JP2001256564A - Reward card system and user reward card - Google Patents

Abstract

(57) [Summary] [Problem] To reduce the processing load on the store side. SOLUTION: This point card system comprises a shop terminal 20 which holds a user point card 10 on which an IC chip is mounted in a detachable manner, and a shop host 30 connected to the shop terminal. When the point card is held in the store terminal and the user pays for the price, the store terminal 20 generates point data based on the paid price, and the store host generates at least the point data and the user data, A store-specific digital signature is applied to generate value data, the obtained value data is transmitted to the store terminal, and the store terminal inputs the received value data to the user reward card. Thus, the management of the value data and the point balance can be borne by the user reward card side.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a point card system and a user point card which record points on a user's card based on the purchase amount and discount the purchase amount according to the accumulated amount of points on the card. Involved, in particular,
The present invention relates to a loyalty card system and a user loyalty card that can reduce the processing load on the store side.

[0002]

2. Description of the Related Art Generally, in the field of commerce, point card systems are widely known in which points are recorded on a user's card based on the purchase amount and the purchase amount is discounted according to the accumulated amount of points on the card. I have.

FIG. 13 is a schematic diagram showing a schematic configuration of such a point card system. This point card system is composed of n types of point cards 11 to ₁ n issued to an unspecified number of users for each store, and _n cards arranged for each store.
Type of store terminal 2 ₁ to 2 _n, and a customer point management DB (data base) 4 connected to the store host 3 and the shop host 3 governing each store terminal 2 ₁ to 2 _n.

[0004] Here, the point cards 1 ₁ to 1 _n are magnetic cards on which user IDs (identification numbers) are recorded. The store terminal ₂ 1 _{~2 n} is, point card 1
₁ to 1 _n can read the user ID and can transmit and receive each information to and from the store host 3. Specifically, a cash register which also serves as an input section for user registration information described later. And a reader (or reader / writer).

[0005] store host 3, each of the information store terminal ₂ 1 to
_2n is a host computer capable of transmitting / receiving data to / from the client point management DB4. The customer point management DB 4 is a database device that is readable / writable from the store host 3 and records a user ID, user registration information, and point balance information.

In such a point card system, at the time of new registration, as shown in FIG.
For example, it applies for the issuance of point card ₁ to the clerk. The clerk, a user of the first and last name that was heard from the user, enter the user registration information such as address and phone number to the shop terminal 2 _1, the store terminal 2 transmits these user registration information to the store host 3 ( ST1).

When the store host 3 receives the user registration information, the store host 3 issues a user ID for identification, registers a set of the user information and the user ID in the customer point management DB 4, and It returns the ID to the shop terminal _{2 1} (ST
2).

[0008] The shop terminal _{2 1,} write the user ID to the point card _{1 1} (ST3), to complete the new registration process. However, not limited to such a procedure, for example, using the recorded point card 1 ₁ of previously user ID, a user ID read from this point card 1 _1, and the user registration information from the user May be transmitted to the store host 3 and a set of the user ID and the user registration information may be registered in the customer point management DB 4. In any case, any method may be used as long as the user ID and the user information are linked and registered in the customer point management DB 4.

On the other hand, when paying for the price, the user is required
As shown in 5, presenting the point card 1 ₁ to carry the clerk. The clerk, using the store terminal _{2 1} of the reader, reads the user ID from the point card _{1 1} (ST11).
Also, the store terminal _{2 1} transmits the user ID read in the store host 3 (ST12).

[0010] store host 3 receives the user ID from the shop terminal 2 _1, points based on the user ID, searches the point balance information in the customer point management DB4 (points accumulated amount), and the resulting Store information on store terminal 2
₁ (ST13).

[0011] The clerk, using the store terminal 2 _1, presents the payment price of the previous discount to the user (ST14), the user is asked whether or not to use the point. If the user uses the point is, the value of the point balance information to operate the store terminal 2 ₁ to discount from the payment price as the upper limit, to present the final payment price to the shop terminal 2 _1.

[0012] Next, the clerk, upon receipt of the payment price from the user (ST15), the input to that effect to the shop terminal _{2 1.} The shop terminal 2 _1, point usage information indicating that using the point, and to send the store host 3 f the point accrual in accordance with the payment of the user from the shop terminal 2 ₁ (ST16).

Upon receiving the point use information, the store host 3 clears the point balance information corresponding to the user ID, and updates the value of the point generation amount as new point balance information in the customer point management DB 4. Thereafter, the shop host 3 transmits a new point balance information to the store terminal _{2 1} (ST17). The shop terminal 2 _1, and payment price received from the user, and the new points balance information printed out on the receipt or the like, the clerk pass this receipt to the user (ST18).

On the other hand, if the user states that points are not used at step ST14, the payment price before discount is determined as the final payment price.

[0015] The clerk, as shown in FIG. 16, upon receipt of the payment price from the user (ST19), the input to that effect to the shop terminal _{2 1.} The shop terminal 2 _1, the user points using information indicating that you do not want to use the point, and to send the store host 3 f the point accrual in accordance with the payment of a user of the price from the shop terminal 2 ₁ (ST20).

The store host 3 adds the value of the point generation amount to the balance point information corresponding to the user ID, and updates the obtained result in the customer point management DB 4 as new balance point information. Similarly, store host 3
Sends the new points balance information to the shop terminal 2 ₁ (ST21), the store terminal 2 _1, and payment price received, and the new points balance information printed out on the receipt or the like, the clerk of this receipt It is passed to the user (ST22).

