Electronic settlement system

The present invention uses an electronic payment system, a payment management device, a store device, a client device, and an IC card that can safely perform payment processing using a network or the like using a data storage device such as an IC card holding a common key. For data storage devices, computer programs and storage media such as.

Conventionally, the PKI (Public Key Infrastructure) protocol has been adopted in order to securely carry out electronic commerce via an open network such as the Internet.

In the PKI protocol, the source creates signature information using a private key, and the source sends the signature information to the destination together with the transmission information. Then, at the destination, the signature information is verified using the public key corresponding to the private key, and it is determined whether or not the received transmission information is created by a legitimate sender.

By the way, in recent years, there has been an attempt to carry out electronic commerce via a network using an IC (Integrated Circuit) card. Here, normally, a data storage device such as an IC card holds a common key and inputs / outputs confidential information by using a common key cryptosystem. In such a data storage device such as an IC card, the common key cannot be the key for creating signature information, so even if the data storage device such as an IC card is lost, there is an advantage that damage can be reduced. is there.

<p> However, in order to safely carry out electronic commerce via a network, it is necessary to create signature information using a private key, but in the conventional method, a data storage device such as an IC card holds the private key (memory). ), So there is a problem that the signature information cannot be created. In this case, a method of holding the private key in a data storage device such as an IC card can be considered, but as described above, the private key has the same effect as the seal lighting because the signature information can be created, and the IC card or the like has the same effect. There is a problem that the damage caused when the data storage device is lost and misused is too great.</p><p> In addition, when electronic commerce is conducted via a network using only the common key cryptosystem adopted by data storage devices such as IC cards as described above, the server devices of many other parties with whom the transaction is made use the common key. There is also a problem that the common key is more likely to be stolen or misused.</p><p> In electronic payment, SSL (Secure Socket Layer) and SET (Secure Electronic Transaction) are often used. However, although SSL guarantees the security of the communication path between the client device and the store device, there is a problem that fraud on the store side cannot be detected.</p><p> In addition, SET has the advantages of SSL and the advantage that it cannot be tampered with by client devices, store devices, and payment management devices, but it is complicated and costly because each device must have a PKI certificate. Furthermore, there is a problem that signature and signature verification must be performed many times, which is redundant.</p><p> Further, in the electronic commerce system, there is no means for confirming whether the value information confirmed by the user on the client device is the same as the value information actually written in the data storage device such as an IC card.</p><p> The present invention has been made in view of the above-mentioned problems, and an electronic payment system, a payment management device, and a store capable of safely performing electronic commerce via a network by using a data storage device such as an IC card holding a common key. An object of the present invention is to provide a device, a client device, a data storage device such as an IC card, a computer program, and a storage medium.</p>

