TW201606665A - Management device, management method, and program - Google Patents

Abstract

A management device (14), wherein a holding unit (102) holds a determination list that is renewed by a list server. A control unit (103) controls a portable device by communicating with the portable device via a communication unit (104). When the portable device that is offered for payment and the communication unit (104) are enabled for communication, the control unit (103) acquires from the portable device a portable device ID, a remaining balance, and an update time. When a first criterion pertaining to the acquired remaining balance, a second criterion pertaining to the acquired update time, and a third criterion pertaining to the acquired ID and the held determination list are fulfilled, the control unit (103) determines a reference time that shows the current time, performs a payment based on the acquired remaining balance and a prescribed incremental amount and updates the remaining balance of the portable device, updates the updated time of the portable device to the determined reference time, and generates a charge report so that a charge corresponding to the prescribed incremental amount is made by the management server to the account associated with the acquired ID.

Description

Management device, management method, and program

The present invention relates to a management device for replenishing a balance of a portable device that maintains a balance of electronic money or managing a payment caused by the portable device, a management method performed by the management device, and a program executed on the management device .

Systems that utilize electronic money have been proposed in many ways by paying considerations to accept offers for goods or services. In the electronic money system, instead of putting cash in the wallet, it is replaced by a portable device (equivalent to a wallet), and the electronic value (equivalent to cash in the wallet) expressed by electronic information. To make a payment.

At the time of payment of the electronic value, the payer is a portable device that is close to the reader/writer operated by the provider of the goods or services, thereby requiring only a short period of time to be carried on and off the portable device. NFC (Near Field Communication) is established between the machines, and by this communication, the electronic value corresponding to the portable device can be established, and the amount of payment can be reduced. In NFC, although it is not necessary to bring the portable device into contact with the reader/writer, it is typically necessary to bring the distance close to a few mm or so.

As a portable device, an electronic circuit for NFC embedded in a cash card or a credit card is widely used. The electronic circuit generally operates by electric power generated by electromagnetic induction by radio waves for NFC emitted from the reader/writer.

On the other hand, in a portable terminal such as a mobile phone or a smart phone, the electronic circuit for embedding NFC in the same manner as the above is widely used. In addition, there are proposals for use in telephone communication. The communication function of NFC is set in the SIM (Subscriber Identity Card) card. In these cases, in addition to using the radio waves emitted by the reader/writer as a power source, it is also possible to receive the supply of electric power from the battery provided in the body of the portable terminal.

The balance of the electronic value established by the portable device is managed by the electronic circuit in the portable device or the electronic money server, and the instruction or electronic money servo exchanged according to the communication with the portable device Increase or decrease in processing in the device.

When the balance of the electronic value is less than the amount of the payment, the owner of the portable device is not made an explicit inquiry, and the credit of the account corresponding to the portable device is automatically authorized. In the case of success, the technique of increasing the balance of the electronic value by the amount specified has been proposed (Patent Document 1). In this way, under certain conditions, the function of automatically increasing the balance of the electronic value at the expense of the amount of the account in the corresponding account of the portable device is called "automatic deposit" or "automatic bonus".

Patent Document 1 proposes that, when an automatic value is to be added, the credit card company that manages the account is entrusted with credit each time (paragraph 0041); a credit list of an account with an untrusted credit card is delivered to the POINT (Point Of Sales) terminal, and when the value is to be automatically added, the account of the credit card to which the portable device is created is compared with the rejection list. The correct method (paragraph 0054); log in the latest credit card utilization date and time in the portable device, based on the difference between the time point to be automatically added and the date and time of the registered use date, determine whether the automatic value-adding method can be used (paragraph 0062) ).

[Previous Technical Literature] [Patent Literature]

[Patent Document 1] Japanese Patent Laid-Open Publication No. 2002-366862

However, each time a credit card company is required to obtain credit, it takes time to judge the communication and the credit, which will damage the immediacy of the payment caused by the electronic money. In the method of granting a credit list, if the credit list becomes huge, it will oppress the memory area of the POS terminal, and in addition, it will take more time to judge. In the method of utilizing the date and time of use of a credit card, there is a lack of reliability, and the payment can only exclusively use electronic money, and it is difficult for a user who uses a credit card as the main automatic value-added.

The present invention is to solve the above problems, and aims to provide One, considering the immediacy, the reliability, and the load of the POS terminal, and appropriately determining whether the portable device that manages the balance of the electronic money can supplement the balance or the management device caused by the portable device, the management device The management method of execution, and the program to be executed on the management device.

In the management device of the present invention, the holding unit is maintained by the list of changes changed by the list server; the control unit communicates with the portable device by the communication unit to control the pre-recording portability. The device; once the pre-recorded portable device for payment and the pre-recording communication unit become communicable, the pre-recording control unit obtains the ID, balance and update time of the pre-recorded portable device from the pre-recorded portable device; The first condition related to the balance is satisfied, and the second condition related to the update time obtained in the previous note is satisfied, and the third condition related to the judgment list in which the ID obtained in the preceding paragraph and the pre-record is held is satisfied. The pre-recording control department: (a) update the balance of the pre-recorded portable device by making a pre-payment from the balance obtained in the preceding paragraph and the specified incremental amount, and update the update time of the pre-recorded portable device to indicate the current reference. (b) generating a class for the management server to perform an increment corresponding to the amount specified in the preceding paragraph for the account to which the ID obtained by the pre-recording is associated A required class report.

11‧‧‧Electronic money system

12‧‧‧list server

13‧‧‧Management Server

14‧‧‧Management device

15‧‧‧Computer Communication Network

16‧‧‧ portable device

18‧‧ ‧ Gold Center

61‧‧‧Checklist

62‧‧‧ID column

63‧‧‧Date time column

71‧‧‧Determining list

102‧‧‧ Keeping Department

103‧‧‧Control Department

104‧‧‧Communication Department

271‧‧ Report

272‧‧‧Type column

273‧‧‧ID column

274‧‧‧Date time column

275‧‧‧ value column

276‧‧‧Remarks column

Fig. 1 is an explanatory diagram showing an outline of a POS terminal and a reader/writer according to an embodiment of the present invention.

Fig. 2 is an explanatory diagram of an outline of a system according to an embodiment of the present invention.

Fig. 3 is an explanatory diagram of a state of memory secured in a memory device of a portable device according to an embodiment of the present invention.

4 is a flow chart showing the flow of a process of changing the determination list described in the embodiment of the present invention.

[Fig. 5A] An explanatory diagram for explaining the state before the change of the check list.

[Fig. 5B] An explanatory diagram for explaining the appearance of the check list change.

[Fig. 5C] An explanatory diagram for explaining the state of the check list after the change.

[Fig. 6A] An explanatory diagram for explaining the state before the change of the determination list.

[Fig. 6B] An explanatory diagram for explaining the state of the determination list after the change.

Fig. 7 is an explanatory diagram showing a schematic configuration of a management device according to the present embodiment.

Fig. 8 is a flow chart showing the flow of processing executed in the management apparatus described in the embodiment.

[Fig. 9] An explanatory diagram for explaining a state of a report sent from a reader/writer to a management server.

[Fig. 10] A flow chart showing the flow of processing for adding value to the portable device by the management server.

[Fig. 11] A flow chart showing the flow of processing for changing the restriction on the portable device in accordance with the reason that the portable device is defective.

Hereinafter, embodiments of the present invention will be described. Further, the present embodiment is for illustrative purposes, and does not limit the scope of the invention. Therefore, as long as the practitioner can naturally adopt the embodiments in which the various elements or all elements are equally substituted, these embodiments are still included in the scope of the present invention.

[Example 1]

The electronic value in the electronic money system has a value similar to cash. The electronic value can be exchanged with each other or from one party to the other, and can be managed by the same currency unit, or can be converted at the time of exchange by using the unit alone. In addition, the various points that are given in response to the user's actions (purchasing of the product, answering the questionnaire, visiting the store, etc.) can also be used as the electronic value.

1 is an explanatory diagram showing an outline of a POS terminal and a reader/writer according to an embodiment of the present invention. This will be described below with reference to this figure.

In this embodiment, the provider of the transaction object is in the store header, and is used in exchange for the electronic value exchange with the provider. The reader/writer 2 connected to the POS terminal 1.

Further, the POS terminal 1 is further provided with a bar code reader 3, a keyboard 4, a shop assistant display 5, a guest display 6, and a drawer 7.

At the time of the transaction, first, the clerk reads the price of the commodity by the barcode reader 3 of the POS terminal 1, or directly inputs the amount by the keyboard 4. The drawer 7 is used as an entrance and exit at the time of cash payment.

