Source: https://patents.google.com/patent/JP2018050228A/en
Timestamp: 2020-02-18 15:58:07
Document Index: 170958539

Matched Legal Cases: ['art 21', 'art 22', 'art 22', 'art 22', 'art 22', 'art 22', 'art 22', 'art 52', 'art 52', 'art, 12', 'art, 20', 'art, 22', 'art, 23', 'art, 30', 'art, 31']

JP2018050228A - Settlement terminal - Google Patents
Settlement terminal Download PDF
JP2018050228A
JP2018050228A JP2016185516A JP2016185516A JP2018050228A JP 2018050228 A JP2018050228 A JP 2018050228A JP 2016185516 A JP2016185516 A JP 2016185516A JP 2016185516 A JP2016185516 A JP 2016185516A JP 2018050228 A JP2018050228 A JP 2018050228A
JP2016185516A
福島　孝文
2016-09-23 Application filed by 東芝テック株式会社, Toshiba Tec Corp filed Critical 東芝テック株式会社
2016-09-23 Priority to JP2016185516A priority Critical patent/JP2018050228A/en
2018-03-29 Publication of JP2018050228A publication Critical patent/JP2018050228A/en
PROBLEM TO BE SOLVED: To reliably avoid damage caused by fraud without causing an unusable situation.
A settlement terminal according to an embodiment includes a reading unit with reading, first storage, rewriting, encryption, and transmission means, and a processing unit with second storage, decryption, first acquisition, Each unit includes request, second acquisition, third storage, change, instruction, and update. The second acquisition means acquires network information related to the configuration of the communication network. The third storage means stores network information. The changing means changes the second program to be valid from the plurality of second programs when the newly acquired network information is different from the already stored network information. The instructing unit instructs rewriting to the first program that is paired with the newly validated second program. The update means updates the stored network information to the newly acquired network information after instructing rewriting.
Embodiments described herein relate generally to a payment terminal.
In various payment terminals represented by card payment terminals that perform payment by credit card, fraud that is modified to output recorded information used for payment such as credit information read from a credit card to the outside. There are concerns.
For this reason, for example, various events that indicate signs of alteration such as the case being opened can be monitored, and if such an event occurs, for example, programs or data necessary for normal operation are deleted. By doing so, it was prohibited to operate normally thereafter.
However, for example, a known tamper detection technique using a switch or the like may be detected relatively easily if its configuration is known.
In addition, when a measure such as deleting a program or data is taken, normal operation cannot be restored unless the deleted program or data is restored.
Under such circumstances, it has been desired that damage caused by fraud can be surely avoided without causing an unusable situation.
JP2012-243275A Japanese Patent Laying-Open No. 2005-267031
The problem to be solved by the present invention is to provide a payment terminal that can reliably avoid damage caused by fraud without causing an unusable situation.
The payment terminal of the embodiment includes a reading unit and a processing unit, and is a payment terminal that performs processing for payment using a payment system. The reading unit includes reading means, first storage means, and rewriting means. And an encryption unit and a transmission unit, and the processing unit includes a second storage unit, a decryption unit, a first acquisition unit, a request unit, a second acquisition unit, a third storage unit, a change unit, an instruction unit, and Update means are provided. The reading means stores the first program, and the first storage means for reading the record information stored in the storage medium. The rewriting means rewrites the first program stored in the first storage means in response to a rewriting instruction from the processing unit. The encryption unit uses an encryption key in which at least a part of the recorded information read by the reading unit is associated with the first program in advance based on the first program stored in the first storage unit. To encrypt. The transmission means is a transmission means for transmitting the recording information encrypted by the encryption means to the processing unit. The second storage means stores a plurality of sets of first programs and second programs associated with the same encryption key. The receiving unit receives the encrypted recording information transmitted by the transmitting unit. The decrypting means uses the validated one of the second programs stored in the second storage means to convert the encrypted recording information received by the receiving means to the validated second information. Decrypt using the encryption key associated with the program. A 1st acquisition means acquires the transaction data showing the content of the transaction used as payment object. The requesting unit requests the settlement system via the communication network to settle the transaction represented by the transaction data acquired by the first acquiring unit using the record information decrypted by the decrypting unit. The second acquisition unit acquires predetermined network information related to the configuration of the communication network. The third storage means stores the network information acquired by the second acquisition means. The changing means is a plurality of second information stored in the second storage means when the network information newly acquired by the second acquisition means is different from the network information already stored in the third storage means. The 2nd program made effective among 2 programs is changed. The instructing unit performs a rewriting instruction for instructing the reading unit to rewrite the first program stored in the second storage unit as a pair with the second program newly validated by the changing unit. The update means updates the network information stored in the third storage means to the network information newly acquired by the second acquisition means after performing the rewrite instruction by the instruction means.
