Electronic Receipt System Server Linkage Without Member Data Exposure
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing electronic receipt systems require stores to share proprietary member information with external operators to link receipt service IDs with store loyalty program member IDs, posing risks of data leakage and reputational damage.
Innovation Solution
An electronic receipt system with a first server managing store member IDs and a second server managing receipt service IDs, where the first server transmits receipt data with the receipt service ID to the second server without including the store member ID, allowing internal linkage without external information sharing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the store provides store member information to the electronic receipt system operator to link receipt service ID with program member ID, then the linkage between members can be achieved, but the risk of data leakage and reputational damage increases
Solution Approach 1:
The patent introduces a store server as an intermediary between the settlement terminal and the electronic receipt system. The store server performs local authentication by matching receipt service IDs with program member IDs using stored correspondence relationships, preventing raw member information from being transmitted externally while still enabling reliable linkage.
Solution Approach 2:
The system segments the authentication process into two parts: the store server handles local authentication and data protection, while the electronic receipt system handles receipt issuance. This segmentation allows linkage functionality to be distributed, with sensitive information processing kept local and only necessary results transmitted externally.
2Object-affected harmful factors
If the store keeps member information internal and does not share it with external operators, then data privacy is protected, but the ability to link receipt service ID with program member ID is lost
Solution Approach 1:
The store server acts as an intermediary that enables linkage capability internally without requiring external access to member information. It uses stored correspondence relationships between receipt service IDs and program member IDs to perform authentication and enable point accumulation, maintaining both privacy and functionality.
Solution Approach 2:
The store's own server performs the authentication and linkage function that would otherwise require external system involvement. By maintaining local copies of correspondence relationships, the store's system serves its own linkage needs independently, eliminating the need to share sensitive data externally.
3Adaptability or versatility
If the store shares member information with external operators for linkage, then the electronic receipt service can be provided to store members, but the device complexity and information security requirements increase
Solution Approach 1:
The patent combines the authentication and linkage functions into the store's existing server infrastructure. The store server integrates receipt service ID verification with program member ID matching using locally stored correspondence data, eliminating the need for separate complex security systems or external information sharing mechanisms.
Data Source
AI summary
An electronic receipt system has a first server to store first identification codes for store program members and a second server to store second identification codes set for people belong to an electronic receipt service operated by an entity other than the store. The first server stores first identification codes in association with second identification codes. A first control unit of the first server receives and then transmits receipt data including a second identification code to the second server. A second control unit of the first server receives receipt data including a first identification code and acquires a corresponding second identification code from the storage unit, adds the second identification code to the receipt data and transmits the receipt data to the second server without the including the first identification code.