 400 accepts input of the code CD from the user terminal 200. (4) The control unit 410 of the store server 400 transmits the input code CD to the user terminal 200 via the communication unit 430. (5) The communication unit 230 of the user terminal 200 receives the code CD and transfers it to the control unit 210 via the communication bus 260. (6) If the codes CD match, the control unit 210 of the user terminal 200 generates a user-side private key USSC and a user-side public key USOP, and stores the generated user-side private key USSC and user-side public key USOP in the memory unit 220.

[0069] In step S205, the number of user terminals 200 may be one or more. For example, when there are two user terminals 200, the information processing comprises the following six stages: (1) The control unit 210 of the first user terminal 200 generates a code CD and transmits the generated code CD to the store server 400 via the communication unit 430. (2) The communication unit 430 of the store server 400 receives the code CD and transfers it to the control unit 410 via the communication bus 460. (3) The control unit 410 of the store server 400 accepts input of the code CD from the second user terminal 200. (4) The control unit 410 of the store server 400 transmits the input code CD to the first user terminal 200 via the communication unit 430. (5) The communication unit 230 of the first user terminal 200 receives the code CD and transfers it to the control unit 210 via the communication bus 260. (6) If the codes CD match, the control unit 210 of the first user terminal 200 generates a user-side private key USSC and a user-side public key USOP, and stores the generated user-side private key USSC and user-side public key USOP in the memory unit 220.

[0070] In step S206, the control unit 210 of the user terminal 200 transmits the user identifier USID and the user public key USOP to the information processing device 100. Step S206 consists of the following three stages of information processing: (1) The control unit 210 of the user terminal 200 transmits the user identifier USID and the user public key USOP to the information processing device 100 via the communication unit 230. (2) The communication unit 130 of the information processing device 100 receives the user identifier USID and the user public key USOP and transfers them to the authentication information registration unit 112 via the communication bus 160. (3) The authentication information registration unit 112 of the information processing device 100 stores the user identifier USID and the user public key USOP in the storage unit 120.

[0071] In step S207, the authentication information registration unit 112 of the information processing device 100 transmits the user identifier USID and the user public key USOP to the store server 400 via the communication unit 130. Step S207 consists of the following three stages of information processing: (1) The authentication information registration unit 112 of the information processing device 100 transmits the user identifier USID and the user public key USOP to the store server 400 via the communication unit 130. (2) The communication unit 430 of the store server 400 receives the user identifier USID and the user public key USOP and transfers them to the control unit 410 via the communication bus 460. (3) The control unit 410 of the store server 400 stores the user identifier USID and the user public key USOP in the storage unit 420.

[0072] 3-3. Physical Store Payment Processing FIG. 10 is a flow diagram showing an example of physical store payment processing in the information processing system 1 according to this embodiment (steps S301 to S318).

[0073] In step S301, the control unit 310 of the store terminal 300 transmits the payment information GS of the user US, which has been input by a staff member or employee of the store SP into a payment information input screen (hereinafter referred to as the "payment information input screen W300"), to the store server 400. Step S301 consists of the following three stages of information processing: (1) The input unit 340 of the store terminal 300 accepts the input of the payment information GS. (2) The input unit 340 of the store terminal 300 transfers the input payment information GS to the control unit 310 via the communication bus 360. (3) The control unit 310 of the store terminal 300 transmits the payment information GS to the store server 400 via the communication unit 330.

[0074] In step S302, the control unit 410 of the store server 400 acquires the payment information GS from the store terminal 300 and transmits the acquired payment information GS to the information processing device 100. Step S302 consists of the following three stages of information processing: (1) The communication unit 430 of the store server 400 receives the payment information GS from the store terminal 300 and transfers it to the control unit 410 via the communication bus 460. (2) The control unit 410 of the store server 400 stores the payment information GS in the memory unit 420. (3) The control unit 410 of the store server 400 transmits the payment information GS to the information processing device 100 via the communication unit 430.

[0075] In step S303 , the authentication unit 114 of the information processing device 100 generates a code CD for connecting the user terminal 200 with the store terminal 300 or the store server 400 , and transmits the generated code CD to the store server 400 .

