JP6865665B2 - Payment support device and information processing system - Google Patents

Description

The present invention relates to a data processing technique, and more particularly to a payment support device and a payment intermediary device.

PCI DSS (Payment Card Industry Data Security Standard) has been established as an international security standard for the credit card industry in order to safely handle credit card membership data at service providers such as credit card merchants and payment agents. There is. Credit card payment agents require a comprehensive agency contract with the card company as a prerequisite for their business, but currently card companies require that the payment agent's system complies with PCI DSS as a condition of the contract. I have something to do. In addition, credit card member stores are also required to comply with PCI DSS by international card brands and domestic credit card companies. Therefore, it is becoming more and more important to build a PCI DSS compliant system.

Japanese Unexamined Patent Publication No. 2015-82787

Some retailers (merchant) have contracted with a credit card company to allow customers to purchase goods and services using their credit cards, and place orders from customers via telephone, mail, courier, or facsimile. There is a member store (hereinafter referred to as "MOTO (Mail Order Telephone Order) member store") that accepts. The conventional information system of MOTO member stores holds the customer's credit card information. Currently, protection of credit card information is required. Currently, MOTO member stores are required to comply with PCI DSS or non-retention of credit card information.

However, compliance with PCI DSS requires a large amount of initial investment and maintenance, and it is not easy for many MOTO merchants to bear the cost. In addition, if the business flow of the MOTO member store is changed so as not to retain the customer's credit card information, the business efficiency of the MOTO member store may be significantly reduced.

The present invention has been made in view of these problems, and one object of the present invention is to provide a technique for supporting the non-retention of a customer's credit card information in a credit card member store.

In order to solve the above problems, the payment support device of a certain aspect of the present invention is a dedicated device for credit card payment installed in a company that accepts orders from customers via telephone, mail, courier, or facsimile. Therefore, this device is an external device that is not connected to the corporate network and is connected to the corporate network, and is input to the first external device connected to the device via a dedicated communication path. In addition, an acquisition unit for acquiring information on the amount of money related to the order, an input unit for inputting the customer's credit card information by an employee of the company, and an input unit for inputting the information on the amount of money acquired by the acquisition unit, are input to the input unit. It is provided with a transaction information transmission unit that transmits the credit card information to a second external device that supports the credit card payment via the mobile phone communication network.

Another aspect of the present invention is a payment intermediary device. This device corresponds to a company that accepts orders from customers via telephone, mail, courier, or facsimile, or a dedicated device for credit card payment installed in that company, and a payment agent. A storage unit for storing, an acquisition unit for acquiring transaction information including information on the amount of money related to an order and information on a customer's credit card sent from a dedicated device to a mobile phone communication network, and an acquisition unit acquired by the acquisition unit. A transaction information transmission unit for transmitting transaction information to a device of a payment agent associated with a company or a dedicated device in a storage unit among a plurality of payment agents is provided.

It should be noted that any combination of the above components and the expression of the present invention converted between a method, a program, a recording medium in which the program is stored, and the like are also effective as aspects of the present invention.

According to the present invention, it is possible to support the non-retention of a customer's credit card information in a credit card member store.

It is a figure which shows the structure of the information processing system of an Example. It is a figure which shows typically the appearance of the payment terminal of FIG. It is a block diagram which shows the functional structure of the payment terminal of FIG. It is a block diagram which shows the functional structure of the settlement GW apparatus of FIG. It is a sequence diagram which shows the process of processing in the information processing system of an Example.

FIG. 1 shows the configuration of the information processing system 10 of the embodiment. The information processing system 10 includes a business PC 12, a customer information management system 14, a payment agency device 16 collectively referred to as a company A device 16a, a company B device 16b, a company C device 16c, and a payment terminal 18. A payment GW device 20 is provided.

The MOTO member store in FIG. 1 is a company that accepts orders from customers via telephone, mail (postcards, etc., not e-mail), courier service, or facsimile. MOTO merchants are typically mail-order and travel agencies. An order from a customer includes information that specifies the goods or services to be purchased and the customer's credit card information used for payment. Credit card information may include a credit card number, credit card expiration date, owner name, security code.

