JP7655842B2 - Information processing system, privilege management device, and conversion device - Google Patents

Description

The present invention relates to a technology for managing benefits granted to users.

As user terminals such as smartphones become more widespread, reward management services that provide rewards to users who conduct commercial transactions using those terminals are becoming more widely used. For example, Patent Literature 1 discloses a mechanism for linking such reward management services with electronic payment services.

JP 2009-134521 A

When performing processes such as granting benefits to users, it is important to keep information about those users confidential.

The present invention aims to conceal information about users when managing the benefits granted to users.

In order to solve the above problem, the present invention provides a method and apparatus for providing a reward to a reward recipient identified by a reward recipient identification information, the method comprising: providing a reward to a reward recipient identified by the reward recipient identification information; and performing a process for converting the reward recipient identification information. The reward recipient identification information includes a first transmission unit that transmits a request to the reward management device, the request including a first reward recipient identification information obtained from a user and a store identification information assigned to the reward terminal; an acquisition unit that acquires, in response to the request, from the reward management device a second reward recipient identification information obtained by converting the first reward recipient identification information; a storage unit that stores the acquired second reward recipient identification information; and a second transmission unit that transmits a reward processing request to the reward management device, the second reward recipient identification information including the second reward recipient identification information. The information processing system is characterized in that the reward management device includes a third transmission unit that transmits the first reward recipient identification information included in the inquiry request acquired from the store terminal to the conversion device, a fourth transmission unit that transmits the second reward recipient identification information into which the first reward recipient identification information is converted by the conversion device to the store terminal, and a processing unit that performs processing related to the granting or use of a reward to a reward recipient identified by the first reward recipient identification information corresponding to the second reward recipient identification information included in the reward processing request acquired from the store terminal, and the conversion device includes a conversion unit that converts the first reward recipient identification information into the second reward recipient identification information for each store identification information.

According to the present invention, information about a user can be kept confidential when managing the benefits granted to the user.

1 is a diagram illustrating an example of a configuration of an information processing system 1 according to an embodiment of the present invention. 2 is a diagram showing a hardware configuration of a privilege management device 30 according to the embodiment. FIG. FIG. 2 is a diagram illustrating an example of a functional configuration of the information processing system 1 according to the embodiment. 11 is a diagram showing an example of data stored in the benefit management device 30 according to the embodiment. FIG. 4 is a diagram showing an example of data stored in a conversion device 40 according to the embodiment. FIG. 10 is a sequence diagram showing an example of an operation of the information processing system 1 according to the embodiment. FIG. FIG. 11 is a diagram illustrating an example of a functional configuration of an information processing system 1 according to a first modified example of the present invention. FIG. 11 is a sequence diagram showing an example of an operation of the information processing system 1 according to the first modification. FIG. 11 is a diagram showing an example of data stored in a conversion device 40 according to a second modified example of the present invention. FIG. 11 is a sequence diagram showing an example of an operation of the information processing system 1 according to the second modification. FIG. 11 is a diagram illustrating an example of a functional configuration of an information processing system 1 according to a third modified example of the present invention. FIG. 13 is a diagram showing an example of data stored in a benefit management device 30 according to a third modified example. FIG. 13 is a sequence diagram showing an example of an operation of the information processing system 1 according to the third modification. FIG. 13 is a sequence diagram showing an example of an operation of the information processing system 1 according to the fourth modified example.

[composition]
FIG. 1 is a diagram showing an example of an information processing system 1 according to an embodiment of the present invention. The information processing system 1 is a system for managing some kind of benefit for a benefit recipient identified by benefit recipient identification information in response to a commercial transaction in which a user purchases a product or service at a store. The benefit referred to here may be anything that is valuable to the user, and in this embodiment, it is, for example, points that the user can use instead of money at a store or the like. In this embodiment, the points are given in units of benefit recipient identification information called point card numbers, and the benefit recipients are classified in units of point cards. However, in the present invention, the benefit recipient identification information may be any information that can identify the benefit recipient. The management of the benefit for the benefit recipient includes the giving of the benefit to the benefit recipient and the use of the benefit by the benefit recipient. In the following description, an example of a process for giving a benefit to a benefit recipient will be described.

As shown in FIG. 1, the information processing system 1 includes a user terminal 10 carried by a user, a store terminal 20 installed in a store, a reward management device 30 that performs processing related to the granting of rewards to a reward recipient identified by the reward recipient identification information, a conversion device 40 that performs processing related to the conversion of the reward recipient identification information, and a communication network 2 including a wireless communication network or a wired communication network. The communication network 2 connects the store terminal 20 and the reward management device 30, as well as the reward management device 30 and the conversion device 40 so that they can communicate with each other. The communication network 2 may also connect the user terminal 10 and the reward management device 30 so that they can communicate with each other. The user terminal 10, the store terminal 20, the reward management device 30, and the conversion device 40 are all computers that can communicate with each other. More specifically, the user terminal 10 is a computer that can be carried by a user, such as a smartphone, a wearable terminal, or a tablet. The store terminal 20 is a terminal operated in a store, and may be, for example, a computer integrated with a POS (Point of Sales) register or a computer connected to a POS register, or may be a computer called a payment terminal. The reward management device 30 and the conversion device 40 are computers configured as servers. Note that, although FIG. 1 shows one user terminal, one store terminal, one reward management device, and one conversion device, there may be multiple of each of these.