[0017]

However, in the above-mentioned point card system, the store host 3 updates the point balance information in the customer point management DB 4, but this updating process is performed in accordance with the increase in the number of stores. This places an enormous burden on the host 3 and increases the communication cost.

Further, it is necessary for the user to have different point cards 11 ₁ to 1 _n for each store. In addition, the reading order by the user ID of the point card 1 ₁ get to the point balance information in the customer point management DB4, by reading the act illegal that skinning, easy to point balance information and user information from the point card 1 of others Because it is possible, the degree of confidentiality is low.

The present invention has been made in view of the above circumstances, and has as its object to provide a point card system and a user point card that can reduce the processing load on the store side.

It is another object of the present invention to provide a point card system and a user point card which can realize a point service with a common card even in different stores.

Still another object of the present invention is to provide a point card system and a user point card system capable of improving the degree of confidentiality.

[0022]

According to a first aspect of the present invention, there is provided a store terminal for holding a user point card on which an IC chip is mounted so as to be removably inserted therein. A point card system including a connected store host computer, wherein the user point card is held in the store terminal, and when the user is paid, the point data is converted based on the paid price. A point generating means for generating, and a store-specific digital signature applied to at least the point data generated by the point generating means and the user data relating to the user who pays for the price, provided in the store host computer, and the value data. Value generating means for generating the value, and the value data generated by the value generating means And value transmitting means for transmitting to the terminal a point card system comprising a value input means for inputting a value data received from said value transmission means to the user loyalty cards.

According to a second aspect of the present invention, there is provided a tamper-resistant user point card used in the above-mentioned point card system, wherein the value storage means stores value data inputted from the value input means. When,
When a counter indicating the balance of the value data in the value storage means and a balance request is received from the store terminal,
Based on the balance request, at least the balance transmitting means for transmitting the value data in the value storage means and the value of the counter to the store terminal, and when the point use amount is input from the store terminal, the point use amount A counter value reduction means for substantially reducing the value of the counter by an amount corresponding to the following, and a reduction value transmission means for transmitting the counter value reduced by the counter value reduction means to the store terminal. Is a reward point card.

(Operation) Therefore, according to the present invention, by taking the above measures, the point balance is recorded on the user point card side, so that the processing load on the store side can be reduced. it can.

Further, for example, by sharing a store host public key in a plurality of stores, a user can realize a point service with a common card in different stores only by having one tamper-resistant device. it can.

[0026] Further, by using a user point card on which an IC chip is mounted and an encryption technique such as a digital signature or a public key encryption, a conventional magnetic card is compared with a conventional magnetic card.
The degree of confidentiality can be improved.

[0027]

Embodiments of the present invention will be described below with reference to the drawings. In each embodiment,
The tamper-resistant device possessed by the user is an IC card having a digital signature calculation function, and this IC card stores value, user information, and point information. In the public key cryptosystem, a public key is called a public key, a secret key is called a private key, and both are called a public key pair. Here, it is assumed that the RSA public key method is used, for example.

(First Embodiment) FIG. 1 is a block diagram showing a configuration of a point card system according to a first embodiment of the present invention. In this point card system, a store terminal 20 for executing a point service by a user point card 10 is connected to a store host 30 as a host computer.

Here, the user reward card 10 is a portable electronic device (for example, an IC card) having tamper resistance and capable of performing a signature operation, which is used by being attached to the store terminal 20. Memory 11 for holding
Balance counter 1 for counting the point value balance (hereinafter referred to as point balance) in the memory 11
2, a balance management unit 13 for managing the point balance recorded in the balance counter 12, and an I / O interface 14 for transmitting and receiving each information from the balance management unit 13 to the store terminal 20. Note that the memory 11,
The balance counter 12 and the balance management unit 13 are realized by an IC chip having tamper resistance.

The memory 11 stores a card ID, which is a unique number assigned to each store and user loyalty card 10 used, and a pair of a user public key and a user secret key unique to each user loyalty card. , A user public key pair), a user public key certificate, and a store host public key, and a point value corresponding to the payment price can be written therein. And protected from unauthorized access such as copying. In particular, the user secret key is stored in an area that cannot be read by ordinary means.

The user public key certificate is generated by the store host 30 and includes at least the value of the user public key, the name of the store host that issued the user public key certificate, and the name of the store host and the user public key. Is digitally signed with the secret key of the store host 30. The user public key pair and the user public key certificate may be issued by a third party called a Trusted Third Party.

The point value is generated by the store host 30 and is data in which information such as a user ID, a point amount at the time of generating the point value, and a date is digitally signed by the store host 30.

The balance management unit 13 manages the stamp balance,
It executes processing relating to recording and updating of point value. Specifically, when a balance request input from the store terminal 20 is received via the I / O interface 14 (in the following description, the description will be simplified). I / O between the store terminal 20 and the user reward card 10
O via the interface 14 is omitted), based on this balance request, the user ID, the user public key certificate and the point value in the memory 11,
When the function of sending the point balance in the balance counter 12 to the store terminal 20 and the verification result indicating validity and the point use amount are input from the store terminal 20, the point use amount is calculated from the value of the balance counter 12 The function of sending the obtained point balance to the store terminal 20 and reducing the new point value input from the store terminal 20 to the memory 11
And has a function of resetting the value of the balance counter 12 in accordance with the new point value and a function of sending a completion notification to the store terminal 20 when the resetting process is completed.

