JP7188606B2 - Control method, information processing device, information processing system and control program - Google Patents

Description

The present invention relates to a control method, an information processing device, an information processing system, and a control program.

Payment using a two-dimensional code such as a QR code (registered trademark) (hereinafter referred to as "code payment") is becoming popular. With code payments, the purchaser can make a terminal such as a smartphone read the two-dimensional code displayed on the payment terminal at the store or the two-dimensional code printed on paper and presented at the store. Payment can be completed. The two-dimensional code includes the account number of the settlement account (account to which the money is to be transferred).

JP 2009-124311 A JP 2003-323512 A

However, although code payments are convenient, security issues have been pointed out. For example, regarding a two-dimensional code presented on paper, there have been reports of cases in which a malicious person pasted a sticker on which a false two-dimensional code was printed on the two-dimensional code.

In addition, there have been reports of store clerks using fake payment terminals and having the purchaser's terminal read the fake two-dimensional code displayed on the payment terminal.In these cases, the purchaser's terminal will read a fake two-dimensional code. As a result, the purchaser is subject to fraudulent charges, such as transferring money to a fake account.

Therefore, one aspect of the present invention aims to suppress the occurrence of fraudulent charges in code settlement.

In one proposal, a purchaser terminal used by a purchaser who purchases merchandise at a store transmits first information related to payment for purchase of the merchandise, which is included in code information read at the store, from the purchaser terminal. a store terminal used for settlement of purchase of the product at the store, and transmitting to the purchaser terminal third information based on the first information received in the process of receiving and receiving from the purchaser terminal; In the process of receiving the second information, which is information related to the payment for the purchase of the product from the store terminal, to which the signature of the store terminal is added and received from the store terminal, the purchaser terminal receives the second information together with the The first information and the second information based on whether the third information is received from the shop terminal that reads the code information generated based on the third information and the verification of the signature. is the information on the same payment, and if the determination result is affirmative, control the recording of the information on the payment for the purchase from the purchaser to the store on the blockchain; A computer performs the processing.

According to one aspect, it is possible to suppress the occurrence of fraudulent charges in code settlement.

It is a figure showing an example of composition of settlement system 1 in a 1st embodiment. 2 is a diagram illustrating a hardware configuration example of an intermediary device 10 according to the first embodiment; FIG. 2 is a diagram illustrating a functional configuration example of an intermediary device 10 according to the first embodiment; FIG. FIG. 3 is a sequence diagram for explaining an example of processing procedures executed in the settlement system 1 of the first embodiment; FIG. It is a figure which shows the structural example of the payment system 1 in 2nd Embodiment. FIG. 10 is a sequence diagram for explaining an example of a processing procedure executed in the settlement system 1 of the second embodiment; FIG.

BEST MODE FOR CARRYING OUT THE INVENTION An embodiment of the present invention will be described below based on the drawings. FIG. 1 is a diagram showing a configuration example of a settlement system 1 according to the first embodiment. In FIG. 1, the payment system 1 includes a store terminal 30, a purchaser terminal 20, an intermediary device 10, a blockchain Ca, and the like. The intermediary device 10 is connected to the store terminal 30, the purchaser terminal 20, the blockchain Ca, and the like via a network such as the Internet.

The store terminal 30 is, for example, a terminal for code payment installed at a certain store (hereinafter referred to as "store Y") registered in advance as a member store for code payment. The store terminal 30 displays code information for payment (in the present embodiment, a two-dimensional code such as a QR code (registered trademark) is taken as an example) at the time of payment for product purchases, or displays a one-time code to be described later. Accept password input. The two-dimensional code includes the purchase amount and information indicating the store account to which the payment is to be transferred (hereinafter referred to as "store account information"). When the one-time password is input, the store terminal 30 transmits the information about the one-time password and payment (the purchase amount and the bank account of the transfer destination (hereinafter referred to as "store account") to the brokerage device 10. do.

The purchaser terminal 20 is a terminal such as a smart phone owned (carried) by a certain purchaser (hereinafter referred to as “purchaser X”) who purchases a product at the store Y. FIG. The purchaser terminal 20 has a digital camera, and can read the two-dimensional code using the digital camera. An application program compatible with the payment system 1 is installed in the purchaser terminal 20, and information contained in the two-dimensional code read by the digital camera of the purchaser terminal 20 is transferred to the brokerage device 10 under the control of the application program. , or receive and display the one-time password returned from the intermediary device 10 according to the information.