Figure 2 is a diagram showing the hardware configuration of the privilege management device 30. Physically, the privilege management device 30 is configured as a computer including a processor 3001, memory 3002, storage 3003, communication device 3004, input device 3005, output device 3006, and a bus connecting these. Each of these devices operates with power supplied from a battery (not shown). In the following description, the word "device" can be interpreted as a circuit, device, unit, etc. The hardware configuration of the privilege management device 30 may be configured to include one or more of the devices shown in Figure 2, or may be configured without including some of the devices. In addition, the privilege management device 30 may be configured by communicating and connecting multiple devices each having a different housing.

The functions of the privilege management device 30 are realized by loading specific software (programs) onto hardware such as the processor 3001 and memory 3002, causing the processor 3001 to perform calculations, control communications via the communications device 3004, and control at least one of the reading and writing of data in the memory 3002 and storage 3003.

The processor 3001, for example, operates an operating system to control the entire computer. The processor 3001 may be configured with a central processing unit (CPU) including an interface with peripheral devices, a control device, an arithmetic unit, registers, etc. Also, for example, a baseband signal processing unit, a call processing unit, etc. may be realized by the processor 3001.

The processor 3001 reads out programs (program codes), software modules, data, etc. from at least one of the storage 3003 and the communication device 3004 into the memory 3002, and executes various processes according to these. The programs used are those that cause a computer to execute at least some of the operations described below. The functional blocks of the privilege management device 30 may be realized by a control program stored in the memory 3002 and running on the processor 3001. The various processes may be executed by one processor 3001, or may be executed simultaneously or sequentially by two or more processors 3001. The processor 3001 may be implemented by one or more chips. The programs may be transmitted to the privilege management device 30 via a telecommunications line.

The memory 3002 is a computer-readable recording medium, and may be composed of at least one of, for example, a ROM (Read Only Memory), an EPROM (Erasable Programmable ROM), an EEPROM (Electrically Erasable Programmable ROM), a RAM (Random Access Memory), etc. The memory 3002 may also be called a register, a cache, a main memory (primary storage device), etc. The memory 3002 can store executable programs (program codes), software modules, etc. for implementing the method according to this embodiment.

Storage 3003 is a computer-readable recording medium, and may be composed of at least one of, for example, an optical disk such as a CD-ROM (Compact Disc ROM), a hard disk drive, a flexible disk, a magneto-optical disk (e.g., a compact disk, a digital versatile disk, a Blu-ray (registered trademark) disk), a smart card, a flash memory (e.g., a card, a stick, a key drive), a floppy (registered trademark) disk, a magnetic strip, etc. Storage 3003 may also be called an auxiliary storage device.

The communication device 3004 is hardware (transmission/reception device) for communicating between computers via the communication network 2, and is also referred to as, for example, a network device, a network controller, a network card, a communication module, etc.

The input device 3005 is an input device (e.g., a key, a microphone, a switch, a button, a camera, a sensor, a two-dimensional code reader, etc.) that accepts input from the outside. The output device 3006 is an output device (e.g., a display, a speaker, an LED lamp, etc.) that performs output to the outside. Note that the input device 3005 and the output device 3006 may be integrated into one configuration (e.g., a touch panel).

Each device, such as the processor 3001 and memory 3002, is connected by a bus for communicating information. The bus may be configured using a single bus, or may be configured using different buses between each device.

The reward management device 30 may be configured to include hardware such as a microprocessor, a digital signal processor (DSP), an application specific integrated circuit (ASIC), a programmable logic device (PLD), or a field programmable gate array (FPGA), and some or all of the functional blocks may be realized by the hardware. For example, the processor 3001 may be implemented using at least one of these pieces of hardware.

The user terminal 10, the store terminal 20, and the conversion device 40 are equipped with hardware for implementing a computer, such as a processor, memory, storage, a communication device, an input device, an output device, and a bus connecting these, as in the case of the reward management device 30 shown in FIG. 2. However, the communication device equipped in the user terminal 10 is hardware (transmission and reception device) for performing communication between computers via the communication network 2 according to a communication standard such as LTE (Long Time Evolution) to realize wireless communication. This communication device may be configured to include a high-frequency switch, a duplexer, a filter, a frequency synthesizer, etc. to realize at least one of frequency division duplex (FDD: Frequency Division Duplex) and time division duplex (TDD: Time Division Duplex). In addition, a transmission and reception antenna, an amplifier unit, a transmission and reception unit, a transmission line interface, etc. may be realized by this communication device. The transmission and reception unit may be implemented as a transmission unit and a reception unit that are physically or logically separated.

Figure 3 is a block diagram showing the functional configuration of the information processing system 1. The store terminal 20 acquires a point card number from the user. As described above, the point card number is bonus recipient information that can identify the bonus recipient, and corresponds to the first bonus recipient identification information in the present invention. For example, in the user terminal 10, an image in which the point card number is encoded (e.g., a barcode or QR code (registered trademark)) can be optically read by a reader or the like provided in the store terminal 20, and the point card number can be obtained by decrypting the image. Acquisition of the point card number is not limited to such image display, and may be a method in which the store terminal 20 acquires the point card number from the user terminal 10 using contactless communication or voice, or a method in which the store terminal 20 reads and acquires the point card held by the user, and various methods may be adopted.