A business PC 12 and a customer information management system 14 are installed in the MOTO member store. The business PC 12 and the customer information management system 14 are connected to a member store communication network 15 such as a LAN, and transmit and receive data via the member store communication network 15.

The customer information management system 14 is an information processing system that manages information (hereinafter, also referred to as "customer information") regarding each of a plurality of customers who have purchased goods or services at a MOTO member store. The customer information of each customer may include a plurality of order information (transaction result, amount, ID, date and time, etc.) related to a plurality of orders.

The business PC 12 is an information processing device operated by an employee of a MOTO member store (hereinafter, also referred to as an "operator"). In the embodiment, a PC is used, but a smartphone or a tablet terminal may be used. An application (hereinafter, also referred to as "order-taking business application") that receives order information input by an operator and executes processing based on the order information in cooperation with the customer information management system 14 is introduced into the business-use PC 12. ..

The payment agent device 16 is an information processing device installed in the payment agent. The payment agent device 16 is a transaction including credit card information and a payment amount via a predetermined API (Application Programming Interface) (hereinafter, also referred to as “payment API”) for requesting credit card payment. Accept information (in other words, payment request). The payment agent device 16 executes credit card payment based on the received transaction information.

The equipment 16a of company A, the equipment 16b of company B, and the equipment 16c of company C are installed in different payment agency companies A, B, and C. The company A device 16a, the company B device 16b, and the company C device 16c have different payment APIs. Each company's payment API may differ in at least one of a communication protocol, a communication format, and a data item. For example, in the payment API of the device 16a of the company A, it may be necessary to specify the credit card number and the credit card expiration date as the credit card information. On the other hand, in the payment API of the device 16b of the company B, it may be necessary to specify the credit card number, the credit card expiration date, and the security code as the credit card information.

Conventionally, transaction information has been sent directly from the business PC 12 of the MOTO member store to the settlement agent device 16 of the settlement agent contracted by the MOTO member store. For example, when an operator of a MOTO member store receives an order from a customer by telephone or the like, the web page provided by the payment agent is displayed on the business PC 12, and the payment amount (product price) and the customer's web page are displayed on the web page. By entering the credit card information, the credit card payment was carried out.

By convention, credit card information will be retained if at least one of the passage of credit card information, processing of credit card information, and storage of credit card information is satisfied. Therefore, the conventional business PC 12 holds credit card information and is required to comply with PCI DSS. However, compliance with PCI DSS is not easy in terms of cost. Therefore, in the information processing system 10 of the embodiment, the payment terminal 18 is installed in the MOTO member store, and the payment GW device 20 is installed in the payment intermediary company, so that the credit card information is not retained in the MOTO member store. Realize.

The payment-dedicated terminal 18 is a dedicated device that supports credit card payment, and has received security certification equivalent to / equivalent to a known credit inquiry terminal (CCT: Credit Center Terminal). The payment-only terminal 18 is lent to a MOTO member store by the payment brokerage business, and the ownership of the payment-only terminal 18 is owned by the payment brokerage business operator.

The payment-only terminal 18 is not connected to the member store communication network 15, but is connected to the business PC 12 via a dedicated communication path. In the embodiment, the payment terminal 18 is connected to the business PC 12 via USB (Universal Serial Bus). As a modification, a commercial PC 12 and a COM port may be connected. Further, the payment-only terminal 18 is provided with a SIM (Subscriber Identity Module) card and is connected to a mobile phone communication network 22 (for example, a 3G network or an LTE (Long Term Evolution) network).

The payment GW device 20 is connected to the payment terminal 18 via the mobile phone communication network 22. Actually, the payment GW device 20 is connected to the payment terminal 18 from the Internet via the mobile phone communication network 22. The payment-only terminal 18 and the payment GW device 20 in the embodiment execute encrypted communication (for example, HTTPS / TLS1.2) using a common key (AES: Advanced Encryption Standard). Further, the payment GW device 20 is a payment agent device of each business operator via a communication path (designated communication network 24a, designated communication network 24b, designated communication network 24c) designated by each of the plurality of payment agent businesses. 16 is connected. The designated communication network 24a to the designated communication network 24c may be any of LAN, WAN, the Internet, and a dedicated line.