When the provider pays by electronic value or supplements the electronic value to the portable device, the POS terminal 1 issues an instruction to the reader/writer 2 to perform the electronic value of the entered credit. transaction.

In this way, the reader/writer 2 performs near-field communication with the portable device, and investigates the amount of the electronic value that the portable device is established to carry out the payment of the electronic value.

When the payment due to the electronic value is successful, the reader/writer 2 notifies the POS terminal 1 of the intention, and the POS terminal 1 performs accounting processing on the store side. If there is a payment by cash, the POS terminal 1 separately performs accounting processing on the store side.

The reader/writer 2 of the present embodiment is prepared in the field of non-volatile memory. In the memory field, in addition to the history of the electronic amount of cashier processing performed on the portable device, a program operating in the reader/writer 2 or various materials used by the program are stored.

The history of the cashier processing recorded in the reader/writer 2 is managed by the operator of the entire electronic money system in order to make the amount of electronic money exchanged between the provider and the provider, and the reader/writer 2 For example, once a day, etc., periodically, the resume is reported as a report and transmitted to The operator of the electronic money system.

In this way, once it is instructed that the amount of payment should be made, the NFC is carried out with the portable device to perform the settlement of the electronic value of the credit amount, and the processing of the intention is notified to the operator, which is a separately readable and writable machine. 2, is called a rich client. From a size or cost point of view, the non-volatile memory area of a rich client is usually limited in capacity.

In recent years, the checkout of a plurality of electronic money systems by one reader/writer 2 is very common. In such a reader/writer 2, the memory area is allocated to the plurality of electronic money systems, and thus the capacity limitation is more severe. Therefore, in the present embodiment, a technique for suppressing the amount of use in the memory area is employed.

In addition, it is also possible to use a communication device for electronic checkout that can be assembled only in an inexpensive communication device that can perform NFC with a portable device, or a smart phone, etc., as a device for realizing the reader/writer 2. Use for parts. In this aspect, the NFC communication device functions purely as an interface with the portable device, and does not perform calculations such as calculation or judgment. These processes, the generation of commands with the portable device, the determination of the results, and the like are handled by a thin client server (not shown) that uses the NFC communication device as a client. That is, the function equivalent to the reader/writer 2 is realized by the cooperation of the two.

In this form, the server for the reduced client is connected to the POS terminal 1 via a computer communication network such as a LAN (Local Area Network) or a WAN (Wide Area Network) in the store. The communication machine is controlled by an instruction received from the POS terminal 1. The communication machine performs NFC on the portable device to make an inquiry or payment of the electronic value, and sends the result to the server for the thin client. The server for the thin client is sent to the POS terminal 1 for the result.

In this aspect, the history of processing the electronic value, or the program required to control the communication device, and the various materials used by the program are generally stored in a hard-client client. A non-volatile memory device such as a disc, but it can also be used if the communication device has a non-volatile memory field. For example, the communication record between the communication device and the portable device of NFC can be used as the cashier record of the most direct electronic value, so it is kept in the non-volatile memory field of the NFC communication device, but the program is kept in a streamlined manner. This type of client can be used in a server.

In the simplified client method, as a memory area, a hard disk such as a thin client server is used, and the limitation of the memory area is usually alleviated compared to the rich client mode. However, in order to minimize the use of memory, this will not change in both rich client mode and rich client mode.

In the rich client system, the program is executed by a CPU (Central Processing Unit) included in the reader/writer 2 constituting the single device. Further, in the reduced client method, the program is executed by the CPU of the server for the reduced client, and the communication device for NFC is controlled.

This program can be operated by the entire electronic money system. The delivery server managed by the operator who is the operator and the agent of the store transmits the media through a transitory transmission medium such as a computer communication network. Moreover, the program can be recorded on a CD, a floppy disk, a hard disk, an optical disk, a DVD, a tape, a ROM (Read Only Memory), an EEPROM (Electrically Erasable Programmable ROM), a flash memory, a semiconductor memory, or the like. Readable non-transitory information recording media. The information recording medium can be separately distributed and sold independently of the reader/writer 2 or the thin client server.

The program to be distributed is a non-transitory information recording medium recorded in a flash memory or a hard disk of the downloaded machine. The CPU reads the program to the RAM (Random Access Memory) of the temporary memory device and then executes the instructions in the program. However, in an architecture in which ROM and RAM can be mapped into one memory space, the instructions contained in the program stored in the ROM are directly read and executed by the CPU.

Hereinafter, the management device described in this embodiment is realized by the reader/writer 2. In this aspect, it is assumed that the reader/writer 2 is prepared with a memory area where the capacity limitation is severe. In the memory field, the program required to control the reader/writer 2 itself and the data used by the program are recorded.

Fig. 2 is an explanatory diagram showing an outline of a system according to an embodiment of the present invention. This will be described below with reference to this figure.

In the system 11 described in this embodiment, by the reader/writer 2 The realized management device 14 is connected to the management server 13 and the list server 12 via a computer communication network 15 such as the Internet to be communicable. The management server 13 and the list server 12 are managed by an operator of the entire electronic money system or a business operator who performs the operations of the operator and the provider. The management server 13 and the manifest server 12 may be integrally formed or may be constituted by a plurality of server computers.

Further, in the present embodiment, it is assumed that the automatic bonus is performed by a credit card or a charge card. Here, the list server 12 communicates with the credit card company or the credit center 18 operated by the charge card company in addition to the management server 13, and changes the judgment list.

In addition, the management server 13 communicates with the credit card company or the credit center 18 operated by the charge card company, accepts the credit of the account, or debits the account.

As described above, the management device 14 is used by a provider of a product to be sold or a service, etc., in a real store or an electronic market. As described above, in the present embodiment, the management device 14 is implemented by the reader/writer 2, communicates with the portable device 16 by NFC, acquires information from the portable device 16, or writes to the portable device 16. Information and more.

This embodiment is applicable to an electronic money system called a stored-value type. In the stored value system, the electronic value (also called "balance") that the user can pay as the consideration in the transaction, and the card or mobile phone embedded in the electronic circuit, the smart phone, etc. The device 16 is managed and managed.

In a stored value system, it is generally provided by the portable device 16 Some electronic circuits remember the value of the available electronic value. In this case, it is equivalent to loading cash in the wallet. Hereinafter, the portable device 16 is created with a corresponding amount, and the image is "cash remaining in the wallet", which is called "remaining value". Fig. 3 is an explanatory view showing a state of memory secured in a memory device of a portable device according to an embodiment of the present invention. This will be described below with reference to this figure.

As shown in the figure, the memory device 51 of the electronic circuit of the portable device 16 is prepared with an ID field 52, a value field 53, a balance update time field 54, an added value update time field 55, and a reference amount field 57. , incremental field 58. The ID field 52, which is the field in which the ID of the portable device 16 is maintained, is prohibited from being rewritten. In the value field 53, the value of the residual value is recorded.

The ID field 52 and the value field 53 are essential elements for the portable device 16 to function as a wallet for electronic money, and therefore, if the reader/writer 2 is not recognized by the operator, the content cannot be rewritten. Encrypted and locked. On the other hand, the fields of the balance update time field 54, the value update time field 55, the reference amount field 57, the incremental amount field 58, and the like are for the owner of the portable device to connect to the person held by himself. The IC card on the computer uses the reader to write information, and performs automatic value addition. Therefore, compared with the ID field 52 and the value field 53, the security limitation is moderated.

The provider of the product or service functions as the management device 14 by the reader/writer 2 that can communicate with the portable device 16, and accepts the payment of the consideration from the user. Once the user puts the portable device 16 Nearly implementing the reader/writer 2 of the management device 14, the NFC between the portable device 16 and the reader/writer 2 becomes possible, and various commands are sent from the reader/writer 2 to the portable device 16, and the execution result of the command can be obtained from The carrying device 16 is sent to the reader/writer 2.

For example, once the query command is used, as the result of the execution, the ID of the portable device 16 held in the ID field 52 or the value of the residual value held in the value field 53 can be obtained.

When the instruction is reduced, the portable device 16 is caused to establish a corresponding residual amount value, and the electronic value specified by the instruction is reduced. This corresponds to taking cash out of the wallet. That is to say, the reduction of orders is used in the transaction of receiving goods or services, at the time of payment of the consideration, that is, the "currency". Hereinafter, the electronic value specified by the instruction is reduced, which is called "price value".

The instruction is added to cause the portable device 16 to establish a corresponding residual value, and increase the electronic value specified by the instruction. This corresponds to putting cash into the wallet. The addition of instructions, for example, at the storefront, where the user pays cash to the store clerk, will be utilized when the portable device 16 is supplemented by the electronic value of the cash.