<p> In order to solve the above problems, according to the present invention, a new and improved electronic payment system, a payment management device, a store device, a client device, a data storage device such as an IC card, a computer program and a storage medium are provided. ..</p><p> According to the first aspect of the present invention, a data storage device such as an IC card in which value information is stored, a client device having an information input / output function for the data storage device such as an IC card, and a product or service are provided. Electronic consisting of a store device, a payment management device that manages payment between a data storage device such as an IC card and the store device, and a communication system that connects a client device, a store device, and a payment management device so that bidirectional communication is possible. In the payment system, the payment management device generates payment information for making a payment with a data storage device such as an IC card based on the payment request information from the store device, and the payment information is generated by the payment management device and the IC card. It performs encryption processing using a common key shared with data storage devices such as, and sends the payment information with this encryption processing to the client device, and the client device receives the payment information from the payment management device. An electronic payment system is provided, which is characterized by outputting data to a data storage device such as an IC card.</p><p> In the above electronic payment system, the store device creates a first signature indicating the validity of the payment request information using the private key of the store device, and transmits the payment request information with the first signature to the payment management device. The payment management device may verify the validity of the first signature received from the store device using the public key corresponding to the private key of the store device.</p><p> The payment request information with the first signature may be configured to be transmitted to the payment management device via the client device.</p><p> The payment management device creates a second signature indicating the validity of the first signed payment information using the private key of the payment management device, and the payment information with this second signature and encrypted processing is used as the client device. After verifying the validity of the second signature received from the payment management device using the public key corresponding to the private key of the payment management device, the client device sends the payment information to a data storage device such as an IC card. You may output it.</p><p> The payment management device generates payment completion information, generates a third signature indicating the validity of the payment completion information using the private key of the payment management device, includes the payment information, and attaches this third signature. Send the payment completion information to the store device.</p><p> The store device may be configured to verify the validity of the third signature received from the payment management device by using the public key corresponding to the private key of the payment management device.</p><p> The store device receives the payment completion information with the third signature, generates the payment completion receipt information with the fourth signature using the private key of the store device, and manages the payment completion receipt information with the fourth signature. The payment management device and the client device may be configured to verify the validity of the fourth signature received from the store device by using the public key corresponding to the private key of the store device, which is transmitted to the device and the client device. ..</p><p> The store device may be configured as a single store device or as a mall including a plurality of lower-level store devices.</p><p> Further, according to another aspect of the present invention, in a payment management device capable of updating value information stored in a data storage device such as an IC card via a client device, the payment management device is an IC card or the like. The value update information of the data storage device is subjected to encryption processing using a common key shared between the payment management device and the data storage device such as an IC card, and the value update information subjected to this encryption processing is used as the client device. The client device is provided with a payment management device, which is characterized in that the received value update information is input to a data storage device such as an IC card.</p><p> The payment management device generates a fifth signature indicating the validity of the value update information using the private key of the payment management device, and sends the value update information with the fifth signature to the client device. After verifying the validity of the fifth signature received from the payment management device using the public key corresponding to the private key of the payment management device, the value update information may be input to a data storage device such as an IC card. ..</p><p> Payment information for making payments with a data storage device such as an IC card in a payment management device that manages payments between a data storage device such as an IC card that stores value information and a store device that provides goods or services. Is encrypted using a payment information generator that generates payment information based on payment request information from a store device and a common key that shares payment information between a payment management device and a data storage device such as an IC card. Payment information output that outputs the payment information after this encryption processing to a data storage device such as an IC card via a payment information encryption processing unit and a client device that has an information input / output function for a data storage device such as an IC card. It may be configured to include a part.</p><p> The store device creates a first signature indicating the validity of the payment request information using the private key of the store device, and sends the payment request information with the first signature to the payment management device. The validity of the first signature received from the store device may be verified by using the public key corresponding to the private key of the store device.</p><p> The payment management device creates a second signature indicating the validity of the first signed payment information using the private key of the payment management device, and the payment information with this second signature and encrypted processing is the first. 2 The validity of the signature may be transmitted to a verifiable client device using the public key corresponding to the private key of the payment management device and output to a data storage device such as an IC card.</p><p> The payment management device generates payment completion information, generates a third signature indicating the validity of the payment completion information using the private key of the payment management device, includes the payment information, and attaches this third signature. The payment completion information may be transmitted to the store device where the validity of the third signature can be verified using the public key corresponding to the private key of the payment management device.</p><p> The store device receives the payment completion information with the third signature, generates the payment completion receipt information with the fourth signature using the private key of the store device, and manages the payment completion receipt information with the fourth signature. The payment management device may be configured to verify the validity of the fourth signature received from the store device by using the public key corresponding to the private key of the store device.</p><p> Further, according to another aspect of the present invention, there is provided a computer program characterized in that the computer functions as the payment management device.</p><p> Further, according to another aspect of the present invention, there is provided a computer-readable storage medium in which the computer program is stored, which is characterized in that the computer functions as the payment management device.</p><p> Furthermore, according to another aspect of the present invention, a store that provides goods or services based on payments made with a data storage device such as an IC card in which value information is stored via a payment management device. A payment request information generation unit that generates payment request information, a first signature generation unit that creates a first signature indicating the validity of payment request information using the private key of the store device, and a first signature. It is characterized by having a payment request information transmission unit that transmits the payment request information with the mark to a payment management device that can verify the validity of the first signature using the public key corresponding to the private key of the store device. , Store equipment is provided.</p><p> The payment management device generates payment information for making a payment with a data storage device such as an IC card based on the payment request information from the store device, and generates the payment information with the payment management device and the data storage device such as an IC card. Encryption processing is performed using a common key shared between the two, and the payment information with this encryption processing is transmitted to the client device, and the client device sends the payment information received from the payment management device to data such as an IC card. It may be output to a storage device.</p><p> The payment request information with the first signature may be transmitted from the store device to the payment management device via the client device.</p><p> The payment management device generates payment completion information, generates a third signature indicating the validity of the payment completion information using the private key of the payment management device, includes the payment information, and attaches this third signature. The payment completion information may be transmitted to the store device, and the store device may be configured to verify the validity of the third signature received from the payment management device using the public key corresponding to the private key of the payment management device. ..</p><p> The store device receives the payment completion information with the third signature, generates the payment completion receipt information with the fourth signature using the private key of the store device, and manages the payment completion receipt information with the fourth signature. The payment management device and the client device may be configured to verify the validity of the fourth signature received from the store device by using the public key corresponding to the private key of the store device, which is transmitted to the device and the client device. ..</p><p> The store device may be configured as a single store device or as a mall including a plurality of lower-level store devices.</p><p> Further, according to another aspect of the present invention, there is provided a computer program characterized in that the computer functions as the store device.</p><p> Further, according to another aspect of the present invention, there is provided a computer-readable storage medium in which the computer program is stored, which is characterized in that the computer functions as the store device.</p><p> Furthermore, according to another aspect of the present invention, it is used when making a payment between a store device that provides a product or service and a data storage device such as an IC card that stores value information via a payment management device. In a client device equipped with an information input / output function for a data storage device such as an IC card, the payment management device generates the data based on the payment request information from the store device, and the payment management device and the data storage device such as an IC card are generated. Payment information output that outputs payment information received from a payment management device to a data storage device such as an IC card and a payment information receiver that receives payment information that has been encrypted using a common key shared by A client device is provided, characterized in that it comprises a unit.</p><p> The store device creates a first signature indicating the validity of the payment request information using the private key of the store device, and transmits the payment request information with the first signature to the payment management device via the client device. The payment management device may be configured to verify the validity of the first signature received from the store device using the public key corresponding to the private key of the store device.</p><p> The payment management device creates a second signature indicating the validity of the first signed payment information using the private key of the payment management device, and the payment information with this second signature and encrypted processing is used as the client device. After verifying the validity of the second signature received from the payment management device using the public key corresponding to the private key of the payment management device, the client device sends the payment information to a data storage device such as an IC card. It may be configured to output.</p><p> The payment management device generates payment completion information, generates a third signature indicating the validity of the payment completion information using the private key of the payment management device, includes the payment information, and attaches this third signature. The payment completion information is transmitted to the store device, and the store device verifies the validity of the third signature received from the payment management device using the public key corresponding to the private key of the payment management device, and further, the private key of the store device. Is used to generate the 4th signed payment completion receipt information, and the 4th signed payment completion receipt information is transmitted to the client device, and the client device verifies the validity of the 4th signature received from the store device of the store device. It may be configured to verify using the public key corresponding to the private key.</p><p> Further, as the payment completion receipt information, the user himself / herself may confirm the payment completion receipt information displayed on the display screen.</p><p> Further, according to another aspect of the present invention, there is provided a computer program characterized in that the computer functions as the client device.</p><p> Further, according to another aspect of the present invention, there is provided a computer-readable storage medium in which the computer program is stored, which is characterized in that the computer functions as the client device.</p><p> Further, according to another aspect of the present invention, in a data storage device such as an IC card in which value information used when making a payment with a store device that provides a product or service via a payment management device is stored. , The payment management device generates payment information based on the payment request information from the store device, and performs encryption processing using a common key shared between the payment management device and a data storage device such as an IC card. A data storage device such as an IC card is provided, which is characterized in that input can be performed via a client device having an information input / output function for a data storage device such as an IC card.</p><p> The store device creates a first signature indicating the validity of the payment request information using the private key of the store device, and sends the payment request information with the first signature to the payment management device. The validity of the first signature received from the store device is verified using the public key corresponding to the private key of the store device, and the second signature indicating the validity of the first signed payment information is the private key of the payment management device. The payment information created using the above and encrypted with this second signature is transmitted to the client device, and the client device determines the validity of the second signature received from the payment management device as the secret of the payment management device. After verification using the public key corresponding to the key, the payment information may be output to a data storage device such as an IC card.</p><p> Further, according to another aspect of the present invention, a data storage device means such as an IC card in which value information is stored, a client means having an information input / output function for the data storage device such as an IC card, and a product or service. It is a store means that generates payment information by a data storage device such as an IC card in response to a purchase request from a client means, and manages payment between a data storage device such as an IC card and the store means. It is a payment management means to generate payment information for making a payment with a data storage device such as an IC card based on the payment request information from the store means, and the payment information is generated from the payment management means and data such as an IC card. A payment management means that performs encryption processing using a common key shared with a storage device and transmits the payment information subjected to this encryption processing to a client means, a client means, a store means, and a payment management means. An electronic payment system is provided, which comprises a communication system connected so that bidirectional communication is possible.</p><p> The store means creates a first signature indicating the validity of the payment request information using the private key of the store means, and sends the payment request information with the first signature to the payment management means. The validity of the first signature received from the store means may be verified by using the public key corresponding to the private key of the store means.</p><p> The payment request information with the first signature may be configured to be transmitted to the payment management means via the client means.</p><p> The payment management means creates a second signature indicating the validity of the first signed payment information using the private key of the payment management means, and the payment information with this second signature and encrypted processing is used as the client means. After verifying the validity of the second signature received from the payment management means using the public key corresponding to the private key of the payment management means, the client means transfers the payment information to a data storage device such as an IC card. It may be configured to output.</p><p> The payment management means generates payment completion information, generates a third signature indicating the validity of the payment completion information using the private key of the payment management means, includes the payment information, and attaches this third signature. Send the payment completion information to the store means.</p><p> The store means may be configured to verify the validity of the third signature received from the payment management means using the public key corresponding to the private key of the payment management means.</p><p> Further, the payment completion receipt information may be configured so that the user himself / herself confirms the payment completion receipt information displayed on the display screen.</p><p> The store means receives the payment completion information with the third signature, generates the payment completion receipt information with the fourth signature using the private key of the store means, and manages the payment completion receipt information with the fourth signature. The payment management means and the client device may be configured to verify the validity of the fourth signature received from the store means using the public key corresponding to the private key of the store means, which is transmitted to the means and the client means. ..</p><p> The store means may be configured as a single store means or as a mall including a plurality of lower-level store means.</p><p> Further, according to another aspect of the present invention, it is an electronic payment method performed between a client device, a store device, and a payment management device connected so as to be able to communicate in both directions, and is a data storage device in which value information is stored. Payment information for making a payment is generated based on a payment request from the store device, and the payment information is encrypted using a common key shared between the payment management device and the data storage device. An electronic payment method is provided, which comprises transmitting the payment information to the Klein and the device.</p><p> The store device creates a first signature indicating the validity of the payment request information using the private key of the store device, and transmits the payment request information with the first signature to the payment management device. The payment management device may verify the validity of the first signature received from the store device by using the public key corresponding to the private key of the store device.</p><p> Here, in order to facilitate the understanding of the invention, the terms common to the present invention will be briefly organized and described.</p><p> The "electronic payment system" is a system in which payment is made electronically via an online communication system when a product or service is sold via an online communication system such as the Internet. As a method of making payment via an online communication system, payment by credit card, cash card, debit card, or electronic money such as prepaid card is possible.</p><p> The "data storage device" may have any shape as long as it is a secure device incorporating at least an IC chip that stores data such as value information, in addition to a data carrier having a card shape such as an IC card. The IC chip can be mounted on a portable device such as a mobile phone, a portable communication terminal device, or a watch. Further, the data in the data carrier such as an IC card may be exchanged by communicating with another device such as a mobile phone.</p><p> A "data storage device such as an IC card" refers to a device in which an IC chip is embedded in a card such as plastic. A type that has only a memory chip is called a memory card, and a type that also has a CPU is called a card with a built-in CPU. Furthermore, data storage devices such as IC cards can be classified into "contact" and "non-contact" with the reader / writer, in addition to the types depending on the presence or absence of a CPU. The contact type has metal terminals on the surface, and supplies power and exchanges data with the reader / writer through the terminals. On the other hand, it is a non-contact type that has an antenna inside and supplies power and reads / writes data through the antenna.</p><p> "Value information" is information about value that is stored in a data storage device such as an IC card and can be exchanged as consideration for the provision of goods and services. Value information includes information having a monetary value equivalent to currency and information having a pseudo-monetary value that can be exchanged for goods and services such as points.</p><p> A "client device" is a terminal device having at least an information input / output function for a data storage device such as an IC card and a function capable of bidirectional communication with another terminal device or server via an online communication system such as the Internet. A "client device" is generally a computer device including an arithmetic device, a storage device, a display device, an input / output device, a communication device, a data storage device such as an IC card, a reader / writer, and the like, and has the same functions. Includes mobile terminal devices and mobile phone devices. The client device may be installed at the user's home or workplace, or at a store where a client terminal dedicated to the payment system is installed. Further, in the client device, the data storage device according to the present invention can be configured by an IC chip and mounted on a device such as a mobile phone.</p><p> A "store device" is a network server that sells and provides products and services via an online communication system such as the Internet. The store device may be configured as a single network server or as a mall composed of a plurality of network servers.</p><p> A "payment management device" is a management server that manages payments between a data storage device such as an IC card and a store device, and is composed of a security server, an application server, a database server, and the like.</p><p> The "communication system" is an online communication system such as the Internet using a public switched telephone network or a LAN (Local Area Network) or WAN (Wide Area Network), which is configured to enable two-way communication via a predetermined communication protocol. The connection form does not matter whether it is wired or wireless.</p><p> The "payment request information" is created by the store device, and includes various information for requesting the payment management device for the purchase request sent to the store device. This purchase request may be sent by the user to the store device via the client device, or may not go through the client device.</p><p> "Payment information" is created by the payment management device based on the payment request information transmitted from the store device to the payment management device, and is stored in the data storage device such as an IC card from the payment management device via the client device. It includes various information for making payments by increasing or decreasing the value information. The security of this payment information is ensured by cryptographic processing using a common key shared between the payment management device and a data storage device such as an IC card. Furthermore, the validity of the payment information is given by attaching a second signature created using the private key of the payment management device, and the client device uses the public key corresponding to the private key of the payment management device to attach the second signature. Secured by verification.</p><p> "Payment completion information" is generated after the payment management device confirms that the payment has been made by increasing or decreasing the value information stored in the data storage device such as an IC card, and is transmitted to the store device. Includes various information regarding payment completion. The validity of this payment completion information is given by attaching a third signature generated using the private key of the payment management device, and the store device uses the public key corresponding to the private key of the payment management device to attach the third signature. Secured by verification.</p><p> "Payment completion receipt information" is generated after the store device confirms that payment has been completed based on a data storage device such as an IC card owned by the user, and is transmitted to the payment management device and the client device. As a result, the completion of payment is confirmed, and the product or service can be delivered from the store device to the user. The validity of this payment completion receipt information is verified by attaching a fourth signature generated using the private key of the store device and using the public key corresponding to the private key of the store device by the payment management device and the client device. It is secured by.</p><p> "Value update information" is information for increasing or decreasing the value information stored in a data storage device such as an IC card, and is input from a payment management device to a data storage device such as an IC card via a client device. .. The security of this value update information is ensured by cryptographic processing using a common key shared between the payment management device and the data storage device such as an IC card. Furthermore, the validity of the value update information is given by attaching a fifth signature created using the private key of the payment management device, and the client device uses the public key corresponding to the private key of the payment management device. It is secured by verifying.</p><p> A "common key" is a so-called common key cryptographic processing method, which is a key used for both encryption processing and decryption, and the sender and the receiver share the key. In the present invention, a common key is set between the payment management device and the data storage device such as an IC card.</p><p> A "private key" is a key used for encryption processing in the so-called public key cryptography, and information encrypted by the private key can be decrypted by the corresponding public key stored in a certificate authority or the like. It will be possible.</p><p> A "public key" is a key used for decryption in the so-called public key cryptography, and is usually stored in a certificate authority, etc., and the recipient can use the information encrypted by the private key. When decrypting, the public key is obtained from the certificate authority and decrypted.</p><p> The "electronic signature" guarantees the validity of the transmitted information, but in the present invention, the first to fifth signatures are used depending on the types of the transmitting side and the receiving side.</p><p> The "first signature" is a signature created by the private key of the store device, attached to the payment request information, and verified by the payment management device using the corresponding public key.</p><p> The "second signature" is a signature created by the private key of the payment management device, attached to the payment information, and verified by the client device using the corresponding public key.</p><p> The "third signature" is a signature created by the private key of the payment management device, attached to the payment completion information, and verified by the store device using the corresponding public key.</p><p> The "fourth signature" is a signature created by the private key of the store device, attached to the payment completion receipt information, and verified by the payment management device using the corresponding public key.</p><p> The "fifth signature" is a signature created by the private key of the payment management device, attached to the value update information, and verified by the client device using the corresponding public key.</p>

