JP2015212864A - Terminal device, settlement method and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To prevent illegal settlement while suppressing power consumption and authenticating a user.SOLUTION: A terminal device 10 performs authentication by using a finger print of a user when the user touches a touch panel by a finger while a sign-in web page to a web site of a server device 30 is displayed. If the user is a previously registered user, it authenticates the user and sets an expiration time of the authentication depending on the time zone in which the authentication is performed. The terminal device 10 executes processing for settlement when the user instructs settlement of an article sold in the web site within the expiration time, while it does not execute processing for settlement when the user instructs settlement of an article sold in the web site after the expiration time has elapsed.

Description

  The present invention relates to a terminal device, a settlement method, and a program.

  When a payment is made at a shopping site, the user is authenticated with an ID and a password. However, it takes time to input the ID and password on the mobile terminal. For this reason, there exists the invention disclosed by patent document 1, for example as invention which can authenticate and do not require a user's effort, and can purchase goods.

  Patent Document 1 discloses a product purchase system in which fingerprint authentication is performed when a user presses a product image on an information terminal, and payment is made when the user is authenticated. Also, in Embodiment 2 of this system, when a user presses a product image on an information terminal, a button for confirming the purchase of the product is displayed, and fingerprint authentication is performed when the button is pressed. A product purchase system is disclosed in which payment is made when the payment is made.

JP 2008-217187 A

  In the system of Patent Document 1, fingerprint authentication is performed every time a product is selected. However, with this configuration, processing is burdened with each selection, and power is consumed each time authentication is performed. Consumes quickly. Once authenticated, the processing load is reduced if authentication is omitted during payment, but if the authenticated state continues for a long time, the authenticated terminal is operated by another person and owned by the terminal. There is a risk that payment processing will be performed without the knowledge of the person.

  The present invention has been made under the background described above, and an object of the present invention is to provide a technique for preventing unauthorized payment while authenticating a user while suppressing power consumption.

  The present invention provides an operation unit operated by a user, an authentication unit that performs biometric authentication for the user in response to a user operation on the operation unit, and authentication of the user when the authentication unit authenticates the user A setting unit that sets an expiration date according to a predetermined rule, and a settlement process is not executed when a settlement instruction is acquired after the expiration date, and a settlement process is performed when a settlement instruction is acquired within the expiration date And a settlement unit to be executed.

  In this invention, it has a positioning part which measures the position of an own apparatus, and the said setting part is good also as a structure which sets the said expiration date according to the position which the said positioning part measured.

  In the present invention, the setting unit may set the expiration date according to at least one of season, month, date, and time.

  In the present invention, the setting unit may reset the expiration date when the authentication unit authenticates the user again within the expiration date.

  Moreover, in this invention, the said setting part is good also as a structure which sets the said expiration date according to the access destination which becomes accessible by having been authenticated by the said authentication part.

  In the present invention, the setting unit may be configured to reset the expiration date according to a page acquired and displayed from an access destination that is accessible by being authenticated by the authentication unit.

  In the present invention, the setting unit may be configured to reset the expiration date when a predetermined second page is acquired in response to a user operation after acquiring the predetermined first page.

  In addition, the present invention provides an authentication step for performing biometric authentication for a user in response to a user operation on an operation unit operated by the user, and authentication of the user when the user is authenticated in the authentication step. A setting step for setting the expiration date according to a predetermined rule, and when the settlement instruction is acquired after the expiration date, the settlement processing is not executed, and when the settlement instruction is acquired within the expiration date, the settlement processing is performed. And a settlement method to be executed.

  In addition, the present invention provides an authentication unit that performs biometric authentication for a user in response to a user operation on an operation unit operated by the user, and when the authentication unit authenticates the user, A setting unit that sets an expiration date of authentication according to a predetermined rule, and a settlement process is not executed when a settlement instruction is acquired after the expiration date, and a settlement process is performed when a settlement instruction is acquired within the expiration date Provides a program to function as a settlement unit that executes

  According to the present invention, it is possible to prevent unauthorized payment while authenticating a user while suppressing power consumption.