The block diagram which shows the principal part circuit structure of the payment terminal which concerns on 1st Embodiment. The figure which shows the storage condition of the file in the storage area shown by FIG. The flowchart which shows the procedure of the process in the structure detection part shown by FIG. The flowchart which shows the procedure of the process in the payment process part shown by FIG. The block diagram which shows the principal part circuit structure of the payment terminal which concerns on 2nd Embodiment. The flowchart which shows the procedure of the process in the radio | wireless part shown by FIG. The flowchart which shows the procedure of the process in the structure detection part shown by FIG.
Hereinafter, embodiments will be described with reference to the drawings. In this embodiment, a payment terminal that processes payment by credit card will be described as an example.
FIG. 1 is a block diagram showing a main circuit configuration of a payment terminal 100 according to the first embodiment.
The payment terminal 100 includes a reading unit 10, a payment processing unit 20, and a storage unit 30. In addition, although illustration is abbreviate | omitted, the payment terminal 100 is equipped with the unit with which other payment terminals of the same kind, such as a printing unit and a user interface unit, are provided.
The reading unit 10 includes a reading unit 11 and a reading control unit 12.
The reading unit 11 reads card data recorded on a credit card. As the reading unit 11, for example, a known device configured to include a magnetic card reader or the like can be used. The reading unit 11 is an example of a reading unit. The reading control unit 12 encrypts the card data read by the reading unit 11 and sends it to the settlement processing unit 20. Accordingly, the reading control unit 12 has functions as an encryption unit and a transmission unit. The reading control unit 12 is configured using, for example, a microcomputer unit, and includes a processor and a memory. A reading program P1 is stored in the memory. Then, when the processor executes processing based on the reading program P1, the operation as the reading control unit 12 is realized. The reading program corresponds to the first program. Therefore, the reading control unit 12 has a function as a first storage unit.
The payment processing unit 20 includes a payment control unit 21, a configuration detection unit 22, and a switching unit 23.
The settlement control unit 21 is configured using, for example, a microcomputer unit, and includes a processor and a memory. A settlement program P2 is stored in the memory. This settlement program P2 corresponds to a second program. And the operation | movement as the payment control part 21 is implement | achieved when a processor performs the process based on the payment program P2. The payment control unit 21 is connected to a configuration detection unit 22, a reading unit 10, a storage unit 30, and a POS (point-of-sale) terminal 200. The settlement control unit 21 acquires transaction data representing a settlement amount related to a transaction to be settled from the POS terminal 200. Thus, the settlement control unit 21 has a function as a first acquisition unit. The settlement control unit 21 receives and decrypts the encrypted card data sent by the reading unit 10. Thus, the settlement control unit 21 has functions as receiving means and decrypting means. The payment control unit 21 encrypts payment data including transaction data and card data by a method defined by a payment service provided by the payment server 600. The settlement control unit 21 transmits the encrypted settlement data to the settlement server 600 to a LAN (local area network) 300 connected via the switching unit 23. Accordingly, a payment request is made to the payment system including the payment server 600, and the payment control unit 21 has a function as a request unit. The settlement control unit 21 represents a settlement result based on the settlement data, and controls the printing unit to print a slip representing the settlement result based on the response data transmitted from the settlement server 600. Further, the settlement control unit 21 performs processing to be described later for updating the reading program P1 included in the reading control unit 12 and the settlement program P2 included in the settlement control unit 21.
The configuration detection unit 22 is configured using, for example, a microcomputer unit, and includes a processor and a memory. The configuration detection program P3 is stored in the memory. And the operation | movement as the structure detection part 22 is implement | achieved when a processor performs the process based on the structure detection program P3. The configuration detection unit 22 acquires an IP address assigned to the payment terminal 100 from the LAN 300, and performs processing described later for detecting a change in the connection status of the payment terminal 100 to the LAN 300 based on the IP address. Further, the memory stores an initial value V1 and a start value V2. Furthermore, the structure detection part 22 is provided with the timepiece function T1 which always performs time measuring operation and obtains the present date and time.
The switching unit 23 selectively connects the settlement control unit 21 and the configuration detection unit 22 to the LAN 300 according to a switching signal given from the configuration detection unit 22.
Although not shown, the settlement processing unit 20 includes various interface units for transmitting and receiving data between the reading unit 10 and the storage unit 30 and the settlement control unit 21. The payment processing unit 20 includes an interface unit for the payment control unit 21 and the configuration detection unit 22 to exchange data via the LAN 300.
The storage unit 30 includes a storage unit 31, an access control unit 32, an encryption key output unit 33, an encryption processing unit 34, and an interface unit 35.