The mediation device 10 is one or more computers that mediate transactions related to the payment of the purchase price from the purchaser to the store. The brokerage device 10 checks that the information included in the two-dimensional code (transaction information described later) sent from the purchaser terminal 20 that read the two-dimensional code is the same as the information sent from the store terminal 30 together with the one-time password. An escrow transaction is realized by withholding the execution of settlement until it is determined that the information is related to the settlement of the

Blockchain Ca is a blockchain in which various transactions related to settlement transactions are recorded.

Although only one purchaser terminal 20 and one store terminal 30 are shown in FIG. may include one or more store terminals 30 of

FIG. 2 is a diagram showing a hardware configuration example of the intermediary device 10 according to the first embodiment. The intermediary device 10 of FIG. 2 has a drive device 100, an auxiliary storage device 102, a memory device 103, a CPU 104, an interface device 105, etc., which are connected to each other via a bus.

A program that implements processing in the intermediary device 10 is provided by the recording medium 101 . When the recording medium 101 recording the program is set in the drive device 100 , the program is installed from the recording medium 101 to the auxiliary storage device 102 via the drive device 100 . However, the program does not necessarily need to be installed from the recording medium 101, and may be downloaded from another computer via the network. The auxiliary storage device 102 stores installed programs, as well as necessary files and data.

The memory device 103 reads out and stores the program from the auxiliary storage device 102 when a program activation instruction is received. The CPU 104 executes functions related to the intermediary device 10 according to programs stored in the memory device 103 . The interface device 105 is used as an interface for connecting to a network.

An example of the recording medium 101 is a portable recording medium such as a CD-ROM, a DVD disk, or a USB memory. An example of the auxiliary storage device 102 is an HDD (Hard Disk Drive) or a flash memory. Both the recording medium 101 and the auxiliary storage device 102 correspond to computer-readable recording media.

FIG. 3 is a diagram showing a functional configuration example of the intermediary device 10 according to the first embodiment. 3, intermediary device 10 includes authentication unit 11, transaction information reception unit 12, withdrawal control unit 13, reservation unit 14, one-time password generation unit 15, payment information reception unit 16, verification unit 17, transfer control unit 18, and It has a payment cancellation unit 19 and the like. Each of these units is implemented by processing that one or more programs installed in the intermediary device 10 cause the CPU 104 to execute. The intermediary device 10 also uses a user information storage unit 121, a transaction information storage unit 122, a one-time password storage unit 123, and the like. Each of these storage units can be implemented using, for example, the auxiliary storage device 102 or a storage device or the like connectable to the intermediary device 10 via a network.

The authentication unit 11 authenticates the user of the purchaser terminal 20 (that is, purchaser X) based on information stored in the user information storage unit 121 . The user information storage unit 121 stores user IDs, passwords, and the like for each user registered in advance as a user of the payment system 1 .

The transaction information receiving unit 12 receives transaction information transmitted from the purchaser terminal 20 that has read the two-dimensional code at the store Y. FIG. The transaction information includes a transaction ID, which is information for identifying a transaction related to each payment, the amount of the purchased product (purchase amount), store account information, and the like.

The withdrawal control unit 13 controls the withdrawal of the purchase amount from the bank account of the purchaser X (hereinafter referred to as “purchaser account”) based on the transaction information received by the transaction information reception unit 12 .

The suspending unit 14 stores the transaction information received by the transaction information receiving unit 12 in the transaction information storage unit 122, thereby suspending the payment transaction related to the transaction information.

The one-time password generator 15 generates a one-time password based on the transaction ID and the like included in the transaction information received by the transaction information receiver 12 and transmits the one-time password to the purchaser terminal 20 . The purchaser terminal 20 outputs (for example, displays) the received one-time password. The one-time password generated by the one-time password generation unit 15 is stored in the one-time password storage unit 123 in association with the transaction ID.