The payment GW device 20 can be said to be a payment intermediary device, and has a function of linking with the payment API provided by the payment agent device 16. Specifically, the payment GW device 20 relays the credit card information input to the payment dedicated terminal 18 to the payment agent device 16. Further, the payment GW device 20 has a function of managing the payment-dedicated terminal 18. Specifically, the payment GW device 20 includes (1) encryption management, (2) information management of the payment-only terminal 18, (3) OS and application version management of the payment-only terminal 18, and (4) payment-only terminal 18. Perform application and encryption key updates.

The operator of the MOTO member store inputs the customer's credit card information into the payment terminal 18. Then, the credit card information is transmitted to the payment dedicated terminal 18 to the payment GW device 20 to the payment agent device 16, and the credit card payment is performed. In the information processing system 10 of the embodiment, the business PC 12 of the MOTO member store, the customer information management system 14, and the communication network 15 in the member store do not hold the credit card information of the customer. That is, the non-retention of credit card information at MOTO member stores is realized. Payment brokers and payment agents are required to comply with PCI DSS in order to retain credit card information. On the other hand, MOTO member stores do not need to comply with PCI DSS.

Although one MOTO member store is drawn in FIG. 1, there are actually a plurality of MOTO member stores. Further, a plurality of business PCs 12 and payment terminals 18 may be installed in one MOTO member store. For example, a combination of a business PC 12 and a payment terminal 18 may be provided for each payment agent requesting credit card payment.

FIG. 2 schematically shows the appearance of the payment-only terminal 18 of FIG. The payment-only terminal 18 includes an input unit 30 and a display unit 32. The customer's credit card information (for example, credit card number, expiration date, etc.) is input to the input unit 30 by the operator of the MOTO member store. The input unit 30 may include a plurality of buttons. The display unit 32 displays the credit card information input via the input unit 30, the payment amount acquired from the business PC 12, and the like. The display unit 32 may be realized by an LCD (Liquid Crystal Display). In the payment-only terminal 18 of the embodiment, the input unit 30 is configured as a hardware key, but as a modification, the input unit 30 may be configured as a software key displayed on the display unit 32 having a touch screen function. ..

FIG. 3 is a block diagram showing a functional configuration of the payment-only terminal 18 of FIG. The payment terminal 18 includes an input unit 30, a display unit 32, a USB-IF34, a communication unit 36, a control unit 38, and a printing unit 52. Each block shown in the block diagram of the present specification can be realized by an element such as a computer CPU / memory or a mechanical device in terms of hardware, and can be realized by a computer program or the like in terms of software. Then, I draw a functional block realized by their cooperation. Those skilled in the art will understand that these functional blocks can be realized in various ways by combining hardware and software.

The USB-IF34 provides an interface function with an external device based on the USB standard. The communication unit 36 includes a SIM card and communicates with the mobile phone communication network 22. The control unit 38 provides a function for supporting credit card payment at a MOTO member store. The control unit 38 transmits / receives data to / from the business PC 12 via the USB-IF34. Further, the control unit 38 transmits / receives data to / from the payment GW device 20 via the communication unit 36 and the mobile phone communication network 22. The printing unit 52 may execute a printing process on a predetermined receipt paper.

The control unit 38 includes a card information acquisition unit 40, an amount acquisition unit 42, a transaction information transmission unit 44, a transaction result acquisition unit 46, a transaction result transfer unit 48, a display control unit 50, and a print control unit 54. The plurality of functional blocks in the control unit 38 may be implemented as a computer program including a plurality of modules corresponding to these functional blocks. This computer program may be installed in the storage of the payment-only terminal 18 via a recording medium or a network. The CPU of the payment-only terminal 18 may exert the function of each functional block of the control unit 38 by reading this computer program into the main memory and executing it.