[0034] The shop terminal 20 stores the user reward card 1
0, the function of newly registering an unregistered user reward card 10, and the function of newly registering an unregistered user reward card 10 when a registered customer reward card 10 is inserted. It has a function of executing verification of ten, display of unused balance, transfer of point value, and the like.

More specifically, the store terminal 20 includes a data read / write unit 21, a registration unit 22, a digital signature verification unit 23, a point balance, in addition to a normal cash register function (such as a cash accounting function and a screen display function). Verification unit 24, point update unit 25, data storage unit 26, and communication I / F2
7 is provided.

The data read / write unit 21 is connected to the store terminal 20
, And has a function of executing data read processing and data write processing in the user reward card 10. Here, an IC card reader / writer is used. In the following description, for simplification of the description, the description that the data is exchanged with the user reward card 10 via the data read / write unit 21 is omitted.

The registration unit 22 stores the user reward card 10
Is inserted, a function for displaying a screen for prompting input of user registration information such as a name, an address and a telephone number, and the input user registration information are stored in the data storage unit 26 and the communication I
A function of transmitting data to the store host 30 via the / F 27 and a communication I / F 27 and the data storage unit 26 from the store host 30.
A user ID, a user public key pair, a user public key certificate, and a store host public key received via the user point card 10 and a function of displaying registration completion on a screen. I have. The description below is not limited to the registration unit 22, and for simplicity of description, as in the above description, the description that the data is exchanged with the store host 30 via the data storage unit 26 and the communication I / F 27 is omitted.

The digital signature verification unit 23 holds a store host public key for verification, and stores the user point card when the user point card 10 is inserted into (the card reading / writing unit 21 of) the store terminal 20. The function of verifying the digital signature of each of the user public key certificate and the point value received from the card 10, the function of verifying the digital signature of the new point value received from the store host 30, and the point updating unit 25 And a function to notify

The point balance verification unit 24 has a function of verifying the validity of the point balance based on a comparison between the point value and the value of the point balance, and a function of notifying the verification result to the point update unit 25. In particular,
When the value of the point balance is equal to or less than the value of the point value, it is determined to be valid.

After the validity is verified by the digital signature verifying unit 23 and the point balance verifying unit 24, the point updating unit 25 displays a screen of the current point balance and a screen for prompting the input of the amount of point used. A function, a function of inputting the input point usage amount to the user point card 10, a function of transmitting the user ID, the point balance and the new point amount received from the user point card 10, to the store host 30, It has a function of inputting the new point value received from the store host 30 to the user reward card 10 after being verified by the digital signature verifying unit 23, and a function of terminating the process based on a completion notification received from the user reward card 10. I have.

The data storage unit 26 has a buffer memory function for temporarily storing data exchanged with the store host 30 in the store terminal 20.

The communication I / F 27 has an interface function for executing communication between the data storage unit 26 and the store host 30.

On the other hand, the store host 30 communicates with the communication I / F 3
1. User data registration unit 32, key data generation unit 33, user information management DB 34, and point value generation unit 35
It has.

The communication I / F 31 is an interface for executing communication with the store terminal 20. In the following description, the store terminal 20 is used for the sake of simplicity.
A description that the data is exchanged with the communication interface 31 via the communication I / F 31 is omitted.

The user data registration unit 32 has a function for newly registering a user. Specifically, upon receiving user registration information from the shop terminal 20, the user data registration unit 32 issues a user ID and A function of registering a set of an ID and user registration information in the user information management DB 34, a function of activating the key data generation unit 33 and issuing a user public key pair and a user public key certificate, It has a function of transmitting an ID, a user public key pair, a user public key certificate, and a store host public key to the store terminal 20.

The key data generation unit 33 includes a user registration unit 32
Is activated, a user public key pair and a user public key certificate are issued based on, for example, the user ID, and the user public key pair and the user public key certificate are stored in the user registration unit 3.
2 has the function of sending to 2.

The user information management DB 34 is a DB in which the user data registration unit 32 records a set of a user ID and user registration information (name, address, telephone number, etc.).

When receiving the user ID, the point balance, and the new point amount from the store terminal 20, the point value generation unit 35 generates a new point value by adding the point balance and the new point amount, and generates the new point value. To the store terminal 20.

Next, the operation of the point card system configured as described above will be described with reference to FIGS. (At the time of new registration) As shown in FIG. 2, a user goes to a store and applies to a store clerk to issue a point card. The clerk inserts the user reward card 10 into the store terminal 20. In the store terminal 20, the registration unit 22 displays a screen for prompting input of user registration information such as a name, an address, and a telephone number by this insertion. In addition, the registration unit 22
When the clerk inputs the user registration information heard from the user, the input user registration information is stored in the data storage unit 26.
Then, the data is transmitted to the store host 30 via the communication I / F 27 (ST31).

In the shop host 30, when the user data registration section 32 receives the user registration information, the user ID
And registers the set of the user ID and the user registration information in the user information management DB 34, activates the key data generation unit 33, and issues a user public key pair and a user public key certificate. The user ID, user public key pair, user public key certificate, and store host public key are transmitted to the store terminal 20 (ST32).