The payment information receiving unit 16 receives the one-time password input to the store terminal 30 and the information indicating the payment input to the store terminal 30 (information including the purchase price and store account information; hereinafter referred to as "payment information"). Received from store terminal 30 . That is, when the one-time password output from the purchaser terminal 20 is input to the shop terminal 30 , the shop terminal 30 transmits the one-time password and payment information to the brokerage device 10 . A signature using the private key of the store terminal 30 is added to the payment information.

The verification unit 17 verifies (determines) the legitimacy of the payment information received together with the one-time password based on the signature or the like added to the one-time password and the payment information.

The transfer control unit 18 controls the transfer of the purchase amount to the store account based on the transaction information stored in the transaction information storage unit 122 when the determination result of the validity of the payment information is affirmative. .

The payment cancellation unit 19 controls processing for canceling payment related to the transaction information stored in the transaction information storage unit 122 when the determination result of the validity of the payment information is negative. Specifically, the payment cancellation unit 19 controls transfer of the purchase amount to the purchaser's account based on the transaction information. As a result, the withdrawal of the purchase amount from the purchaser's account was substantially not performed.

Processing procedures executed in the settlement system 1 will be described below. FIG. 4 is a sequence diagram for explaining an example of processing procedures executed in the settlement system 1 of the first embodiment.

For example, when the purchase amount is input to the store terminal 30 by a store clerk at the register of the store Y (S110), the store terminal 30 receives information (hereinafter referred to as "payment information") consisting of the purchase amount and the store account information. ) is displayed on a liquid crystal display or the like (S120).

Subsequently, in response to the operation of the purchaser terminal 20 by the purchaser X, the purchaser terminal 20 reads the two-dimensional code using a digital camera or the like provided in the purchaser terminal 20 (S130). Subsequently, the purchaser terminal 20 receives the transaction information including the payment information included in the two-dimensional code and the transaction ID of the transaction related to the payment related to the payment information (hereinafter referred to as "transaction α"). It is transmitted to the intermediary device 10 (S140).

For example, before or after reading the two-dimensional code, the user ID and password of the purchaser X are input to the purchaser terminal 20, and the purchaser terminal 20 transmits the user ID and password to the brokerage device 10. do. The authentication unit 11 of the intermediary device 10 refers to the user information storage unit 121 for the user ID and password and performs authentication. That is, the user information storage unit 121 stores information indicating user IDs, passwords, and user bank accounts for each user registered in advance in the settlement system 1 . If the authentication succeeds, the authentication unit 11 stores the user ID of the purchaser X as a login user ID in the memory device 103 , generates a transaction ID, and transmits it to the purchaser terminal 20 . The transaction ID is included in the transaction information transmitted from the purchaser terminal 20 in step S140. Also, the transaction ID is associated with the login user ID and stored in the memory device 103 of the mediation device 10 .

When the transaction information receiving unit 12 of the brokerage device 10 receives the transaction information, the withdrawal control unit 13 adds information indicating the purchaser account associated with the login user ID (user ID of purchaser X) to the transaction information, The transaction information is transmitted to the blockchain Ca (S150). The information indicating the purchaser account is information indicating the bank account stored in the user information storage unit 121 in association with the login user ID stored in the memory device 103 .

Upon receipt of the transaction information, the blockchain Ca records the transaction of debiting the purchase amount from the purchaser's account in the ledger (S160). That is, information indicating that the purchase amount has been withdrawn from the purchaser account of purchaser X is recorded in the ledger. After recording the transaction, the blockchain Ca transfers the transaction information to the brokerage device 10 (S170).

Subsequently, when receiving the transaction information, the holding unit 14 stores the transaction information in the transaction information storage unit 122, thereby avoiding immediate execution of the transaction α and realizing an escrow transaction (S180). ).

Subsequently, the one-time password generation unit 15 generates a one-time password based on the transaction ID (transaction ID of transaction α) of the transaction information stored in the transaction information storage unit 122 and the current date and time (S190). . The one-time password generation unit 15 associates the one-time password with the transaction ID and stores it in the one-time password storage unit 123 . For example, a character string obtained by connecting a character string indicating the transaction ID and a character string indicating the current date and time by an arbitrary method may be generated as the one-time password. Alternatively, a character string obtained by reversibly converting a character string including a character string indicating the transaction ID and a character string indicating the current date and time may be generated as the one-time password. Other methods may be used to generate the one-time password as long as the transaction ID can be recovered or extracted from the one-time password. Also, the current date and time may not be used to generate the one-time password. However, by using the current date and time, it is possible to increase the randomness of the one-time password for the same transaction ID.