[0076] In step S304, the control unit 410 of the store server 400 transmits the code CD to the store terminal 300. Step S304 is made up of the following three stages of information processing: (1) The communication unit 430 of the store server 400 receives the code CD from the information processing device 100 and transfers it to the control unit 410 via the communication bus 460. (2) The control unit 410 of the store server 400 stores the code CD in the memory unit 420. (3) The control unit 410 of the store server 400 transmits the code CD to the store terminal 300 via the communication unit 430.

[0077] In step S305, the control unit 310 of the store terminal 300 displays a code output screen including the code CD (hereinafter referred to as the "code output screen W400") on the output unit 350. Step S305 consists of the following three stages of information processing: (1) The communication unit 330 of the store terminal 300 receives the code output screen W400 including the code CD from the store server 400. (2) The communication unit 330 of the store terminal 300 transfers the code output screen W400 including the code CD to the control unit 310 via the communication bus 360. (3) The control unit 310 of the store terminal 300 displays the code output screen W400 including the code CD on the output unit 350.

[0078] In step S306, the input unit 210 of the user terminal 200 accepts the input or reading of the code CD by the user US. Step S306 consists of the following four stages of information processing: (1) The control unit 210 of the user terminal 200 outputs to the user terminal 200 a code input screen (hereinafter referred to as the "code input screen W500") on which the code CD can be input or a code reading screen (hereinafter referred to as the "code reading screen W600") on which the code CD can be read. (2) The input unit 240 of the user terminal 200 accepts the input or reading of the code CD. (3) The input unit 240 of the user terminal 200 transfers the input or read code CD to the control unit 210 via the communication bus 260. (4) The control unit 210 of the user terminal 200 transmits the code CD and the user identifier USID to the store server 400 via the communication unit 230. (5) The control unit 410 of the store server 400 transmits the store identifier SPID to the user terminal 200 via the communication unit 430 .

[0079] In step S307, if the code CD received from the user terminal 200 matches, the control unit 410 of the store server 400 performs authentication processing using the user public key USOP corresponding to the user identifier USID. Step S307 consists of the following nine information processing steps: (1) The communication unit 430 of the store server 400 receives the code CD and the user identifier USID from the user terminal 200 and transfers them to the control unit 410 via the communication bus 460. (2) If the code CD matches, the control unit 410 of the store server 400 encrypts plaintext (hereinafter referred to as "plaintext CL") using the user public key USOP corresponding to the user identifier USID stored in the memory unit 420 to obtain ciphertext (hereinafter referred to as "ciphertext CR"). Note that the plaintext CL may include, for example, a random number. (3) The control unit 410 of the store server 400 transmits the obtained ciphertext CR to the user terminal 200 via the communication unit 430. (4) The communication unit 230 of the user terminal 200 receives the cipher text CR from the store server 400 and transfers it to the control unit 210 via the communication bus 260. (5) The control unit 210 of the user terminal 200 decrypts the cipher text CR using the user-side private key USSC stored in the memory unit 220 to obtain the plain text CL. (6) The control unit 210 of the user terminal 200 converts the obtained plain text CL into a converted text (hereinafter referred to as "converted text CO") using a predetermined hash function (hereinafter referred to as "hash function SH"). (7) The control unit 210 of the user terminal 200 transmits the converted converted text CO to the store server 400 via the communication unit 230. (8) The communication unit 430 of the store server 400 receives the converted text CO from the user terminal 200 and transfers it to the control unit 410 via the communication bus 460. (9) The control unit 410 of the store server 400 uses the hash function SH to convert the plain text CL into an answer sentence (hereinafter referred to as the “answer sentence AS”), and determines whether the answer sentence AS matches the converted sentence CO.

[0080] In step S308, the control unit 410 of the store server 400 transmits the authentication result to the information processing device 100. If the answer sentence AS and the converted sentence CO match, the authentication result is successful. On the other hand, if the answer sentence AS and the converted sentence CO do not match, the authentication result is unsuccessful.