The storage unit 31 is a device that stores program files, data files, and the like. For example, an EEPROM (electrically erasable programmable read-only memory), an HDD (hard disc drive), an SSD (solid state drive), or the like is applicable. The storage unit 31 can logically set one or a plurality of storage areas. FIG. 1 shows an example in which n storage areas 31-1 to 31-n are set. The storage areas 31-1 to 31-n are areas for storing encrypted files. Although illustration is omitted, the storage unit 31 is also set with areas other than the storage areas 31-1 to 31-n. One such area is a preboot authentication area that stores a program file for preboot authentication processing. One of such areas is an area for storing a program file for program update processing by the settlement control unit 21.
The access control unit 32 manages whether each of the storage areas 31-1 to 31-n is set to a locked state or an unlocked state. The access control unit 32 stores the corresponding memory when any one of the addresses of the storage areas 31-1 to 31-n and an access key defined for the storage area of the address are given from the interface unit 35. Invert the locked and unlocked state of the region. The access control unit 32 acquires a predetermined encryption key for the storage area from the encryption key output unit 33 when the storage area is unlocked, and sends the encryption key to the encryption processing unit 34. set. The access control unit 32 discards the encryption key set in the encryption processing unit 34 as described above when a certain storage area is locked.
The encryption key output unit 33 gives the access control unit 32 an encryption key corresponding to the storage area specified by the access control unit 32. The encryption key output unit 33 may store an encryption key generated in advance for each storage area, or specify a hash function or the like based on information given from the access control unit 32, for example. You may calculate by the following formula.
When the encryption processing unit 34 is requested to write a file specifying a storage area in which a corresponding encryption key is set, the encryption processing unit 34 encrypts the file using the set encryption key. To do. Then, the encryption processing unit 34 writes the encrypted file in the designated storage area. When the encryption processing unit 34 is requested to read a file specifying a storage area in which the corresponding encryption key is set, the encryption processing unit 34 decrypts the file using the set encryption key. . Then, the encryption processing unit 34 outputs the decrypted file to the interface unit 35. If the encryption key corresponding to the designated storage area is not set, the encryption processing unit 34 rejects the write and read requests.
The interface unit 35 gives the access control unit 32 the address and access key sent from the payment control unit 21 of the payment processing unit 20. The interface unit 35 gives a request for reading or writing a file from the settlement control unit 21 to the encryption processing unit 34. The interface unit 35 gives the decrypted file given from the encryption processing unit 34 to the settlement control unit 21. As the interface unit 35, for example, a device compliant with a general-purpose interface standard such as SATA (serial advanced technology attachment) can be used.
FIG. 2 is a diagram showing the storage status of files in the storage areas 31-1 to 31-n.
The storage areas 31-1 to 31-n include sets of program files of reading programs P1-1 to P1-n, program files of settlement programs P2-1 to P2-n, and data files D-1 to D-n. Are stored one by one. The reading program and the settlement program stored in one of the storage areas 31-1 to 31-n are assigned the same encryption key, and exchange card data encrypted with the encryption key. Created to be consistent with each other. Thus, the storage unit 31 corresponds to a second storage unit. The data file stored in one of the storage areas 31-1 to 31-n includes data used in processing based on the reading program or the settlement program stored in the same storage area.
The LAN 300 may be configured as either a wired LAN or a wireless LAN, or a combination of a wired LAN and a wireless LAN. The LAN 300 may be replaced with another type of communication network such as an optical communication network or Bluetooth (registered trademark), or may be combined. That is, the LAN 300 can be replaced with any communication network as long as the transmitted data includes the identifier of the transmission source device. That is, the LAN is an example of a communication network.
The plurality of POS terminals 200 belong to one POS system and are connected to the LAN 300 in order to communicate with the POS server 400 mainly belonging to the same POS system. When the POS terminal 200 to which the illustrated payment terminal 100 is not connected permits card payment, a payment terminal 100 other than the illustrated payment terminal 100 is connected without going through the LAN 300. That is, although only one payment terminal 100 is shown in FIG. 1, a POS system may be configured including a plurality of payment terminals 100 while being connected to other POS terminals 200.
Next, the operation of the payment terminal 100 configured as described above will be described. Note that the content of the processing described below is an example, and various processing that can obtain the same result can be used as appropriate.
When the payment terminal 100 is activated, the payment control unit 21 reads a program for program update processing from the storage unit 31 and starts processing based on this program.
FIG. 3 is a flowchart of the program update process by the settlement control unit 21.
In Act 1, the settlement control unit 21 activates the configuration detection unit 22 by outputting an operation start signal to the configuration detection unit 22.
When the operation start signal is received, the configuration detection unit 22 starts processing based on the configuration detection program P3.
FIG. 4 is a flowchart showing a procedure of processing based on the configuration detection program P3 by the configuration detection unit 22.