The card information acquisition unit 40 acquires the customer's credit card information input to the input unit 30.

The amount acquisition unit 42 acquires information on the amount of money (hereinafter referred to as “payment amount”) to be settled by credit card input to the business PC 12 via the USB-IF34. The settlement amount can be said to be the amount related to the order, or the selling price of the product or service purchased by the customer. In addition, a terminal cooperation application (hereinafter referred to as "terminal cooperation App") for acquiring the settlement amount input by the operator on the business screen displayed by the order business App from the order business App is introduced into the business PC 12. The terminal cooperation application calls the amount cooperation API of the payment-only terminal 18 connected via USB, and passes the payment amount to the payment-only terminal 18.

The transaction information transmission unit 44 transmits transaction information requesting credit card payment to the payment GW device 20 via the mobile phone communication network 22. The transaction information includes (1) a unique transaction ID for each credit card payment, (2) payment amount information acquired by the amount acquisition unit 42, and (3) credit card information acquired by the card information acquisition unit 40. And (4) ID of the payment terminal 18 is included.

The transaction information transmitted by the transaction information transmission unit 44 is a common format that does not depend on the type of payment agent that executes credit card payment, in other words, the type and format of the payment API to which the transaction information is transmitted. Hereinafter, it is also referred to as "common transaction information". Further, the transaction information transmission unit 44 encrypts the common transaction information with a common key stored in advance, and transmits the encrypted data of the common transaction information to the settlement GW device 20.

The transaction result acquisition unit 46 acquires the encrypted data of the transaction result information indicating the transaction result transmitted by the settlement GW device 20 to the mobile phone communication network 22. The transaction result acquisition unit 46 decrypts the encrypted data with the common key stored in advance, and acquires the transaction result information of the decryption result. The transaction result transfer unit 48 transfers the transaction result information acquired by the transaction result acquisition unit 46 to the business PC 12 via the USB-IF34.

The transaction result information includes (1) transaction ID, (2) success or failure of payment indicating that credit card payment was successful or unsuccessful, and (3) payment agent for each credit card used for credit card payment. Includes a unique ID assigned by (hereinafter also referred to as "alternative ID"). On the other hand, the transaction result information does not include the customer's credit card information input to the input unit 30. A value that can uniquely identify the credit card used by the customer is set in the alternative ID. Further, the alternative ID is set to a value different from the credit card information (for example, credit card number, credit card expiration date) used by the customer, and it is difficult to infer the credit card information.

The display control unit 50 controls the display content on the display unit 32. For example, the display control unit 50 causes the display unit 32 to display the payment amount information acquired by the amount acquisition unit 42 and the credit card information acquired by the card information acquisition unit 40. At this time, the display control unit 50 may hide a part of the credit card information (for example, the credit card number), and conceal a part of the credit card information by alternative characters such as "X" and "*". It may be displayed in a mode. The display control unit 50 may further display the transaction result information acquired by the transaction result acquisition unit 46 on the display unit 32.

The print control unit 54 controls the print unit 52 to print the transaction result information acquired by the transaction result acquisition unit 46 on the receipt paper. At this time, the print control unit 54 masks the credit card information (for example, the credit card number) acquired by the card information acquisition unit 40 in addition to the transaction result information (replaces a part of the character string with an asterisk, etc.). It may be printed on.

FIG. 4 is a block diagram showing a functional configuration of the payment GW device 20 of FIG. The settlement GW device 20 includes a control unit 60, a storage unit 62, and a communication unit 64. The control unit 60 executes data processing for mediating credit card payment between the MOTO member store and the payment agent. The storage unit 62 stores data that is referenced or updated by the control unit 60. The communication unit 64 communicates with the external device according to a predetermined communication protocol. The control unit 60 transmits / receives data to / from an external device via the communication unit 64.