[0081] In step S309, the control unit 210 of the user terminal 200 performs authentication processing using the store public key SPOP corresponding to the store identifier SPID. Step S309 consists of the following nine information processing steps: (1) The communication unit 230 of the user terminal 200 receives the store identifier SPID from the store server 400 and transfers it to the control unit 210 via the communication bus 260. (2) The control unit 210 of the user terminal 200 encrypts the plaintext CL using the store public key SPOP corresponding to the store identifier SPID stored in the storage unit 220 to obtain a ciphertext CR. (3) The control unit 210 of the user terminal 200 transmits the obtained ciphertext CR to the store server 400 via the communication unit 230. (4) The communication unit 430 of the store server 400 receives the ciphertext CR from the user terminal 200 and transfers it to the control unit 410 via the communication bus 460. (5) The control unit 410 of the store server 400 decrypts the cipher text CR using the store-side private key SPSC stored in the memory unit 420 to obtain plain text CL. (6) The control unit 410 of the store server 400 converts the obtained plain text CL into converted text CO using the hash function SH. (7) The control unit 410 of the store server 400 sends the converted converted text CO to the user terminal 200 via the communication unit 430. (8) The communication unit 230 of the user terminal 200 receives the converted text CO from the store server 400 and transfers it to the control unit 210 via the communication bus 260. (9) The control unit 210 of the user terminal 200 converts the plain text CL into an answer text AS using the hash function SH and determines whether the answer text AS and the converted text CO match.

[0082] In step S310, the control unit 210 of the user terminal 200 transmits the authentication result to the information processing device 100. If the answer sentence AS and the converted sentence CO match, the authentication result is successful. On the other hand, if the answer sentence AS and the converted sentence CO do not match, the authentication result is unsuccessful.

[0083] In step S311, if the authentication result of the user terminal 200 and the store server 400 is successful, the transmission unit 115 of the information processing device 100 transmits the user identifier USID, the store identifier SPID, and the payment information GS to the payment processing device 500. Step S311 consists of the following four stages of information processing: (1) The communication unit 130 of the information processing device 100 receives the authentication result from the user terminal 200 and the store server 400 and transfers it to the transmission unit 115 via the communication bus 160. (2) If the authentication result of the user terminal 200 and the store server 400 is successful, the transmission unit 115 transmits the user identifier USID, the store identifier SPID, and the payment information GS to the payment processing device 500. (3) The communication unit 530 of the payment processing device 500 receives the user identifier USID, the store identifier SPID, and the payment information GS from the information processing device 100 and transfers it to the control unit 510 via the communication bus 560. (4) The control unit 510 of the payment processing device 500 stores the user identifier USID, the store identifier SPID, and the payment information GS in the storage unit 520.

[0084] In step S312, the payment approval acquisition unit 116 of the information processing device 100 requests payment approval AG for the payment information GS from the user terminal 200. Step S312 consists of the following four stages of information processing: (1) The payment approval acquisition unit 116 of the information processing device 100 sends a payment approval screen (hereinafter referred to as the "payment approval screen W700") including the payment information GS to the user terminal 200 via the communication unit 130. (2) The communication unit 230 of the user terminal 200 receives the payment approval screen W700 from the information processing device 100 and transfers it to the control unit 210 via the communication bus 260. (3) The control unit 210 of the user terminal 200 displays the payment approval screen W700 on the output unit 250. (4) The input unit 240 of the user terminal 200 accepts input of payment approval AG by the user US.

[0085] In step S313, the control unit 210 of the user terminal 200 transmits the payment approval AG input by the user US to the information processing device 100. Step S313 consists of the following three stages of information processing: (1) The input unit 240 of the user terminal 200 transfers the payment approval AG input on the payment approval screen W700 to the control unit 210 via the communication bus 260. (2) The control unit 210 of the user terminal 200 transmits the payment approval AG to the information processing device 100 via the communication unit 230. (3) The communication unit 130 of the information processing device 100 receives the payment approval AG from the user terminal 200 and transfers it to the payment approval acquisition unit 116 via the communication bus 160.

[0086] In step S314, the personal authentication request unit 117 of the information processing device 100 requests personal authentication CF from the user terminal 200 via the communication unit 130.