In the store terminal 20, the registration unit 22
User ID, user public key pair received from the store host,
The user public key certificate and the store host public key are written in the memory of the user point card (ST33), and the completion of the registration is displayed on the screen, and the registration process is terminated.

(At the time of payment after registration) At the time of payment, as shown in FIG. 3, the user presents the user point card 10 to be carried to the clerk. The clerk inserts the user reward card 10 into the shop terminal 20, and the shop terminal 20 inputs the balance request into the user reward card 10. Based on the balance request, the user point card 10 stores the user ID, the user public key certificate, the point value (if any) in the memory 11 and the point balance in the balance counter 12 in the store terminal 20. Send (S
T41).

Next, in the store terminal 20, the digital signature verifying unit 23 verifies the digital signature of each of the user public key certificate and the point value, and notifies the point updating unit 25 of the verification result. In addition, the point balance verification unit 24 verifies the validity of the point balance based on the comparison between the point value and the value of the point balance, and notifies the point update unit 25 of the verification result.

When each verification result indicates validity, the point updating unit 25 displays a screen of the current point balance and a screen for prompting the input of the amount of point used. Next, the user will make a
Tell the store clerk how much points to use (the amount of points used)
The clerk inputs the point usage amount to the store terminal 20 and receives the payment from the user. When points are not used (when accumulated), the point usage amount is set to “0”.

In the store terminal 20, the point updating unit 25 stores the inputted point usage amount and the two verification units 23,
The verification result of 24 is input to the user reward card 10 (ST42).

In the user point card 10, when the balance management unit 13 receives the verification result and the point usage amount, the balance management unit 13 reduces the point usage amount from the value of the balance counter 12 and stores the obtained point balance in the store terminal 20. (ST43).

In the store terminal 20, the point updating unit 25
Transmits the user ID, the point balance, and the new point amount to the store host 30 (ST44).

In the store host 30, when the point value generation unit 35 receives the user ID, the point balance, and the new point amount from the store terminal 20, the point value generation unit 35 uses the point balance obtained by adding the point balance and the new point amount. By applying a digital signature to the information obtained by linking the user ID and the date using the store host secret key, a new point value is generated, and the new point value is returned to the store terminal 20 (ST45). .

In the store terminal 20, the digital signature verifying unit 23 verifies the digital signature of the new point value using the store host public key, and notifies the verification result to the point updating unit 25.

When the verification result indicates validity, the point updating unit 25 inputs the new point value into the user point card 10 (ST46).

In the user point value, the balance management unit 13 overwrites and updates the new point value in the memory 11 and resets the value of the balance counter 12 in accordance with the new point value. Send it to the store terminal 20. When receiving the completion notification, the shop terminal 20 ends the point update processing.

As described above, according to the present embodiment, the point balance is recorded on the user reward card 10 side, so that the processing load on the store side can be reduced.

Further, for example, by sharing a store host public key in a plurality of stores, a user can have a single tamper-resistant device and realize a point service with a common user reward card in different stores. can do.

Further, by using a user point card on which an IC chip is mounted and an encryption technique such as digital signature and public key encryption, a conventional magnetic card is used.
The degree of confidentiality can be improved.

(Second Embodiment) FIG. 4 is a schematic diagram for explaining a point card system according to a second embodiment of the present invention. The detailed description is omitted, and different portions are mainly described here. In the following respective embodiments, the duplicated description will be omitted in the same manner.

That is, the present embodiment is a modification of the first embodiment, and aims at sharing the type of the user reward card 10 in the shopping street. only one provided in a shopping district, which consists of each store 28 ₁ ~28 _n, and the above-mentioned card ID, user public key pair, the user public key certificate and out of the store host public key, and the store host public key, use and it has a configuration that was shared by the public's digital signature key certificate (store host secret key) each store 28 ₁ and the shopping street ~28 _n.

The above-mentioned store terminal 20 is connected to each store 2
8₁~ 28_nPlaced for each store, common store host
30. According to the above configuration, an example
For example, a plurality of store terminals 20 in one store₁~ 20 _nUsing
Since the connection relationship is the same as that of the first embodiment,
In addition to the effect, common types of user loyalty cards in shopping streets
10 (or point card service)
it can.

(Third Embodiment) FIG. 5 is a schematic diagram for explaining a point card system according to a third embodiment of the present invention. The present embodiment is a modification of the second embodiment, in which one user point card 10 can store point values of a plurality of stores. Specifically, a public key pair and a public key are used. Trusted Third Party as a computer system that issues certificates
40 are provided.

Here, the third-party organization 40 corresponds to a so-called Certification Authority, and any of the store hosts 30 _i (where 1 ≦ i ≦ n)
Is requested to issue a key with a user ID attached,
It has a function of issuing a user public key pair and a user public key certificate and transmitting them to the requested shop host _30i .

[0070] Each shop terminal ₂₀ 1 to 20 _n in the functional block of FIG. 1 described above, a digital signature verification unit 23
Has been changed. Specifically, the digital signature verification unit 23 holds a third party public key for verification in addition to the store host public key,
When 0 is inserted to the shop terminal 20 _i, and the user's public key certificate received from the user's point card 10 function to verify by third party public key, the user point card 1
It is modified to have a function of verifying a point value received from 0 with a store host public key corresponding to a store identifier described later.

[0071] However, the function of verifying the digital signature of the new point value received from its store host 30 _i by the shop host public key, and the function of notifying each of the verification result to the point update unit 25 has as before ing.