The figure which showed the apparatus which concerns on one Embodiment of this invention. The figure which showed the hardware constitutions of the terminal device 10. The functional block diagram of the terminal device 10. FIG. The figure which showed the hardware constitutions of the server apparatus. The figure which showed an example of authentication table TB1. The figure which showed the flow of the process which the microcomputer 101 performs. The figure which showed the flow of the process which the microcomputer 101 performs. The figure which showed an example of authentication table TB1. FIG. 3 is a functional block diagram of the server device 30. The figure which showed the flow of the process which the microcomputer 101 performs. The figure which showed the flow of the process which the control part 301 performs. The figure which showed the flow of the process which the control part 301 performs.

[First Embodiment]
(overall structure)
FIG. 1 is a diagram showing an apparatus according to an embodiment of the present invention. The communication network 20 is a mobile communication network that provides communication services such as voice communication and data communication. The communication network 20 can also include the Internet, a fixed telephone network, and the like. A terminal device 10 and a server device 30 are connected to the communication network 20. The terminal device 10 according to the present embodiment is a smartphone. The terminal device 10 is not limited to a smartphone, and may be a tablet terminal or a feature phone capable of data communication, a computer device specialized for data communication, or the like. The server device 30 is a device in which a website for selling products is constructed. The server device 30 provides a web page having a product image and a product description to a previously registered user. Although there are many terminal devices and server devices that can be connected to the communication network 20, only one terminal device 10 and one server device 30 are shown in FIG. 1 in order to prevent the drawing from becoming complicated. .

(Configuration of terminal device 10)
FIG. 2 is a diagram illustrating an example of a hardware configuration of the terminal device 10. The touch panel 103 is a device that combines a display device (for example, a liquid crystal display) and a sensor that detects contact of a finger on the display surface of the display device, and is an example of an operation unit operated by a user. The touch panel 103 displays a character or graphic screen, a menu screen for operating the terminal device, and the like on the display device. Further, the touch panel 103 detects a position where the user touches with a finger using a sensor. The microcomputer 101 identifies a user operation according to the position detected by the touch panel 103 and the screen displayed on the touch panel, and executes control of each unit and various processes according to the identified operation. The sensor of the touch panel 103 has a function of detecting a user's fingerprint.

  The audio processing unit 107 has a microphone and a speaker. When the terminal device performs a voice call between the terminal devices, when the digital signal related to the voice of the other party is supplied from the communication unit 105, the voice processing unit 107 converts the supplied digital signal into an analog signal. This analog signal is supplied to a speaker, and the voice of the other party is emitted from the speaker. In addition, when the microphone collects sound, the sound processing unit 107 converts the collected sound into a digital signal. The voice processing unit 107 supplies a digital signal obtained by converting the user's voice to the communication unit 105 when performing a voice call on the terminal device. This digital signal is transmitted from the communication unit 105 to the communication network 20 and transmitted to the terminal device of the other party.

The communication unit 105 functions as a communication interface that performs wireless communication via the communication network 20.
The positioning unit 109 measures the position of the terminal device 10 using a satellite navigation system or a wireless LAN. The positioning unit 109 acquires a radio wave from an artificial satellite included in the satellite navigation system or a radio wave transmitted from a wireless LAN access point, and generates position information indicating the position of the terminal device 10 based on the acquired radio wave. .

  The storage unit 102 has a nonvolatile memory and stores an operating system program and a plurality of application programs. For example, the storage unit 102 stores an application program (hereinafter referred to as a fingerprint application) that realizes a function of authenticating a user using a fingerprint. The storage unit 102 stores data used by the fingerprint application. For example, the storage unit 102 stores the fingerprint data of the user of the terminal device 10 and the user identifier and password for signing in to the website of the server device 30 as data used by the fingerprint application.