The storage unit 62 includes a store terminal information storage unit 66 and an update data storage unit 68. The store terminal information storage unit 66 stores information regarding a plurality of payment-dedicated terminals 18 installed in a plurality of MOTO member stores. Specifically, the store terminal information storage unit 66 is a record in which the payment-only terminal 18 is a unit, and is the ID of the payment-only terminal 18, the ID of the MOTO member store, and the payment agent that is the destination of transaction information. A plurality of records associated with an ID (for example, the ID of the payment agent device 16) and a software version are stored. The software in the embodiment includes an OS (Operating System), firmware, and an application program.

In the embodiment, the payment agent business operator (for example, the specific payment agent business operator device 16) to which the transaction information is transmitted is determined in units of the payment-dedicated terminal 18. Therefore, when a plurality of payment-dedicated terminals 18 are installed in the same MOTO member store, the transaction information transmitted from each payment-dedicated terminal 18 can be relayed to different payment agents. As a modification, the settlement agency to which the transaction information is sent may be determined in units of MOTO member stores.

The update data storage unit 68 stores software update data in a plurality of payment-dedicated terminals 18 installed in a plurality of MOTO member stores and update data of a key (common key in the embodiment) for encrypted communication.

The control unit 60 includes a common transaction information acquisition unit 70, an individual transaction information generation unit 72, an individual transaction information transmission unit 74, a transaction result acquisition unit 76, a transaction result transmission unit 78, and a terminal update unit 80. The plurality of functional blocks in the control unit 60 may be implemented as a computer program including a plurality of modules corresponding to these functional blocks. This computer program may be installed in the storage of the payment GW device 20 via a recording medium or a network. The CPU of the payment GW device 20 may exert the function of each functional block of the control unit 60 by reading this computer program into the main memory and executing it.

The common transaction information acquisition unit 70 is data transmitted by the payment terminal 18 to the mobile phone communication network 22 via the communication unit 64, and is a common format regardless of the type of payment agent to which the transaction information is transmitted. Acquires encrypted data of common transaction information. The common transaction information acquisition unit 70 decrypts the encrypted data with the common key stored in advance, and acquires the common transaction information as the decryption result.

The individual transaction information generation unit 72 generates individual transaction information in the format required by the settlement agent device 16 to which the transaction information is transmitted, based on the common transaction information acquired by the common transaction information acquisition unit 70. Specifically, the individual transaction information generation unit 72 refers to the store terminal information storage unit 66, and refers to the ID of the payment agent device 16 associated with the ID of the payment-dedicated terminal 18 designated in the common transaction information. To identify. That is, the settlement agent device 16 (any of the company A device 16a, the company B device 16b, and the company C device 16c in the embodiment) that is the transmission destination of the transaction information is specified. The individual transaction information generation unit 72 generates individual transaction information by converting the common transaction information according to the individual business operator format defined by the settlement API of the settlement agent business operator device 16 of the destination.

The record stored in the store terminal information storage unit 66 is information registered in advance from each of the plurality of MOTO member stores, and is information to be passed to the payment agent along with the credit card information and the payment amount (here, "" "Merchant registration information") is included. The individual transaction information generation unit 72 is the member store registration information of the MOTO member store that is the source of the common transaction information, in other words, the member store associated with the ID of the payment-only terminal 18 specified in the common transaction information. Generates individual transaction information in which the registration information is set according to the individual format of the settlement agent of the destination.

The individual transaction information transmission unit 74 transmits the individual transaction information generated by the individual transaction information generation unit 72 to the payment agent device 16 of the destination specified based on the ID of the payment-dedicated terminal 18. For example, when the destination is the device 16a of the company A, the individual transaction information generation unit 72 may generate the individual transaction information conforming to the format predetermined by the company A. The individual transaction information transmission unit 74 transmits the individual transaction information to the device 16a of the company A by calling the settlement API predetermined by the company A with the individual transaction information as an argument via the designated communication network 24a. You may.

The transaction result acquisition unit 76 acquires the transaction result information transmitted from the settlement agent device 16 as a response to the individual transaction information. The transaction result transmission unit 78 encrypts the transaction result information acquired by the transaction result acquisition unit 76 with a common key stored in advance, and the encrypted data of the transaction result information is a payment-dedicated terminal via the mobile phone communication network 22. Send to 18.