The first transmission unit 21 of the store terminal 20 transmits an inquiry request including the point card number acquired from the user and a store ID, which is store identification information assigned to the store terminal 20, to the benefit management device 30 via the communication network 2. The store ID may be, for example, an identifier assigned to each store, an identifier assigned to the same store group, or an identifier assigned to the same store group and an identifier assigned to each store to identify each store within the store group. In the following description, when the store ID uniquely identifies each store, "store" means each store, and when the store ID uniquely identifies each store group, "store" means each store group.

When the third transmission unit 31 of the benefit management device 30 receives the inquiry request from the store terminal 20, it transmits a conversion request including the point card number included in the inquiry request to the conversion device 40 via the communication network 2.

When the conversion unit 41 of the conversion device 40 obtains the conversion request from the benefit management device 30, it converts the point card number included in the conversion request into identification information (called a store-specific card number) that allows each store to identify the point card number. This store-specific card number is benefit recipient information that allows each store to identify the benefit recipient, and corresponds to the second benefit recipient identification information in the present invention. This store-specific card number is information that allows only each store to identify each benefit recipient. Therefore, it becomes possible for each store to analyze the benefit usage status, etc. for each benefit recipient.

As shown in FIG. 4, the storage unit 42 of the conversion device 40 stores the point card number and the store-specific card number to which the point card number is converted, in association with each other. In other words, the storage unit 42 stores the first benefit recipient identification information and the second benefit recipient identification information in the present invention in association with each other. In the example of FIG. 4, the point card number "PC001" is converted to the store-specific card number "SU001" used in a certain store.

The fifth transmission unit 43 of the conversion device 40 transmits the store-specific card number obtained by converting the point card number included in the conversion request via the communication network 2 to the benefit management device 30 that sent the conversion request.

When the fourth transmission unit 32 of the benefit management device 30 acquires the store-specific card number converted by the conversion device 40, it transmits the store-specific card number to the store terminal 20 that transmitted the inquiry request via the communication network 2. At this time, the fourth transmission unit 32 transmits information such as points that the processing unit 33 has stored in association with the point card number together with the store-specific card number to the store terminal 20.

The acquisition unit 22 of the store terminal 20 acquires information such as the store's unique card number sent from the benefit management device 30 in response to the inquiry request.

The memory unit 23 of the benefit management device 30 stores the store-specific card number acquired by the acquisition unit 22.

The second transmission unit 24 of the store terminal 20 transmits a reward request including the store-specific card number to the reward management device 30 via the communication network 2. This reward request is a reward processing request that requests the reward recipient to grant a reward, and includes the store-specific card number as well as information required for the reward grant processing, such as the points to be granted.

When the processing unit 33 of the benefit management device 30 acquires a benefit request from the store terminal 20, the processing unit 33 performs processing to grant a benefit to a benefit recipient identified by a point card number corresponding to the store-specific card number included in the benefit request. More specifically, the processing unit 33 transmits an inquiry request including the store-specific card number to the conversion device 40 via the communication network 2. The conversion device 40 reads out the point card number corresponding to the store-specific card number included in the inquiry request from the storage unit 42 and transmits it to the benefit management device 30 via the communication network 2. The processing unit 33 performs processing to grant a benefit to a benefit recipient identified by the acquired point card number. Specifically, the processing unit 33 updates the points stored in association with each point card number as illustrated in FIG. 5. In FIG. 5, for example, the points (balance) granted to the point card with point card number "PC001" is "1500".

[Action]
Next, the operation of the information processing system 1 according to the embodiment will be described with reference to Fig. 6. In the following description, for example, when the conversion device 40 is described as the subject of processing, this specifically means that the processor 4001 performs calculations by loading a specific software (program) onto hardware such as the processor 4001 and memory 4002, and controls communication by the communication device 4004 and reading and/or writing of data in the memory 4002 and storage 4003, thereby executing processing. The same applies to the user terminal 10, the store terminal 20, and the benefit management device 30.

When a user selects an item at a store and pays at the register, the user operates the user terminal 10 to start a program that realizes the reward management service. In response, the user terminal 10 generates and displays a barcode or QR code (registered trademark) (hereinafter simply referred to as a barcode) that encodes the point card number (here, "PC001"). The user shows the barcode displayed on the user terminal 10 to a store employee, who then has the barcode read by the reader of the store terminal 20. The store terminal 20 decodes the barcode and obtains the point card number "PC001" (step S11). As mentioned above, obtaining the point card number using a barcode is just one example, and other methods of obtaining the point card number may also be used.

The first transmission unit 21 of the store terminal 20 transmits an inquiry request including the point card number "PC001" acquired from the user and the store ID "SU001" which is the store identification information assigned to the store terminal 20, to the benefit management device 30 via the communication network 2 (step S12).

When the third transmission unit 31 of the benefit management device 30 receives the inquiry request from the store terminal 20, it transmits a conversion request including the point card number "PC001" contained in the inquiry request to the conversion device 40 via the communication network 2 (step S13).