<figref num="1">FIG. 1 is an overall configuration diagram of an electronic payment system according to an embodiment of the present invention.</figref><figref num="2">FIG. 2 is a schematic explanatory diagram for explaining the configuration of a data storage device such as an IC card shown in FIG.</figref><figref num="3">FIG. 3 is a configuration diagram showing another configuration example of the electronic payment system according to the embodiment of the present invention.</figref><figref num="4">FIG. 4 is a configuration diagram showing a flow of information in the electronic payment system according to the embodiment of the present invention.</figref><figref num="5">It is a figure for demonstrating the communication method between a data storage device such as a user's IC card, and a security server of a payment management device.</figref><figref num="6">It is a figure for demonstrating the communication method between a user's personal computer and a store's network server.</figref><figref num="7">It is a figure for demonstrating the communication method between a user's personal computer and an application server of a payment management apparatus.</figref><figref num="8">It is explanatory drawing which shows the flow of the electronic money withdrawal of the electronic payment system which concerns on embodiment of this invention.</figref><figref num="9">It is a figure for demonstrating the operation of the electronic payment system shown in FIG. 1, and shows the product information transmission sequence.</figref><figref num="10">It is a figure for demonstrating the operation of the electronic payment system shown in FIG. 1, and shows a value information transmission sequence.</figref><figref num="11">It is a figure for demonstrating the operation of the electronic payment system shown in FIG. 1, and shows a value information transmission sequence.</figref><figref num="12">This is an example of the screen configuration displayed on the client device during the payment operation of the electronic payment system shown in FIG.</figref><figref num="13">This is an example of the screen configuration displayed on the client device during the payment operation of the electronic payment system shown in FIG.</figref><figref num="14">This is an example of the screen configuration displayed on the client device during the payment operation of the electronic payment system shown in FIG.</figref><figref num="15">This is an example of the screen configuration displayed on the client device during the payment operation of the electronic payment system shown in FIG.</figref><figref num="16">This is an example of the screen configuration displayed on the client device during the payment operation of the electronic payment system shown in FIG.</figref><figref num="17">This is an example of the screen configuration displayed on the client device during the payment operation of the electronic payment system shown in FIG.</figref><figref num="18">This is an example of the screen configuration displayed on the client device during the payment operation of the electronic payment system shown in FIG.</figref><figref num="19">This is an example of the screen configuration displayed on the client device during the payment operation of the electronic payment system shown in FIG.</figref><figref num="20">This is an example of the screen configuration displayed on the client device during the payment operation of the electronic payment system shown in FIG.</figref><figref num="21">It is a figure for demonstrating the operation of the electronic payment system shown in FIG. 1, and shows the product information transmission sequence.</figref><figref num="22">It is a figure for demonstrating the operation of the electronic payment system shown in FIG. 1, and shows a value information transmission sequence.</figref><figref num="23">It is a figure for demonstrating the operation of the electronic payment system shown in FIG. 1, and shows a value information transmission sequence.</figref><figref num="24">It is explanatory drawing which shows the flow of the electronic money deposit of the electronic payment system which concerns on embodiment of this invention.</figref><figref num="25">This is an example of the screen configuration displayed on the client device during the payment operation of the electronic payment system shown in FIG.</figref><figref num="26">This is an example of the screen configuration displayed on the client device during the payment operation of the electronic payment system shown in FIG.</figref><figref num="27">This is an example of the screen configuration displayed on the client device during the payment operation of the electronic payment system shown in FIG.</figref><figref num="28">This is an example of the screen configuration displayed on the client device during the payment operation of the electronic payment system shown in FIG.</figref><figref num="29">This is an example of the screen configuration displayed on the client device during the payment operation of the electronic payment system shown in FIG.</figref><figref num="30">This is an example of the screen configuration displayed on the client device during the payment operation of the electronic payment system shown in FIG.</figref><figref num="31">This is an example of the screen configuration displayed on the client device during the payment operation of the electronic payment system shown in FIG.</figref><figref num="32">This is an example of the screen configuration displayed on the client device during the payment operation of the electronic payment system shown in FIG.</figref>