Subsequently, the one-time password generator 15 transmits the one-time password to the purchaser terminal 20 (S200). Upon receiving the one-time password, the purchaser terminal 20 displays the one-time password on the liquid crystal display or the like of the purchaser terminal 20 (S210). Therefore, purchaser X enters the one-time password into store terminal 30 (S220). For example, the one-time password may be entered using the numeric keypad of the store terminal 30 .

Instead of displaying the received one-time password as it is, the purchaser terminal 20 encrypts the one-time password with the public key of the store terminal 30, for example, and generates a two-dimensional code indicating the encrypted one-time password. The two-dimensional code may be generated and displayed on a liquid crystal display or the like. In this case, the store terminal 30 reads the two-dimensional code with a two-dimensional code scanner, and decrypts the encrypted one-time password indicated by the two-dimensional code with the private key of the store terminal 30, thereby obtaining the one-time password. input may be accepted.

In response to the entry of the one-time password, the store terminal 30 transmits the one-time password and payment information signed with the private key of the store terminal 30 to the brokerage device 10 (S230).

When the payment information receiving unit 16 of the brokerage device 10 receives the one-time password (hereinafter referred to as "received one-time password") and the payment information, the verification unit 17 verifies (determines) the validity of the payment information. (S240). Specifically, the verification unit 17 first restores or extracts the transaction ID from the received one-time password. The verification unit 17 searches the one-time password storage unit 123 for a transaction ID that matches the restored or extracted transaction ID (hereinafter referred to as “received transaction ID”), and the one-time password associated with the searched transaction ID. Compare the time password with the received one-time password. If the two match and the signature attached to the payment information can be verified with the public key of the store terminal 30, the verification unit 17 determines that the payment information is valid. Determine that the information is incorrect. Here, the fact that the payment information is valid means that the payment information is the same payment information as the transaction information received in step S140.

If the payment information is determined to be valid, the transfer control unit 18 releases the suspension of the escrow transaction. Specifically, the transfer control unit 18 transfers the purchase amount to the store account (i.e., purchase payment) is sent to the blockchain Ca, and the transaction information is deleted from the transaction information storage unit 122 (S250). The blockchain Ca records a transaction indicating the transfer of the purchase amount to the store account in the ledger.

On the other hand, if the payment information is determined to be invalid, the payment cancellation unit 19 notifies the purchaser terminal 20 corresponding to the login user ID in the received transaction ID that the payment is not possible (S260). 19 transmits to the blockchain Ca an instruction to transfer the purchase amount included in the transaction information including the received transaction ID to the purchaser account associated with the login user ID, and stores the transaction information as transaction information. Delete from the section 122 (S270). The blockchain Ca records a transaction indicating the transfer of the purchase amount to the purchaser's account in the ledger. As a result, the debit recorded in step S160 is effectively canceled.

As described above, according to the first embodiment, the transaction information received from the purchaser terminal 20 and the transaction information received from the store terminal 30 are not executed without doubt, but the payment of the purchase amount is executed without any doubt. If the payment information is information related to the same payment, the payment is executed. Therefore, even if the purchaser terminal 20 is made to read a fake two-dimensional code, if the store terminal 30 is legitimate, the transaction information received from the purchaser terminal 20 will be the payment information received from the store terminal 30. It is possible to detect that the information is different from the payment information. As a result, it is possible to suppress the occurrence of fraudulent charges in code settlement.

Further, in the present embodiment, a one-time password generated from the current date and time and the transaction ID is transmitted to the purchaser terminal 20, which is the transmission source of the transaction based on the two-dimensional code, and the one-time password is transmitted to the store terminal 30. is entered in The store terminal 30 transmits the payment information to the brokerage device 10 together with the one-time password. The brokerage device 10 confirms the validity of the payment information based on the one-time password. Therefore, even if the store terminal 30 is fraudulent, it is possible to suppress the occurrence of fraudulent billing in the code settlement.