In Act 11, the configuration detection unit 22 inquires of the LAN 300 about the IP address. At this time, the configuration detection unit 22 sets the switching signal to the low level. The switching unit 23 selects the configuration detection unit 22 if the switching signal is at a low level. Therefore, the configuration detection unit 22 is connected to the LAN 300 by the switching unit 23.
In Act 12, the configuration detection unit 22 confirms whether or not the IP address is notified from the LAN 300. If the IP address is not notified, the configuration detection unit 22 determines No, and proceeds to Act13.
In Act 13, the configuration detection unit 22 confirms whether or not the IP address notification standby time has timed out. If the configuration detection unit 22 determines No because it has not timed out, the configuration detection unit 22 returns to Act 12. Note that the standby time may be arbitrarily determined by the creator of the configuration detection program P3 or the administrator of the payment terminal 100, for example.
Thus, the configuration detection unit 22 waits for the notification of the IP address in Act 12 and Act 13 until the waiting time times out. If the IP address is notified, the configuration detection unit 22 determines Yes in Act 12, and proceeds to Act 14.
In Act 14, the configuration detection unit 22 acquires the notified IP address and the date and time obtained by the clock function T1 at that time. The notified IP address indicates that the terminal identified by this IP address is connected to the LAN 300, and thus is one piece of network information related to the configuration of the LAN 300 as a communication network. Therefore, the configuration detection unit 22 has a function as a second acquisition unit that acquires network information.
In Act 15, the configuration detection unit 22 checks whether or not the initial setting of the IP address has been completed. Whether or not the initial setting has been completed is managed by a flag, for example, by the settlement control unit 21 and is notified by an operation start signal. Based on this notification, the configuration detection unit 22 determines No and proceeds to Act 16 if the initial setting has not been completed.
In Act 16, the configuration detection unit 22 stores the IP address acquired in Act 14 as the initial value V1 in the memory of the configuration detection unit 22 in association with the date and time acquired in Act 14. Thus, the configuration detection unit 22 has a function as a third storage unit for storing the IP address.
In Act 17, the configuration detection unit 22 notifies the settlement control unit 21 of the initial value V1 stored as described above. And the structure detection part 22 complete | finishes the process shown in FIG.
On the other hand, after the initial value V1 is set as described above, the configuration detection unit 22 has already been initialized when the process shown in Act4 is started in response to the activation of the payment terminal 100 again. Is notified by the operation start signal. Based on this notification, the configuration detection unit 22 determines Yes in Act 15 and proceeds to Act 18.
In Act 18, the configuration detection unit 22 updates the activation value V2 with the IP address acquired in Act 14, and stores the date and time acquired in Act 14 in association with the activation value V2 in the memory of the configuration detection unit 22. Then, the configuration detection unit 22 proceeds to Act 21 thereafter.
On the other hand, if the standby time has timed out without being notified of the IP address, the configuration detection unit 22 determines Yes in Act 13 and proceeds to Act 19.
In Act 19, the configuration detection unit 22 acquires the date and time obtained by the clock function T1 at that time.
In Act 20, the configuration detection unit 22 clears the activation value V2 and updates the date and time associated with the activation value V2 to the acquired date and time. The configuration detection unit 22 then proceeds to Act 21.
In Act 21, the configuration detection unit 22 checks whether or not the initial value V1 and the activation value V2 match. And the structure detection part 22 will determine Yes, if both values correspond, and will progress to Act22.
In Act 22, the configuration detection unit 22 notifies the settlement control unit 21 of the activation value V2. And the structure detection part 22 complete | finishes the process of FIG. 4 with this.
However, if the initial value V1 and the startup value V2 do not match, the configuration detection unit 22 determines No in Act 21 and proceeds to Act 23.
In Act 23, the configuration detection unit 22 sends a configuration error signal to the settlement control unit 21.
In Act 24, the configuration detection unit 22 notifies the settlement control unit 21 of the activation value V2. And the structure detection part 22 complete | finishes the process of FIG. 4 with this.
The configuration detection unit 22 changes the switching signal to the high level when ending the process of FIG. If the switching signal is at the high level, the switching unit 23 selects the settlement control unit 21. Therefore, the state where the configuration detection unit 22 is connected to the LAN 300 is changed to the state where the settlement control unit 21 is connected to the LAN 300.
The settlement control unit 21 proceeds to Act 2 after starting the configuration detection unit 22 in Act 1 of FIG.
In Act 2, the settlement control unit 21 confirms whether or not a configuration error signal has been sent. Then, if the configuration error signal is sent as described above, the settlement control unit 21 determines Yes and proceeds to Act3.