In addition, when the instruction is increased or the instruction is increased, the time taken from the instant clock of the reader/writer 2 is automatically sent to the portable device, and the residual value of the portable device 16 is updated, regardless of the increase. Subtract, the date and time at this time will be written to the balance update time field 54. The balance update time held in the balance update time field 54 can be obtained by querying the command.

In the portable device 16 in which the automatic value setting is not performed, the value 0 is recorded in the increment amount field 58 by the setting or initialization at the time of shipment. When the owner of the portable device 16 performs the automatic value setting, the base amount for determining whether the automatic value can be added is written in the reference amount field 57 of the portable device 16 in the increment amount. In the field 58, the increment amount at the time of automatic value addition may be written. Further, a flag field in which the use of the automatic value addition can be set may be additionally prepared in the memory device 51.

When the automatic value setting is performed for the first time, the current date and time read by the device set by the owner's personal computer or the NFC terminal of the storefront is written as the initial value to the bonus update time field 55. Thereafter, the value of the electronic value is added from the account for the automatic value added by the portable device 16. When the balance is updated, the date and time at this time is regarded as the update update time, and is written to the add-on. Value update time field 55. Further, when the automatic value setting is performed for the first time in the store, it is also possible to set the value of the electronic value by the account for automatic value added corresponding to the portable device 16. The value of the update is obtained by querying the command.

Further, in the present embodiment, when the electronic value of the portable device 16 is supplemented by cash, the writing to the value-adding update time field 55 is not performed.

On the other hand, even if the account for automatic value addition is not automatically added, but is added by the expressive indication of the owner of the portable device 16, the value of the value-added update is updated. . For example, the portable device 16 is composed of a credit card, and the credit card account is credited according to the usual credit card payment procedure, and the user directly pays and the portable device 16 is supplemented with the electronic value.

Further, in the present embodiment, as will be described later, when the credit for the credit card account is not completed, an automatic bonus may be performed. In this case, the date and time when the portable device 16 is supplemented with the electronic value is the value-added update time, and after the value-added update time, the credit card account is used for the scholarship.

In the above description, it is intended to perform the transaction of the electronic value through the reader/writer 2. However, if the portable device 16 has the function of communicating through the computer communication network 15, the application operating in the portable device 16 is The command may be sent to the computer communication network 15 to obtain or increase or decrease the residual value of the portable device 16. In this case, the value of the payment or the residual value in the portable device 16 can be performed without using the reader/writer 2.

By reducing the number of instructions or adding instructions, the value of the electronic value is increased or decreased, which means that the amount of value moves between the payer and the provider. The provider transmits a report indicating the movement of the amount value to the management server 13 from the reader/writer 2 of the management device 14. As noted above, the management server 13 is operated by the operator of the electronic money service. If the settlement information accumulated in the management server 13 is matched, the provider can obtain the total amount of the electronic value obtained or lost during the period. The total amount is managed by an account for electronic money checkout owned by the provider.

The provider, if it receives the electronic value, exchanges the obtained electronic value and obtains cash from the operator. On the other hand, in the case of loss of the electronic value, the provider is responsible for paying the operator the amount of cash equivalent to the amount of the electronic value.

In addition, as noted above, there are sometimes intermediate players between the provider and the operator. The operator, who is referred to as an e-money service provider, prepares the infrastructure necessary for the provider to accept payment due to the electronic value, or provides advice or support for the operation of the electronic value.

In the present embodiment, the communication between the reader/writer 2 of the management device 14 and the portable device 16 that enters its communication range is NFC. However, it is also possible to adopt a configuration in which the management device 14 and the portable device 16 communicate by infrared communication or Bluetooth (registered trademark).

Furthermore, the present embodiment is also applicable to an electronic money system called a server value method. In the server value method, the ID of the wallet for distinguishing the electronic value is obtained from the portable device, and the residual value of the account and the account under the management server of the operator or the business operator, The system is managed. That is, in the server value method, the portable device functions as an identification tag required for identifying an account, but does not remember the residual value itself.

As described above, the management device 14 in this embodiment can be provided by a CPU capable of performing low-load calculation, a non-volatile memory field used by the CPU for temporarily recording and processing required RAM, and a small capacity. The reader/writer 2 is implemented. That is, the management device 14 is implemented by the CPU executing a program stored in the field of non-volatile memory. Further, the determination list referred to by the program or the communication record of the portable device required to generate the report transmitted to the management server 13 is also maintained by the non-volatile memory field.

As described above, the reader/writer 2 and the management server 13 periodically exchange information such as NFC-based communication records. Thereby, in the management server 13, the total amount of the electronic value owned by the provider is required. The mode of the reader/writer 2 is realized by the combination of the NFC communication device for maintaining the communication record and the reduced client server, and the reduced client server reads the communication record from the NFC communication device. A report is generated and sent to the management server 13 periodically.

Further, the automatic addition of the portable device 16 is performed by taking the amount of the account of the account to which the portable device 16 is established as the consideration. For example, when the portable device 16 is implemented by a credit card, when the automatic increment of the increment is performed, the credit card account is credited with the amount corresponding to the predetermined increment. If the portable device 16 is implemented as a cash card (debit card), the debit is performed from the account of the cash card (debit card) when the automatic increment of the increment is performed. .

Further, in the present embodiment, the upper limit number of automatic additions can be performed in one payment, and is determined to be a fixed value of one time. Also, if you want to set a limit on the total amount of the bonus or the total amount of payment per day, The value is set in the field of the memory device 51 of the portable device 16 that can be written by the user. When the utilization of the portable device 16 is determined, the management device 14 reads these settings as a reference for the determination.

Further, in the portable device 16, sometimes there is a problem that automatic value addition or payment should not be performed. For example, if the claim that the portable device 16 itself is lost or stolen has been filed from the owner of the portable device 16, the payment by the portable device 16 should be prohibited.

In addition, the portable device 16 is composed of a credit card or a charge card. When the account of the credit card or the charge card is added to the portable device, the lost or stolen report is generally for the credit card company or the credit card. The card company, but from these companies, to the operator or business of the electronic money system will convey lost or stolen information.

Further, if the portable device 16 is constituted by a smart phone or a mobile phone or another IC card having no checkout function, the operator or the operator of the electronic money system is notified of the loss or theft.

Further, as a situation in which the portable device 16 is not automatically added, it is also conceivable that a certain accident occurs in the account in which the portable device 16 is associated. For example, there will be the following conditions.

(a) The portable device 16 is composed of a smart phone or other IC card that does not have a checkout function, and claims a lost or stolen credit card or a charge card that is set to be added to the portable device 16. The situation. In addition, in this case, since the portable device 16 itself is not lost or stolen, it is possible to pay the electronic value caused by the portable device 16, or to add value to the portable device 16 by cash or the like. .

(b) When the credit card to which the portable device 16 is established has reached the limit of use for this month, when the payment to the credit card company is delayed, the credit card exceeds the expiration date.

(c) When the balance of the account of the corresponding cash card (debit card) to which the portable device 16 is established is less than a certain amount.

(d) When the contract of the credit card or cash card (debit card) to which the portable device 16 is established has been released.

In the present embodiment, the list server 12 managed by the operator or the business of the electronic money service acquires information from the credit center 18 and the management server 13 operated by the credit card company or the charge card company, and the above information is generated. The ID of the portable device 16 in the case of failure is registered in the determination list, and the determination list is delivered to the management device 14. The management device 14 refers to the determination list to determine whether the automatic value-adding of the portable device 16 or the payment by the portable device 16 is possible.

In the present embodiment, it is intended to use a list of decisions required to determine the availability of the portable device 16 itself, and a list of decisions required to determine the availability of an automatic value added to the portable device 16, which 2 types. In these determination lists, it is sufficient if the ID of the portable device 16 in which a problem has occurred is listed.

Further, in the present embodiment, the critical period is used in order to suppress the size of the determination list for automatic value addition. In the critical period, for example, 30 days, 60 days, 90 days, and the like are determined in advance for a certain period of time. Then, the starting point of the critical period from the current point (the point at which the list server 12 changes the decision list) is obtained, and only the point from the start point to the present is obtained. The ID of the portable device 16 in which the reason for automatic value addition or payment should not be made between the time points is registered in the determination list.