Also, the user public key certificate referred to here is:
At least the value of the user public key generated by the third party organization 40, the name of the third party organization that issued the user public key certificate, and a set of the name of the third party organization and the value of the user public key Is digitally signed with the private key of the third party organization 40.

On the other hand, the store hosts 30 ₁ to 30 _n are provided for each of the stores 28 _{1 to} 28 _n , and the key data generation unit 33 relating to the key generation function is omitted (= third party). (Transferred to the institution 40).

Each point value is stored in each store 28
₁ are denoted by the unique store identifier to each ~28 _n, digital signature has become can be verified by the shop host public key of the store 28 _i corresponding to the store identifier.

With the above configuration, one user port
A plurality of stores 28 on the int card 10 ₁~ 28_nPoint
Value can be recorded at each store 28₁~ 28_nPoi every time
Can perform a smart card service.

(Fourth Embodiment) FIG. 6 is a schematic diagram for explaining a point card system according to a fourth embodiment of the present invention.

This embodiment is a modification of the first embodiment, and is intended to realize a point card system (online shopping) using network communication. As shown in FIG. Is replaced by a user terminal 20a capable of communicating with the store host 30a via the network NW.
a has a communication function of the network NW. Further, the user reward card 10a is an IC card having the above-described functions, and has a credit number embossed in advance on a card base material.

The user terminal 20a is, for example, a client terminal located at the user's house,
In addition to the same function as that of 0 (however, there is no cash register function, and the signature verification units 23 and 24 have been moved to the store host 30a), and network communication with the store host 30a can be executed using an encryption communication protocol. It is something. Here, as a protocol for encrypted communication, for example, SSL (Secure Socket Layer: SSL is a trademark of Netscape, USA) is used.

More specifically, the user terminal 20a displays, for example, a check box of a purchase request on the screen by the function of the registration unit 22 and the operation of the operator, and after the check box is checked, submits. When the (submit) icon is clicked, a function of transmitting a purchase request to the store host 30a, and upon receiving a charge request from the store host 30a, display the amount of the charge request on the screen and prompt the user to input a credit number. The credit number is entered by the function of displaying the screen of the message etc. and the user's operation, and when the approval (OK) icon is clicked, the credit number, the point usage amount (from the second time), the user public key certification Function to transmit the certificate and the user ID to the store host 30a, a notice of receipt of the price (credit number) from the store host 30a, and generation of points. Upon receiving the knowledge, together with the screen display a point value that have occurred, and the ability to screen display a message or the like to prompt whether or not the answer receives this point,
The function of transmitting the will display status (OK) and the point balance (second and subsequent times) or the non-received will display status (NG) to the store host 30a by the user operation, and the point value received from the store host 30a. When it is filled, it has a function of transmitting a receipt notification to the store host 30a.

On the other hand, the store host 30a is a computer system including, for example, a server 36 of a content distributor and a user information management DB 34 connected thereto.
In addition to the same functions as the store host 30 described above, network communication with the user terminal 20a can be executed using a protocol for encrypted communication.

Specifically, the store host 30a responds to the purchase request by receiving a purchase request from the user terminal 20a in addition to the function of the user data registration section 32 described above and a function of registering a credit number. The function of returning a bill for the product to the user terminal 20a, and receiving the credit number, the point usage amount (from the second time), the user public key certificate, and the user ID from the user terminal 20a, as described above. After verifying the digital signature of the public key certificate of the user, the user terminal 20a transmits a notice of acceptance of the payment and a point generation notification indicating the amount of points generated by the payment.
When receiving the receiving intention display status from the user terminal, the point value is transmitted to the user terminal 20a.
And a function of setting presence / absence of a willingness indication status in the user information management DB 34a in association with the identification information (date and point amount, issue number, etc.) of the point value, and Upon receiving the value receipt notification, the user information management DB 34
The function has a function of setting the existence of the reception notification at the corresponding point value in a, sending a completion notification to the user terminal 20a, and ending a series of point card processing.

Further, the store host 30a has a function of detecting that there has been fraud if the reception notification is not received even after a predetermined time has elapsed after transmitting the point value. , Even if the predetermined time has elapsed, the willingness to display status (OK) or the non-receiving willing status
If none of (NG) is received (communication accident, etc.), it is output that these statuses have not been received, and the store host 30
It has a function for urging the administrator (a store clerk) to respond.

The user information management DB 34a stores, in addition to the set of the user ID, the user registration information (name, address, telephone number, etc.) and the point balance, point value identification information (eg, date and point). The presence / absence of a reception intention display status and the presence / absence of a receipt notification are set for each amount or issue number.

Next, the operation of the point card system configured as described above will be described with reference to the sequence diagrams of FIGS. (At the time of new registration) Step ST51 of the registration process shown in FIG.
Steps ST53 to ST53 are executed in the same manner as in FIG. However, in step ST51, the user registration information transmitted from the user terminal 20a to the store host 30a includes a credit number in addition to the above-described name, address, and telephone number. As network communication, a protocol for encrypted communication such as SSL is used. Further, the following communication uses the same protocol for encrypted communication.

(At the time of first purchase) At the user terminal 20a, for example, a check box of a purchase request is displayed on the screen by an operation of the operator as shown in FIG. 8, and after the check box is checked, the submit (submit) is performed. ) When the icon is clicked, a purchase request is transmitted to the store host 30a (ST61).