In Act 3, the settlement control unit 21 sends an error notification to the POS terminal 200 connected to the settlement control unit 21. Upon receiving this notification, the POS terminal 200 performs a notification operation for notifying the operator that the program is to be updated because there is a possibility that some fraudulent act on the payment terminal 100 has been performed. The POS terminal 200 accepts a confirmation operation by the operator. As the confirmation operation, only an operation for accepting the program update may be accepted, or another operation for rejecting the program update may be accepted. When the confirmation operation is performed, the POS terminal 200 notifies the settlement control unit 21 of the contents. The POS terminal 200 is an example of a registration device. Thus, the settlement control unit 21 has a function as inquiry means for inquiring whether or not the program change is necessary.
In Act 4, the settlement control unit 21 confirms whether or not the above-described operation for receiving is performed. Then, the settlement control unit 21 determines No, when the above-described operation for refusal is performed, or when a predetermined waiting time has timed out without notification of the confirmation operation, and Act5 to Act8. Return to Act1 without executing. On the other hand, when the operator performs the above-mentioned receiving operation according to the operation procedure guided in advance, the settlement control unit 21 determines Yes in Act 4 and proceeds to Act 5.
In Act 5, the settlement control unit 21 activates one of the unused storage areas among the storage areas 31-1 to 31-n. Here, “unused” means that the reading program stored in the storage area has not been written in the reading control unit 12 as the reading program P1. Specifically, the settlement control unit 21 manages the storage area activated here, and selects one of the storage areas that has not been activated in the past. Then, the settlement control unit 21 gives the address of the selected storage area and the access key associated with the storage area to the interface unit 35. Then, in the storage unit 30, the selected storage area is unlocked and activated by the above-described function of each unit.
In Act 6, the settlement control unit 21 transmits the reading program stored in the activated storage area to the reading control unit 12. At this time, it is preferable that the settlement control unit 21 encrypts the reading program and transmits the encrypted reading program. When the reading control unit 12 receives the reading program from the settlement control unit 21 as described above, the reading control unit 12 writes the reading program in the memory of the reading control unit 12 as the reading program P1. That is, the reading control unit 12 updates the reading program P1. Thus, the reading control unit 12 has a function as a rewriting means for rewriting the reading program P1 as the first program. The settlement control unit 21 instructs the rewriting of the reading program P1 by transmitting the reading program, and has a function as an instruction unit.
In Act 7, the settlement control unit 21 writes the settlement program stored in the activated storage area in the memory of the settlement control unit 21 as the settlement program P2. That is, the payment control unit 21 updates the payment program P2. As a result, which one of the settlement programs P2-1 to P2-n stored in the storage areas 31-1 to 31-n is to be valid is changed, and the settlement control unit 21 is changed. A function as a means is provided.
In Act 8, the settlement control unit 21 initializes the monitoring status of the network configuration. Specifically, the settlement control unit 21 notifies the POS terminal 200 of the abnormal date and time so that the program update history can be managed by the POS terminal 200. Then, the settlement control unit 21 sets a flag for managing whether or not the initial setting has been completed according to the setting from the POS terminal to indicate that the initial setting has not been completed. At this time, the settlement control unit 21 may instruct the configuration detection unit 22 to clear the initial value V1 and the activation value V2.
Thereafter, the settlement control unit 21 returns to Act1. Thus, the settlement control unit 21 causes the configuration detection unit 22 to perform initial setting, and the IP address assigned to the settlement terminal 100 when the program is updated is stored in the memory of the configuration detection unit 22 as the initial value V1. Will be. That is, the function as the updating means is realized by the cooperation of the settlement control unit 21 and the configuration detection unit 22.
As described above, the settlement control unit 21 executes the processing for realizing the function as the changing means, the instructing means, and the updating means in response to the instruction by the operation to receive the update notification. There is a function as a first control means.
If the initial value or activation value is notified in a state where the configuration error signal is not received, that is, if the initial value or activation value is notified in Act 17 or Act 22 in FIG. It determines with No in Act2 in FIG. 3, and progresses to Act9.
In Act 9, the settlement control unit 21 sets the IP address represented by the notified initial value or activation value as information for LAN processing for communication via the LAN 300. Further, the settlement control unit 21 sets information regarding the network environment and network configuration necessary for the LAN processing for the LAN processing. The information is, for example, a MAC address of a LAN interface unit (not shown) provided between the LAN 300 and the like.
In Act 10, the settlement control unit 21 starts the settlement process based on the settlement program P2, for example, as another thread process. Then, the settlement control unit 21 ends the process shown in FIG.
As a fraudulent act on the payment terminal 100, the above-mentioned store after the payment terminal 100 is illegally taken out by a fraudster outside the business hours and the program file is analyzed or modified. Focus on the act of returning to
The settlement terminal 100 is disconnected from the LAN 300 when taken out from a store where it is originally installed by an unauthorized person. When the payment terminal 100 is returned to the store and reconnected to the LAN 300 and the payment terminal 100 is activated, a new IP address different from that before disconnecting from the LAN 300 is sent to the payment terminal 100. Assigned.
