JP7301020B2 - Payment processing system, payment processing method, and payment processing device - Google Patents

Description

The present invention relates to a payment processing system, a payment processing method, and a payment processing device.

The trend toward cashless payments is gaining strength around the world, and in addition to existing credit cards, new payment methods such as electronic money and various code payments have emerged.
These payment methods eliminate the need for cash management such as carrying and storing, bringing convenience to users. On the other hand, management of the payment method itself and data theft have started to become separate problems, and new issues have arisen.

Therefore, as a conventional technology involving biometric authentication that is difficult to steal, for example, it is possible to reduce costs, reduce the burden on staff, and improve service to users. A system (see Patent Document 1) and the like have been proposed.

This technology acquires the data required for user biometric authentication, generates user authentication data based on the acquired data, delivers the generated authentication data to the station service equipment, and Based on the authentication data, the biometric authentication of the user is performed, and based on the result of the biometric authentication, the process necessary for the ticket examination process of the user is performed.

JP 2007-241853 A

When linking biometric authentication with a payment method such as a credit card, the security standards of the payment method can be one of the hurdles. For example, if a business operator with a biometric authentication platform provides appropriate services by linking existing payment methods with biometric authentication, it will be necessary to change to a specific business type or establish a new organization as stipulated in the above security standards. There are cases where
Therefore, various costs associated with service provision tend to be excessive, and in some cases flexible service design is difficult.

SUMMARY OF THE INVENTION Accordingly, an object of the present invention is to provide a technique for efficiently and flexibly establishing linkage between biometric authentication and payment means.

A payment processing system according to the present invention for solving the above problems includes a storage device for storing user identification information and biometric authentication information, and a token issued by a payment agency system relating to the user's payment medium, from the user's user terminal. A process of receiving, a process of storing the token in the storage device in association with the identification information and the biometric authentication information related to the user, and receiving the biometric information of the user from a predetermined shop terminal when the user makes a payment. and performing biometric authentication based on the biometric information and the biometric authentication information, and if the biometric authentication is successful, extracting the token held for the user from the storage device, and extracting the token and the payment and an arithmetic device that executes processing for transmitting a payment request including a payment amount at the opportunity to the payment agency system.
Further, in the payment processing method of the present invention, the information processing device includes a storage device for storing user identification information and biometric authentication information, and the token issued by the payment agency system regarding the user's payment medium is sent to the user. a process of receiving the token from the user terminal, a process of storing the token in the storage device in association with the identification information and the biometric authentication information related to the user, and a predetermined biometric information of the user when the user makes a payment A process of performing biometric authentication based on the biometric information and the biometric authentication information obtained from the store terminal, and if the biometric authentication is successful, extracting the token held for the user from the storage device, a process of transmitting a payment request containing a token and a payment amount at the payment opportunity to the payment agency system.

Further, the payment processing apparatus of the present invention includes a storage device for storing user identification information and biometric authentication information, and processing for receiving, from the user's user terminal, a token issued by the payment agency system for the user's payment medium. , a process of storing the token in the storage device in association with the identification information and the biometric authentication information related to the user, obtaining the biometric information of the user from a predetermined shop terminal at the time of payment for the user, A process of performing biometric authentication based on the biometric information and the biometric authentication information, and, if the biometric authentication is successful, extracting the token held for the user from the storage device, and making a payment at the payment opportunity with the token. and an arithmetic device that executes a process of transmitting a payment request including an amount to the payment agency system.

According to the present invention, it is possible to efficiently and flexibly establish cooperation between biometric authentication and payment means.

It is a network block diagram containing the payment processing system of this embodiment. It is a figure which shows the hardware structural example of the payment processing apparatus of this embodiment. It is a figure which shows the hardware structural example of the store terminal of this embodiment. It is a figure which shows the hardware structural example of the user terminal of this embodiment. It is a figure which shows the hardware configuration example of the payment agency system of this embodiment. It is a figure which shows the data structural example of the authentication table of this embodiment. It is a figure which shows the data structural example of the user information table of this embodiment. It is a figure which shows the data structural example of the payment history table of this embodiment. It is a figure which shows the data structural example of the card|curd management table of this embodiment. It is a figure which shows the flow example of the payment processing method in this embodiment. It is a figure which shows the example of a screen in this embodiment. It is a figure which shows the example of a screen in this embodiment. It is a figure which shows the example of a screen in this embodiment. It is a figure which shows the flow example of the payment processing method in this embodiment. It is a figure which shows the example of a screen in this embodiment. It is a figure which shows the example of a screen in this embodiment. It is a figure which shows the flow example of the payment processing method in this embodiment. It is a figure which shows the example of a screen in this embodiment. It is a figure which shows the example of a screen in this embodiment.