  The microcomputer 101 includes a CPU (Central Processing Unit) and a RAM (Random Access Memory). When the CPU executes an operating system program stored in the storage unit 102, the operating system of the smartphone is realized. Further, when the microcomputer 101 executes the fingerprint application, a function of performing user authentication using the fingerprint is realized.

(Functional configuration of terminal device 10)
FIG. 3 is a block diagram illustrating functions realized by the terminal device 10 by executing an application program.
The authentication unit 152 performs biometric authentication for the user in accordance with an operation performed on the touch panel 103. Specifically, when touch panel 103 detects a user's fingerprint, authentication unit 152 authenticates the user by comparing the fingerprint detected by touch panel 103 with the fingerprint data stored in storage unit 102.
When the authentication unit 152 authenticates the user, the setting unit 151 sets the expiration date of the user authentication according to a predetermined rule.
The settlement unit 150 is a functional block that executes processing for settlement of product purchases on a website in accordance with a user operation. If the settlement unit 150 obtains a settlement instruction after the expiration date set by the setting unit 151 has passed, the settlement unit 150 does not execute the process for settlement. Execute the process for.

(Configuration of server device 30)
FIG. 4 is a block diagram illustrating an example of a hardware configuration of the server device 30. The communication unit 305 is a communication interface for performing data communication. The communication unit 305 is connected to the communication network 20 by a communication cable (not shown).

  The storage unit 302 has a device (for example, a hard disk device) that permanently stores data. The storage unit 302 stores a program that realizes the function of a web server, a web page provided on a website, a product that searches for products sold under search conditions specified by a user, and generates a web page as a search result. To do.

  The storage unit 302 also stores an authentication table TB1 that stores a user identifier and password for a user of the website to sign in. FIG. 5 is a diagram showing an example of the authentication table TB1. In the authentication table TB1, for each user of the website, a set of a user identifier that is an identifier for identifying the user and a password for confirming the identity of the user is stored.

(Operation example of the first embodiment)
Next, an operation example of this embodiment will be described. When the user of the terminal device 10 starts a web browser on the terminal device 10 and performs an operation of accessing the website of the server device 30, the terminal device 10 and the server device 30 communicate to sign in to the website. Is sent to the terminal device 10. When the microcomputer 101 acquires this web page and controls the touch panel 103 based on the acquired web page, a web page for sign-in that requests input of a fingerprint is displayed on the touch panel 103. The When the microcomputer 101 executing the fingerprint application displays a web page for sign-in, the microcomputer 101 executes the process shown in FIG.

  Specifically, when a user who has viewed a web page touches touch panel 103 with a finger, touch panel 103 detects the user's fingerprint. When the touch panel 103 detects a fingerprint (YES in step SA1), the microcomputer 101 (authentication unit 152) collates the fingerprint detected by the touch panel 103 with the fingerprint data stored in the storage unit 102, and touches the touch panel 103. It is determined whether the user touched with a finger is a pre-registered user (step SA2), and the user is authenticated.

  When the microcomputer 101 determines that the user is not registered in advance (NO in step SA2), the microcomputer 101 controls the touch panel 103 to display a message notifying that sign-in has failed (step SA3). Then, the process flow returns to step SA1.

  On the other hand, when the microcomputer 101 (setting unit 151) determines that the user is registered in advance (YES in step SA2), the microcomputer 101 sets an expiration date for sign-in (step SA4). When the time when the microcomputer 101 determines that the user is registered in advance is a first time zone (for example, 7: 0 to 18:59:59), the microcomputer 101 sets the valid period of sign-in to the first period ( For example, 30 minutes), and the time obtained by adding the first period and the time when the determination with the user registered in advance is stored in the storage unit 102. If the time when the microcomputer 101 determines that the user is registered in advance is in the second time zone (for example, 19: 0 to 6:59:59), the microcomputer 101 sets the validity period of the sign-in to the second time period. A period (for example, 1 hour) is set, and the time obtained by adding the second period and the time when the user is registered in advance is stored in the storage unit 102.