For this reason, the initial value V1 representing the IP address assigned before disconnection from the LAN 300 and the activation value V2 representing the IP address assigned after reconnection to the LAN 300 are different values. As a result, the configuration detection unit 22 determines that they do not match in Act 21 of FIG. 4, and the reading program P1 of the reading control unit 12 and the payment program P2 of the payment control unit 21 have not been used so far. Updated to a new one. Accordingly, the analysis and modification of the reading program P1 and the settlement program P2 performed before such program update can be made meaningless, and even if such fraud is performed, Damage can be avoided. Moreover, according to the payment terminal 100, since the reading program P1 and the payment program P2 are immediately updated at the time of activation, a period during which the payment terminal 100 cannot be used hardly occurs.
Further, when the payment terminal 100 disconnected from the LAN 300 is connected to another LAN by an unauthorized person, a new IP address different from that before disconnection from the LAN 300 is assigned to the payment terminal 100. In this case, since the POS terminal 200 is also disconnected from the payment terminal 100, unless another POS terminal is connected, the fact that an operation for receiving program updates has been performed is sent from the POS terminal to the payment terminal 100. Not notified. Therefore, in this case, the program is not updated. However, when reconnected to the LAN 300, the reading program P1 and the settlement program P2 are updated in the same manner as described above, so that the same effect as described above is achieved.
If the POS terminal is connected to the payment terminal 100 by an unauthorized person and an operation for receiving the program update is also performed, the reading program P1 and the payment program for the one-time illegal action as described above. P2 is updated twice. As a result, one of each of the n reading programs P1 and payment programs P2 stored in the storage areas 31-1 to 31-n is used without actually being used for actual payment processing. turn into. On the other hand, as described above, when the operation for accepting the program update is not performed, the program is not updated, so that the reading program and the settlement program stored in the storage areas 31-1 to 31-n are stored. Effective use.
FIG. 5 is a block diagram showing a main circuit configuration of the payment terminal 101 according to the second embodiment. Note that the payment terminal 101 differs from the payment terminal 100 only in that the payment processing unit 50 is provided instead of the payment processing unit 20. Therefore, in FIG. 5, only the configuration of the settlement processing unit 50 is shown. 5, the same elements as those shown in FIG. 1 are denoted by the same reference numerals, and detailed description thereof is omitted.
The payment processing unit 50 includes a payment control unit 21, a state detection unit 51, and a configuration detection unit 52. That is, the payment processing unit 50 includes a configuration detection unit 52 in place of the configuration detection unit 22 in the payment processing unit 20, and additionally includes a state detection unit 51.
The state detection unit 51 includes a wireless unit 51a, a memory control unit 51b, a shared memory 51c, and a memory control unit 51d.
The wireless unit 51a performs wireless communication with the maintenance terminal 700. The wireless unit 51a authenticates the maintenance terminal 700 based on the RF data received through communication with the maintenance terminal 700. When the maintenance unit 700 can be authenticated, the wireless unit 51a instructs the memory control unit 51b to rewrite the mode data stored in the shared memory 51c. The memory control unit 51b rewrites the mode data stored in the shared memory 51c in response to an instruction from the wireless unit 51a. The shared memory 51c stores mode data. The mode data is normal mode data or maintenance mode data. The memory control unit 51d reads the mode data from the shared memory 51c and gives it to the configuration detection unit 52.
The configuration detection unit 52 is different from the configuration detection unit 22 in that the configuration detection program P4 is stored in the memory instead of the configuration detection program P3. And the operation | movement as the structure detection part 52 is implement | achieved when the processor of the structure detection part 52 performs the below-mentioned process based on the structure detection program P4.
Next, the operation of the payment terminal 101 configured as described above will be described. Note that the content of the processing described below is an example, and various processing that can obtain the same result can be used as appropriate.
The maintenance terminal 700 is possessed by a maintenance person having a proper authority to maintain the settlement terminal 100, and transmits RF data including authentication information when communication with the wireless unit 51a is possible. For transmission of RF data, for example, a radio frequency identification (RFID) or near field communication (NFC) mechanism can be used. Thus, the wireless unit 51a has a function as a third acquisition unit.
When the payment terminal 100 is maintained, or when other elements of the LAN 300 or the POS system are maintained, the assignment of the IP address to the payment terminal 100 may change. When performing such maintenance, the maintenance person brings the maintenance terminal 700 close to the antenna of the wireless unit 51a prior to that. Then, RF data is wirelessly transmitted from the maintenance terminal 700, and the RF data is received by the wireless unit 51a.
FIG. 6 is a flowchart showing a processing procedure of the wireless unit 51a.