In addition, regarding the determination list of the use of the portable device 16 itself, there is no critical period, but it is preferable to enumerate the IDs of all the portable devices 16 that are prohibited from being used, but the person who steals the portable device 16 is usually It is used for payment after being stolen, and it is rarely used for long-term use. Therefore, similarly to the determination list for automatic value addition, the critical period can also be set for the use determination list. Further, the determination list for automatic value addition may be different from the length of the critical period for the use list.

In the following description, the change list of the determination list common to the use list of the critical period and the judgment list for the automatic value addition is described.

The list server 12 performs the change processing of the determination list periodically, for example, once a day. In order to perform this operation, a check list is prepared in a non-volatile memory device such as a hard disk of the list server 12.

Fig. 5A is an explanatory diagram for explaining the state before the change of the check list. Fig. 6A is an explanatory diagram for explaining the state before the change of the determination list. The following description will be made with reference to these figures.

The check list 61 described in this embodiment is managed in the form of a table. The ID of the portable device that has confirmed the defective condition from the start point to the time of the change is recorded in the system ID column 62, and the date and time when the defect is confirmed is recorded on the date with the ID. Room 63. Further, in the present embodiment, the date and time recorded in the date and time column 63 of the check list 61 is recorded in units of days.

The check list 61 shown in FIG. 5A is intended to be changed in the early morning of August 11, 2013. If the critical period is 90 days, the starting point is calculated in Japanese units, which is May 13, 2013. Therefore, the ID column 62 of the check list 61 records the ID of the defective condition from the date of May 13, 2013 to the early morning of August 11, 2013.

The determination list 71 described in this embodiment removes the date and time column 63 from the check list 61. In the determination list 71 shown in FIG. 6A, only the IDs indicating the inconveniences in the date and time from the May 13, 2013 to the early morning of August 11, 2013 are arranged.

4 is a flow chart showing the flow of a process of changing the determination list described in the embodiment of the present invention. Hereinafter, an example of the change processing is explained when an example is executed in the early morning of August 12, 2013.

Once the change process is started, first, the list server 12 acquires the current time point as the change time point (step S81). Then, the start point before the critical period is calculated from the change time point (step S82).

In the above example, the current time is the early morning of August 12, 2013, so the time of change and the starting point, in terms of daily units, are in the early morning of August 12, 2013 and May 14, 2013.

By the way, the list server 12 deletes the line registered from the date earlier than the start point from the check list 61 (step S83). In the check list shown in FIG. 5A, the line registered on the date earlier than the start point is "67890 (2013/05/13)". Fig. 5B is an explanatory diagram for explaining how the check list is changed. As shown in the figure, the line "67890 (2013/05/13)" is deleted from the check list 61 by the processing of step S83.

Thereafter, the list server 12 acquires the identification information of the account in which the defect has occurred, such as the credit card number of the credit card or the charge card, which has been reported to have been reported as a defective condition (step S84). For example, suppose that credit card numbers 1111-2222-3333-4444 and 5555-6666-7777-8888 are obtained here.

Then, the manifest server 12 acquires the ID of the portable device 16 that has set the account as the value-added source for each of the accounts of the acquired identification information from the management server 13 (step S85). .

The management server 13 manages the ID of the portable device 16 in association with the account of the credit card or the like if the portable device 16 is constituted by a credit card or the like. Further, when the portable device 16 is constituted by a smart phone or the like, an account such as a credit card set by the user is managed in association with the ID of the portable device 16. Then, the management server 13 retrieves the ID of the portable device 16 to which the account is created, and sends the found ID to the list server 12 once the identification information of the account is sent from the list server 12.

For example, it is assumed here that the credit card number 1111-2222-3333-4444 is found as the ID system to which the corresponding ID system is located, but 89012, but If the ID is not found for 5555-6666-7777-8888, the management server 13 sends the 89012 to the list server 12 for 1111-2222-3333-4444, and sends it for 5555-6666-7777-8888. Did not find the meaning. A typical example in which the ID is not found is a case where the portable device 16 is constituted by a smart phone or the like, and the corresponding connection with the credit card in question has been released by the user and is associated with the new credit card. .

Then, the list server 12 associates the ID sent from the management server 13 with the information of the time unit at the time of the change, and adds it to the check list (step S86). Fig. 5C is an explanatory diagram for explaining the state of the check list after the change. As shown in the figure, the "89012 (2013/08/12)" line is added to the check list 61 by the processing of step S86.

In this way, when all the IDs of the occurrence of the failure are added to the check list 61, the list server 12 extracts only the ID column from the check list 61, and generates the determination list 71 (step S87), thereby making the change determination. Listing 71 ends the process. Fig. 6B is an explanatory diagram for explaining the state of the determination list after the change. In the determination list 71 shown in the figure, only the IDs of the defective cases are reported in the date and time from the morning of May 14, 2013 to the early morning of August 12, 2013.

The management device 14 periodically acquires the determination list 71 thus changed from the list server 12. Therefore, the list of judgments 71 that can be obtained will be the older information that is slightly delayed from the latest adverse situation information. Therefore, in the present invention, by the technique as will be described later, It is reasonably suppressed by the possibility of improper use such as automatic value addition.

Further, in the technique of Patent Document 1, although the account of the credit card used in the automatic value-added credit is registered in the credit list, in the present embodiment, the portable device in which the malfunction occurs The ID of 16 or the like, the ID used in the electronic money service is registered in the judgment list. In other words, in Patent Document 1, the determination is made by the identification information of the added value of the automatic value added. However, in the present embodiment, the determination is performed by the identification information of the added value, which is different.

In addition, the timing of the change of the determination list can be obtained from the date and time of the update of the file of the determination list. Moreover, if it is determined that the change of the list is performed based on the predetermined schedule, the latest date and time earlier than the current date may be regarded as the change time in the date and time determined to be changed in the schedule. .

In the present embodiment, if the portable device 16 of the ID registered in the determination list is to be used for payment, the automatic value added to the portable device 16 or the payment by the portable device 16 may be restricted. First, the following description will be made to limit the payment itself or to limit the automatic value-added by using the judgment list of the use possibility and the judgment list for automatic value addition. Thereafter, the aspect of limiting the amount of payment is explained.

In addition, in the process of changing the determination list of the present embodiment, when the credit card is temporarily unable to be used for the check list due to exceeding the usage limit amount, even if it becomes available later, it will continue to be registered in the check. In the list, until after the critical period Automatic value addition, etc. In this regard, it is also possible to adopt the manner in which the ID of the account of the resurrected credit card is deleted from the check list in response to the contact from the credit card company.

Fig. 7 is an explanatory diagram showing a schematic configuration of a management device according to the present embodiment. This will be described below with reference to this figure.

The management device 14 includes a holding unit 102 and a control unit 103, and the control unit 103 controls the communication unit 104. The holding unit 102 is realized by a non-volatile memory device included in a reader/writer, a POS terminal, or a server for a compact client. The control unit 103 is realized by a CPU of a POS terminal or a CPU of a thin client server. The communication unit 104 is realized by a reader/writer.

The holding unit 102 holds a list of decisions to be periodically changed by the list server 12. The determination list is typically downloaded from the list server 12 when the report is sent to the management server 13 once a day. As described above, the determination list is prepared for determining two types of use and the automatic value addition itself, but details or modifications thereof will be described later.

In the present embodiment, the determination as to whether or not the portable device 16 that can perform NFC with the communication unit 104 can perform automatic value addition or the payment by the portable device 16 itself can be determined by the control unit 103 with reference to the determination list. . Details and modifications of the determination of the automatic addition or payment by the control unit 103 will be described later.

Here, in the combination of the reader/writer 2 of the management device 14 or the communication server for the compact client and the communication device for NFC, it is usually recorded. Recalling capacity is limited. Therefore, in the present embodiment, by narrowing the size of the determination list, it is possible to reasonably suppress the compression in the memory field, and at the same time, the determination is made at a high speed and with high reliability.

Fig. 8 is a flow chart showing the flow of processing executed in the management apparatus described in the embodiment. This will be described below with reference to this figure. This process is initiated by the provider who accepts the offer of goods or services to determine the amount to be paid, and the payment by the provider to select the electronic money.

Once the process is started, the POS terminal outputs a message prompting the portable device 16 to be placed on the reader/writer by the provider (step S201), and the control unit 103 causes the communication unit 104 to detect that the NFC can be performed. The portable device 16 (step S202). If the portable device 16 capable of performing NFC is not detected (step S203; No), the process returns to step S201.

If the portable device 16 capable of performing NFC is detected (step S203; Yes), the control unit 103 transmits a query command to the portable device 16 via the communication unit 104 (step S204), and receives the result (step S205).

Then, the control unit 103 acquires the following information based on the received result (step S206).