Hereinafter, an electronic payment system, a payment management device, a store device, a client device, a data storage device such as an IC card, a computer program, and a storage medium according to a preferred embodiment of the present invention will be described with reference to the accompanying drawings.

FIG. 1 is an overall configuration diagram of an electronic payment system 1 to which the electronic payment system according to the present embodiment can be applied.

As shown in FIG. 1, the electronic payment system 1 communicates bidirectionally between a user 2, a payment management device 3, and a store device 4, including a client device and a data storage device such as an IC card, via a predetermined communication protocol. It is possible to perform communication via network 5 such as the Internet, which is a possible communication system.

[User 2] User 2 is composed of a data storage device 20 such as an IC card, a reader / writer device 21 that accesses a data storage device 20 such as an IC card and inputs / outputs information, and a personal computer 22. A client device is provided.

A data storage device 20 such as an IC card has an IC chip embedded in a card such as plastic. A data storage device 20 such as an IC card has a tamper-resistant IC module 50 as shown in FIG. 2 (A), and a processing circuit 51 and a memory in the IC module 50 as shown in FIG. 2 (B). It has 52 built-in.

The processing circuit 51 of the data storage device 20 such as an IC card performs decryption processing using the common key KC shared with the security server 31 of the payment management device 3, processing according to predetermined information and requests, and mutual. It is possible to perform various processes such as authentication process.

The memory 52 stores the common key KC shared with the security server 31 of the payment management device 3.

As shown in FIG. 3, the data storage device 20 such as an IC card communicates with the personal computer 22 via the data storage device reader / writer 21 such as an IC card, and an interface such as an ActiveX component driven in the personal computer 22. Connect to network 5 such as the Internet via program 24 or browser program 23. Further, the data storage device 20 such as an IC card connects to the security server 31 via the application server 30 of the payment management device 3 and transmits / receives information to / from the security server 31. Information communication between the data storage device 20 such as an IC card and the security server 31 established in this way is encrypted and decrypted by the common key cryptographic processing method (PKI protocol) using the common key KC. As a result, security is ensured.

Value information is stored in a data storage device such as an IC card. This value information is information on the value that can be exchanged as consideration for the provision of goods and services. Value information includes information having a monetary value equivalent to currency and information having a pseudo-monetary value that can be exchanged for goods and services such as points.

The reader / writer 21 of a data storage device such as an IC card inputs / outputs data to / from the IC module 50 of the data storage device 20 such as an IC card by a non-contact method or a contact method, and also to and from a personal computer 22. It inputs and outputs information and requests between.

The personal computer 22 executes the browser program 23 in response to an operation of the user such as a keyboard or a mouse, and receives the data from the application server 30 of the payment management device 3 via the network 5 on the browser program 23 as described later. Execute the interface program 24 such as the ActiveX component.

The personal computer 22 has a display, a keyboard, a mouse, and the like. In the illustrated example, a personal computer 22 to which the reader / writer 21 can be connected is given as an example of the client device, but information is exchanged contactably or non-contactly with a data storage device such as an IC card. Any device capable of this is not limited to the personal computer 22, but a mobile terminal device, a mobile phone terminal device, or the like can also be used.

As shown in FIG. 4, the browser program 23 can operate on the personal computer 22 such as Microsoft's Internet Explorer to display the services provided by the network server on the client-side terminal. Program. In the present embodiment, the browser program 23 adds signature information using its own private key at the source and the destination by the PKI protocol with the HTTPS layer 60 of the network server 40 of the store device 4. The signature information is verified using the public key corresponding to the private key.

As shown in FIG. 5, the interface program 24 operates on the personal computer 22 and uses the PKI protocol with the APS upper layer 30a of the application server 30 of the payment management device 3 to obtain its own private key at the source. It is a program that can add the signature information used and verify the signature information using the public key corresponding to the private key at the destination.

The interface program 24 also functions as a function extension program for easily realizing access to local resources such as a data storage device 20 such as an IC card via a reader / writer 21 while the browser program 23 is being executed. ..

[Payment management device 3] As shown in FIGS. 1 and 6, the payment management device 3 functions as an application server 30 that functions as a virtual electronic money system, a security server 31 that functions as a security management system, and a scrutiny / payment system. An information management server 32 is provided, and an application server 33 that functions as a real electronic money system is provided, although it is not directly related to the present embodiment.

The application server 30 of the payment management device 3 can perform bidirectional communication with the personal computer 22 of the user 2 and the network server 40 of the store device 4 via a network 5 such as the Internet.

Further, the application server 30 of the payment management device 3 holds the public keys KSHOP, P corresponding to the private keys KSHOP, S of the network server 40 of the store device 4, and as will be described later, the network server 40 of the store device 4 holds the public keys KSHOP, P. Verify the first signature information SIG1 attached to the generated payment request information BILL.

Further, as shown in FIG. 5, the application server 30 of the payment management device 3 has an APS upper layer 30a and an APS lower layer 30b.

The security server 31 of the payment management device 3 stores the common key KC shared with the data storage device 20 such as the IC card of the user 2.

As shown in FIG. 5, the security server 31 of the payment management device 3 is via a reader / writer 21 of a data storage device such as an IC card, an interface program 24, a browser program 23, a personal computer 22, a network 5, and an application server 30. Information sent to and received from the data storage device 20 such as an IC card is encrypted and decrypted by a common key cryptosystem using a common key KC.