As described above, the common transaction information acquired by the common transaction information acquisition unit 70 includes the transaction ID, the payment amount, the credit card information, and the ID of the payment-dedicated terminal 18 which is the sender. Further, the transaction result information acquired by the transaction result acquisition unit 76 includes a transaction ID, settlement success / failure, and alternative ID. The common transaction information acquisition unit 70 may store the transaction ID specified in the common transaction information and the ID of the payment-dedicated terminal 18 in association with each other in a predetermined storage area. The transaction result transmission unit 78 may transmit the transaction result information to the payment-dedicated terminal 18 associated with the transaction ID specified in the transaction result information.

When the formats of the transaction result information transmitted by the plurality of payment agent devices 16 are different, the payment GW device 20 converts the transaction result information received from the individual payment agent devices 16 into the transaction result information in a common format. A transaction result conversion unit for conversion may be further provided. The transaction result transmission unit 78 may transmit the transaction result information in a common format generated by the transaction result conversion unit to the payment-dedicated terminal 18.

The terminal update unit 80 uses the mobile phone communication network 22 to use the software in the plurality of payment-dedicated terminals 18 installed in the plurality of MOTO member stores and at least one of the common keys for encrypted communication (both in the embodiment). Update via. Specifically, the terminal update unit 80 receives software update data stored in the update data storage unit 68 and update data of the common key in response to instructions from employees of the payment intermediary business operator or periodically. Is transmitted to the payment-only terminal 18.

The operation of the information processing system 10 with the above configuration will be described below.
FIG. 5 is a sequence diagram showing a process of processing in the information processing system 10 of the embodiment. The business PC 12 executes the order receiving business application according to the operation of the operator of the MOTO member store, and displays the business screen on the display (S10). Although not shown, the customer calls the MOTO merchant and informs the operator of the MOTO merchant of the product to be purchased and his / her credit card information. The operator inputs the product to be sold and the settlement amount, which is the amount required to be settled in connection with the sale, on the business screen. The terminal cooperation application introduced in the business PC 12 acquires the payment amount input on the business screen and transmits it to the payment terminal 18 (S12).

The operator manually inputs the customer's credit card information directly into the input unit 30 of the payment terminal 18, but does not input it into the business PC 12. The card information acquisition unit 40 of the payment-only terminal 18 acquires the credit card information input to the input unit 30 (S14). The transaction information transmission unit 44 of the payment-only terminal 18 transmits the common transaction information including the credit card information and the payment amount to the payment GW device 20 via the mobile phone communication network 22 (S16). The individual transaction information generation unit 72 of the settlement GW device 20 converts the common transaction information into individual transaction information corresponding to the settlement agent device 16 of the destination, and the individual transaction information transmission unit 74 converts the individual transaction information into the settlement agent. It is transmitted to the operator device 16 (S18).

The payment agent device 16 that has received the individual transaction information executes predetermined data processing for credit card payment based on the credit card information and the payment amount specified in the individual transaction information (S20). The settlement agent device 16 transmits transaction result information including a settlement success / failure and an alternative ID corresponding to the credit card information to the settlement GW device 20 (S22). The transaction result transmission unit 78 of the settlement agent apparatus 16 transfers the transaction result information transmitted from the settlement agent apparatus 16 to the settlement-dedicated terminal 18 of the transaction information transmission source (S24). The transaction result transfer unit 48 of the payment-only terminal 18 transfers the transaction result information transmitted from the payment GW device 20 to the business PC 12 (S26). Although not shown, the payment-only terminal 18 may display the transaction result information on the display unit 32, or may print the transaction result information on the receipt paper.

The terminal cooperation application of the business PC 12 acquires the transaction result information transmitted from the payment-only terminal 18 and passes it to the order receiving business application. The order receiving business application of the business PC 12 displays the settlement success / failure and the alternative ID indicated by the transaction result information on the business screen (S28). The order receiving business application of the business PC 12 transmits order information (for example, settlement success / failure, settlement amount, alternative ID, date and time, etc.) based on the transaction result information to the customer information management system 14 in response to the operation of the operator (S30). The customer information management system 14 updates the customer information based on the order information (S32). For example, this order information is added to the customer information of an existing customer.