[0087] In step S315, the control unit 210 of the user terminal 200 performs identity authentication and transmits the authentication result to the information processing device 100. Step S315 consists of the following six stages of information processing: (1) The communication unit 230 of the user terminal 200 receives a request for identity authentication CF from the information processing device 100 and transfers it to the control unit 210 via the communication bus 260. (2) The control unit 210 of the user terminal 200 performs identity authentication. (3) The input unit 240 of the user terminal 200 accepts the input or reading of identity information. (4) The input unit 240 of the user terminal 200 transfers the input or read identity information to the control unit 210 via the communication bus 260. (5) The control unit 210 of the user terminal 200 determines whether identity authentication has been successful based on the identity information. (6) The control unit 210 of the user terminal 200 transmits the authentication result of the identity authentication CF to the information processing device 100 via the communication unit 230.

[0088] In step S316, the transmitting unit 115 of the information processing device 100 transmits the payment approval AG to the payment processing device 500 when the payment approval acquisition unit 116 acquires the payment approval AG and when the personal authentication CF is successful.

[0089] In step S317, control unit 510 of payment processing device 500 executes payment processing. Step S317 consists of the following two stages of information processing: (1) Communication unit 530 of payment processing device 500 receives payment approval AG from information processing device 100 and transfers it to control unit 510 via communication bus 560. (2) Control unit 510 of payment processing device 500 executes payment processing based on the user identifier USID, store identifier SPID, payment information GS, and payment method information PY stored in memory unit 520.

[0090] In step S318, when the payment processing is completed, the control unit 510 of the payment processing device 500 outputs a payment completion screen (hereinafter referred to as the "payment completion screen W800") indicating that the payment processing is completed to the user terminal 200 and the store terminal 300. Step S318 consists of the following three stages of information processing: (1) The control unit 510 of the payment processing device 500 sends the payment completion screen W800 to the user terminal 200 and the store terminal 300 via the communication unit 530. (2) The communication unit 230 of the user terminal 200 and the communication unit 330 of the store terminal 300 receive the payment completion screen W800 and transfer it to the control unit 210 and the control unit 310 via the communication bus 260 and the communication bus 360. (3) The control unit 210 and the control unit 310 display the payment completion screen W800 on the output unit 250 and the output unit 350.

[0091] 3-4. Virtual Store Payment Processing FIG. 11 is a flow diagram showing an example of virtual store payment processing in the information processing system 1 according to this embodiment (steps S401 to S418).

[0092] In step S401, the control unit 210 of the user terminal 200 transmits the payment information GS input by the user US on the EC site of the store SP to the store server 400. Step S401 consists of the following three stages of information processing: (1) The input unit 240 of the user terminal 200 accepts the input of the payment information GS. (2) The input unit 240 of the user terminal 200 transfers the input payment information GS to the control unit 210 via the communication bus 260. (3) The control unit 210 of the user terminal 200 transmits the payment information GS to the store server 400 via the communication unit 230.

[0093] In step S402, the control unit 410 of the store server 400 acquires the payment information GS from the user terminal 200 and transmits the acquired payment information GS to the information processing device 100. Step S402 consists of the following three stages of information processing: (1) The communication unit 430 of the store server 400 receives the payment information GS from the user terminal 200 and transfers it to the control unit 410 via the communication bus 460. (2) The control unit 410 of the store server 400 stores the payment information GS in the memory unit 420. (3) The control unit 410 of the store server 400 transmits the payment information GS to the information processing device 100 via the communication unit 430.

[0094] In step S403 , the authentication unit 114 of the information processing device 100 generates a code CD for connecting the user terminal 200 and the store server 400 , and transmits the generated code CD to the store server 400 .

[0095] In step S404, the control unit 410 of the store server 400 transmits the code CD to the user terminal 200. Step S404 consists of the following three stages of information processing: (1) The communication unit 430 of the store server 400 receives the code CD from the information processing device 100 and transfers it to the control unit 410 via the communication bus 460. (2) The control unit 410 of the store server 400 stores the code CD in the memory unit 420. (3) The control unit 410 of the store server 400 transmits the code CD to the user terminal 200 via the communication unit 430.