The information management server 32 stores and manages, for example, the personal information of a registered user.

[Store device 4] The store device 4 is provided with a network server 40.

As shown in FIG. 4, the network server 40 of the store device 4 is configured to enable bidirectional communication between the browser program 23 running on the personal computer 22 and the HTTPS layer via the PKI protocol. ing.

Further, the network server 40 of the store device 4 stores, for example, the introduction information of the product or service, and the payment request information BILL that requests the payment corresponding to the amount charged by the store device 4 to the user 2, and the payment request. Generates the first signature information SIG created by using its own private key KSHOP, S for the information.

The store device 4 can be configured as a single member store 42 as shown in FIG. Alternatively, as shown in FIG. 6, the store device 4 can be configured as a member store 42 configured as a member store of the mall 41.

In the configuration example of the electronic payment system shown in FIG. 6, in addition to the virtual electronic money system 30 applied to payment when the user makes virtual shopping via a personal computer 22 or the like, the user actually stores the store. It also includes the real electronic money system 33, which is applied to payments when going out to 7 and shopping in real life.

A real store 7 that a user can actually visit is connected to the real electronic money system 33 via a communication system such as the public switched telephone network 6. The real store 7 can be configured as an independent store 71, or can be configured as a subordinate store 72 subordinate to the headquarters 71. However, since the real electronic money system 33 is different from the gist of the present invention, detailed description thereof will be omitted.

Next, the flow of information in the payment system according to the present embodiment will be described with reference to FIG. 7.

As described above, in the payment system according to the present embodiment, the information receiver and sender are a client device 2 including a payment management device 3, a store device 4, a personal computer 22, and a reader / writer 21, and an IC card. Data storage device 20.

The information distributed between the receiver and the sender of the above information includes purchase request information, settlement request information, settlement information, settlement completion information, settlement completion receipt information, value update information, and the like.

The user wants to access the network server 40 of the store device 4 through the browser 23 of the personal computer 22 which is the client device and purchase the "purchase request information" from the products and services developed by the site of the store device 4. Information that selects a product or service and sends it to the store device 4.

The "payment request information" is created by the store device 4, and various information for requesting the payment management device 3 to settle the purchase request information transmitted to the store device by the user via the personal computer 22 which is a client device. Is included. The validity of this payment request information is that the first signature created by using the private key of the store device 4 is attached, and the payment management device 3 attaches the first signature to the public key corresponding to the private key of the store device 4. Secured by using and verifying.

The "payment information" is created by the payment management device 3 based on the payment request information transmitted from the store device 4 to the payment management device 3, and is created from the payment management device 3 as a client device, the personal computer 22 and the reader / writer 21. Various information for making a payment by increasing or decreasing the value information stored in the data storage device 20 such as an IC card is included. The security of this payment information is ensured by a common key shared between the payment management device 3 and the data storage device 20 such as an IC card. Further, the validity of the payment information is given a second signature created by using the private key of the payment management device 3, and the personal computer 22 which is a client device uses the second signature as the private key of the payment management device 3. It is secured by verifying with the corresponding public key.

The "payment completion information" is generated after the payment management device 3 confirms that the payment has been made by increasing or decreasing the value information stored in the data storage device 20 such as an IC card, and is transmitted to the store device 4. It contains various information regarding the completion of payment. The validity of this payment completion information is that a third signature generated using the private key of the payment management device 3 is attached, and the store device 4 attaches the third signature to the public key corresponding to the private key of the payment management device 3. It is secured by verifying with.

The "payment completion receipt information" is generated after the store device 4 confirms that the payment has been completed based on the data storage device 20 such as an IC card owned by the user, and is generated after the store device 4 confirms that the payment has been completed. It is transmitted to the computer 22, which confirms the completion of the payment and enables the delivery of goods or services from the store device 4 to the user. The validity of this payment completion receipt information is given by the fourth signature generated using the private key of the store device 4, and the payment management device 3 and the personal computer 22 which is the client device correspond to the private key of the store device 4. It is secured by verifying with the public key.

The "value update information" is information for increasing or decreasing the value information stored in the data storage device 20 such as an IC card, from the payment management device 3 via the personal computer 22 and the reader / writer 21 which are client devices. It is input to the data storage device 20 such as an IC card. The security of this value update information is ensured by a common key shared between the payment management device 3 and the data storage device 20 such as an IC card. Furthermore, the validity of the value update information is given a fifth signature created by using the private key of the payment management device 3, and the personal computer 22 which is the client device attaches the fifth signature to the private key of the payment management device 3. It is secured by verifying with the public key corresponding to.

In the payment system according to the present embodiment, the electronic signatures used to guarantee the validity of the transmitted information are the first signature to the fifth signature depending on the types of the sender and the receiver. used.

The "first signature" is a signature created by the private key of the store device 4, attached to the payment request information, and verified by the payment management device 3 using the corresponding public key.

The "second signature" is a signature created by the private key of the payment management device 3, attached to the payment information, and verified by the personal computer 22 which is the client device using the corresponding public key.

The "third signature" is a signature created by the private key of the payment management device 3, attached to the payment completion information, and verified by the store device 4 using the corresponding public key.

The "fourth signature" is a signature created by the private key of the store device 4, attached to the payment completion receipt information, and verified by the payment management device 3 using the corresponding public key.

The "fifth signature" is a signature created by the private key of the payment management device 3, attached to the value update information, and verified by the personal computer 22 which is the client device using the corresponding public key.

Next, with reference to FIG. 8, the electronic money withdrawal operation in the payment system according to the present embodiment will be described.

The user 2 accesses the network server 40 of the member store 42 via the personal computer 22 and selects the product or service that the user 2 wants to purchase from the products or services provided on the site ((1). )).

Merchant 42 sends information to the user about the total price of the goods or services selected by user 2 ((2)).

User 2 requests the mall 41 to which the member store 42 belongs to make a payment using electronic money using the payment system according to the present embodiment ((3)).

In response to the electronic money payment request from the user 2, the mall 41 issues an order number and issues the first signed payment request information ((4)).

User 2 transmits the first signed payment request information and card information (ID, balance, etc.) transmitted from the mall 41 to the cyber electronic money system 30 ((5)).

The cyber electronic money system 30 receives the first signed payment request information, communicates with the data storage device 20 such as an IC card owned by the user 2, and stores the second signed payment information in the data storage device such as an IC card. It is sent to 20 and the value corresponding to the purchased product or service is subtracted from the value information stored in the data storage device 20 such as an IC card, and the history information in the card is sucked up ((6)).

After the payment is completed, the cyber electronic money system 30 transmits the third signed payment completion information to the mall 71 ((7)).

The cyber electronic money system 30 transmits the third signed payment completion information to the user 2 after the payment is completed ((8)).

After confirming that the payment has been completed by the third signed payment completion information, the user 2 requests the member store 42 for the payment completion screen ((9)).

In response to the payment completion screen request from the user 2, the member store 42 transmits the fourth signed payment completion receipt information to the user 2 and the cyber electronic money system 30, and sends the payment completion screen to the personal computer 22 of the user 2. Display ((10)).

After the payment is completed by the above process, the product or service is delivered from the member store 42 to the user 2. For example, when the product is digital content, the member store 42 permits the user 2 to download the digital content, so that the product is delivered ((11)).

Next, with reference to FIGS. 9 to 11, details of the product information transmission sequence and the value information transmission sequence in the electronic payment system according to the present embodiment with high security using the common key, the public key, and the electronic signature are described in detail. Explain to.

First, before the product is decided by the user shown in FIG. 9, the user 2 accesses the network server 40 of the store apparatus 4 via the network 5 by using the browser program 23 running on the personal computer 22. By the access, the product information provided by the store device 4 is transmitted from the network server 40 to the personal computer 22 via the network 5, and the corresponding screen is displayed on the display of the personal computer 22.