(1) The ID of the portable device 16.

(2) The balance of the electronic money in the portable device 16 (residual value).

(3) The date and time (the balance update time) at which the balance in the portable device 16 is last updated.

(4) Finally, the portable device 16 is paired from the portable device 16. The added value of the account, the date and time when the balance is updated (additional update time).

(5) The basis amount required to determine the possibility of automatic value addition.

(6) The increment amount when the automatic bonus is performed.

In addition, the reference amount or the incremental amount may not be stored in the portable device 16, but may be uniformly determined by a contract or the like. Moreover, the accuracy of the balance update time or the value update update time may be any one of seconds, minutes, hours, and days.

Further, in the server value method, after the ID of the portable device 16 is obtained from the received result, the balance, the balance update time, and the value-added update time are acquired from the management server 13 or the like using the ID as the search key. , the base amount, the increment amount, and so on.

Then, it is checked whether the acquired ID is usable (step S230). As mentioned above, if it is included in the judgment list of the use availability, the use is prohibited, and if it is not included, it is usable. If it is usable (step S230; Yes), it is checked whether or not the automatic increment is set based on whether the increment amount at the time of the automatic addition is 0 or not (step S231). If the setting using the automatic bonus has been made (step S231; Yes), the process proceeds to step S207.

Next, the control unit 103 checks whether the acquired balance is equal to or greater than the sum of the acquired reference amount and the payment amount (step S207). If the balance is equal to or greater than the above (step S207; Yes), the control unit 103 performs the payment by the portable device 16 by transmitting the specified payment amount reduction command and the result to the portable device 16 by the communication unit 104 ( step S208).

Then, the action is notified to the payment report required by the management server 13 by the fact that the payment of the payment amount due to the acquired ID has been performed (step S209), and the present process is ended.

On the other hand, if the balance is not full (step S207; No), it is checked whether the sum of the acquired balance and the acquired increment amount is equal to or greater than the payment amount (step S210). If the sum is not the full payment amount (step S210; No), even if the portable device 16 is automatically added once, the payment amount will not be reached. Then, the message "The current balance of the portable device 16 is not payable" is output (step S251), and the present process is ended.

Thereafter, the provider is directed to the provider, for example, prompting other payment methods as follows, allowing them to select either.

(1) Pay the full amount of the payment in cash.

(2) All the balances of the portable device 16 are used and the insufficient amount is paid by cash or credit card or charge card.

(3) Prior to payment, an explicit bonus is made based on the instructions of the provider, in cash, credit card, debit card, and the like.

(4) Utilizing other portable devices 16.

(5) Abandon the transaction.

Here, if payment is selected by the other portable device 16, the process is restarted.

In addition, an explicit bonus, if known to be made from the account to which the portable device 16 is associated, is for example: (p) the portable device 16 is constituted by a credit card, (q) the account to which the portable device 16 is associated is the credit card, (r) from the account of the credit card, to the portable device constituted by the credit card The residual value of 16 is based on the indication of the owner's explicitness. In the case of the store, etc., in the case where the electronic value has been added, the balance update time and the value-added update time recorded in the portable device 16 , will be updated.

When the explicit bonus is performed in cash, as described above, the balance update time will be updated, but the bonus update time will not be updated.

When the sum is equal to or greater than the payment amount (step S210; Yes), the first condition involved in the automatic addition is satisfied. Then, the control unit 103 determines the current reference time (step S211). As the reference time, the following can be employed.

(a) The current date and time.

(b) Determine the date and time when the list was last downloaded.

(c) Determine the date and time when the list was last changed. These date and time can be obtained by referring to the instant clock provided by the POS terminal or the server for the thin client. Moreover, the accuracy of the reference time may also be in accordance with the accuracy of the balance update time or the value update time of the portable device 16.

Next, the control unit 103 investigates whether or not the interval from the acquired update update time to the determined reference time is exceeded. The critical period of the determination list is passed (step S212). Since the reference time corresponds to the current date and time, and the value-added update time is the past date and time, it becomes a judgment, and whether the value after the value-added update time is subtracted from the reference time exceeds the critical time.

If the interval is equal to or less than the critical period (step S212; No), the second condition involved in the automatic addition is satisfied. Here, the control unit 103 checks whether or not the acquired ID is included in the determined list (step S213).

If the ID is not included in the determination list (step S213; No), the third condition involved in the automatic addition is satisfied. Here, the control unit 103 checks whether or not the payment amount is equal to or greater than the increment amount (step S214).

If the payment amount is equal to or greater than the incremental amount (step S214; Yes), the control unit 103 transmits, by the communication unit 104, a reduction instruction specifying the amount of the incremental amount from the payment amount to the portable device 16. The automatic value addition to the portable device 16 and the payment by the portable device 16 are performed (step S215).

Then, it is created to cause the management server 13 to perform a class report corresponding to the amount of the increment amount for the account to which the acquired ID is associated (step S216), and the process proceeds to step S209.

On the other hand, if the payment amount is less than the increment amount (step S214; No), the control unit 103 transmits the designated payment amount from the increment amount to the portable device 16 by the communication unit 104. The automatic increase of the portable device 16 and the portable device 16 The payment is made (step S217), and the process proceeds to step S216.

In the scholarship report made in step S216, the ID of the portable device 16 and the increment amount for the ID are designated as one record. The class report is sent to the management server 13 periodically, typically once a day, and then the transmitted material is deleted from the management device 14.

Fig. 9 is an explanatory diagram for explaining a state of a report sent from a reader/writer to a management server. This will be described below with reference to this figure.

As shown in this figure, the report 271 is constructed in the form of a table. Each line means a checkout. The category column 272 records information indicating the type of checkout, the ID column 273 records the ID of the portable device 16 when the checkout is performed, and the date and time column 274 records the date when the checkout is performed. In the time, the value column 275 records the amount involved in the checkout.

If the type of checkout is "payment", then the lineage is equivalent to the payment report, meaning that the payment from the portable device 16 to the store (provider) has been made by the electronic value. If the type of checkout is "supplementary", it means that the value of the electronic value has been added from the store (provider) to the portable device 16. These are, for example, sent to the portable device 16 to reduce finger cold or increase instructions, which are recorded upon success.

Reducing the command or adding the command means that there is a movement of the electronic value between the store (provider) and the portable device 16 (the provider). Therefore, if you look at the electronic goods of the store (provider) required to manage the borrowing between the operator of the electronic money system and the store (provider) For the account for billing accounts, the balance of the account for e-money checkout will increase if the checkout is "payment", and decrease if it is "supplement". That is, if the total of the "payments" in the report 271 is subtracted from the total of the "supplements", the turnover from the e-money system operator to the store (provider) in the period covered by the report 271 can be obtained. "."

Further, if the type of the checkout is "study money", the lineage means that the account corresponding to the portable device 16 exists in the scholarship report, and the scholarship is performed. In the case of the "scholarship", there is no change in the balance of the electronic money checkout account of the store (provider).

In the case of the automatic bonus, the payment and the bonus are performed by one command, but the bonus of the bonus is performed on the management server 13. Therefore, the "payment" line and the "class" line equivalent to the values of the ID column 273 and the date and time column 274 are recorded. Further, the exchange of the value with the electronic value at the time of automatic addition is performed between the user of the portable device 16 and the management server 13. Therefore, in the present embodiment, the report 271 is recorded in the "supplement" line related to the automatic addition.

In addition, in the case of an express value, the user of the portable device 16 goes to the store (provider) to pay by cash, credit card, debit card, etc., as the consideration, from the store (provider) The carrying device 16 will perform an added value of the electronic value. Therefore, in this case, the "Supplement" line of the independent date and time will be recorded. Further, in the present embodiment, in the remark column 276, if the value of the added value is cash, the purpose is recorded, but if it is a credit card or a charge card, the account information is recorded. However, about the bonus The details of the transaction between the source and the store (provider) are not necessarily reported to the management server 13, so there is no need to record the account information.

Further, upon receiving the report 271, the management server 13 extracts the "class" line, obtains the ID described in the ID column 273 of each "class" line, and automatically adds the value corresponding to the ID. Account, obtained from the management database. Then, the credit for the account described in the value column 275 is applied to the account.

Therefore, the class report is equivalent to the order required for the management server 13 to perform a credit card or debit card.

Thus, in the present embodiment, the instant credit of the credit card or the immediate debit from the charge card is not performed at the time of payment at the store. In the store, in the case of automatic bonus, as long as the account or deduction is made, the actual course or deduction is carried out later, thus improving the immediacy of the process.