  Next, the microcomputer 101 acquires the user identifier and password for signing in to the website of the server device 30 from the storage unit 102, and transmits the acquired user identifier and password to the server device 30 (step SA5).

  When the control unit 301 acquires the user identifier and password transmitted from the terminal device 10, the control unit 301 determines whether the user of the terminal device 10 is a user registered in advance on the website. Specifically, it is determined whether the acquired user identifier and password pair is stored in the authentication table TB1. The control unit 301 transmits a web page notifying that the sign-in has failed to the terminal device 10 when there is no record storing the set of the acquired user identifier and password in the authentication table TB1. When the microcomputer 101 acquires this web page and controls the touch panel 103 based on the acquired web page, the acquired web page is displayed on the touch panel 103.

  On the other hand, the control unit 301 determines that the user of the terminal device 10 is a user registered in advance on the website when there is a record storing the acquired set of user identifier and password in the authentication table TB1. When the control unit 301 determines that the user is registered in advance, the control unit 301 transmits a web page of a product to be sold to the terminal device 10. When the microcomputer 101 acquires this web page and controls the touch panel 103 based on the acquired web page, the acquired web page is displayed on the touch panel 103.

  The user of the terminal device 10 operates a browser, browses a web page in the website, and examines a product to be purchased. When a product to be purchased is determined, the user performs an operation of putting the product to be purchased into a shopping cart of the website. When this operation is performed, the terminal device 10 and the server device 30 communicate with each other, and the product selected by the user is put into a shopping cart on the website by a so-called shopping cart function. Further, when confirming an order for a product, the user performs an operation of moving to a web page for confirming the order. When this operation is performed, the terminal device 10 and the server device 30 communicate with each other, and a web page for confirming the order is displayed on the touch panel 103.

  When the user performs an operation for confirming the order, the microcomputer 101 executes the processing shown in FIG. The microcomputer 101 (settlement unit 150) determines whether the time at which the operation for confirming the order is performed exceeds the time of the user's sign-in expiration date stored in the storage unit 102. If the time at which the operation for confirming the order has not exceeded the expiration time (NO in step SB1), the microcomputer 101 transmits information indicating that the order has been confirmed to the server device 30 (step). SB2). Upon receiving this information, the control unit 301 performs a settlement process.

  On the other hand, the microcomputer 101 (settlement unit 150) does not transmit information indicating that the order is confirmed to the server device 30 when the time when the operation for confirming the order exceeds the expiration time. The touch panel 103 is controlled to display a message notifying that the sign-in expiration date has passed (step SB3). Thereafter, the microcomputer 101 controls the touch panel 103 so that a web page for sign-in is displayed (step SB4).

  According to this embodiment, since fingerprint authentication is not performed every time a product is selected, power consumption of the terminal device 10 can be suppressed. In the present embodiment, the validity period of sign-in is dynamically set according to the authenticated time zone. For example, in the first time zone in which the user often goes out, the expiration date is set to 30 minutes. Therefore, even if the terminal device 10 is left unattended after signing in, it is automatically performed in a short time. The settlement becomes impossible, and the possibility of being settled by being operated by another person is reduced. Also, in the second time zone when the user is often at home, the expiration date is set to 1 hour and the sign-in expiration time becomes longer, so payment is made after slowly selecting the product at home. be able to.

In the present embodiment, when the user touches the touch panel 103 within the expiration date, the microcomputer 101 collates the fingerprint detected by the touch panel 103 with the fingerprint data stored in the storage unit 102, and the touch panel 103 When it is determined that the user who has touched 103 with a finger is a registered user, the expiration date may be reset based on the determination time.
For example, when there are a plurality of shopping sites, the microcomputer 101 may have different expiration dates for sign-ins depending on the shopping sites.