The effect of the information processing system 10 of the embodiment will be described.
The payment-only terminal 18 of the embodiment is lent to the MOTO member store by the payment intermediary company and is not connected to the communication network 15 in the member store. The operator of the MOTO member store manually inputs the credit card information into the payment terminal 18, and the payment terminal 18 setstles the credit card information via the mobile phone communication network 22 independent of the communication network 15 in the member store. Pass it to the device 20. As a result, it is possible to achieve both non-retention of credit card information at MOTO member stores and sales of goods or services by credit card payment.

In addition, the payment terminal 18 cooperates with the business PC 12 to automatically acquire the amount information input to the business screen of the business PC 12. As a result, it is possible to suppress mistakes that may occur when the operator himself directly inputs the amount information to the payment terminal 18, and it is possible to avoid a significant change in the business flow at the MOTO member store.

Further, the transaction result information provided from the payment terminal 18 to the business PC 12 does not include the legitimate credit card information. As a result, it is possible to realize non-retention of credit card information at MOTO member stores.

In addition, the transaction result information includes an alternative ID unique to each credit card used by the customer. This makes it possible for MOTO member stores to manage customer information using an alternative ID as a key instead of credit card information, while realizing non-retention of credit card information. For example, if a MOTO member store has a website for mail-order sales as a sales channel (however, when entering credit card information, it redirects to the website of the payment agent), the purchase history via that website and the purchase history The purchase history via MOTO described in the embodiment can be associated with the alternative ID as a key. Furthermore, the MOTO member store can inquire the settlement agent business operator about the transaction details, etc. using the alternative ID as a key.

Further, the settlement GW device 20 of the embodiment is connected to a plurality of settlement agency devices 16 and absorbs the difference in the interface between the settlement agency. As a result, the MOTO member store does not need to change the payment agency that has been used conventionally even when using the payment terminal 18 and the payment GW device 20 (assuming that the payment GW device 20 supports it). In addition, when the MOTO member store changes the payment agent to be used, the MOTO member store (or the payment terminal 18 installed in the MOTO member store) managed by the payment GW device 20 and the payment agent are used. It is only necessary to change the correspondence relationship, and it is possible to easily change the settlement agency.

For example, the payment GW device 20 may further include a store terminal information updating unit that updates the record of the store terminal information storage unit 66. The store terminal information update unit receives a change request including the ID of the payment-only terminal 18, the ID of the MOTO member store, and the payment agent of the change destination, which are transmitted from the device of the MOTO member store (for example, the business PC 12). May be good. The store terminal information update unit identifies a record including the ID of the payment-dedicated terminal 18 and the ID of the MOTO member store indicated by the change request from the records of the store terminal information storage unit 66, and the payment agent of the record. The information may be changed to the settlement agent of the change destination.

Further, the payment GW device 20 of the embodiment updates the middleware of the payment-only terminal 18 and the common key for encrypted communication. As a result, the security strength of the payment-only terminal 18 can be maintained while keeping the payment-only terminal 18 under the control of the payment intermediary business operator.

The present invention has been described above based on examples. This embodiment is an example, and it will be understood by those skilled in the art that various modifications are possible for each component and combination of each processing process, and that such modifications are also within the scope of the present invention.

Although not mentioned in the above embodiment, the payment agent device 16 and the payment GW device 20 may be realized by a single information processing device, or may be realized as an information processing system in which a plurality of information processing devices are linked. May be good.

The payment-only terminal 18 and the payment GW device 20 of the above embodiment executed encrypted communication by a common key encryption method. As a modification, the payment-only terminal 18 and the payment GW device 20 may execute encrypted communication by a public key cryptosystem. Further, the payment-dedicated terminal 18 and the payment GW device 20 may execute encrypted communication by a method of exchanging (changing) a data encryption key for each transaction (for example, DUKPT (Derive Unique Key Per Transaction)).