When the store host 30a receives the purchase request, the store host 30a issues a bill for the product corresponding to the purchase request to the user terminal 2.
0a (ST62).

Upon receiving the charge, the user terminal 20a displays the amount of the charge on the screen and displays a message or the like on the screen so as to prompt the input of the credit number.

Here, in the user terminal 20a, the credit number is input by the user's operation, and when the approval (OK) icon is clicked, the credit number, the user public key certificate and the user ID are stored in the store. It is transmitted to the host 30a (ST63). Upon receiving these credit numbers and the like, the store host 30a verifies the digital signature of the user public key certificate in the same manner as described above, and then receives a payment receipt notification and a point generation notification indicating the amount of points generated by the payment. Is transmitted to the user terminal 20a (ST6).
4).

When receiving the reception notification and the point generation notification, the user terminal 20a displays the generated point amount on the screen and a message or the like for prompting an answer as to whether or not to receive the point.

The user terminal 20a displays, for example, the willingness to receive display status (OK) by the user's operation.
0a (ST65). Upon receiving the reception intention display status, the store host 30a transmits the point value to the user terminal 20a (ST66),
Identification information for this point value (date and point amount,
Or user information management D
In B34a, the presence / absence of the reception intention display status is set.

When the user terminal 20a has filled this point value, it transmits a receipt notification to the store host 30a (ST67). Upon receiving the receipt notification, the store host 30a sets the existence of the receipt notification at the corresponding point value in the user information management DB 34a, and sends the completion notification to the user terminal 20a (ST68). The process ends. The store host 30
“a” detects that a fraud has occurred when a reception notification is not received even after a predetermined time has elapsed after transmitting the point value. By detecting this fraud, for example, when the corresponding point value is used, a detectable action can be taken. Further, in step ST65, when the store host 30a does not receive any of the intention to receive indication status (OK) or the status of non-acceptance of intention to receive (NG) even after the predetermined time has elapsed (a communication accident or the like), the status Is output, and the manager (store clerk) of the store host 30a is urged to respond. With this output, the clerk informs the user of the fact that the status relating to the will display has not been received by offline means such as a telephone, and when the user's answer is acceptance approval, the URL (uniform resource)
locator). Hereinafter, when the user terminal 20a accesses this URL, the point value is filled.

As shown in FIG. 9, the user terminal 20a transmits a purchase request to the store host 30a by the operation of the operator as shown in FIG. 9 (ST71).

When the store host receives the purchase request, it returns a bill for the product corresponding to the purchase request to the user terminal 30a (ST72).

Up to this point, the steps ST61 to S at the first time are performed.
Same as T62. In the following, processing relating to the amount of point usage is added (at the first time, there is no processing relating to the amount of point usage because there is no point value in the user reward card 10).

Next, when the user terminal 20a receives the charge, the user terminal 20a displays the amount of the charged amount on the screen and also displays a screen such as a message to prompt the input of the credit number and the point usage amount.

At the user terminal 20a, the credit number and the point usage amount are input by the user's operation, and when the approval icon is clicked, the credit number, the point usage amount, the user public key certificate and the user ID Is transmitted to the store host 30a (ST73). When points are not used, “0” is input as the point usage amount. Further, the point usage amount is stored in the user reward card 10a. For example, if there are 1000 points and 500 points are used, there should be a balance of 500 points, but if there is only a balance of 300 points, the balance is used when the user corrects points.

Upon receiving these credit numbers and the like, the store host 30a verifies the digital signature of the user public key certificate in the same manner as described above, and then receives a notice of the payment price (= credit payment price + point usage), A point generation notification indicating the amount of points generated by the payment is transmitted to the user terminal 20a (ST74).

Upon receiving the reception notification and the point occurrence notification, the user terminal 20a displays the amount of points generated on the screen and a message prompting an answer as to whether or not to receive the points on the screen.

The user terminal 20a issues, for example, a point balance initialization certificate when receiving points by the user's operation, and stores the point balance initialization certificate, the point value, and the reception intention display status in the store host 30a. (ST75). In addition, the point balance initialization certificate is data including data obtained by digitally signing the point balance and the identification number of the point value with the secret key of the user terminal 20a and the point value. This point balance initialization certificate is stored as a log in the user point card 10a. For example, if the user cannot receive a new point value due to a failure during communication, the new point value is resent later. It is used when the user gets the point value in the user reward card 10a when he or she is taken off-line. The processing when the store host 30a does not receive any of the willingness display status or the non-receiving intention display status is as described above.

On the other hand, when the store host 30a receives the point balance initialization certificate, the point value, and the willingness to receive display status, the store balance initialization certificate based on the point value and the user public key of the user terminal 20a. After verifying the certificate, a new point value is generated by adding the point balance and the point generation amount in the certificate, and the new point value is transmitted to the user terminal 20a as described above (ST76). The presence / absence of a willingness to receive display status is set in the user information management DB 34a in association with the identification information of the new point value.

When the user terminal 20a fills (writes) this new point value and sets the point balance, it transmits a receipt notification to the store host 30a (ST).
77).

When the store host 30a receives the reception notification, the store host 30a fills in the existence of the reception notification at the corresponding point value in the user information management DB 34a, and transmits a completion notification to the user terminal (ST78). The point card processing ends. When the store host 30a does not receive the receipt notification, the store host 30a can detect the fraud as described above.