[Second Embodiment]
Next, a second embodiment of the present invention will be described. The devices according to the second embodiment of the present invention are the terminal device 10 and the server device 30 as in the first embodiment, and the hardware configuration of each device is the same as that in the first embodiment. In the present embodiment, the processing performed by each device is different from the first embodiment. For this reason, description about the same structure as 1st Embodiment is abbreviate | omitted, and the difference with 1st Embodiment is demonstrated below.

  FIG. 8 is a diagram showing the authentication table TB1 according to the present embodiment. In the authentication table TB1 according to the present embodiment, data indicating the expiration date of sign-in to the website is stored. If the signed-in user does not perform an operation for confirming the order of the product within a predetermined time after the signed-in user has signed in, the server device 30 automatically signs out the user. The “expiration date” field of the authentication table TB1 stores the time when the user is signed out.

(Functional configuration of server device 30)
FIG. 9 is a block diagram illustrating functions realized in the server device 30.
The authentication unit 352 authenticates the user of the website using the user identifier and password received by the communication unit 305. Specifically, the authentication unit 352 authenticates the user when the combination of the user identifier and password received by the communication unit 305 is stored in the authentication table TB1.
When the authentication unit 352 authenticates the user, the setting unit 351 sets the expiration date of the user authentication according to a predetermined rule.
The settlement unit 350 is a functional block that executes processing for settlement of product purchases on a website in accordance with a user operation. After the expiration date set by the setting unit 351 has passed, the settlement unit 350 does not execute the settlement process when information indicating the confirmation of the order is sent from the terminal device 10, but within the expiration date set by the setting unit 351 When information indicating confirmation of the order is sent from the terminal device 10, a settlement process is executed.

(Operation example of the second embodiment)
Next, an operation example of this embodiment will be described. When the user of the terminal device 10 starts a web browser on the terminal device 10 and performs an operation of accessing the website of the server device 30, the terminal device 10 and the server device 30 communicate to sign in to the website. Is sent to the terminal device 10. When the microcomputer 101 acquires this web page and controls the touch panel 103 based on the acquired web page, a web page for signing in and requesting input of a fingerprint is displayed on the touch panel 103. . When the microcomputer 101 executing the fingerprint application displays a web page for sign-in, the microcomputer 101 executes the process shown in FIG.

  Specifically, when a user who has viewed a web page touches touch panel 103 with a finger, touch panel 103 detects the user's fingerprint. When the touch panel 103 detects a fingerprint (YES in step SC1), the microcomputer 101 collates the fingerprint detected by the touch panel 103 with the fingerprint data stored in the storage unit 102 and touches the touch panel 103 with a finger. It is determined whether the user is a user registered in advance (step SC2).

  If the microcomputer 101 determines that the user is not registered in advance (NO in step SC2), the microcomputer 101 controls the touch panel 103 to display a message notifying that sign-in has failed (step SC3). Is returned to step SC1.

  On the other hand, when the microcomputer 101 determines that the user is a pre-registered user (YES in step SC2), the microcomputer 101 acquires the user identifier and password for signing in to the website of the server device 30 from the storage unit 102, and acquires the user identifier and password. The transmitted user identifier and password are transmitted to the server device 30 (step SC4).

  When the control unit 301 obtains the user identifier and password transmitted from the terminal device 10, the control unit 301 executes the process illustrated in FIG. First, the control unit 301 determines whether the user of the terminal device 10 is a user registered in advance on the website. Specifically, it is determined whether the acquired user identifier and password pair is stored in the authentication table TB1. When there is no record storing the acquired user identifier and password pair in the authentication table TB1 (NO in step SD1), the control unit 301 transmits a web page notifying that sign-in has failed to the terminal device 10 ( Step SD2). When the microcomputer 101 acquires this web page and controls the touch panel 103 based on the acquired web page, the acquired web page is displayed on the touch panel 103.