(First Embodiment) Hereinafter, the operation of the electronic payment system 1 will be described for each step shown in FIGS. 9 to 11. Note that FIGS. 12 to 20 show an example in which the personal computer 22 of the client device is displayed on the screen.

In the operation shown below, when sending and receiving information or a request between the personal computer 22 of the client device and the network server 40, the signature information created by using the private key of the source is sent to the destination. Verification is performed using the public key corresponding to the private key, but the description of the process is omitted.

Similarly, when sending and receiving information or a request between the personal computer 22 and the application server 30, the electronic signature information created by using the private key of the sender corresponds to the private key at the destination. Verification is performed using the public key to be used, but the description of this process is omitted except for steps ST14 and ST15.

Step ST1: Establish a secure communication path by performing server authentication or mutual authentication using SSL (Secure Socket Layer) between the personal computer 22 and the network server 40.

Step ST2: When the user 2 decides the product he / she wants to purchase by operating the keyboard or mouse of the personal computer 22 on the product selection screen as shown in FIG. 12, the corresponding product decision information is transmitted from the personal computer 22. Sent to network server 40.

Step ST3: When the network server 40 receives the product decision information from the personal computer 22, the network server 40 transmits the estimated information to the personal computer 22.

Step ST4: The personal computer 22 displays the estimation information received from the network server 40 on the display as shown in FIG. If the user 2 agrees with the quotation, the user 2 selects a payment method on the screen shown in FIG. When the user 2 selects payment using electronic money by operating the keyboard of the personal computer 22, the billing amount request is sent to the network server 40.

Step ST5: When the network server 40 receives the billing amount request from the personal computer 22, the payment request information indicating the amount charged by the store device 4 to the user 2 and the private key KSHOP of the store device 4 for the payment request information. The first signature information SIG1 created by using, S and the interface program 24 are transmitted to the personal computer 22.

Step ST6: As shown in FIG. 15, the personal computer 22 displays the amount indicated by the payment request information received from the network server 40 in step ST5 on the display.

Step ST7: When the user 2 who agrees with the amount displayed on the display in step ST6 gives a predetermined instruction using the keyboard of the personal computer 22, the interface program 24 received from the network server 40 in step ST5 is started. ..

Then, when the user 2 holds the data storage device 20 such as an IC card over the reader / writer 21 according to the screen display as shown in FIG. 16, the personal computer 22 uses the activated interface program 24 to perform the payment management device. Establish a secure communication path by performing server authentication or mutual authentication using SSL with the application server 30 of 3.

While the payment process is being performed in the payment system according to the present embodiment, a screen prompting the user to wait is displayed on the display of the personal computer 22 as shown in FIG.

Step ST8: The personal computer 22 sends the payment request information including the payment request information received from the network server 40 of the store device 4 in step ST5 and the first signature information SIG1 for the payment request information to the application server of the payment management device 3. Send to 30.

Step ST9: The application server 30 verifies the first signature information SIG1 received in step ST8 by using the public keys KSHOP and P corresponding to the private key of the store device 4 read from the information management server 32, for example. If it is determined that the first signature information SIG1 is valid attached to the network server 40 of the store device 4, the process of step ST10 is performed.

If the application server 30 determines that the first signature information SIG1 is invalid, the application server 30 notifies the personal computer 22 to that effect, and then terminates the process.

Step ST10: Next, the application server 30 of the payment management device 3 transmits, for example, payment request information to the security server 31.

Step ST11: When the security server 31 receives payment request information from the data storage device 20 such as an IC card, it performs mutual authentication with the application server 30 and is commonly used with the data storage device 20 such as an IC card. Generate the session key KSES from the key KC. Similarly, the data storage device 20 such as an IC card also generates the session key KSES from the common key KC.

Step ST12: The security server 31 generates payment information, encrypts it with the session key KSES, and outputs it to the application server 30. At that time, the security server 31 attaches a second signature created by using the private key of the payment management device.

The application server 30 transmits the payment information including the balance read request (BRC) input from the security server 31 to the personal computer 22.

The personal computer 22 outputs the payment information including the balance read request BRC received from the application server 30 to the data storage device 20 such as an IC card via the reader / writer 21.

Step ST13: When the payment information including the balance read request BRC from the personal computer 22 is input, the data storage device 20 such as the IC card decodes the payment information using the session key KSES generated in step ST11.

Then, the data storage device 20 such as an IC card receives the balance information BI from the tamper-resistant memory 52 in the data storage device 20 such as an IC card by processing the processing circuit 51 according to the payment information including the balance read request BRC. The payment information including the above is read out, encrypted using the session key KSES, and then output to the personal computer 22.

The personal computer 22 transmits payment information including the balance information BI from the data storage device 20 such as an IC card to the application server 30.

The application server 30 outputs the balance information BI received from the personal computer 22 to the security server 31 as payment information.

The security server 31 decrypts the payment information including the balance information BI input from the application server 30 using the session key KSES, and generates log information.

Step ST14: The security server 31 indicates the amount of money indicated by the log writing information for writing the log information generated in step ST13 to the data storage device 20 such as an IC card and the balance information stored in the data storage device 20 such as an IC card. A settlement processing request SPC including subtraction information indicating the subtraction amount for subtracting the billing amount is generated from, and this is encrypted using the session key KSES.

Next, the security server 31 outputs the payment information including the plaintext balance information BI and the encrypted payment processing request SPC to the application server 30.

The application server 30 creates the second signature information for the payment information including the balance information BI and the payment processing request SPC input from the security server 31 by using the private key of the application server 30.

Next, the application server 30 attaches the second signature information to the payment information including the balance information BI and the payment processing request SPC input from the security server 31 and transmits the payment information to the personal computer 22.

Step ST15: The personal computer 22 verifies the validity of the second signature information SIG2 received from the application server 30 using the public key of the application server 30, and after the validity is confirmed, performs the following processing. Do.

As shown in FIG. 18, the personal computer 22 displays the balance indicated by the balance information BI received from the application server 30 and the amount (billed amount) indicated by the estimated information received from the network server 40 in step ST3 on the display.

Step ST16: When the user 2 who agrees with the balance and the billing amount displayed on the display in step ST15 gives a predetermined instruction using the keyboard of the personal computer 22, the payment processing request SPC is sent to the IC card or the like. Data storage device Outputs to a data storage device 20 such as an IC card via the reader / writer 21. While the payment confirmation process is being performed, a screen prompting the wait as shown in FIG. 19 is displayed on the display of the personal computer 22.

Step ST17: The data storage device 20 such as an IC card decodes the payment processing request SPC input from the personal computer 22 using the session key KSES, and executes the payment processing according to the payment processing request in the processing circuit 51.

Specifically, the data storage device 20 such as an IC card converts the log writing information included in the payment processing request SPC by the processing of the processing circuit 51 into the tamper-resistant memory 52 in the data storage device 20 such as an IC card. Remember in. Further, the data storage device 20 such as an IC card subtracts the subtraction amount indicated by the subtraction information included in the settlement processing request SPC from the balance indicated by the balance information stored in the memory 52 by the processing of the processing circuit 51. The result is stored in the memory 52 as balance information.

Step ST18: When the processing of step ST17 is completed, the data storage device 20 such as an IC card generates a processing completion notification PCN indicating that the processing is completed, encrypts this with the session key KSES, and then personalizes it. It sends to the security server 31 via the computer 22 and the application server 30.

Step ST19: When the security server 31 receives the processing completion notification PCN from the data storage device 20 such as an IC card, it decodes it using the session key KSES, confirms the processing completion notification PCN, and then confirms the processing completion notification PCN, and then the payment completion information ACN. Is generated and sent to the personal computer 22 and the network server 40 via the application server 30. At that time, the validity of the payment completion information is ensured by attaching a third signature generated by the payment management device.