When the conversion unit 41 of the conversion device 40 acquires the conversion request from the benefit management device 30, it converts the point card number "PC001" included in the conversion request into the store-specific card number "SU001" (step S14). At this time, the algorithm for converting the point card number into the store-specific card number may be, for example, a randomly generated store-specific card number assigned to the point card number, but any algorithm may be used. As a result, the storage unit 42 of the conversion device 40 stores the point card number "PC001" in association with the store-specific card number "SU001" converted from the point card number, as exemplified in FIG. 4.

The fifth transmission unit 43 of the conversion device 40 transmits the converted store-specific card number "SU001" to the benefit management device 30 via the communication network 2 (step S15).

When the fourth transmission unit 32 of the benefit management device 30 acquires the store-specific card number "SU001", it transmits to the store terminal 20 information necessary for the benefit granting process, such as the point value stored in association with the point card number "PC001" as well as the store-specific card number "SU001" (step S16).

In the store terminal 20, when the acquisition unit 22 acquires information such as the store-specific card number "SU001" transmitted from the benefit management device 30, the memory unit 23 stores the acquired store-specific card number "SU001" (step S17).

The second transmission unit 24 of the store terminal 20 transmits a request for awarding a reward, including the store-specific card number "SU001" and the points to be awarded (here, "100" points), to the reward management device 30 via the communication network 2 (step S18).

When the processing unit 33 of the benefit management device 30 receives a benefit request from the store terminal 20, it sends an inquiry request including the store-specific card number "SU001" contained in the benefit request to the conversion device 40 via the communication network 2 (step S19).

When the conversion device 40 receives the inquiry request, it searches the storage unit 42 for a point card number that corresponds to the store-specific card number "SU001" included in the inquiry request, and as a result of the search, reads the corresponding point card number "PC001" from the storage unit 42 and transmits it to the benefit management device 30 via the communication network 2 (step S20).

The processing unit 33 performs processing to grant a bonus to the bonus recipient identified by the acquired point card number "PC001". That is, the processing unit 33 adds points "100" to the points "1500" stored in association with the point card number "PC001" as illustrated in FIG. 5, updating the points to "1600" (step S21). The processing unit 33 then transmits the results of the bonus granting to the store terminal 20 via the communication network 2 (step S22).

The above is the process when points are awarded to a user at a first store. When points are awarded to the user at a second store, the points are awarded in units of point card numbers based on the store's unique card number that can identify the recipient of the bonus at the second store in the same manner as above. In other words, no matter which store the user transacts at, points are awarded in units of the point card number corresponding to the user. On the other hand, each store can analyze the point award status and usage status, etc., in units of the store's unique card number that can identify the recipient of the bonus only at that store. Even if information such as the store's unique card number is leaked between different stores, the point award status and usage status cannot be analyzed across different stores. In other words, it is possible to keep the award of bonuses to the recipient of bonuses and the status of bonus usage (i.e., information about the user) confidential between different stores.

[Modification]
The present invention is not limited to the above-described embodiment. The above-described embodiment may be modified as follows. In addition, two or more of the following modifications may be combined and implemented.
[Modification 1]
The processing by the processing unit 33 of the benefit management device 30 to grant a benefit to a benefit recipient identified by a point card number corresponding to the store-specific card number may be accelerated as follows. The system configuration and device configuration according to this modification 1 are the same as those of the above embodiment, but some of their functions and operations are different. FIG. 7 is a diagram illustrating a functional configuration of an information processing system 1 according to modification 1. As shown in FIG. 7, the benefit management device 30 is different from the above embodiment (FIG. 3) in that it includes a first storage unit 34 and an erasing unit 35. The first storage unit 34 stores the point card number included in the inquiry request acquired from the store terminal 20 in association with the store-specific card number converted from the point card number. The erasing unit 35 erases the contents stored in the first storage unit 34 when a determined erasing condition is satisfied. The erasing condition may be, for example, erasing after points are granted based on the point card number, erasing when a predetermined period has passed since the point card number was stored in the first storage unit 34, erasing when a predetermined period has passed since the point card number was last read out and used from the first storage unit 34, or the like.

Figure 8 is a sequence diagram showing an example of the operation of the information processing system 1 relating to variant example 1. In Figure 8, the same processes as those in Figure 6 described in the embodiment are given the same symbols, and the processes different from those in Figure 6 are steps S31 and S32. In step S15, when a store-specific card number (assumed to be "SU001") is transmitted from the fifth transmission unit 43 of the conversion device 40 to the benefit management device 30 via the communication network 2, in step S31, the first storage unit 34 associates and stores the point card number (assumed to be "PC001") included in the inquiry request obtained from the store terminal 20 in step S12 with the store-specific card number "SU001" obtained in step S15. Then, in step S18, when a request for granting a privilege including the store-specific card number "SU001" and points to be granted (here, "100" points) is transmitted from the store terminal 20 to the privilege management device 30, the processing unit 33 reads out the point card number "PC001" corresponding to the store-specific card number "SU001" included in the request for granting a privilege from the first storage unit 34 in step S32, and performs processing for granting a privilege to the privilege grantee identified by the read point card number "PC001". Then, the erasing unit 35 erases the contents stored in the first storage unit 34 when a determined erasing condition is satisfied. Note that, in step S32, if the point card number corresponding to the store-specific card number included in the request for granting a privilege is not stored in the first storage unit 34, the privilege management device 30 transmits a reference request including the store-specific card number included in the request for granting a privilege to the conversion device 40 via the communication network 2, and the conversion device 40 transmits the point card number obtained by converting the store-specific card number to the privilege management device 30. This allows the processing unit 33 to perform processing to grant a benefit to the benefit recipient identified by this point card number.