<<Network Configuration>>
Embodiments of the present invention will be described in detail below with reference to the drawings. FIG. 1 is a network configuration diagram including a payment processing system 10 of this embodiment. The payment processing system 10 shown in FIG. 1 is a computer system that efficiently and flexibly establishes linkage between biometric authentication and payment means.

The payment processing system 10 includes at least the payment processing device 100 among the payment processing device 100 , the shop terminal 200 , the user terminal 300 and the payment agency system 400 .

It is assumed that the payment processing apparatus 100, the shop terminal 200, the user terminal 300, and the payment agency system 400 illustrated in FIG.

Of the above, the payment processing apparatus 100 can be assumed to be, for example, a server apparatus operated by a biometrics-based operator to provide services. This operating company is a company that expects to provide services that link biometric authentication with existing payment methods.

An example of such a service is a service that enables so-called empty-handed payment. A user of the service does not need to carry cash, a credit card, etc., which are conventional means of payment, when purchasing products or using services. Payment is completed only by presenting a part of the user's own body on the store terminal 200 provided in the store or the like.

Also, the store terminal 200 is a terminal of a store that provides products and services to the users described above. The store terminal 200 has a general payment processing function such as a POS reader, as well as a sensor that observes the biometric information of the user. Provides UI (User Interface) for processing.

Also, the user terminal 300 is a terminal used by a user who uses the store described above. This user terminal 300 is operated by the user in response to a notification sent from the payment processing apparatus 100, and transmits information on the user's payment medium (eg, credit card) to the payment agency system 400 to acquire a token. will be.

Specific examples of such a user terminal 300 can be assumed to be a smart phone, a tablet terminal, and a PC (Personal Computer).

The payment agency system 400 is a system operated by a payment agency company. A settlement agent company is a business operator that exists between a store and a settlement agency and provides various settlement means. As a settlement method provided by this settlement agent company, credit card settlement is assumed as an example, and the following description will be given. However, the payment method is not limited to this, and other payment methods may be employed as appropriate.

Such a payment agency system 400 issues a token by applying a predetermined conversion algorithm to information on a payment medium, that is, a credit card sent from the user terminal 300 by the user. It has a function to return to

Also, the payment agency system 400 associates the above credit card information with the token and manages them in a card management table 425 (described later).
<<Hardware configuration>>
Also, the hardware configuration of the payment processing apparatus 100 in this embodiment is as shown in FIG. The payment processing device 100 includes a storage device 101 , a memory 103 , an arithmetic device 104 and a communication device 105 .

Among them, the storage device 101 is composed of an appropriate non-volatile storage element such as an SSD (Solid State Drive) or a hard disk drive.

Also, the memory 103 is composed of a volatile memory element such as a RAM.

Arithmetic device 104 is a CPU that reads program 102 stored in storage device 101 into memory 103 and executes it, performs overall control of the device itself, and performs various determinations, calculations, and control processes.

It should be noted that the program 102 described above includes an authentication program 1021 . This authentication program 1021 executes biometric authentication processing based on the biometric authentication information held for the user in the authentication table 125 regarding the biometric information included in the authentication request transmitted from the shop terminal 200 .

Also, the communication device 105 is a network interface card that connects to the network 1 and handles communication processing with other devices.

The storage device 101 stores at least an authentication table 125, a user information table 126, and a payment history table 127 in addition to the program 102 for implementing the functions necessary for the payment processing apparatus 100 of this embodiment. ing. Details of each of these tables will be described later.