Next, a second embodiment will be described. 2nd Embodiment demonstrates a different point from 1st Embodiment. In the second embodiment, points not particularly mentioned may be the same as those in the first embodiment.

In the second embodiment, a case where the currency used by the purchaser X and the currency used by the store Y are different will be described. Specifically, purchaser X uses virtual currency A (hereinafter simply referred to as "currency A"), and store Y uses virtual currency B (hereinafter simply referred to as "currency B").

FIG. 5 is a diagram showing a configuration example of the payment system 1 according to the second embodiment. In the settlement system 1 of FIG. 5, the block chain Cb is further connected to the brokerage device 10 via a network such as the Internet. Blockchain Cb is a distributed ledger that records transactions related to transactions in currency B. On the other hand, in the second embodiment, blockchain Ca is a distributed ledger that records transactions related to currency A transactions. It should be noted that the fact that the currency used by the purchaser X is the currency A and the currency used by the store Y is the currency B is set in advance in the brokerage device 10 .

FIG. 6 is a sequence diagram for explaining an example of processing procedures executed in the settlement system 1 of the second embodiment. In FIG. 6, the same steps as in FIG. 4 are given the same step numbers, and the description thereof will be omitted.

At the register of store Y, for example, when the purchase amount in currency B is input to the store terminal 30 by a store clerk (S110a), the store terminal 30 receives payment information including the purchase amount and the store account information. The dimension code is displayed on the liquid crystal display or the like of the store terminal 30 (S120a). Therefore, in step S140a, transaction information including the purchase amount in currency B is transmitted from the purchaser terminal 20 to the brokerage device 10. FIG.

When the transaction information receiving unit 12 of the brokerage device 10 receives the transaction information, the withdrawal control unit 13 converts the purchase amount included in the transaction information from currency B to currency A (S145). That is, in the second embodiment, the intermediary device 10 has a currency conversion function. As a result, in step S150, transaction information including the purchase amount in currency A is sent to blockchain Ca.

When the transaction for debiting the purchase amount in currency A from the purchaser's account is recorded in the ledger in the blockchain Ca (S160, S170), the debit control unit 13 transfers to the brokerage device 10 prepared in advance in the blockchain Ca. , the purchase amount in currency A is transferred to the pool account of currency A in blockchain Ca (S175).

Subsequently, steps S180 to S240 are executed using currency A for the purchase amount.

In step S240, when it is determined that the payment information is valid, the transfer control unit 18 determines that the transaction information including the received transaction ID is included in the transaction information stored in the transaction information storage unit 122. The purchase amount is converted from currency A to currency B (S241).

Subsequently, the transfer control unit 18 executes withdrawal of the purchase amount in currency B from the Boolean account in currency B of the block chain Cb according to an instruction from the intermediary device 10 prepared in advance in the block chain Cb (S175 ). Subsequently, based on the transaction information, the transfer control unit 18 transmits to the blockchain Cb an execution instruction to pay the purchase amount in currency B to the store account, and deletes the transaction information from the transaction information storage unit 122. (S250a).

Note that step S270 is executed based on currency A.

The intermediary device 10 according to the second embodiment is described in, for example, "FUJITSU JOURNAL/January 24, 2018 New Blockchain Technology for Safely Supporting Transactions between Currencies" (https://blog.global.fujitsu.com /jp/2018-01-24/01/)” may be implemented using a connection chain.

As described above, according to the second embodiment, even if the currency used by the purchaser and the currency used by the store are different, the same effect as in the first embodiment can be obtained. can.

Note that, in each of the embodiments described above, the transaction information is an example of the first information. Payment information is an example of the second information. A one-time password is an example of the third information. The intermediary device 10 is an example of an information processing device. The transaction information receiver 12 is an example of a first receiver. The payment information receiver 16 is an example of a second receiver. The verification unit 17 is an example of a determination unit. The transfer control unit 18 is an example of a control unit. The one-time password generator 15 is an example of a transmitter.

Although the embodiments of the present invention have been described in detail above, the present invention is not limited to such specific embodiments, and various modifications can be made within the scope of the gist of the present invention described in the claims.・Changes are possible.