On the other hand, the control unit 301 determines that the user of the terminal device 10 is a user registered in advance on the website when the record storing the set of the acquired user identifier and password is in the authentication table TB1 (in step SD1). YES). When determining that the user is a user registered in advance, the control unit 301 sets an expiration date for sign-in (step SD3). When the time at which the determination with the user registered in advance is in the first time zone (for example, 7: 0 to 18:59:59), the control unit 301 sets the sign-in valid period to the first period ( (E.g., 30 minutes), and the time obtained by adding the first period to the time when the user is determined to be registered in advance, the field of “expiration date” of the record in which the acquired user identifier is stored To store. In addition, when the time when the determination with the user registered in advance is in the second time zone (for example, 19: 0 to 6:59:59), the control unit 301 sets the validity period of the sign-in to the second time period. The “expiration date” of the record that stores the user identifier that acquires the time obtained by adding the second period and the time when the determination with the user registered in advance is made as a period (for example, 1 hour) Store in the field.
Note that the first time zone, the second time zone, the first period, and the second period are not limited to the above time zone or period, and may be other time zones or periods. . Moreover, it is not limited to two time zones and two periods, and there may be three or more time zones or three or more periods.

  When the setting of the expiration date is completed, the control unit 301 transmits the web page of the product to be sold to the terminal device 10 (step SD4). When the microcomputer 101 acquires this web page and controls the touch panel 103 based on the acquired web page, the acquired web page is displayed on the touch panel 103.

  The user of the terminal device 10 operates a browser, browses a web page in the website, and examines a product to be purchased. When a product to be purchased is determined, the user performs an operation of putting the product to be purchased into a shopping cart of the website. When this operation is performed, the terminal device 10 and the server device 30 communicate with each other, and the product selected by the user is put into a shopping cart on the website by a so-called shopping cart function.

  Further, when confirming an order for a product, the user performs an operation of moving to a web page for confirming the order. When this operation is performed, the terminal device 10 and the server device 30 communicate with each other, and a web page for confirming the order is displayed on the touch panel 103.

  When the user performs an operation for confirming the order on the touch panel 103 while the web page for confirming the order is displayed, the microcomputer 101 sends information indicating that the user confirms the order to the server device 30. Send.

  When the control unit 301 acquires information indicating that the order has been confirmed, the control unit 301 executes the processing illustrated in FIG. First, the control unit 301 determines whether or not the time when the message is acquired exceeds the expiration time of the user's sign-in (step SE1). The control unit 301 refers to the expiration date field of the record corresponding to the user of the terminal device 10 in the authentication table TB1, and when the time when the message is acquired exceeds the time stored in the expiration date field (step No settlement processing is performed.

  For example, when the user signs in at the first time zone and acquires a message indicating that the order is confirmed after 30 minutes have passed since the sign-in, the control unit 301 determines YES in step SE1 and signs in Is transmitted to the terminal device 10 (step SE2). The control unit 301 also displays a web page for sign-in when the user signs in at the second time period and acquires a message indicating that the order has been confirmed after one hour has passed since the sign-in. It transmits to the terminal device 10.

  When the microcomputer 101 acquires this web page and controls the touch panel 103 based on the acquired web page, the web page for sign-in is displayed on the touch panel 103. When the user touches the touch panel 103 with a finger and the touch panel 103 detects a fingerprint (YES in step SC1), the microcomputer 101 detects the fingerprint detected by the touch panel 103 and the fingerprint data stored in the storage unit 102. To determine whether the user who touched the touch panel 103 with a finger is a registered user (step SC2).

  When the microcomputer 101 determines that the user is registered in advance, the control unit 301 determines that the user is a registered user of the website in the same manner as described above, and the sign-in expiration date is newly set. The set expiration date is stored in the authentication table TB1. When the expiration date has been set, the control unit 301 transmits a web page of a product to be sold to the terminal device 10. When the microcomputer 101 acquires this web page and controls the touch panel 103 based on the acquired web page, the acquired web page is displayed on the touch panel 103. When the user performs an operation of confirming an order after performing an operation of putting the product into the shopping cart, the microcomputer 101 transmits a message indicating that the user has confirmed the order to the server device 30.