[0096] In step S405, the control unit 210 of the user terminal 200 displays the code CD on the output unit 250. Step S405 consists of the following three stages of information processing: (1) The communication unit 230 of the user terminal 200 receives the code CD from the store server 400. (2) The communication unit 230 of the user terminal 200 transfers the code CD to the control unit 210 via the communication bus 260. (3) The control unit 210 of the user terminal 200 displays the code CD on the output unit 250.

[0097] In step S406, the input unit 210 of the user terminal 200 accepts input of the code CD by the user US. Step S406 consists of the following four stages of information processing: (1) The input unit 240 of the user terminal 200 accepts input of the code CD. (2) The input unit 240 of the user terminal 200 transfers the input code CD to the control unit 210 via the communication bus 260. (3) The control unit 210 of the user terminal 200 transmits the code CD and the user identifier USID to the store server 400 via the communication unit 230. (4) The control unit 410 of the store server 400 transmits the store identifier SPID to the user terminal 200 via the communication unit 430.

[0098] Steps S407 to S417 are substantially the same as steps S307 to S317, and therefore will not be described here.

[0099] In step S418, when the payment processing is completed, the control unit 510 of the payment processing device 500 outputs a payment completion screen W800 indicating that the payment processing is completed to the user terminal 200. Step S418 consists of the following three stages of information processing: (1) The control unit 510 of the payment processing device 500 sends the payment completion screen W800 to the user terminal 200 via the communication unit 530. (2) The communication unit 230 of the user terminal 200 receives the payment completion screen W800 and transfers it to the control unit 210 via the communication bus 260. (3) The control unit 210 displays the payment completion screen W400 on the output unit 250.

[0100] 4. Screen Display Examples Section 4 describes display examples of the menu screen W100, payment method information input screen W200, payment information input screen W300, code output screen W400, code input screen W500, code reading screen W600, payment approval screen W700, and payment completion screen W800.

[0101] (Menu screen W100) Figure 12 is a diagram showing an example of a menu screen W100 on which the user terminal 200 requests the registration of payment method information PY. As shown in Figure 12, the menu screen W100 has a payment method information registration request button W101 that requests the registration of payment method information PY. When the payment method information registration request button W101 is operated by the user US, the menu screen W100 transitions to a payment method information input screen W200.

[0102] (Payment Method Information Input Screen W200) Figure 13 is a diagram showing an example of the payment method information input screen W200 on which the payment processing device 500 accepts input of payment method information PY. As shown in Figure 13, the payment method information input screen W200 has a payment method information input area W201 for inputting payment method information PY, and a payment method information registration button W202 for registering the payment method information PY input in the payment method information input area W201. From the perspective of achieving both convenience and security, the payment method information input screen W200 preferably complies with PCI DSS (Payment Card Industry Data Security Standard).

[0103] (Payment Information Input Screen W300) Figure 14 is a diagram showing an example of the payment information input screen W300 on which the store terminal 300 accepts input of payment information GS. As shown in Figure 14, the payment information input screen W300 has an amount input field W301 for inputting the purchase amount of the user US at the store SP, a numeric keypad W302 for inputting the amount in the amount input field W301, and a Confirm button W303 for confirming the amount input in the amount input field W301. When the Confirm button W303 is operated by a staff member or employee of the store SP, the control unit 310 of the store terminal 300 transmits payment information GS including the amount to the information processing device 100.

[0104] (Code output screen W400) Figure 15 is a diagram showing an example of a code output screen W400 on which the store terminal 300 outputs the code CD. As shown in Figure 15, the code output screen W400 has an amount display area W401 that displays the purchase amount of the user US at the store SP, and code display areas W402 and W403 that display the code CD. The code output screen W400 is presented to the user US by a staff member or employee of the store SP.

[0105] (Code Entry Screen W500) Figure 16 is a diagram showing an example of a code entry screen W500 on which the user terminal 200 enters the code CD. As shown in Figure 16, the code entry screen W500 has a code entry area W501 for entering the code CD output on the code output screen W400 of the store terminal 300, an elapsed time display area W502 for displaying the elapsed time since entering the code CD, and a numeric keypad W503 for entering the code CD in the code entry area W501. When the code CD displayed on the store terminal 300 is entered correctly, communication is established between the user terminal 200 and the store terminal 300 and the store server 400.