In addition to the configuration described above, the payment processing apparatus 100 may also include input devices such as a keyboard, mouse, and microphone for receiving key input and voice input from the user. Similarly, the payment processing device 100 may include output devices such as a display and speakers for displaying data processed by the computing device 104 .

Further, FIG. 3 shows a hardware configuration example of the store terminal 200 of this embodiment. The store terminal 200 in this embodiment includes a storage device 201 , a memory 203 , an arithmetic device 204 , an input device 205 , an output device 206 , a communication device 207 and a sensor 208 .

Among these, the storage device 201 is composed of an appropriate non-volatile storage element such as an SSD (Solid State Drive) or a hard disk drive.

Also, the memory 203 is composed of a volatile memory element such as a RAM.

Arithmetic device 204 is a CPU that reads program 202 stored in storage device 201 into memory 203 and executes it, performs overall control of the device itself, and performs various determinations, calculations, and control processes.

Note that the program 202 described above includes a one-way function 2021 . This one-way function 2021 is a function such as a hash function that converts the user's biological information observed by the sensor 208 into an irreversible value. In any case, this one-way function 2021 converts the raw biometric information into a value in the form specified by the authentication program 1021 in the payment processing apparatus 100 .

The input device 205 is a device such as a keyboard, mouse, and microphone that receives key input and voice input from users and store staff.

Also, the output device 206 is a device such as a display and a speaker for displaying data processed by the arithmetic device 204 .

The communication device 207 is a network interface card that connects to the network 1 and handles communication processing with other devices.

Also, the sensor 208 is a sensor that observes the biometric information of the user who has visited the store. Specifically, it becomes a sensor that observes biometric information such as finger veins, palm veins, facial images, irises, and fingerprints.

Store identification information 225 is stored in the storage device 201 in addition to the program 202 for implementing the necessary functions of the store terminal 200 of this embodiment. The store identification information 225 is, for example, identification information for uniquely identifying the store, given by the payment agency system 400 .

Further, FIG. 4 shows a hardware configuration example of the user terminal 300 of this embodiment. A user terminal 300 in this embodiment comprises a storage device 301 , a memory 303 , an arithmetic device 304 , an input device 305 , an output device 306 and a communication device 307 .

Among them, the storage device 301 is composed of an appropriate non-volatile storage element such as an SSD (Solid State Drive) or a hard disk drive.

Also, the memory 303 is composed of a volatile memory element such as a RAM.

Arithmetic device 304 is a CPU that reads program 302 stored in storage device 301 into memory 303 and executes it, performs overall control of the device itself, and performs various determinations, calculations, and control processing.

Also, the input device 305 is a device such as a keyboard, mouse, or microphone that receives key input or voice input from the user or store staff.

Also, the output device 306 is a device such as a display or a speaker for displaying data processed by the arithmetic device 304 .

A communication device 307 is a network interface card that connects to the network 1 and handles communication processing with other devices.

Note that the memory 303 holds the token 325 (temporarily until it is transmitted to the payment processing apparatus 100). This token 325 is provided by the payment agency system 400 .

The token 325 is a value generated and issued by the payment agency system 400 based on the credit card information sent by the user terminal 300 . However, the credit card information cannot be restored from this token 325 .

Further, FIG. 5 shows an example of the hardware configuration of the settlement agent system 400 of this embodiment. The payment agency system 400 in this embodiment comprises a storage device 401 , a memory 403 , an arithmetic device 404 and a communication device 405 .

Among them, the storage device 401 is composed of an appropriate non-volatile storage element such as an SSD (Solid State Drive) or a hard disk drive.

Also, the memory 403 is composed of a volatile memory element such as a RAM.

Arithmetic device 404 is a CPU that reads program 402 stored in storage device 401 into memory 403 and executes it, performs overall control of the device itself, and performs various determinations, calculations, and control processes.

The program 402 described above has at least a function of generating and issuing a token based on credit card information obtained from the user terminal 300 and returning it to the user terminal 300 .

Also, the communication device 405 is a network interface card that connects to the network 1 and handles communication processing with other devices.