On the other hand, whether the automatic value-added can be determined by the first condition or the third condition, from the point of automatic value addition to the portable device 16, the credit card for the credit card or the charge card will be performed in the future. The possibility that the deduction will fail can be reasonably as low as possible.

Further, in the automatic addition and payment in steps S215 and S217, in order to update the balance update time and the value-added update time of the portable device 16 to the reference time, the instruction is specified.

On the other hand, in the case of the payment in step S208, the control unit 103 determines the reference time in the same manner as step S211 (the flowchart does not As shown in the figure, in order to update the balance update time of the portable device 16 to the reference time, it is specified in the instruction. At this time, the value of the bonus update will not be updated.

On the other hand, when the ID is included in the judgment list (step S213; Yes), or when the interval is over the critical period (step S212; Yes), in the present embodiment, it is set to be non-automatically addable and not payable. And proceeds to step S251.

When the setting of the automatic bonus is not used (step S231; No), it is checked whether the balance is equal to or greater than the payment amount (step S232). If the balance is equal to or greater than the payment amount (step S232; Yes), the process proceeds to step S208, and if the balance is the underpaid payment amount (step S232; No), the process proceeds to step S251. This is equivalent to the usual payment processing that does not utilize automatic value-added due to the electronic value.

Moreover, if the ID is not usable (step S230; No), the process proceeds to step S251. At this time, since the portable device 16 is unusable, the provider pays the full amount by cash, credit card, debit card, etc., or pays with other portable devices 16, or gives up the transaction.

As described above, according to the present embodiment, by suppressing the size of the determination list by using the critical period, the memory area of the compression management device 14 can be prevented from being simultaneously determined at a high speed, and the first condition to the third condition can be used for immediate automatic operation. The added value can reduce the possibility of failure of the gold course that is performed after the automatic value addition, and the automatic value can be appropriately adjusted.

Also, in the rich client mode, if the reader/writer 2 is added The capacity of the non-volatile memory device has an increase in cost. However, according to the present embodiment, since the size of the determination list can be suppressed, the automatic addition of one side is realized, and the introduction cost of the rich client is reduced. advantage. Further, even with a rich client having a low memory capacity that has been used, the technique of using the determination list of the present embodiment can be easily applied.

Further, in the above description, by automatically performing the automatic addition and payment by the combination, the writing to the portable device 16 is only required once, and the speed of the update processing can be increased, and the possibility of occurrence of a write error can be suppressed. However, with the performance of the NFC or the portable device 16, it may be designed to perform automatic addition by adding an instruction, and then to perform payment by reducing the instruction. Further, instead of specifying the amount of change in the balance by the reduction instruction or the addition instruction, it is also possible to adopt an update instruction that directly specifies the new balance itself.

Further, in the above description, although the critical period is set to a predetermined fixed length, the upper limit of the size of the determination list may be determined in accordance with the memory capacity of the management device 14, and the reason for the recent occurrence of the defect may be carried. The device 16 sequentially registers the ID to the decision list until the upper limit is reached.

In this aspect, the ID that is last registered in the decision list is the ID of the earliest occurrence of the defect in the list. Then, the interval from the date when the defect occurs on the ID to the date of the change of the determination list is regarded as the critical period. This critical period is also downloaded from the manifest server 12 when the download of the list is determined.

In addition to this, in the present embodiment, the first condition is determined with reference to the payment amount, the reference amount, the balance, and the increment amount. that is, (a) If the payment is made from the current balance, the balance will not satisfy the base amount, and (b) if the current balance is added to the current balance, the first condition can be paid.

More simply, the first condition can also be determined based on the balance before payment and the amount of the base amount.

In this aspect, once the automatic value addition is made, it is determined whether payment can be made only by the portable device 16.

Further, in the stored value method, the value-added update time can be obtained from the report managed by the management server 13 or the reader/writer 2.

That is, as long as the ID of the portable device 16 is retrieved from the report 271, it is designated in the "class" line of the ID column 273. The latest date and time among the date and time recorded in the date and time column 274 of the "Schoolship" line is the date and time when the automatic bonus is performed. Further, the report 271 is that the ID of the portable device 16 is retrieved as the "supplement" line designated in the ID column 273, and the information of the remark column 276 is retrieved as the value-added source of the portable device 16 as the ID. And the corresponding account is established. The latest date and time among the date and time recorded in the date and time column 274 of the "supplement" line to be retrieved is the date and time of the explicit bonus from the account for automatic value addition. The latest among the two is the value-added update time of the portable device 16.

In this aspect, if the owner of the portable device 16 is unaware, the improperly obtained portable device 16 is placed for a critical period. Then, after the portable device 16 is eliminated from the determination list, the value-added update time is rewritten to the latest date and time, and even if there is such improper behavior, the true value-added update time can be obtained, so that the automatic value addition can be prohibited.

In addition, in the above-described embodiment, although the determination list is managed by the so-called blacklist method, a whitelist method may be employed. That is, the automatic value addition system is set, and no defect occurs in the most recent critical period, and the ID of the portable device 16 that can be automatically added can be regarded as the aspect of the determination list. Even in this aspect, the size of the decision list is suppressed by setting the critical period.

[Embodiment 2]

In the above embodiment, in step S251, a message indicating that the payment cannot be made is displayed, and the processing is terminated.

In this aspect, the management device 14 replaces the display of the message and performs the following processing instead.

FIG. 10 is a flow chart showing the flow of processing for the server to perform the process of adding value to the portable device. This will be described below with reference to this figure.

First, the control unit 103 determines the amount of bonus required to make the payment possible (step S301). In order to make the payment possible, the sum of the balance of the portable device 16 and the added amount must be equal to or greater than the amount paid. Therefore, the amount of the bonus must be at least the value obtained by subtracting the balance of the portable device 16 from the payment amount. Further, the amount of the bonus is usually set to a predetermined unit and is an appropriate amount (for example, 100 yen or 1 US dollar unit). In this case, the balance of the portable device 16 is subtracted from the payment amount, and As a result, the unconditional carry can be made to the predetermined unit.

In the above example, if the payment amount is 10 rounds and the balance of the portable device is 1 round, the added value is 9 rounds minimum, and 100 rounds if unconditional carry.

Next, the control unit 103 issues an instruction to the management server 13 to cause the account amount corresponding to the ID of the portable device 16 to be subjected to the calculated amount of the bonus (step S302). If the account is a credit card, the credit card company will immediately request credit or a scholarship. If it is a charge card, the credit will be debited immediately from the bank account.

Then, the control unit 103 determines whether or not the scholarship in the management server 13 is successful (step S303). If the scholarship is successful (step S303; Yes), it is investigated whether or not the payment amount is equal to or greater than the bonus amount (step S304).

If the payment amount is equal to or greater than the bonus amount (step S304; Yes), the control unit 103 transmits, by the communication unit 104, a reduction instruction specifying the amount of the credit amount to be subtracted from the payment amount. The addition of the portable device 16 and the payment by the portable device 16 are performed (step S305), a payment report is created (step S306), and the present process is terminated.

In addition, regarding the supplementary and the scholarship, the form is completed between the management server 13 and the portable device 16, and the management device 14 only needs to pass through the intermediary, and the balance in the electronic money checkout account of the store (provider) The system will not change. Therefore, it is not necessary to record to the report 271 regarding supplements and scholarships.

On the other hand, if the payment amount is less than the added amount (step S304; No), the control unit 103 transmits, by the communication unit 104, the portable device 16 to specify the amount of the payment from the added value. The credit increase instruction, the value added to the portable device 16 and the payment by the portable device 16 (step S307), proceeds to step S306.

Further, in the case of the update of the portable device 16 by the steps S305 and S307, in the same manner as in the above-described embodiment, in order to update the balance update time and the update update time of the portable device 16 to the reference time, in the instruction Make a designation.

Further, in step S302, since the management server 13 has finished the class payment, the generation of the class report is not performed.

On the other hand, if the scholarship fails (step S303; No), since the message cannot be added, the write is a message that the payment is impossible (step S308), and the present process is ended.

According to the embodiment, when the first condition or the third condition is not satisfied, an explicit scholarship is performed on the account to which the portable device 16 is created, although the immediacy may be impaired, but the correctness may be performed. The value of the portable device 16 and the payment by the portable device 16. Further, in the present embodiment, the holder of the portable device 16 is not confirmed by the explicit bonus amount, and the bonus amount is automatically determined. Therefore, although it takes time than the usual automatic addition, the holder of the portable device 16 only needs to perform the same degree of procedure as the automatic addition.