[0106] (Code Reading Screen W600) Fig. 17 is a diagram showing an example of the code reading screen W600 on which the user terminal 200 reads the code CD. As shown in Fig. 17, the code reading screen W600 has a code reading frame W601. For example, the control unit 210 of the user terminal 200 may activate a reader installed in the user terminal 200 to output the code reading screen W600 to the output unit 250, and read the code CD when the code reading frame W601 matches the code CD to be read. When the user terminal 200 reads the code CD displayed on the store terminal 300, communication is established between the user terminal 200 and the store terminal 300 and the store server 400.

[0107] (Payment Approval Screen W700) Figure 18 is a diagram showing an example of the payment approval screen W700 on which the user terminal 200 inputs payment approval AG. As shown in Figure 18, the payment approval screen W700 has a payment information display area W701 that displays payment information GS, and a payment approval button W702 for inputting payment approval AG. When the user US operates the payment approval button W702, the payment approval AG is sent to the information processing device 100.

[0108] (Payment Completion Screen W800) Figure 19 is a diagram showing an example of a payment completion screen W800 indicating that the payment process has been completed. As shown in Figure 19, the payment completion screen W800 has a payment completion display area W801 that indicates that the payment process has been completed, and a transaction information display area W802 that displays transaction information including the payment information GS. The payment completion screen W800 is displayed on the user terminal 200 and the store terminal 300, thereby completing the payment.

[0109] 5. Effects and Advantages In Section 5, the effects and advantages of this embodiment will be described.

[0110] The information processing system 1 of this embodiment comprises a payment method information registration unit 111 that registers payment method information PY used by the user US for payment in the payment processing device 500; a payment information acquisition unit 113 that acquires payment information GS containing at least the amount of purchases that the user US will make at the store SP from a store terminal 300 or a store server 400 managed by the store SP; an authentication unit 114 that authenticates the store terminal 300 or the store server 400 and the user terminal 200 used by the user US using a public key authentication method; and a transmission unit 115 that, if authentication by the authentication unit 114 is successful, transmits to the payment processing device 500 a user identifier USID that identifies the user US, a store identifier SPID that identifies the store SP, and the payment information GS acquired by the payment information acquisition unit 113.The payment processing device 500 executes payment processing based on the user identifier USID, the store identifier SPID, the payment information GS, and the payment method information PY registered by the payment method information registration unit 111. This means that the user US does not have to go through the trouble of entering a password, and if authentication using the public key authentication method between the store terminal 300 or store server 400 and the user terminal 200 is successful, the payment information GS is sent to the payment processing device 500 and the payment processing is executed, thereby achieving both security and convenience in payments.

[0111] In the information processing system 1 according to this embodiment, the authentication unit 114 authenticates the store terminal 300 or the store server 400 and the user terminal 200 used by the user US using a bidirectional public key authentication method. This eliminates the need for the user US to enter a password, and once the authenticity of both the user US and the store SP is verified, the payment information GS is sent to the payment processing device 500 and payment processing is executed, thereby achieving both security and convenience in payments.

[0112] In the information processing system 1 according to this embodiment, the store terminal 300 and the store server 400 do not acquire the payment method information PY. This allows the user terminal 200 to process payments without transmitting the payment method information PY to the store terminal 300 and the store server 400, further improving security without compromising convenience in payments.

[0113] The information processing system 1 according to this embodiment further includes a payment approval acquisition unit 116 that acquires payment approval AG for the payment information GS from the user terminal 200. When the payment approval acquisition unit 116 acquires payment approval AG, the payment processing device 500 executes payment processing based on the user identifier USID, store identifier SPID, payment information GS, and payment method information PY registered by the payment method information registration unit 111. This allows payment processing to be executed when payment approval AG for the payment information GS is acquired from the user terminal 200, further improving the security of payments.

[0114] The information processing system 1 according to this embodiment further includes an identity authentication request unit 117 that requests identity authentication CF from the user terminal 200, and when the payment approval acquisition unit 116 acquires payment approval AG and the identity authentication CF is successful, the payment processing device 500 executes payment processing based on the user identifier USID, store identifier SPID, payment information GS, and payment method information PY registered by the payment method information registration unit 111. This allows payment processing to be executed not only when payment approval AG for the payment information GS is acquired from the user terminal 200 but also when identity authentication CF is successful, thereby further improving the security of payments.