The storage device 401 holds a card management table 425 in addition to the program 402 for implementing the functions necessary for the settlement agency system 400 of this embodiment. Details of the card management table 425 will be described later.
<<Data structure example>>
Next, tables used by devices constituting the payment processing system 10 of the present embodiment will be described. FIG. 6 shows an example of the authentication table 125 in this embodiment.

This authentication table 125 is a table in which biometric authentication information of each user is stored.

The data structure is a set of records consisting of values such as biometric authentication information obtained for the user and the name of the user, with a user ID that uniquely identifies the user as a key.

Note that the biometric authentication information described above can be assumed to be feature amount information or the like extracted by applying a predetermined function to raw biometric information observed by the sensor 208 of the store terminal 200 regarding the user.

Also, FIG. 7 shows an example of the user information table 126 in this embodiment. This user information table 126 is a table in which various information relating to each user who is a customer of the store is accumulated.

The data structure is a set of records consisting of data such as the user's name and token, with a user ID that uniquely identifies the user as a key. Among these tokens, the token is issued to the user terminal 300 by the payment agency system 400 and provided to the payment processing apparatus 100 from the user terminal 300 .

Also, FIG. 8 shows an example of the payment history table 127 in this embodiment. This payment history table 127 is a table for managing payment requests received from the shop terminal 200 and their processing statuses regarding the above-mentioned shop payment opportunities.

The data structure includes data such as the user ID of the user who made the payment request, the shop ID of the shop where the payment opportunity occurred, the target product, the payment amount, and the processing status, using the date and time when the payment request was received as a key. is a set of records consisting of

Among these, the value of the processing status is set to the value of the payment status notified from the payment agency system 400 .

Also, FIG. 9 shows an example of the card management table 425 in this embodiment. This card management table 425 is a table held by the payment agency system 400, and is a table in which information of each credit card is accumulated.

The data structure uses the card number that uniquely identifies the credit card as a key, the user ID of the user of the credit card, a token generated from appropriate information such as the card number of the credit card, and the validity of the credit card. It is a collection of records consisting of data such as deadlines.
<<Example Flow: Registration 1>>
The actual procedure of the payment processing method according to this embodiment will be described below with reference to the drawings. Various operations corresponding to the payment processing method described below are realized by a program read out to a memory or the like and executed by the devices constituting the payment processing system 10 . This program is composed of codes for performing various operations described below.

FIG. 10 is a diagram showing a flow example of a payment processing method according to this embodiment. First, an operation example of the payment processing apparatus 100 and the store terminal 200 will be described in a situation where a user visiting a store registers personal information and the like.

In this case, the store terminal 200, for example, receives an operation from the store staff or the user, requests the payment processing apparatus 100 to display the personal information registration screen (screen 1000 in FIG. 11), and causes the output device 206 to display it ( s1).

The store terminal 200 acquires information such as the user's name, email address, and personal identification number via the personal information registration screen 1000 described above, and transmits a registration request including these information to the payment processing apparatus 100 (s2).

On the other hand, the payment processing apparatus 100 generates the information included in the registration request as a record, and stores the record in the user information table 126 of the storage device 101 (s3). At this time, the payment processing apparatus 100 generates a user ID that uniquely identifies the user and assigns it to the record.

In addition, the payment processing apparatus 100 distributes a biometric information registration screen 1010 (screen 1010 in FIG. 12) to the store terminal 200 described above, and requests acquisition of biometric information by the sensor 208 of the store terminal 200 (s4).

In the shop terminal 200, the body part set by the user is observed by the sensor 208, the observed value is obtained, and the one-way function 2021 is applied to the observed value to generate biometric information (s5).

The store terminal 200 transmits the biometric information obtained in s5 to the payment processing apparatus 100 (s6).

The payment processing apparatus 100 that receives this stores the biometric information in the record stored in the user information table 126 in s3 (s7), and notifies the user terminal 300 of the user of completion of registration of the personal information ( screen 1020 in FIG. 13), the process ends.

It is assumed that the payment processing apparatus 100 transmits the above notification to the user's e-mail address (obtained from the shop terminal 200 in s3).

In addition, on this notification screen 1020, a link 1021 is set to guide the user to a site so that the user is issued a token by (the settlement agency system 400 of) the settlement agency company.