As described above, according to the present embodiment, the first
Online shopping having the same effects as the embodiment can be realized.

(Fifth Embodiment) FIG. 10 shows a fifth embodiment of the present invention.
It is a mimetic diagram for explaining the reward card system concerning an embodiment.

This embodiment is a modification of the fourth embodiment, and is intended to realize a point card system (offline shopping) using network communication. As shown in FIG. Instead of the input, the store clerk listens to the user about whether or not the point is used, whether or not the point is received, the amount of the point used, and the like, and inputs the information to the store terminal 20b.

The store terminal 20b is obtained by adding a cash register function to the function of the user terminal 20a described above. The store terminal 20b and the store host 30a are connected by a dedicated line PN instead of the network NW described above.

According to the above configuration, it is possible to realize off-line shopping having the same effects as in the fourth embodiment.

(Sixth Embodiment) FIG. 11 shows a sixth embodiment of the present invention.
It is a schematic diagram which shows the structure of the point card system which concerns on embodiment.

That is, the present embodiment is a modification of the fourth embodiment, and as shown in FIG.
W and first and second user terminals 20aA, 20a connected to W
It is possible to transfer an arbitrary point balance among the point balances of the first user reward card 10aA to the second user reward card 10aB via 0aB, and add it to the point balance of the user reward card 10aB. Is what you do.

Here, the first and second user terminals 20a
Since A and 20aB have the same configuration, the first user terminal 20aA will be described as a representative here. In addition, the first and second user loyalty cards 10aA, 1
The same applies to 0aB. Further, it is assumed that a first user reward card 10aA is attached to the first user terminal 20aA, and a second user reward card 10aB is attached to the second user terminal 20aB.

[0111] In addition to the above-described functions, the first user terminal 20aA is provided to the first user point card 10aA equipped with a point balance transfer command designating the amount to be transferred and the transfer destination by the operation of the user. When a point balance is received from the first user point card 10aA in response to the function to input and the point balance transfer command, this point balance is transferred to the transfer destination (for example, the second user point card 10a).
B) and a function of transmitting these point balances to the store host 30a when two point balances are received from the first user point card.

The first user reward card 10aA is:
In addition to the functions described above, a point balance transfer function is added. The point balance transfer function is, for example, when a point balance transfer command designating an amount to be transferred and a transfer destination is input from the first user terminal 20aA, based on the point balance transfer command, the existing point balance. Is subtracted and updated, and the point balance value of the subtracted amount (the transferred amount) is transferred to the transfer destination (for example, the second user reward card 10a).
B) and a function of receiving the transferred point balance value and transmitting the point balance value and the own point balance value to the store host 30a as a set.

Next, the operation of the point card system configured as described above will be described with reference to the sequence diagram of FIG. First, the first user reward card 10aA
Is 500 yen, and the point balance of the second user reward card 10aB is 1000 yen (at the end of ST78 in FIG. 12).

Here, the second user reward card 10
100 yen out of 1000 yen aB point balance
Transfer to the user reward card 10aA.

The second user reward card 10aB is:
When a point balance transfer command designating 100 yen is input from the second user terminal 20aB, the point balance 100
While 100 yen is subtracted from 0 yen to update the point balance to 900 yen, the subtracted point balance of 100 yen is transmitted to the first user reward card 10aA via the second user terminal 20aB (ST81). ).

The first user reward card 10aA is:
When this point balance of 100 yen is received, it is transmitted to the store host 30a via the first user terminal 20aA together with the existing point balance of 500 yen (ST82).

When the store host 30a receives the point balance of 500 yen and 100 yen, the store host 30a adds the two points to each other, newly generates a point value indicating the addition result of 600 yen, and transfers the point value of 600 yen to the first. It is transmitted to the user point card 10aA (ST83).

The first user reward card 10aA is:
When the point value of 600 yen is received, the point value is stored and the point balance is set to 600 yen. Hereinafter, as described above, the first user reward card 10aA transmits a receipt notification to the store host 30a via the first user terminal 20aA (ST84).
When the store host 30a receives the receipt notification,
A completion notification is transmitted to the first user reward card 10aA (ST85), and the process ends.

As described above, according to the present embodiment, the fourth
In addition to the effects of the embodiment, points can be transferred between users.

In the above embodiments, the case where an IC card is used as the user reward card 10, 10a, 10aA, 10aB has been described. However, the present invention is not limited to the IC card shape. (E.g.,
A case where the external shape is arbitrarily changed, such as a memory stick) or a card shape outside the IC card standard (eg, a memory card shape), is included in the scope of the present invention.

Further, in each of the above-described embodiments, the case where the user does not input the PIN (Personal Identity Number) at the time of payment is described. However, the present invention is not limited to this. The same effect can be obtained by implementing the present invention in the same manner.
However, in consideration of the processing in the store, it is considered that the form in which the input of the PIN is omitted is more preferable.

In addition, the present invention can be variously modified and implemented without departing from the gist thereof.

[0123]

As described above, according to the present invention, it is possible to provide a point card system and a user point card which can reduce the processing load on the store side. Further, it is possible to provide a point card system and a user point card which can realize a point service with a common card in different stores. Further, it is possible to provide a point card system and a user point card system capable of improving the degree of confidentiality.

[Brief description of the drawings]

FIG. 1 is a block diagram showing a configuration of a point card system according to a first embodiment of the present invention.