According to this variant example 1, the time required for the privilege management device 30 to make a query request to the conversion device 40 and for the response thereto, such as steps S19 and S20 in FIG. 3, can be eliminated, which contributes to speeding up processing.

[Modification 2]
In the above embodiment, the reward destinations are classified by point card. When one user has one point card, each reward destination (point card) can be regarded as each user and the reward grant status can be analyzed. On the other hand, when one user uses multiple point cards, for example, even if the reward grant status for each reward destination (point card) is analyzed, it does not become an analysis for each user. Therefore, even if one user uses multiple point cards, if the correspondence between the user and multiple point cards is known, it is possible to convert to the store-specific card number on a user-by-user basis, rather than converting to the store-specific card number on a point card number-by-point card basis.

The system configuration and device configuration of this modified example 2 are the same as those of the embodiment, but some of the functions and operations are different. The storage unit 42 of the conversion device 40 stores information as exemplified in FIG. 9. In the example of FIG. 9, it is assumed that it is known in advance, for example by a declaration by the user, that the point cards with the point card numbers "PC002" and "PC004" are used by the same user. In this case, the storage unit 42 stores the same user ID "USR001" in association with the point card number "PC002" and the point card number "PC004". In this way, the point card numbers stored in association with the same user ID "USR001" are converted to a common store-specific card number (here, "SU010"). In other words, when the point card number acquired from the benefit management device 30 is stored in association with a user ID, which is user identification information that identifies a user, the conversion unit 41 converts the point card number acquired from the benefit management device 30 to a store-specific card number on a user identification information (user ID) basis. Even if the store-specific card number is converted on a user ID basis in this way, the store-specific card number corresponds to the second benefit recipient identification information unique to each store.

Figure 10 is a sequence diagram showing an example of the operation of the information processing system 1 according to the second modification. In Figure 10, the same processes as those in Figure 6 described in the embodiment are given the same reference numerals, and the process that differs from Figure 6 is step S41. In step S13, when a conversion request including a point card number (assumed to be "PC002") is sent from the benefit management device 30 to the conversion device 40, in step S41, if the point card number "PC002" obtained from the benefit management device 30 is stored in association with a user ID, the conversion unit 41 converts it into a store-specific card number (assumed to be "SU010") on a user ID basis.

When an inquiry request including the store-specific card number "SU010" is sent from the reward management device 30 to the conversion device 40 in step S19, the conversion device 40 reads out from the storage unit 42 the point card number "PC002" corresponding to the store-specific card number "SU010" included in the inquiry request, and in step S209 sends it to the reward management device 30 via the communication network 2. In step S21, the processing unit 33 of the reward management device 30 performs processing to grant a reward to the reward grantee identified by the obtained point card number "PC002".

According to this variant 2, even if one user uses multiple point cards, it is possible to convert them into store-specific card numbers on a store and user basis.

[Modification 3]
The system configuration and device configuration according to the third modification are the same as those of the embodiment, but some of the functions and operations are different. FIG. 11 is a diagram illustrating a functional configuration of an information processing system 1 according to the third modification. As shown in FIG. 11, the benefit management device 30 is different from the above embodiment (FIG. 3) in that it includes a second storage unit 36 and an abnormality processing unit 37. The second storage unit 36 stores the store ID included in the inquiry request acquired from the store terminal 20 and the store-specific card number converted by the conversion device 40 in association with each other. FIG. 12 is a diagram illustrating an example of data stored by the second storage unit 36 of the benefit management device 30 according to the third modification. In the example of FIG. 12, for example, the store ID "S010" included in the inquiry request acquired from the store terminal 20 and the store-specific card number "SU001" converted by the conversion device 40 are stored in association with each other. The abnormality processing unit 37 performs a predetermined abnormality process when the set of the store ID and the store-specific card number included in the benefit grant request acquired from the store terminal 20 is different from the stored contents of the second storage unit 36.

Figure 13 is a sequence diagram showing an example of the operation of the information processing system 1 relating to variant example 3. In Figure 13, the same processes as those in Figure 6 described in the embodiment are given the same reference numerals, and the processes different from those in Figure 6 are steps S51, S52, and S53. In step S15, when the converted store-specific card number (assumed to be "SU001") is sent from the conversion device 40 to the benefit management device 30, the second storage unit 36 stores the store ID (assumed to be "S010") included in the inquiry request acquired from the store terminal 20 in step S51 in association with the store-specific card number "SU001".

Then, in step S18, the second transmission unit 24 of the store terminal 20 transmits a request for granting a benefit to the benefit management device 30, which request includes the store-specific card number "SU001", the points to be granted, and the store ID "S010" assigned to the store terminal 20.