The user operates the user terminal 300 and clicks the link 1021 to access the site for registering the credit card in the payment agency system 400 . Subsequent processing is described below.

In addition to using the link 1021 for guiding to the payment agency system 400 as described above, if the payment agency system 400 publishes an API, the user terminal 300 can use the function via the API (credit card registration function). ) may be assumed.

In any case, as long as the user terminal 300 directly accesses the settlement agent system 400 (that is, without the involvement of the settlement processing apparatus 100) and is issued a token, any form can be adopted.
<<Example Flow: Registration 2>>
Next, the processing of credit card registration and token cooperation will be described. FIG. 14 is a diagram showing a flow example of a payment processing method according to this embodiment.

In this case, the user terminal 300 accesses the card registration page (screen 1030 in FIG. 15) in the payment agency system 400 indicated by the link 1021, and displays the page on the output device 306 (s10).

The user displays the screen 1030 of the above-mentioned card registration page, and inputs his/her own credit card information on this screen.

Also, the user terminal 300 acquires the credit card information entered by the user and transmits it to the settlement agency system 400 (s11).

On the other hand, the payment agency system 400 receives the above-described credit card information from the user terminal 300, and applies an appropriate algorithm to this to generate and issue a token, which is an irreversible value (s12).

At this time, the payment agency system 400 notifies completion of registration of the above credit card information (screen 1040 in FIG. 16), and delivers the above token to the user terminal 300 (s13).

On the other hand, the user terminal 300 receives the above token from the payment agency system 400 (s14), associates the token with the user ID of the user, and transmits the token to the payment processing apparatus 100 (s15).

On the other hand, the payment processing apparatus 100 receives the token and the user ID from the user terminal 300, identifies the record containing the user ID in the user information table 126, stores the above token in this record (s16), and processes exit.
<<Example Flow: Payment>>
Next, payment processing in which biometric authentication and credit card payment are linked will be described. FIG. 17 is a diagram showing a flow example of a payment processing method according to this embodiment. Here, it is assumed that a user visits a certain store and is about to purchase a desired product. In addition, it is assumed that the staff of this store has completed the registration of the target product at the store terminal 200 (for example, using a POS reader or the like) in order to carry out the settlement procedure for the product.

In this case, the store terminal 200 causes the output device 206 to display a payment screen (screen 1050 in FIG. 18) including payment details 1051 such as the registered product and the payment amount (s20).

At this time, the store terminal 200 also displays a message 1052 on the payment screen 1050 prompting the user to set the part on the sensor 208 in order to observe the part of the user's body.

A user who agrees with the payment details 1051 indicated by the above-described payment screen 1050 sets his/her body part on the sensor 208 of the store terminal 200 and proceeds with the payment procedure linked with biometric authentication.

On the other hand, the shop terminal 200 obtains the above-described observed value of the user's body part with the sensor 208, applies it to the one-way function 2021, and acquires biometric information (s21).

Also, the store terminal 200 transmits the above-described payment details 1051 and biometric information to the payment processing apparatus 100 (s22).

On the other hand, the payment processing apparatus 100 receives the above-described payment details 1051 and biometric information from the store terminal 200, compares the biometric information with each piece of biometric authentication information in the authentication table 125, and executes biometric authentication processing (s23). ).

If the biometric authentication process described above fails (s24: NG), the payment processing apparatus 100 ends the process.

On the other hand, when the biometric authentication process described above is successful (s24: OK), the payment processing apparatus 100 acquires a token from the user information table 126 using the user ID associated with the biometric authentication information as a key, and acquires the token and A payment request including the above payment details 1051 is transmitted to the payment agency system 400 (s25).

The settlement agent system 400 receives the above-described settlement request, extracts the corresponding credit card information from the card management table 425 using the token included in the settlement request as a key, and executes card settlement processing according to this ( s26), the process is terminated.

The result of this card payment processing (screen 1060 in FIG. 19) is notified from the payment agency system 400 to the shop terminal 200 through the payment processing apparatus 100. FIG. Also, the payment processing apparatus 100 stores this result in the payment history table 127 .

Although the best mode for carrying out the present invention has been specifically described above, the present invention is not limited to this, and can be variously modified without departing from the scope of the invention.