[Example 3]

In the above-described embodiment, the determination list and the automatic value-added determination list are both prepared, but in the present embodiment, various aspects of the determination list will be described. In the determination list, not only the ID of the portable device 16 in which a problem has occurred due to various reasons, but also the detailed reason for the failure is also registered.

The simplest aspect of each element included in such a determination list is an integer value in which a bit column representing the ID of the portable device 16 and a bit column representing the reason for the bad condition are arranged. , as an element of the ranks of the performance judgment list.

For example, an ID formed by a 16-bit integer can be represented by 54 bits. Also, (1) loss of the portable device 16; (2) theft of the portable device 16; (3) withdrawal of the portable device 16; (4) credit card ‧ charge for the portable device 16 The card is lost; (5) the portable device 16 is established with the corresponding credit card ‧ the charge card is stolen; (6) the portable device 16 is established with the corresponding credit card ‧ the charge card withdrawal; (7) The credit card of the portable device 16 is set to be late; (8) the credit card usage limit of the portable device 16 is exceeded or the balance of the charge card is insufficient; in order to express these 8 reasons, 3 Bit. Furthermore, if In the future, when 7-bit is used for expansion, the reason for the ID and the failure of the portable device 16 is expressed by an integer of 54 + 3 + 7 = 64 bits = 8 bytes.

Further, this aspect is equivalent to a state in which the critical period of the use determination list and the critical period of the automatic evaluation list become identical.

In addition to this, there are also cases in which a list of judgments is expressed in a plurality of rows and columns. For example, if there are eight reasons as described above, eight rows and columns having the same number of types as the reason are prepared. Each rank is established for the reason that there is a problem, and an ID based on the cause of the correspondence is established as an element of the rank. Each rank is represented by one file, and the list of judgments can also be represented by multiple files.

As described above, the ID of the portable device 16 in which the problem has occurred, and the reason thereof can be prohibited as long as it can be obtained from the determination list. Figure 11 is a flow chart showing the flow of processing for changing the restrictions on the portable device in response to the failure of the portable device. This will be described below with reference to this figure.

In this embodiment, if the ID of the portable device 16 is obtained in step S206, it is investigated whether the ID is registered as the ID of the portable device 16 that is caused by the loss or theft. In the determination list (step S401).

For these reasons, it is necessary to prohibit the payment itself caused by the portable device 16, so if there is a login (step S401; Yes), in order to limit the automatic value added and payment caused by the portable device 16, Go to step S251.

On the other hand, if it is not registered (step S401; No), the process proceeds to step S207. Thereafter, in step S213, it is possible to check whether or not the ID of the portable device 16 is included by referring to the entire list of determinations, and it is also possible to refer to only the portion exceeding the amount of withdrawal, delay, or usage limit in the determination list.

Then, in step S213, if the ID is included in the determination list (step S213; Yes), it is investigated whether the balance of the portable device 16 is equal to or greater than the payment amount (step S402).

If the balance is equal to or greater than the payment amount (step S402; Yes), the process proceeds to step S208, and the payment is performed without performing the automatic addition.

If the balance is the underpaid amount (step S402; No), the process proceeds to step S251, and the automatic bonus and payment caused by the portable device 16 are all limited.

Further, instead of proceeding to step S251, it is possible to change to the above-described embodiment, and the management server is allowed to perform the bonus before attempting to perform the bonus.

According to this aspect, the portable device 16 itself can be invalidated for reasons of a bad situation, or only the automatic value addition or the like can be skipped, and the degree of limitation can be changed.

[Example 4]

In the present embodiment, in the period until the determination list is changed, when the portable device 16 is lost or the like, an attempt is made to prevent improper use.

That is, if the date and time when the list is finally changed is later than the time of the value-added update obtained from the portable device 16, the credits that have been added to the added value have already been tried, and if the course fails, the class is paid. The ID of the portable device 16 should be registered in the decision list. In addition, if the credit card or the like associated with the portable device 16 is lost or stolen, this should be reflected in the determination list for the automatic value addition. Therefore, if it is determined that the inspection caused by the list has passed, the scholarship is considered to be relatively safe.

On the other hand, the fact that the value-added update time obtained from the portable device 16 is later than the date when the decision list is last changed means that the credit corresponding to the added value has not been performed, or The success or failure of the added value is not reflected in the list of judgments. Therefore, it may be because the balance is insufficient or the utilization limit exceeds the amount, so that the bonus can not be carried out. Further, even if the report of the lost or stolen credit card or the like of the connected portable device 16 has been filed, it may not be reflected in the judgment list at the time of attempting the automatic value addition. Therefore, when the value-added update time is later than the change time of the decision list, the risk is considered to be higher. Thus, in the present embodiment, it is designed to impose restrictions on the payment by the portable device 16 or to change the strength of the restriction in response to the circumstance occurring on the portable device 16.

Here, in the electronic money system, in order to perform small-scale settlement immediately, an upper limit is often imposed for each payment amount or the total amount of payment per day. Thus, in the present embodiment, the restriction caused by the portable device 16 is imposed by lowering the upper limit of the payment.

The method of lowering the upper limit has various aspects. For example, a method of reducing the upper limit to a predetermined amount (for example, reducing the upper limit of 20,000 circles per day to 5 thousand circles per day), and multiplying the upper limit by a factor of less than 1 (for example, each will be The first time and the upper limit of each day become half, etc.), etc., is a simpler method.

In addition to this, there is a method of adjusting the size of the restriction as the elapsed time from the date when the list is finally changed to the time of the update update time acquired from the portable device 16.

For example, if the elapsed time is longer, the smaller the upper limit itself is, or the smaller the coefficient of the upper limit is multiplied.

When the payment by the portable device 16 cannot be performed by restricting the payment in this manner, the process proceeds to step S251 as in the above-described manner, and the individual query can be performed to the list server 12 or the management server 13, The limit on the payment amount should be removed from the result.

According to the present embodiment, it is possible to suppress the damage until the defect in the portable device 16 is reflected to the determination list.

[Example 5]

By the reason of the bad condition in the portable device 16, it is possible to predict the date and time when the bad condition is resolved. For example, when the credit limit of the credit card is exceeded, the probability of the problem being solved is high on the scheduled date for which the account debit for each month of the credit card is carried out. Moreover, if the balance of the account of the charge card is insufficient, the probability of the problem being solved is high when the scheduled date for the salary of the account is reached.

Further, in the electronic money system, the credit for the account is performed after the transfer of the scholarship report from the management device 14 to the management server 13, so that there is a time difference between the change of the checklist and the credit for the account.

Therefore, even if the ID is registered in the determination list, depending on the situation, it is possible to proceed from the account of the account to which the ID is created.

Therefore, in the present embodiment, the list server 12 can estimate whether the account amount of the account corresponding to the ID included in the determination list is completely impossible based on the contents of the history or the contract as described above (risk) Higher), or, there is a possibility that it can be carried out (low risk).

Then, in the present embodiment, even if the ID is included in the judgment list, the automatic bonus or payment is not simply prohibited, but the increment of the automatic bonus or the amount of the payment is applied to the risk. limit.

At this time, the list server 12 arranges the IDs in the order of the estimated risks (up or down) in the rank of the determination list. If the risk is to arrange the IDs in the ascending order, it is determined that the ID on the beginning of the list is lower risk, and the ID on the end side is higher risk. That is, the magnitude of the risk can be estimated as the ID is registered in the determination list.

For example, in the above example, the following restrictions on the application can be considered.

(1) From the beginning of the judgment list to one-eighth of the opening side, the increment amount or the limit amount of the automatic value added is set to 0.4 times the predetermined value obtained from the portable device 16 or the like; 2) From 1/8 to 2/8 of the head side, it is set to 0.2 times; (3) It is set to 0.1 times from 2 to 8/8 of the head side; (4) From the beginning The side is 8/8 to the end and is set to 0 times.

In this way, it is not necessary to individually convey the information on the risk of each ID, and the size of the restriction on the ID can be determined along with the position of the ID in the determination list. The correspondence between the position and the restriction in the determination list as described above in (1) to (4) may be fixed in advance or may be downloaded from the list server 12.

According to the embodiment, by limiting the risk associated with the ID of the portable device 16, the scene that the portable device 16 can utilize can be increased, and the risk can be immediately determined by simple calculation. limits. Further, the amount of use in the memory area of the reader/writer 2 or the like is the same as that of the above-described embodiment, and the capacity is not suppressed.

[Possibility of industrial use]

According to the present invention, it is possible to provide, in view of immediacy, reliability, and load of the POS terminal, while appropriately determining whether the portable device for managing the balance of the electronic money can supplement the balance or the payment due to the portable device. Management device, which is executed by the management device Management methods, and programs to be executed on the management device.