In step S52, the abnormality processing unit 37 checks the set of the store ID "S010" and the store-specific card number "SU001" included in the bonus request acquired from the store terminal 20 against the contents stored in the second storage unit 36. Here, since the set of the store ID "S010" and the store-specific card number "SU001" included in the bonus request acquired from the store terminal 20 is stored in the second storage unit 36 as shown in FIG. 12, the process proceeds to step S19 and subsequent steps, as in the embodiment.

On the other hand, if a request for granting a privilege specifying a store ID and a store-specific card number is sent to the privilege management device 30 from an unauthorized third party, the abnormality processing unit 37 will perform the above-mentioned comparison and find that the set of store ID and store-specific card number included in the request for granting the privilege does not match the contents stored in the second storage unit 36. In step S53, the abnormality processing unit 37 will perform a predetermined abnormality process, such as returning a response indicating an error.

Note that the above example was the process when the reward management device 30 receives a reward granting request, but a similar win may also be performed when the reward management device 30 receives an inquiry request in step S12.

According to this variant example 3, when an inquiry request or a benefit request specifying a store ID and a store-specific card number is sent to the benefit management device 30 from an unauthorized third party, it becomes possible to avoid normal processing in response to the inquiry request or the benefit request.

[Modification 4]
In the above embodiment, when the user terminal 10 starts a program that realizes the benefit management service, a barcode or the like encoding the point card number is displayed on the user terminal 10, and is read by the store terminal 20. The point card number thus output by the user terminal 10 and read by the store terminal 20 may be a pseudo point card number (hereinafter referred to as a one-time point card number) that is valid only for a certain period of time.

Figure 14 is a sequence diagram showing an example of the operation of the information processing system 1 according to the fourth modification. In Figure 14, the same processes as those in Figure 6 described in the embodiment are given the same reference numerals, and the processes different from those in Figure 6 are steps S1 to S6. In step S1, when the program for implementing the benefit management service is started, the user terminal 10 transmits a request for issuing a one-time point card number to the benefit management device 30. In step S2, the benefit management device 30 issues a one-time point card number corresponding to the point card number of the user terminal 10 in response to the issuance request, and transmits this to the user terminal 10 in step S3. The user terminal 10 displays a barcode or the like in which this one-time point card number is encoded, and in step S4, has the store terminal 20 read it. In step S5, the store terminal 20 transmits an inquiry request to the benefit management device 30 via the communication network 2, the inquiry request including the one-time point card number obtained by decoding the barcode and a store ID, which is store identification information assigned to the store terminal 20. In step S6, the benefit management device 30 identifies the point card number that corresponds to the one-time point card number, and sends a conversion request including the point card number to the conversion device 40. In response, in step S14, the conversion unit 41 of the conversion device 40 converts the point card number into a store-specific card number.

As described above, it is more desirable from the viewpoint of preventing information leaks to use a point card number that is valid only for a certain period of time. In the above embodiment and modified example, the user terminal 10 is used as the means for allowing the store terminal 20 to read the point card number. However, this is not limited to this, and for example, a card-shaped medium on which the point card number or information in which the point card number is encoded is written may be used as the means for allowing the store terminal 20 to read the point card number.

[Modification 5]
As described above, management of a benefit for a benefit recipient includes granting the benefit to the benefit recipient and the benefit's use by the benefit recipient. In the above-described embodiment and variants, the process of granting a benefit to a benefit recipient has been described, but the present invention is also applicable to cases where a benefit granted to a benefit recipient is used (for example, when points are consumed instead of money as a benefit). In this case, instead of the benefit grant request used in the above-described embodiment and variants, a benefit usage request is used that requests the benefit granted to the benefit recipient to use the benefit. This benefit usage request includes information necessary for the benefit usage process, such as the store's unique card number and the points to be used. That is, the present invention includes a store terminal, a reward management device which performs processing related to the granting or use of a reward to a reward recipient identified by reward recipient identification information, and a conversion device which performs processing related to conversion of the reward recipient identification information, wherein the store terminal includes a first transmission unit which transmits to the reward management device a query request including first reward recipient identification information acquired from a user and store identification information assigned to the store terminal, an acquisition unit which acquires from the reward management device second reward recipient identification information obtained by converting the first reward recipient identification information in response to the query request, a storage unit which stores the acquired second reward recipient identification information, and a second transmission unit which transmits to the reward management device a reward processing request including the second reward recipient identification information. The benefit management device comprises a third transmission unit that transmits the first benefit recipient identification information included in the inquiry request acquired from the store terminal to the conversion device, a fourth transmission unit that transmits to the store terminal the second benefit recipient identification information into which the first benefit recipient identification information has been converted by the conversion device, and a processing unit that performs processing related to the granting or use of a benefit to a benefit recipient identified by the first benefit recipient identification information corresponding to the second benefit recipient identification information included in the benefit processing request acquired from the store terminal, and the conversion device comprises a conversion unit that converts the first benefit recipient identification information into the second benefit recipient identification information for each store identification information.