[0115] In the information processing system 1 according to this embodiment, the identity authentication CF includes knowledge authentication, possession authentication, biometric authentication, or a multi-factor authentication that is a combination of these. This allows the identity authentication CF to further improve security in payments because it includes knowledge authentication, possession authentication, biometric authentication, or a multi-factor authentication that is a combination of these.

[0116] 6. Others Although the embodiments of the present invention have been described above, the present invention is not limited to these and can be modified as appropriate within the scope of the technical concept of the invention.

[0117] An aspect of the embodiment of the present invention may be a program that causes a computer to function as each unit of the information processing system 1.

[0118] An aspect of the embodiment of the present invention may be an information processing method executed by the information processing system 1. This information processing method includes each process executed by each unit of the information processing system 1.

[0119] As a variant example, each control unit performs write processing (storage processing) and read processing of various data and information to a memory unit, but this is not limited to this, and for example, information processing of each flow may be performed using a register or cache memory within the control unit.

[0120] 1 Information processing system 100 Information processing device 110 Control unit 111 Payment method information registration unit 112 Authentication information registration unit 113 Payment information acquisition unit 114 Authentication unit 115 Transmission unit 116 Payment approval acquisition unit 117 Personal authentication request unit 120 Memory unit 130 Communication unit 160 Communication bus 200 User terminal 210 Control unit 220 Memory unit 230 Communication unit 240 Input unit 250 Output unit 260 Communication bus 300 Store terminal 310 Control unit 320 Memory unit 330 Communication unit 340 Input unit 350 Output unit 360 Communication bus 400 Store server 410 Control unit 420 Memory unit 430 Communication unit 460 Communication bus 500 Payment processing device 510 Control unit 520 Storage unit 530 Communication unit 560 Communication bus

Claims

1. A system comprising: an information processing device; a store server managed by a store; a user terminal used by a user; and a payment processing device that executes payment processing, wherein the store server comprises a communication unit that receives from the information processing device a code generated by the information processing device, receives from the user terminal a code input or read by the user terminal and a user identifier that identifies the user, and transmits a store identifier that identifies the store to the user terminal, and a control unit that, when the code received from the information processing device and the code received from the user terminal match, authenticates the user terminal using a user public key that corresponds to the user identifier and is registered in the store server, and the user terminal transmits the code and the user identifier to the store server and receives the store identifier from the store server, and a control unit that authenticates the store server using a store public key that corresponds to the store identifier and is registered in the user terminal, an authentication unit that generates a code for connecting the user terminal to the store server and transmits the generated code to the store server; and a transmission unit that, when authentication of the user terminal using the user public key and authentication of the store server using the store public key are successful, transmits the user identifier, the store identifier, and the payment information acquired by the payment information acquisition unit to the payment processing device; and the payment processing device executes payment processing based on the user identifier, the store identifier, the payment information, and the payment method information registered by the payment method information registration unit.

2. The information processing system according to claim 1, wherein the store server does not acquire the payment method information.

3. The information processing system of claim 1, wherein the information processing device further comprises a payment approval acquisition unit that acquires payment approval for the payment information from the user terminal, and when the payment approval acquisition unit acquires payment approval, the payment processing device executes payment processing based on the user identifier, the store identifier, the payment information, and the payment method information registered by the payment method information registration unit.

4. The information processing system of claim 3, wherein the information processing device further comprises an authentication request unit that requests authentication of the user terminal, and the payment processing device, when the payment approval acquisition unit acquires payment approval and the authentication of the user is successful, executes payment processing based on the user identifier, the store identifier, the payment information, and the payment method information registered by the payment method information registration unit.

5. The information processing system according to claim 4, wherein the personal authentication includes knowledge authentication, possession authentication, biometric authentication, or multi-factor authentication that combines these.

6. A program for causing a computer to function as each part of the information processing system according to any one of claims 1 to 5.

7. An information processing method executed by an information processing system, comprising the processes executed by the respective units of the information processing system according to any one of claims 1 to 5.

Images