According to this embodiment, it is possible to efficiently and flexibly establish cooperation between biometric authentication and payment means.

At least the following will be clarified by the description of this specification. That is, in the payment processing system of the present embodiment, the computing device includes the biometric authentication information generated by the store terminal applying the biometric information of the user to a predetermined one-way function, and The identification information of the user obtained by receiving input from the user is received as a registration request of the user from the store terminal, and the biometric authentication information and identification information of the user included in the registration request are linked and stored. It may be assumed that the process of storing in the device is further executed.

According to this, user registration to the biometric authentication infrastructure can be performed according to the registration of the token based on the user's payment medium. As a result, it becomes possible to establish cooperation between biometric authentication and payment means more efficiently and flexibly.

The computing device further instructs the user who received the registration request to register the payment medium in the payment agency system, addressed to the address of the user terminal included in the registration request. may be

According to this, the registration of the payment medium and the token issuance in the payment agency system can be smoothly executed, and the token obtained by the user can be efficiently obtained on the payment processing system side. As a result, it becomes possible to establish cooperation between biometric authentication and payment means more efficiently and flexibly.

1 network 10 payment processing system 100 payment processing device 101 storage device 102 program 1021 authentication program 103 memory 104 arithmetic device 105 communication device 125 authentication table 126 user information table 127 payment history table 200 store terminal 201 storage device 202 program 2021 one-way function 203 Memory 204 Arithmetic device 205 Input device 206 Output device 207 Communication device 208 Sensor 225 Store identification information 300 User terminal 301 Storage device 302 Program 303 Memory 304 Arithmetic device 305 Input device 306 Output device 307 Communication device 325 Token 400 Settlement agency system 401 Storage Device 402 Program 403 Memory 404 Arithmetic device 405 Communication device 425 Card management table

Claims (5)

a storage device for storing user identification information and biometric authentication information;
A process of receiving, from a user terminal of the user, a token issued by the payment agency system for the payment medium of the user, and storing the token in the storage device in association with the identification information and the biometric authentication information relating to the user. a process of obtaining the user's biometric information from a predetermined shop terminal when the user makes a payment, and performing biometric authentication based on the biometric information and the biometric authentication information; and when the biometric authentication is successful. a computing device for extracting the token held for the user from the storage device and transmitting a payment request including the token and the payment amount at the payment opportunity to the payment agency system;
A payment processing system comprising a payment processing device comprising: The computing device is
The biometric authentication information generated by the store terminal by applying the biometric information of the user to a predetermined one-way function, and the identification information of the user obtained by the store terminal receiving input from the user, A process of receiving a registration request of the user from the store terminal, linking the biometric authentication information and identification information of the user included in the registration request, and storing it in the storage device is further executed.
The settlement processing system according to claim 1, characterized by: The computing device is
For the user who received the registration request, an instruction to register the payment medium in the payment agency system is further executed, addressed to the address of the user terminal included in the registration request.
3. The payment processing system according to claim 2, characterized by: The information processing device
A storage device for storing user identification information and biometric information,
A process of receiving, from a user terminal of the user, a token issued by the payment agency system for the payment medium of the user, and storing the token in the storage device in association with the identification information and the biometric authentication information relating to the user. a process of obtaining the user's biometric information from a predetermined shop terminal when the user makes a payment, and performing biometric authentication based on the biometric information and the biometric authentication information; and when the biometric authentication is successful. , a process of extracting the token held for the user from the storage device and transmitting a payment request including the token and the payment amount at the payment opportunity to the payment agency system;
A settlement processing method characterized by executing a storage device for storing user identification information and biometric authentication information;
A process of receiving, from a user terminal of the user, a token issued by the payment agency system for the payment medium of the user, and storing the token in the storage device in association with the identification information and the biometric authentication information relating to the user. a process of obtaining the user's biometric information from a predetermined shop terminal when the user makes a payment, and performing biometric authentication based on the biometric information and the biometric authentication information; and when the biometric authentication is successful. a computing device for extracting the token held for the user from the storage device and transmitting a payment request including the token and the payment amount at the payment opportunity to the payment agency system;
A payment processing device comprising:

Images