Step ST20: When the personal computer 22 receives the payment completion notification ACN from the security server 31, as shown in FIG. 20, the personal computer 22 displays a screen prompting the download of the corresponding information, for example, digital contents.

As described above, according to the electronic payment system 1, the common key KC is stored in the memory 52 of the data storage device 20 such as an IC card, and the private key is not stored. Therefore, even if the user 2 loses the data storage device 20 such as an IC card , the private key is not stored in the memory 52, so that the user 2's signature is prevented from being illegally performed by using the private key. it can.

In addition, according to the electronic payment system 1, since the common key KC is used only inside the data storage device 20 such as an IC card and the security server 31, the risk of the common key KC being stolen can be reduced and it is safe. Transactions can be realized and key management can be facilitated.

Further, according to the electronic payment system 1, information and requests input / output to / from the data storage device 20 such as an IC card are performed via the personal computer 22 between the personal computer 22 and the application server 30 and the network server 40. Since signature verification is performed using the private key and public key when sending and receiving information and requests, it is possible to prevent the information and requests from being tampered with on network 5, and transactions using network 5 can be prevented. The safety of the computer can be ensured.

According to the electronic payment system 1, the network server 40 of the store device 4 attaches the signature information SIG created by using its own private key KSHOP, S to the billing amount information BILL, and the payment management device 3 The application server 30 verifies the signature information SIG using the public keys KSHOP, P corresponding to the private keys KSHOP, S, and determines that the signature information SIG is valid attached to the network server 40 of the store device 4. From the judgment, it is possible to prevent the personal computer 22 of the user 2 and the like from making a payment based on the illegally tampered billing amount information BILL.

Further, in the electronic payment system 1, as described above, the personal computer 22 displays the balance indicated by the balance information BI received from the application server 30 and the amount (billed amount) indicated by the estimated information received from the network server 40. After the user 2 agrees with the contents, the payment processing request SPC received from the application server 30 is output to the data storage device 20 such as the IC card via the data storage device reader / writer 21 such as the IC card. Therefore, the user 2 can confirm in advance the contents of the payment processing finally performed in the data storage device 20 such as an IC card, and can prevent the payment processing from being performed with the contents that have been tampered with illegally.

Further, according to the electronic payment system 1, the number of procedures involved in payment processing can be reduced as compared with the conventional case, information transmission via network 5 can be reduced, the usage amount of network 5 can be reduced, and the processing time can be shortened.

Further, according to the electronic payment system 1, unlike the conventional SET method, it is not necessary to create and verify the signature information many times.

(Second Embodiment) Next, the product information transmission sequence and the value information transmission sequence by the payment system according to another embodiment will be described with reference to FIGS. 21 to 23.

ST101: First, SSL authentication is established between the personal computer 22 of the user 2 and the network server 40 of the store device 4 for excellent security communication.

ST102: Next, the user 2 selects a product according to the screen displayed on the display of the personal computer 22.

ST103: The network server 40 of the store device 4 sends the payment processing request information with the first signature created by using the private key of the store device 4 according to the product selected by the user 2 to the personal computer of the user 2. Send to computer 22.

ST104: The personal computer 22 starts the interface program 24 such as ActiveX, accesses the data storage device 20 such as an IC card via the reader / writer 21, and reads the balance of the data storage device such as an IC card.

ST105: The read balance is taken into the personal computer 22 of the user 2 by using a predetermined browsing mechanism and displayed on the display.

ST106: Next, secure SSL authentication is established between the personal computer 22 of the user 2 and the application server 30 of the payment management device 3 to prepare for the value information transmission sequence.

ST107: Next, the payment request information with the first signature including the balance information of the data storage device 20 such as the IC card is transmitted from the personal computer 22 of the user 2 to the payment management device 3.

The application server 30 of the payment management device 3 verifies the validity of the transmitted payment request information by the public key corresponding to the private key of the store device 4, and passes the necessary information to the security server 31.

ST108: The security server 31 of the payment management device 3 performs mutual authentication with the data storage device 20 such as an IC card, and generates a session key from the common key. Similarly, on the data storage device 20 side such as an IC card, mutual authentication is performed with the security server 31 and a session key is generated from the common key.

ST109: The security server 31 encrypts the payment information with the session key and sends it to the personal computer 22 of the user 2 via the application server 30.

The personal computer 22 decodes the sent payment information with the session key stored in the data storage device 20 such as an IC card and displays it on the screen. When the user 2 approves the sent payment information, the content is transmitted to the data storage device 20 such as an IC card via the reader / writer 21, and is subtracted in the data storage device 20 such as an IC card. Predetermined settlement processing such as processing is performed.

It should be noted here that, in the payment sequence according to the present embodiment, the payment information generated by the security server 31 of the payment management device 3 is different from the payment sequence described in relation to FIGS. 9 to 11. Is simply encrypted with the common key, and the second signature generated using the private key of the payment management device 3 is not attached.

In this way, the identity of the transmitted payment information can be confirmed by simply encrypting / decrypting with the common key. Therefore, as in the payment system according to the present embodiment, processing is performed by omitting the second signature. It is possible to relax the redundancy of.

ST110: As described above, when a predetermined payment process is completed in the data storage device 20 such as an IC card, the result is sent to the security server 31 via the reader / writer 21, the personal computer 22, and the application server 30. Will be sent.

ST111: When the security server 31 confirms the payment completion, the payment completion information is sent to the application server 30. Then, the payment completion information (receipt) is transmitted to the network server 40 of the store device 2 with a third signature generated by using the private key of the payment management device 3 on the application server 31.

ST112: In the network server 40, the payment completion information is verified by the public key corresponding to the private key of the payment management device 3, and after confirming the contents, the payment completion receipt information is generated. This payment completion receipt information is transmitted to the application server 30 of the payment management device 3 with a fourth signature generated by using the private key of the store device 4.

Then, the application server 30 of the payment management device 3 transmits the fourth signed payment completion receipt information to the personal computer 22 of the user 2, so that a series of electronic money payment processing is completed on the display of the personal computer 22. An indication is made to that effect.

As described above, according to the electronic payment system according to the present embodiment, the common key is stored in the memory 52 of the data storage device 20 such as an IC card, and the private key is not stored. Therefore, even if the user 2 loses the data storage device 20 such as an IC card, since the private key is not stored in the memory 52, it is possible to prevent the user 2 from being illegally signed by using the private key. ..

Further, according to the electronic payment system according to the present embodiment, since the common key is used only inside the data storage device 20 such as an IC card and the security server 31, the risk of the common key being stolen can be reduced. , Secure transactions can be realized and key management can be facilitated.

Further, according to the electronic payment system according to the present embodiment, information and requests input / output to / from the data storage device 20 such as an IC card are performed via the personal computer 22, the personal computer 22, the application server 30, and the network. Since signature verification is performed using the private key and public key when sending and receiving information and requests to and from the server 40, it is possible to prevent the information and requests from being tampered with on network 5 and to prevent the network from being tampered with. The safety of transactions using 5 can be ensured.

Even if signature verification is not performed, the identity of the transmitted payment information can be confirmed by encryption / decryption using a common key, so processing redundancy is as in the payment system according to this embodiment. Can be alleviated.

Further, according to the electronic payment system according to the present embodiment, the network server 40 of the store device 4 attaches the first signature information created by using its own private key to the payment request information, and attaches the first signature information to the payment management device. The application server 30 of 3 verifies the first signature information using the public key corresponding to the private key, and determines that the first signature information is valid attached to the network server 40 of the store device 4. Therefore, it is possible to prevent the personal computer 22 of the user 2 from making a payment based on the illegally falsified payment request information.