  When the control unit 301 acquires the message transmitted from the terminal device 10, the control unit 301 determines whether the time when the message is acquired exceeds the time of the user's sign-in expiration date (step SE1). The control unit 301 refers to the expiration date field of the record corresponding to the user of the terminal device 10 in the authentication table TB1, and the time when the message is acquired does not exceed the time stored in the expiration date field ( Settlement processing is performed (NO in step SE1) (step SE3).

  For example, when the user signs in during the first time period and acquires a message indicating that the order is confirmed within 30 minutes from the sign-in, the control unit 301 performs a settlement process. Note that the control unit 301 also performs settlement processing when the user signs in during the second time period and acquires a message indicating that the order has been confirmed within one hour after the sign-in.

  According to this embodiment, since fingerprint authentication is not performed every time a product is selected, power consumption of the terminal device 10 can be suppressed. In the present embodiment, the validity period of sign-in is dynamically set according to the authenticated time zone. For example, in the first time zone in which the user often goes out, the expiration date is set to 30 minutes. Therefore, even if the terminal device 10 is left unattended after signing in, a short time is required. Thus, the user is automatically signed out, and the resource consumption of the server device 30 can be suppressed. Also, in the second time zone, when the user is often at home, the expiration date is set to 1 hour and the sign-in expiration time becomes longer, so after slowly selecting the product at home Can make payments.

[Modification]
As mentioned above, although embodiment of this invention was described, this invention is not limited to embodiment mentioned above, It can implement with another various form. For example, the above-described embodiment may be modified as follows to implement the present invention, or may be implemented in combination with each modification.

  In the above-described embodiments and modifications, the sign-in expiration date is set according to the time zone, but may be set according to the date, month, and season instead of the time zone.

In the embodiment described above, the sign-in expiration date is set according to the time zone in which it is determined whether the user is a pre-registered user, but the configuration for setting the sign-in expiration date is this configuration. It is not limited to.
For example, the expiration date of sign-in may be set according to the position of the terminal device 10. Specifically, the user registers in advance in the storage unit 102 a position where the valid period of sign-in is the second valid period. When the terminal device 10 determines that the user is registered in advance in step SA2, the terminal device 10 acquires the position stored in the storage unit 102, and the position generated by the positioning unit 109 within a predetermined range from the acquired position. Determine if the location of the information is included.
When the position of the position information generated by the positioning unit 109 is not included in a predetermined range from the position acquired from the storage unit 102, the microcomputer 101 sets the valid period of sign-in as the first period and registers the registered user And the time obtained by adding the first period and the first period are stored in the storage unit 102. In addition, when the position of the position information generated by the positioning unit 109 is included within a predetermined range from the position acquired from the storage unit 102, the microcomputer 101 sets the valid period of sign-in as the second period and is registered in advance The storage unit 102 stores the time obtained by adding the time when the user is determined and the second period.

Also in this modification, since fingerprint authentication is not performed every time a product is selected, power consumption of the terminal device 10 can be suppressed. Also, in this modification, since the expiration date is set to 30 minutes outside the home, even if the terminal device 10 is left unattended after signing in, it is automatically signed out in a short time. Therefore, even if the terminal device 10 is left unnecessarily after signing in, payment cannot be made automatically in a short time, and the possibility of being settled by being operated by another person is reduced. In addition, when the user is at home, the expiration date is set to 1 hour and the expiration date for sign-in becomes longer, so that payment can be made after slowly selecting a product at home.
The position stored in the storage unit 102 is not limited to the position of the user's home, and may be another place such as a place where the user frequently goes.

  In the embodiment described above, the expiration date of sign-in may be different depending on the user's credit rating. For example, the sign-in expiration date may be extended for a user with a high credit rating, and the sign-in expiration date may be shortened for a user with a low credit rating.