1 payment system 10 intermediary device 11 authentication unit 12 transaction information reception unit 13 withdrawal control unit 14 reservation unit 15 one-time password generation unit 16 payment information reception unit 17 verification unit 18 transfer control unit 19 payment cancellation unit 20 purchaser terminal 30 store terminal 100 drive device 101 recording medium 102 auxiliary storage device 103 memory device 104 CPU
105 interface device 121 user information storage unit 122 transaction information storage unit 123 one-time password storage unit Ca block chain Cb block chain

Claims (5)

receiving, from the purchaser terminal, first information relating to payment for the purchase of the product, which is included in code information read at the store by a purchaser terminal used by the purchaser who purchases the product at the store;
transmitting to the purchaser terminal third information based on the first information received in the process of receiving from the purchaser terminal;
Receives second information , which is information related to product purchase settlement from a store terminal used for settlement of purchase of the product at the store and to which a signature of the store terminal is added ,
In the process of receiving from the store terminal, whether or not the third information has been received from the store terminal that reads code information generated by the purchaser terminal based on the third information together with the second information. Determining whether the first information and the second information are information related to the same payment based on the verification of the signature and the verification of the signature ;
controlling recording on a blockchain of information relating to payment for the purchase from the purchaser to the store if a determination result is positive;
A control method characterized in that the processing is executed by a computer. wherein the third information includes information identifying the first information;
2. The control method according to claim 1 , wherein: A first method for receiving, from a purchaser terminal, first information relating to settlement of purchase of the product, which is included in code information read at the store by a purchaser terminal used by the purchaser who purchases the product at the store. a receiver;
a transmitting unit configured to transmit to the purchaser terminal third information based on the first information received in the process of receiving from the purchaser terminal;
a second receiving unit for receiving second information to which the signature of the store terminal is added, which is information related to payment for the purchase of the product from the store terminal used for payment for the purchase of the product at the store;
In the process of receiving from the store terminal, whether or not the third information has been received from the store terminal that reads code information generated by the purchaser terminal based on the third information together with the second information. a determination unit that determines whether the first information and the second information are information related to the same payment based on the verification of the signature and the verification of the signature ;
a control unit that controls recording in a blockchain of information regarding payment for the purchase from the purchaser to the store when the determination result is affirmative;
An information processing device comprising: An information processing system including a purchaser terminal used by a purchaser who purchases a product at a store, a store terminal used for settlement of purchase of the product at the store, and an information processing device,
The information processing device is
a first receiving unit for receiving, from the purchaser terminal, first information relating to payment for purchase of the product, which is included in code information read by the purchaser terminal at the store;
a transmitting unit configured to transmit to the purchaser terminal third information based on the first information received in the process of receiving from the purchaser terminal;
a second receiving unit for receiving second information to which the signature of the store terminal is added, which is information related to payment for the purchase of the product from the store terminal used for payment for the purchase of the product at the store;
In the process of receiving from the store terminal, whether or not the third information has been received from the store terminal that reads code information generated by the purchaser terminal based on the third information together with the second information. a determination unit that determines whether the first information and the second information are information related to the same payment based on the verification of the signature and the verification of the signature ;
a control unit that controls recording in a blockchain of information regarding payment for the purchase from the purchaser to the store when the determination result is affirmative;
An information processing system characterized by having: receiving, from the purchaser terminal, first information relating to payment for the purchase of the product, which is included in code information read at the store by a purchaser terminal used by the purchaser who purchases the product at the store;
transmitting to the purchaser terminal third information based on the first information received in the process of receiving from the purchaser terminal;
Receives second information , which is information related to product purchase settlement from a store terminal used for settlement of purchase of the product at the store and to which a signature of the store terminal is added ,
In the process of receiving from the store terminal, whether or not the third information has been received from the store terminal that reads code information generated by the purchaser terminal based on the third information together with the second information. Determining whether the first information and the second information are information related to the same payment based on the verification of the signature and the verification of the signature ;
controlling recording on a blockchain of information relating to payment for the purchase from the purchaser to the store if a determination result is positive;
A control program that causes a computer to execute processing.

Images