FIG. 2 is a sequence diagram for explaining an operation at the time of new registration in the embodiment.

FIG. 3 is a sequence diagram for explaining an operation at the time of payment in the embodiment;

FIG. 4 is a schematic diagram illustrating a point card system according to a second embodiment of the present invention.

FIG. 5 is a schematic diagram illustrating a point card system according to a third embodiment of the present invention.

FIG. 6 is a schematic diagram illustrating a point card system according to a fourth embodiment of the present invention.

FIG. 7 is a sequence diagram for explaining an operation at the time of new registration in the embodiment.

FIG. 8 is a sequence diagram for explaining the operation at the time of the first purchase in the embodiment.

FIG. 9 is a sequence diagram for explaining the operation at the time of the second or subsequent purchase in the embodiment.

FIG. 10 is a schematic diagram for explaining a point card system according to a fifth embodiment of the present invention.

FIG. 11 is a schematic diagram illustrating a point card system according to a sixth embodiment of the present invention.

FIG. 12 is a sequence diagram for explaining the operation in the embodiment;

FIG. 13 is a schematic diagram showing a schematic configuration of a conventional point card system.

FIG. 14 is a sequence diagram showing a conventional operation at the time of new registration.

FIG. 15 is a sequence diagram showing a conventional operation at the time of payment.

FIG. 16 is a sequence diagram showing a conventional operation when points are not used.

[Explanation of symbols]

10, 10a, 10aA, 10aB ... user point card 11 ... memory 12 ... balance counter 13 ... balance management unit 14 ... I / O interface 20, 20b ... store terminal 20a, 20aA, 20aB ... user terminal 21 ... data reading / Writing unit 22 ... Registration unit 23 ... Digital signature verification unit 24 ... Point balance verification unit 25 ... Point update unit 26 ... Data storage unit 27,31 ... Communication I / F 28 _{1 to} 28 _n ... Store 30, 30a ... Store host Reference numeral 32: user data registration unit 33: key data generation unit 34: user information management DB 35: point value generation unit NW: network PN: dedicated line

Continued on the front page (51) Int.Cl. ⁷ Identification symbol FI Theme coat II (reference) G07G 1/14 G07G 1/14

Claims (6)

[Claims] 1. A point card system comprising: a store terminal for holding a user point card on which an IC chip is mounted in a detachable manner; and a store host computer connected to the store terminal. A point card is held in the store terminal,
When the price is paid by the user, a point generating means for generating point data based on the paid price, provided at the store host computer, at least the point data generated by the point generating means and the price Value generating means for generating value data by applying a store-specific digital signature to the user data relating to the paying user, Value transmitting means for transmitting the value data generated by the value generating means to the store terminal, A point card system comprising: value input means for inputting value data received from the value transmitting means to the user point card. 2. A tamper-resistant user point card used in the point card system according to claim 1, wherein the value storage means stores value data input from the value input means, and the value. A counter indicating the balance of the value data in the storage means, and when receiving a balance request from the store terminal, based on the balance request, at least the value data in the value storage means and the value of the counter are transmitted to the store terminal. Balance transmitting means for transmitting, when a point usage amount is input from the store terminal, counter value reduction means for substantially reducing the value of the counter by an amount corresponding to the point usage amount, and the counter value reduction means And a reduced value transmitting means for transmitting the value of the counter reduced by the above to the store terminal. User point card to butterflies. 3. The point card system according to claim 1, wherein said value generating means includes at least said user point card in point data generated by said point generating means when said user does not use points. A point card system for generating value data by applying a store-specific digital signature to point data of an amount obtained by adding the balance of value data within the user and the user data. 4. The point card system according to claim 1, wherein the store host computer issues a user ID when receiving the user registration information from the store terminal when registering the user. User I
User registration means for registering a set of D and the user registration information; and issuing a user public key pair and a user public key certificate based on the user ID issued by the user registration means. A key data generation unit, a user ID issued by the user registration unit, a user public key pair and a user public key certificate issued by the key data generation unit, and a predetermined store host public key. Key transmitting means for transmitting to the store terminal, the store terminal transmits the user ID, user public key pair, user public key certificate and store host public key received from the key transmitting means to the user point. A point card system comprising key information input means for inputting to a card. 5. The point card system according to claim 4, wherein a plurality of said shop terminals are provided, and each of these shop terminals is individually arranged in a plurality of shops, and said shop host computer is one. The point card system, wherein the store host public key is shared among the user point cards. 6. The point card system according to claim 1, wherein a plurality of the shop terminals are provided, and each of the shop terminals is individually arranged in a plurality of shops. A table is provided, and each of these store host computers is individually connected to each store terminal, and has an individual store host public key, and is provided in each of the store host computers and registers the user. Receiving the user registration information from the store terminal, issuing a user ID, and registering a set of the user ID and the user registration information; and a user registration unit connected to each of the store host computers. A user public key pair is provided based on the user ID issued by the user registration means provided in the common third party organization device, and the common third party public key is used. Key data generating means for issuing a user public key certificate by digital signature, a user ID provided in each of the store host computers, issued by the user registering means, and used by the key data generating means. Key transmitting means for transmitting a user public key pair and a user public key certificate, and a predetermined store host public key to the store terminal; a user ID provided in each of the store terminals and received from the key transmitting means; A point card system comprising key information input means for inputting a user public key pair, a user public key certificate, and a store host public key to the user point card.