In Act 31, the wireless unit 51a waits for RF data to be received. If the radio unit 51a receives the RF data, the radio unit 51a determines Yes and proceeds to Act32.
In Act 32, the wireless unit 51a authenticates the maintenance terminal 700 using the authentication information included in the RF data.
In Act 33, the wireless unit 51a confirms whether or not the authorized maintenance terminal 700 has transmitted the RF data based on the above authentication. If the wireless unit 51a is not the regular maintenance terminal 700, the wireless unit 51a determines No and returns to the standby state of Act31. However, if the wireless unit 51a is a regular maintenance terminal 700, the wireless unit 51a determines Yes and proceeds to Act 34.
In Act 34, the wireless unit 51a reads the mode data stored in the shared memory 51c via the memory control unit 51b.
In Act 35, the wireless unit 51a checks whether or not the mode data is maintenance mode data. If the wireless unit 51a determines Yes because the mode data is maintenance mode data, the wireless unit 51a proceeds to Act 36.
In Act 36, the wireless unit 51a instructs the memory control unit 51b to rewrite the mode data stored in the shared memory 51c to normal mode data. In response to this instruction, the memory control unit 51b rewrites the mode data stored in the shared memory 51c to normal mode data. Thereafter, the wireless unit 51a returns to the standby state of Act31.
On the other hand, if the mode data read from the shared memory 51c is normal mode data, the wireless unit 51a determines No in Act 35, and proceeds to Act 37.
In Act 37, the wireless unit 51a instructs the memory control unit 51b to rewrite the mode data stored in the shared memory 51c with the maintenance mode data. In response to this instruction, the memory control unit 51b rewrites the mode data stored in the shared memory 51c to maintenance mode data. Thereafter, the wireless unit 51a returns to the standby state of Act31.
As described above, every time the maintenance person brings the maintenance terminal 700 close to the antenna of the wireless unit 51a, the mode data stored in the shared memory 51c can be switched between the normal mode data and the maintenance mode data.
FIG. 7 is a flowchart showing a procedure of processing based on the configuration detection program P4 in the configuration detection unit 52. Note that some of the operations having the same contents as those shown in FIG. 4 are omitted, and those shown in the drawings are given the same reference numerals, and detailed descriptions thereof are omitted.
The configuration detection unit 52 performs the processes of Act11 to Act20 in the same manner as the configuration detection unit 22. Then, after completing Act 18 or Act 20, the configuration detection unit 52 proceeds to Act 41.
In Act 41, the configuration detection unit 52 reads the mode data stored in the shared memory 51c via the memory control unit 51d, and checks whether this is normal mode data. If the configuration detection unit 52 determines that the data is normal mode data, the process proceeds to Act 21. Also, if the configuration detection unit 52 determines No because it is maintenance mode data, it passes Act 21 and proceeds to Act 22.
After that, the configuration detection unit 52 performs the processing after Act 21 in the same manner as the configuration detection unit 22.
That is, the configuration detection unit 52 does not check whether or not the initial value V1 and the start value V2 match in the state where the maintenance mode is set by using the mode data as the maintenance mode data, and therefore, the reading program P1. And the settlement program P2 is not updated. That is, the configuration detection unit 52 has a function as a second control unit.
Thus, according to the payment terminal 101, the same effect as the payment terminal 100 can be achieved. In addition, according to the payment terminal 101, even if the IP address assignment is changed due to maintenance, the reading program P1 and the payment program P2 are updated by setting the maintenance mode. Can be prevented. That is, the reading program and the settlement program stored in the storage areas 31-1 to 31-n can be effectively used.
The same can be applied to a settlement terminal that performs settlement using a method other than credit settlement such as electronic money settlement.
It is also possible to carry out by using storage information stored in an electronic money card or a wireless tag such as an NFC tag mounted on a portable information terminal or other arbitrary storage medium instead of the card information in the above embodiment. It is.
DESCRIPTION OF SYMBOLS 10 ... Reading unit, 11 ... Reading part, 12 ... Reading control part, 20 ... Settlement processing unit, 21 ... Settlement control part, 22 ... Configuration detection part, 23 ... Switching part, 30 ... Storage unit, 31 ... Storage part, 31 3-1 to 31-n: storage area, 32: access control unit, 33: encryption key output unit, 34: encryption processing unit, 35: interface unit, 50: settlement processing unit, 51: state detection unit, 51a: wireless 51b ... Memory control unit 51c ... Shared memory 51d ... Memory control unit 52 ... Configuration detection unit 100 ... Payment terminal 101 ... Payment terminal 200 ... POS terminal 400 ... POS server 600 ... Payment server 700 ... maintenance terminal, P1, P1-1 to P1-n ... reading program, P2, P2-1 to P2-n ... settlement program, P3, P4 ... configuration detection program, P4 ... configuration detection program Lamb.