Further, in the electronic payment system according to the present embodiment, as described above, in the personal computer 22, the balance indicated by the balance information received from the application server 30 and the amount indicated by the estimated information received from the network server 40 (billing amount). ) Is displayed on the display, and after the user 2 agrees with the contents, the payment processing request SPC received from the application server 30 is sent to the data storage device 20 such as the IC card via the data storage device reader / writer 21 such as the IC card. Output. Therefore, the user 2 can confirm in advance the contents of the payment processing finally performed in the data storage device 20 such as an IC card, and can prevent the payment processing from being performed with the contents that have been tampered with illegally.

Further, according to the electronic payment system 1, the number of procedures involved in payment processing can be reduced as compared with the conventional case, information transmission via network 5 can be reduced, the usage amount of network 5 can be reduced, and the processing time can be shortened.

Further, according to the electronic payment system 1, unlike the conventional SET method, it is not necessary to create and verify the signature information many times, so that the redundancy of the processing procedure can be relaxed.

(Electronic Money Deposit System) The electronic money deposit system and sequence in the payment system according to the present embodiment will be described with reference to FIGS. 24 to 31.

In the payment system according to the present embodiment, the data storage device 20 such as an IC card is used as prepaid electronic money, but the user 2 uses the value information stored in the data storage device 20 such as an IC card. When the balance is insufficient, it is necessary to update the value information so as to increase the balance. Alternatively, in some cases, it is necessary to update the value information so as to reduce the value information stored in the data storage device 20 such as an IC card.

When depositing electronic money into a data storage device such as an IC card, the user 2 uses the application server of the payment management device 3 via the personal computer 20 that can access the data storage device 20 such as the IC card by the reader / writer 21. (Cyber electronic money system) Access 30 and request that the deposit screen be displayed on the display ((1)).

In response to such a deposit screen request, the application server 30 displays a deposit screen as shown in FIG. 25 on the display of the personal computer 20 of the user 2 via a predetermined interface program 24 such as an ActiveX component ((((). 2)).

When the user 2 selects deposit on the deposit screen shown in FIG. 25, he / she is instructed to set the data storage device 20 such as an IC card in the reader / writer 21 as shown in FIG. 26.

When the user 2 sets the data storage device 20 such as an IC card in the reader / writer 21, the balance and the like stored in the data storage device 20 such as an IC card are read out and transferred to the cyber electronic money system 30. ((3)). At the same time, the history information in the card is also sucked up by the cyber electronic money system ((4)). While these processes are being performed, as shown in FIG. 27, a display indicating that the processes are being performed is displayed.

Next, the user 2 inputs the deposit amount, the credit card number, the expiration date, and the PIN while operating the keyboard and mouse of the personal computer 22 while referring to the screens as shown in FIGS. 28 and 29. And transfer it to the cyber electronic money system ((3)). At the same time, the history information in the card is also sucked up by the cyber electronic money system ((4)). While these processes are being performed, as shown in FIG. 30, a display indicating that the processes are being performed is displayed.

When the cyber electronic money system 30 receives the payment request information as described above, the cyber electronic money system 30 requests the credit device 35 to approve the credit settlement request ((5)). After scrutinizing the credit information, the credit device 35 decides whether or not to request the credit settlement. Since the detailed configuration of the credit device 35 is not directly related to the present invention, detailed description thereof will be omitted.

If the credit result is positive, the cyber electronic money system generates value update information. The cyber electronic money system encrypts the value update information with a common key shared between the payment management device 3 and the data storage device 20 such as an IC card.

Further, the value update information is transmitted to the personal computer 22 of the user 2 with a fifth signature created by the private key of the payment management device 3. The personal computer 22 of the user 2 verifies the validity of the value update information sent by the public key corresponding to the private key of the payment management device 3, and if it is correct, the value update information is used as the payment management device. Decryption is performed using a common key shared between 3 and the data storage device 20 such as an IC card. Then, the value information in the data storage device 20 such as an IC card is updated based on the decrypted value update information ((6)).

The personal computer 22 sends a deposit completion screen request to the cyber electronic money system 30 ((7)), and the deposit completion screen is displayed on the display of the personal computer 22 as shown in FIG. 31 ((8)). ). After that, as shown in Fig. 32, the screen returns to the top page of the cyber electronic money system, and a series of value update processes are completed.

The card log information related to a series of processes is sent to the information management server 32 for the scrutiny / payment system in batch processing and stored.

As described above, according to the electronic money deposit system using the payment system according to the present embodiment, the common key KC is stored in the memory 52 of the data storage device 20 such as an IC card, and the private key is not stored. Therefore, even if the user 2 loses the data storage device 20 such as an IC card, since the private key is not stored in the memory 52, it is possible to prevent the user 2 from being illegally signed by using the private key. ..

In addition, according to the electronic payment system 1, since the common key is used only inside the data storage device 20 such as an IC card and the security server 31, the risk of the common key being stolen can be reduced and safe deposit processing can be performed. Can be realized and key management can be facilitated.

Although preferred embodiments of the electronic payment system and the like according to the present invention have been described above with reference to the accompanying drawings, the present invention is not limited to such examples. It is clear that a person skilled in the art can come up with various modifications or modifications within the scope of the technical idea described in the claims, and these are naturally included in the technical scope of the present invention. It is understood that it belongs.

For example, in the above-described embodiment, as shown in FIG. 1, the case where the application server 30, the security server 31, and the information management server 32 are separately provided in the payment management device 3 is illustrated. It may be realized by one server.

Further, in the above-described embodiment, the case where the balance information in the data storage device 20 such as an IC card is read out to the application server 30 is illustrated, but the balance information may not be read out to the application server 30.

Further, the series of processing of the electronic payment method according to the present invention and the processing performed by the payment management device, the store device, and the client device can be executed by hardware, but can also be executed by software. When executed by a series of software, various functions can be executed by installing a computer or various programs in which the programs that make up the software are embedded in dedicated hardware, for example, general-purpose. The program may be stored in a package medium such as a floppy disk or a CD-ROM and provided to a personal computer or the like, or the program may be downloaded via a communication network such as the Internet.

As described above, according to the present invention, an electronic payment system, a payment management device, a store device, and a client that securely perform electronic commerce via a network using a data storage device such as an IC card holding a common key. It can provide devices, data storage devices such as IC cards, computer programs and storage media.

In particular, according to the electronic payment system or the like according to the present invention, the common key is stored in the memory 52 of the data storage device 20 such as an IC card, and the private key is not stored. Therefore, even if the user loses a data storage device such as an IC card, since the private key is not stored in the memory, it is possible to prevent the user from being illegally signed by using the private key.

Further, according to the electronic payment system or the like according to the present invention, since the common key is used only inside a data storage device such as an IC card and a security server, the risk of the common key being stolen can be reduced and it is safe. Transactions can be realized and key management can be facilitated.

Further, according to the electronic payment system or the like according to the present invention, when sending and receiving various information and requests circulating in the network, signature verification using a private key and a public key is performed, so that the information and requests are on the network. It is possible to prevent unauthorized alteration and ensure the safety of transactions using the network.

As described above, according to the electronic payment system or the like according to the present invention, the number of procedures involved in payment processing and payment processing can be reduced as compared with the conventional case, information transmission via the network can be reduced, the amount of network usage can be reduced, and the amount of network usage can be reduced. The processing time can be shortened.

1 ... Electronic payment system, 2 ... User, 3 ... Payment management device, 4 ... Store device, 5 ... Network, 20 ... Data storage device such as IC card, 21 .. Data storage devices such as .IC cards Reader / writer, 22 ... personal computer, 23 ... browser program, 24 ... interface program, 30 ... application server, 31 ... security server, 32 ... Information management server, 40 ... network server