14‧‧‧Management device

102‧‧‧ Keeping Department

103‧‧‧Control Department

104‧‧‧Communication Department

Claims (16)

A management device, comprising: a holding unit for maintaining a list of changes to be changed by a list server; and a control unit for communicating with the portable device by the communication unit to control the pre-recorded portable device; Once the pre-recorded portable device for payment and the pre-recorded communication unit become communicable, the pre-recording control unit obtains the ID, balance and update time of the pre-recorded portable device from the pre-recorded portable device; The first condition is satisfied, and the second condition related to the update time obtained by the pre-record is satisfied, and the third condition related to the judgment list in which the pre-recorded ID and the pre-record are held is satisfied, and the pre-record control is satisfied. Department: (a) update the balance of the pre-recorded portable device by making a pre-payment from the balance obtained in the preceding paragraph and the specified incremental amount, and update the update time of the pre-recorded portable device to indicate the current reference time; (b) generating a class report for the management server to perform the amount corresponding to the increment specified in the preceding paragraph for the account corresponding to the ID obtained by the pre-recording. . The management device according to claim 1, wherein the interval between the update time obtained in the previous record and the reference time determined in the previous record exceeds the critical period, the second condition is not satisfied, and the pre-record control unit is Do not update the pre-recorded portable device and the scholarship Report generation; if the ID obtained in the previous record matches any of the IDs registered in the pre-determination list, the third condition is not satisfied, and the pre-record control unit does not update the pre-recorded portable device. And the generation of the syllabus report; the pre-recorded list server determines the start time based on the time when the pre-determined check list is changed, and the period from the start point of the previous record to the time when the pre-determined check list is changed does not occur. The ID corresponding to the account for which the use is approved is registered in the pre-determination list, thereby changing the pre-determination list; the interval from the start of the previous record to the point at which the pre-determination list is changed is relative to the pre-critical period Within the specified error range. The management device according to the second aspect of the present invention, wherein the pre-recording control unit determines whether the pre-recording first condition is satisfied, and the pre-recording first condition is satisfied, It is determined whether or not the second condition is satisfied, and if the second condition is satisfied before the determination, it is determined whether or not the third condition is satisfied. The management device described in claim 1, wherein the class report generated by the pre-record is sent to the pre-record management server; the pre-recorded report is sent to the pre-record management server, and the ID involved in the class report is The corresponding account is established, and the credit for the scholarship involved in the scholarship report is made. The management device according to claim 4, wherein if the first condition is satisfied and the second condition is not satisfied, the pre-recording control unit issues an instruction to the management server to give the ID of the previous record. The corresponding account is established, and the credit for other scholarships is made; after the success of the pre-recorded credit indicated by the pre-recording management server, the balance obtained from the pre-record and the amount of the other scholarships are credited to the pre-recorded portable device. And update the balance of the pre-recorded portable device. The management device according to claim 1, wherein the pre-recording control unit: (p) the balance obtained according to the pre-record, and the pre-recording, if the pre-recording communication unit becomes communicable with the pre-recorded portable device for the pre-payment The incremental amount, and the payment amount of the pre-payment, and the new balance is obtained; (q) the payment is used to notify the management server that the payment of the previous payment amount has been required due to the ID obtained by the pre-record. Payment report. The management device according to claim 1, further comprising: a terminal that communicates with the pre-recorded list server and the pre-recording management server via the computer communication network, and has a pre-recording holding unit and a pre-recording communication unit; It is implemented by the predecessor terminal executing the program. The management device according to claim 1, wherein if the update time obtained in the previous record is later than the change time of the last change list of the previous check list server, the pre-record control unit is The restrictions imposed by the pre-recorded portable device impose restrictions. A management device, comprising: a holding unit for maintaining a list of changes to be changed by a list server; and a control unit for communicating with the portable device by the communication unit to control the pre-recorded portable device; Once the pre-recorded portable device for payment and the pre-recorded communication unit become communicable, the pre-recording control unit obtains the ID of the pre-recorded portable device and the update time from the pre-recorded portable device, and obtains the ID obtained from the pre-record, and the pre-record The list of the held judgments is compared to determine whether the pre-recording of the portable device may be performed; if the pre-recorded portable device causes the previous payment to be determined, and if the pre-recorded update time is obtained, If the change of the pre-determined checklist is changed by the last change of the pre-recorded list server, the pre-record control unit imposes a restriction on the pre-recorded payment caused by the pre-recorded portable device. The management device according to claim 8 or 9, wherein the pre-recorded list server changes the pre-determined check list based on the predetermined schedule; the pre-record control unit is set in the schedule specified in the preceding note. Among the date and time of the change of the pre-determined checklist, the latest date and time earlier than the current date is regarded as the change time of the last change. The management device as recited in claim 8 or 9, wherein the pre-recording restriction is in accordance with the change from the last change of the previous record It is determined until the period until the update time is obtained. The management device according to claim 8 or 9, wherein the pre-determination list is sorted according to an order in which the pre-list server estimates the risk estimated by the account to which the ID registered in the list is created. The pre-restriction is determined in accordance with the position where the ID obtained in the pre-record is registered in the pre-determination list. A management method is a management method executed by a management unit that controls a holding unit that holds a determination list that is to be changed by the list server, and a management unit that can communicate with the portable device, and is characterized in that, once used, The prepaid mobile device and the pre-recording communication unit of the payment become communicable, and the pre-recording management device obtains the ID, balance and update time of the pre-recorded portable device from the pre-recorded portable device; (1) The condition is satisfied, and the second condition related to the update time obtained by the pre-record is satisfied, and the third condition related to the determination list in which the ID obtained in the preceding paragraph and the pre-record is held is satisfied, the pre-recording management device is: (a) Decide to indicate the current benchmark time; (b) Update the balance of the pre-recorded portable device by making a pre-payment from the balance obtained in the preceding paragraph and the specified incremental amount, and update the update time of the pre-recorded portable device. a reference time determined by the pre-record; (c) generating an account for causing the management server to associate the ID obtained by the pre-record with the pre-record Lesson incremental amount of gold needed to be prescribed class of gold report. A management method is a management method executed by a management unit that controls a holding unit that holds a determination list that is to be changed by the list server, and a management unit that can communicate with the portable device, and is characterized in that, once used, The prepaid mobile device of the payment becomes communicable with the pre-recording communication unit, and the pre-recording management device is the pre-recorded portable device, and obtains the ID of the pre-recorded portable device and the updated time when the balance of the portable device is updated. The obtained ID is compared with the judgment list held by the pre-record, and it is determined whether the pre-recording of the portable device may be performed; if the pre-recorded portable device causes the previous payment to be determined, and if the pre-record is The acquired update time is later than the change time of the last change list that was last changed by the pre-recorded list server, and the pre-record management device imposes a restriction on the pre-recorded payment caused by the pre-recorded portable device. A program for controlling a computer that maintains a determination list that is to be changed by a list server and a communication unit that can communicate with a portable device, and functions as a control unit, and is characterized in that Once the pre-recorded portable device for payment and the pre-recorded communication unit become communicable, the pre-recording control unit obtains the ID, balance and update time of the pre-recorded portable device from the pre-recorded portable device; The first condition is satisfied, and the second condition related to the update time obtained by the pre-record is satisfied, and the third condition related to the judgment list in which the pre-recorded ID and the pre-record are held is satisfied, and the pre-record control is satisfied. Department: (a) Decide to indicate the current benchmark time; (b) updating the balance of the pre-recorded portable device by making a pre-payment from the balance obtained in the preceding paragraph and the specified incremental amount, and updating the update time of the pre-recorded portable device to the reference time determined by the pre-record; c) Generate a class report required for the management server to perform the amount corresponding to the increment specified in the preceding paragraph for the account corresponding to the ID obtained by the pre-record. A program for controlling a computer that maintains a determination list that is to be changed by a list server and a communication unit that can communicate with a portable device, and functions as a control unit, and is characterized in that Once the pre-recorded portable device for payment and the pre-recorded communication unit become communicable, the pre-recording control unit obtains the ID of the pre-recorded portable device and the updated time when the balance of the portable device is updated, from the pre-recorded portable device. Comparing the ID obtained in the pre-record with the judgment list held by the pre-record, determining whether the pre-recording of the pre-recorded portable device is possible; if the pre-recorded portable device causes the previous payment to be determined, and if The update time obtained in the pre-record is later than the change timing of the last change list of the pre-recorded list server, and the pre-record control unit imposes a restriction on the pre-recorded payment caused by the pre-recorded portable device.