  In the above-described embodiment, authentication is performed using a fingerprint, but the configuration for performing user authentication is not limited to this configuration. For example, a configuration using other biological information such as a face image, a vein pattern, and voice may be used.

In the above-described embodiment, when a user is authenticated, an effective period of authentication is set. However, the present invention is not limited to this configuration.
For example, in a shopping site, there is a site that displays a page for confirming the order contents and a page for setting the delivery destination and delivery method of the ordered product before moving to the web page for finalizing the order. is there. When displaying the web page of the site to be transferred to the predetermined page in such a predetermined order, when the page is moved to the page for confirming the order contents, or the page for setting the delivery destination and the delivery method of the ordered product When moving to, the sign-in validity period may be reset when, for example, the page is displayed immediately before the page for finalizing the order contents.
As the contents of resetting, a new effective period may be set by adding a predetermined period to the effective period set at the time of sign-in, or a new predetermined effective period without adding the predetermined period. May be set. Moreover, it is good also as a structure which adds a predetermined period to the set effective period as it approaches the page which finalizes the content of an order.

  The programs of the terminal device 10 and the server device 30 are a magnetic recording medium (magnetic tape, magnetic disk (HDD (Hard Disk Drive), FD (Flexible Disk), etc.)), optical recording medium (optical disk, etc.), magneto-optical recording medium, It may be provided and installed in a state stored in a computer-readable recording medium such as a semiconductor memory. Alternatively, the program may be downloaded and installed via a communication line.

DESCRIPTION OF SYMBOLS 10 ... Terminal device, 20 ... Communication network, 30 ... Server device, 101 ... Microcomputer, 102 ... Memory | storage part, 103 ... Touch panel, 105 ... Communication part, 107 ... Voice processing part, 109 ... Positioning part, 150 ... Settlement part, 151 ... Setting unit 152 ... Authentication unit 301 ... Control unit 302 ... Storage unit 305 ... Communication unit 350 ... Settlement unit 351 ... Setting unit 352 ... Authentication unit

Claims (9)

An operation unit operated by a user;
An authentication unit that performs biometric authentication for the user in response to a user operation on the operation unit;
When the authentication unit authenticates the user, a setting unit that sets an expiration date of the authentication of the user according to a predetermined rule;
A settlement unit that executes a settlement process when a settlement instruction is acquired within the validity period, without performing a settlement process when a settlement instruction is acquired after the expiration date;
A terminal device comprising: It has a positioning unit that measures the position of its own device,
The terminal device according to claim 1, wherein the setting unit sets the expiration date according to a position measured by the positioning unit. The terminal device according to claim 1, wherein the setting unit sets the expiration date according to at least one of season, month, date, and time. The terminal device according to any one of claims 1 to 3, wherein the setting unit resets the expiration date when the authentication unit authenticates the user again within the expiration date. The terminal device according to any one of claims 1 to 4, wherein the setting unit sets the expiration date according to an access destination that is accessible by being authenticated by the authentication unit. The said setting part resets the said expiration date according to the page acquired and displayed from the access destination which becomes accessible after having been authenticated by the said authentication part. The terminal device described. The terminal device according to claim 6, wherein the setting unit resets the expiration date when a predetermined second page is acquired according to a user operation after acquiring the predetermined first page. An authentication step for performing biometric authentication for the user in response to a user operation on an operation unit operated by the user;
When a user is authenticated in the authentication step, a setting step for setting an expiration date of authentication of the user according to a predetermined rule;
A payment step of executing a payment process without acquiring a payment process when acquiring an instruction for payment after the expiration date;
A payment method comprising: Computer
An authentication unit that performs biometric authentication for the user in response to a user operation on the operation unit operated by the user;
When the authentication unit authenticates the user, a setting unit that sets an expiration date of the authentication of the user according to a predetermined rule;
A program for functioning as a settlement unit that does not execute a settlement process when a settlement instruction is acquired after the expiration date and executes a settlement process when a settlement instruction is acquired within the expiration date.

Images