Any combination of the examples and modifications described above is also useful as an embodiment of the present invention. The new embodiments resulting from the combination have the effects of the combined examples and the modifications. It is also understood by those skilled in the art that the functions to be fulfilled by each of the constituent elements described in the claims are realized by a single component or a cooperation thereof shown in the examples and modifications.

10 Information processing system, 18 Payment terminal, 20 Payment GW device, 30 Input unit, 42 Amount acquisition unit, 44 Transaction information transmission unit, 48 Transaction result transfer unit, 62 Storage unit, 70 Common transaction information acquisition unit, 74 Individual transaction Information transmission unit, 78 transaction result transmission unit, 80 terminal update unit.

Claims (6)

A payment support device that is a dedicated device for credit card payments installed in companies that accept orders from customers via telephone, mail, courier, or facsimile.
This payment support device is not connected to the company's network and
An acquisition unit that acquires information on the amount of money related to the order, which is a business device connected to the company's network and is input to the business device connected to the device via a dedicated communication path.
An input unit where the customer's credit card information is input by an employee of the company,
A transaction information transmission unit that transmits information on the amount of money acquired by the acquisition unit and credit card information input to the input unit to a payment intermediary device that supports credit card payment via a mobile phone communication network. ,
A payment support device characterized by being equipped with. A transaction result transfer unit for transmitting information indicating a transaction result transmitted from the settlement intermediary device to the business device is further provided.
The information indicating the transaction result includes a unique ID for each credit card assigned to each credit card used for payment, but does not include the information of the credit card input to the input unit. The payment support device according to claim 1. A payment support device, which is a dedicated device for credit card payments installed in companies that accept orders from customers via telephone, mail, courier, or facsimile,
Equipped with a payment intermediary device that supports credit card payments
The payment support device is not connected to the company's network and
The payment support device is
An acquisition unit that acquires information on the amount of money related to the order, which is a business device connected to the company's network and is input to the business device connected to the device via a dedicated communication path.
An input unit where the customer's credit card information is input by an employee of the company,
Includes a transaction information transmission unit that transmits information on the amount of money acquired by the acquisition unit and credit card information input to the input unit to the payment intermediary device via a mobile phone communication network.
The payment intermediary device is
A storage unit the corporate Goma other is to store and the payment support apparatus, the correspondence between the third-party payment company,
An acquisition unit that acquires transaction information including information on the amount of money related to the order and information on the customer's credit card transmitted from the payment support device to the mobile phone communication network.
The by transmitting data based on the trading information acquired by the acquisition unit, to the company or the payment support apparatus settlement associated with the proxy operator of the apparatus in the storage unit among the plurality of clearing operator An information processing system characterized by including a transaction information transmission unit that causes a payment agent's device to execute credit card payment . The payment intermediary device further includes a transaction result transmission unit that transmits information indicating a transaction result transmitted from the device of the payment agent to the payment support device.
The information indicating the transaction result includes a unique ID for each credit card assigned to each credit card used for payment, but does not include the information of the credit card transmitted from the payment support device. The information processing system according to claim 3. The payment intermediary device further includes an individual transaction information generation unit.
The transaction information acquired by the acquisition unit of the payment intermediary device is a common format transaction information that does not depend on the format required by the device of the settlement agent to which the transaction information is transmitted.
The individual transaction information generation unit of the payment intermediary device corresponds to the company or the payment support device in the storage unit of the payment intermediary device based on the transaction information in the common format acquired by the acquisition unit of the payment intermediary device. Generates individual transaction information, which is the attached transaction information in the format required by the device of the settlement agent to which the transaction information is sent.
The transaction information transmission unit of the payment intermediary device is characterized in that the individual transaction information is transmitted to the device of the company or the payment agent associated with the payment support device in the storage unit of the payment intermediary device. The information processing system according to claim 3 or 4. The payment intermediary device further includes an update unit that updates at least one of software in a plurality of payment support devices installed in a plurality of companies and a key for encrypted communication via the mobile phone communication network. The information processing system according to any one of claims 3 to 5.

Images