[Other Modifications]
The block diagrams used in the description of the above embodiments show functional blocks. These functional blocks (components) are realized by any combination of at least one of hardware and software. The method of realizing each functional block is not particularly limited. That is, each functional block may be realized using one device that is physically or logically coupled, or may be realized using two or more devices that are physically or logically separated and directly or indirectly connected (for example, using wires, wirelessly, etc.). The functional blocks may be realized by combining the one device or the multiple devices with software.

Functions include, but are not limited to, judgement, determination, judgment, calculation, computation, processing, derivation, investigation, search, confirmation, reception, transmission, output, access, resolution, selection, selection, establishment, comparison, assumption, expectation, regard, broadcasting, notifying, communicating, forwarding, configuring, reconfiguring, allocating, mapping, and assignment. For example, a functional block (component) that performs the transmission function is called a transmitting unit or a transmitter. As mentioned above, there are no particular limitations on the method of realization for either of these.

For example, each device in one embodiment of the present disclosure may function as a computer that performs the processing of the present disclosure.

Each aspect/embodiment described in this disclosure may be applied to at least one of LTE (Long Term Evolution), LTE-A (LTE-Advanced), SUPER 3G, IMT-Advanced, 4G (4th generation mobile communication system), 5G (5th generation mobile communication system), FRA (Future Radio Access), NR (new Radio), W-CDMA (registered trademark), GSM (registered trademark), CDMA2000, UMB (Ultra Mobile Broadband), IEEE 802.11 (Wi-Fi (registered trademark)), IEEE 802.16 (WiMAX (registered trademark)), IEEE 802.20, UWB (Ultra-WideBand), Bluetooth (registered trademark), and other suitable systems, and next-generation systems extended based on these. In addition, multiple systems may be combined (for example, a combination of at least one of LTE and LTE-A with 5G, etc.).

The processing steps, sequences, flow charts, etc. of each aspect/embodiment described in this disclosure may be reordered unless inconsistent. For example, the methods described in this disclosure present elements of various steps using an example order and are not limited to the particular order presented.

The input and output information may be stored in a specific location (e.g., memory) or may be managed using a management table. The input and output information may be overwritten, updated, or added to. The output information may be deleted. The input information may be transmitted to another device.

The determination may be based on a value represented by one bit (0 or 1), a Boolean (true or false) value, or a numerical comparison (e.g., with a predetermined value).

Although the present disclosure has been described in detail above, it is clear to those skilled in the art that the present disclosure is not limited to the embodiments described herein. The present disclosure can be implemented in modified and altered forms without departing from the spirit and scope of the present disclosure as defined by the claims. Therefore, the description of the present disclosure is intended as an illustrative example and does not have any limiting meaning on the present disclosure.

Software should be construed broadly to mean instructions, instruction sets, code, code segments, program code, programs, subprograms, software modules, applications, software applications, software packages, routines, subroutines, objects, executable files, threads of execution, procedures, functions, and the like, whether referred to as software, firmware, middleware, microcode, hardware description language, or otherwise. Software, instructions, information, and the like may also be transmitted or received over a transmission medium. For example, if the software is transmitted from a website, server, or other remote source using wired technologies (such as coaxial cable, fiber optic cable, twisted pair, Digital Subscriber Line (DSL)), and/or wireless technologies (such as infrared, microwave, and the like), then these wired and/or wireless technologies are included within the definition of a transmission medium.

The information, signals, etc. described in this disclosure may be represented using any of a variety of different technologies. For example, the data, instructions, commands, information, signals, bits, symbols, chips, etc. that may be referred to throughout the above description may be represented by voltages, currents, electromagnetic waves, magnetic fields or magnetic particles, optical fields or photons, or any combination thereof.
In addition, terms explained in this disclosure and terms necessary for understanding this disclosure may be replaced with terms having the same or similar meanings.

In addition, the information, parameters, etc. described in this disclosure may be expressed using absolute values, may be expressed using relative values from a predetermined value, or may be expressed using other corresponding information.

As used in this disclosure, the phrase "based on" does not mean "based only on," unless expressly stated otherwise. In other words, the phrase "based on" means both "based only on" and "based at least on."

Any reference to elements using designations such as "first," "second," etc., used in this disclosure does not generally limit the quantity or order of those elements. These designations may be used in this disclosure as a convenient way to distinguish between two or more elements. Thus, a reference to a first and a second element does not imply that only two elements may be employed or that the first element must precede the second element in some way.

The "part" in the configuration of each of the above devices may be replaced with "means," "circuit," "device," etc.

When the terms "include," "including," and variations thereof are used in this disclosure, these terms are intended to be inclusive, similar to the term "comprising." Additionally, the term "or," as used in this disclosure, is not intended to be an exclusive or.

In this disclosure, where articles have been added through translation, such as a, an, and the in English, this disclosure may include that the nouns following these articles are in the plural form.

In this disclosure, the term "A and B are different" may mean "A and B are different from each other." The term may also mean "A and B are each different from C." Terms such as "separate" and "combined" may also be interpreted in the same way as "different."

1: Information processing system, 2: Communication network, 10: User terminal, 20: Store terminal, 30: Benefit management device, 3001: Processor, 3002: Memory, 3003: Storage, 3004: Communication device, 3005: Input device, 3006: Output device, 40: Conversion device.