A payment terminal that includes a reading unit and a processing unit and performs processing for payment using a payment system,
The reading unit is
Reading means for reading recorded information stored in the storage medium;
First storage means for storing one first program;
Rewriting means for rewriting the first program stored in the first storage means in response to a rewriting instruction from the processing unit;
Based on the first program stored in the first storage means, at least a part of the recorded information read by the reading means is used with an encryption key associated with the first program in advance. Encryption means for encrypting,
Transmission means for transmitting the recording information encrypted by the encryption means to the processing unit;
Second storage means for storing a plurality of sets of first programs and second programs associated with the same encryption key;
Receiving means for receiving the encrypted record information transmitted by the transmitting means;
Based on one of the second programs stored in the second storage unit, the encrypted recording information received by the receiving unit is stored in the second Decryption means for decryption using an encryption key associated with the program;
A first acquisition means for acquiring transaction data representing the contents of a transaction to be settled;
Request means for requesting a payment system via a communication network to settle the transaction represented by the transaction data acquired by the first acquisition means using the recorded information decrypted by the decryption means;
Second acquisition means for acquiring predetermined network information relating to a configuration of the communication network;
Third storage means for storing the network information acquired by the second acquisition means;
When the network information newly acquired by the second acquisition unit is different from the network information already stored by the third storage unit, a plurality of pieces of information stored in the second storage unit are stored. Changing means for changing the second program to be valid among the second programs;
Instruction means for instructing the reading unit to rewrite the first program stored in the second storage means as a set with the second program newly validated by the changing means. When,
Updating means for updating the network information stored in the third storage means to the network information newly acquired by the second acquisition means after performing the rewriting instruction by the instruction means;
The second acquisition means acquires identification information for identifying the payment terminal in the communication network as the network information.
The payment terminal according to claim 1.
The changing means manages whether or not each of the plurality of second programs stored in the second storage means has been validated in the past, and validates the second program that has not been validated in the past. And
The payment terminal according to claim 1 or 2.
The first acquisition means acquires the transaction data from a registration device that registers the details of the transaction,
If the network information newly acquired by the second acquisition unit is different from the network information already stored by the third storage unit, whether the program needs to be changed for the registration device Inquiry means to inquire,
A first control unit that operates the change unit, the instruction unit, and the update unit in response to a change instruction from the registration device in response to an inquiry by the inquiry unit;
The payment terminal according to any one of claims 1 to 3.
Third acquisition means for acquiring authentication information for authenticating the authorized person;
A second control unit that does not operate the change unit and the instruction unit when the authentication information is acquired by the third acquisition unit;
The payment terminal according to any one of claims 1 to 4, further comprising:
JP2016185516A 2016-09-23 2016-09-23 Settlement terminal Pending JP2018050228A (en)
JP2016185516A JP2018050228A (en) 2016-09-23 2016-09-23 Settlement terminal
US15/702,320 US10318933B2 (en) 2016-09-23 2017-09-12 Settlement terminal and method of protecting data stored in the settlement terminal against tampering
EP17191388.2A EP3299985B1 (en) 2016-09-23 2017-09-15 Settlement terminal and method of protecting data stored in the settlement terminal against tampering
JP2018050228A true JP2018050228A (en) 2018-03-29
ID=59895177
JP2016185516A Pending JP2018050228A (en) 2016-09-23 2016-09-23 Settlement terminal
US (1) US10318933B2 (en)
EP (1) EP3299985B1 (en)
JP (1) JP2018050228A (en)
EP3265979A4 (en) * 2015-03-04 2018-12-05 Trusona, Inc. Systems and methods for user identification using payment card authentication read data
JP6052561B1 (en) * 2015-08-31 2016-12-27 パナソニックＩｐマネジメント株式会社 Transaction terminal device and information input device
2016-09-23 JP JP2016185516A patent/JP2018050228A/en active Pending
2017-09-12 US US15/702,320 patent/US10318933B2/en active Active
2017-09-15 EP EP17191388.2A patent/EP3299985B1/en active Active
EP3299985B1 (en) 2019-05-01
EP3299985A1 (en) 2018-03-28
US20180089640A1 (en) 2018-03-29
US10318933B2 (en) 2019-06-11
US20180189783A1 (en) 2018-07-05 Cloud-based transactions with magnetic secure transmission
EP2131336A1 (en) 2009-12-09 Information processing device, information processing method, program and communication system
CN101018127A (en) 2007-08-15 Remote access system, gateway, client device, program, and storage medium
KR20040086105A (en) 2004-10-08 Data security in an information processing device
JP3636984B2 (en) 2005-04-06 Recording medium for IC card system and IC card system
2019-08-23 A621 Written request for application examination