Claims (10)

A store terminal;
a privilege management device for performing processing related to granting or using a privilege to a privilege recipient identified by the privilege recipient identification information;
A conversion device that performs processing related to conversion of the benefit recipient identification information,
The store terminal includes:
a first transmission unit configured to transmit, to the benefit management device, a query request including first benefit recipient identification information acquired from a user and store identification information assigned to the store terminal;
an acquisition unit that acquires, in response to the inquiry request, from the benefit management device, second benefit recipient identification information obtained by converting the first benefit recipient identification information;
a storage unit that stores the acquired second benefit recipient identification information;
a second transmission unit configured to transmit a request for processing a benefit, the request including the second benefit recipient identification information, to the benefit management device;
The benefit management device
a third transmission unit configured to transmit the first benefit recipient identification information included in the inquiry request acquired from the store terminal to the conversion device;
a fourth transmitting unit configured to transmit to the store terminal the second benefit recipient identification information obtained by converting the first benefit recipient identification information by the conversion device;
a processing unit that performs processing related to granting or using a benefit to a benefit recipient identified by the first benefit recipient identification information corresponding to the second benefit recipient identification information included in the benefit processing request acquired from the store terminal,
The conversion device comprises:
an information processing system comprising: a conversion unit that converts the first privilege recipient identification information into the second privilege recipient identification information for each of the store identification information. The information processing system described in claim 1, characterized in that the processing unit of the benefit management device acquires from the conversion device the first benefit recipient identification information corresponding to the second benefit recipient identification information included in the benefit processing request acquired from the store terminal, and performs processing related to the granting or use of a benefit to the benefit recipient identified by the acquired first benefit recipient identification information. The benefit management device
a first storage unit configured to store a first reward recipient identification information included in the inquiry request acquired from the store terminal and a second reward recipient identification information obtained by converting the first reward recipient identification information by the conversion device in association with each other;
an erasure unit that erases the stored contents of the first storage unit when a determined erasure condition is satisfied;
The information processing system described in claim 1, characterized in that the processing unit reads out from the first storage unit the first bonus recipient identification information corresponding to the second bonus recipient identification information included in the bonus processing request obtained from the store terminal, and performs processing related to the granting or use of a bonus to the bonus recipient identified by the read out first bonus recipient identification information. The conversion device comprises:
An information processing system as claimed in any one of claims 1 to 3, characterized in that when the first benefit recipient identification information obtained from the benefit management device is stored in correspondence with user identification information that identifies a user, conversion to the second benefit recipient identification information is performed on a user identification information basis. The benefit management device
a second storage unit configured to store store identification information included in the inquiry request acquired from the store terminal and second reward recipient identification information obtained by converting the first reward recipient identification information by the conversion device in association with each other;
The information processing system according to any one of claims 1 to 4, characterized in that it further comprises an abnormality processing unit that performs a predetermined abnormality processing when the set of the store identification information and the second bonus recipient identification information included in the inquiry request or the bonus processing request obtained from the store terminal differs from the contents stored in the second storage unit. a transmitting unit configured to, when receiving a query request including a first reward recipient identification information and a store identification information assigned to the store terminal from the store terminal, transmit the first reward recipient identification information included in the query request to a conversion device that performs a process for converting the reward recipient identification information;
a transmitting unit configured to transmit to the store terminal second benefit recipient identification information obtained by converting the first benefit recipient identification information by the conversion device;
a processing unit that, when it receives a bonus processing request including the second bonus recipient identification information from the store terminal, performs processing related to the granting or use of a bonus to a bonus recipient identified by the first bonus recipient identification information corresponding to the second bonus recipient identification information included in the bonus processing request. The bonus management device of claim 6, characterized in that the processing unit acquires from the conversion device the first bonus recipient identification information corresponding to the second bonus recipient identification information included in the bonus processing request acquired from the store terminal, and performs processing related to the granting or use of a bonus to the bonus recipient identified by the acquired first bonus recipient identification information. a first storage unit configured to store a first reward recipient identification information included in the inquiry request acquired from the store terminal and a second reward recipient identification information obtained by converting the first reward recipient identification information by the conversion device in association with each other;
an erasure unit that erases the stored contents of the first storage unit when a determined erasure condition is satisfied;
The benefit management device of claim 6, characterized in that the processing unit reads out from the first storage unit the first benefit recipient identification information corresponding to the second benefit recipient identification information included in the benefit processing request acquired from the store terminal, and performs processing related to the granting or use of a benefit to the benefit recipient identified by the first benefit recipient identification information read out. a second storage unit configured to store store identification information included in the inquiry request acquired from the store terminal and second reward recipient identification information obtained by converting the first reward recipient identification information by the conversion device in association with each other;
The benefit management device according to any one of claims 6 to 8, characterized in that it is further equipped with an abnormality processing unit that performs a predetermined abnormality processing when the set of the store identification information and the second benefit grantee identification information included in the inquiry request or the benefit processing request obtained from the store terminal differs from the contents stored in the second storage unit. A conversion device characterized in that, when first bonus recipient identification information obtained from a bonus management device described in any one of claims 6 to 9 is stored in correspondence with user identification information that identifies a user, the conversion device converts the first bonus recipient identification information to second bonus recipient identification information on a user identification information basis.

Images