JP2005301737A - Electronic money depositing machine and its authentication method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an electronic money depositing machine and its authentication method capable of preventing the money deposition of an unauthorized electronic money value by using a stolen electronic money depositing machine. <P>SOLUTION: In addition to an electronic money management server 300 managing the electronic cash value, a money depositing machine authentication server 400 is provided to authenticate the electronic money depositing machine 100. The electronic money depositing machine 100 authenticates the electronic cash money depositing machine 100 by connecting the electronic money depositing machine 100, through a network 200, to the money depositing machine authentication server 400 upon turning on a power supply and processes the settlement of the electronic money value with an IC (Integrated Circuit) card 10 only when the electronic money depositing machine 100 is authenticated by the money depositing machine authentication server 400. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an electronic money depositing machine for depositing an electronic money value corresponding to cash inserted into a contactless IC chip that functions as an electronic wallet.

  In recent years, contactless IC chips that function as electronic wallets have become widespread. This non-contact IC chip is used by being embedded in a device such as a card or a mobile phone. Hereinafter, an IC card in which a non-contact IC chip is embedded will be described as an example. In order to make a payment for merchandise sales or service provision using this IC card, a predetermined payment device having a read / write device for a non-contact IC chip is used. In this settlement apparatus, the electronic money value corresponding to the settlement amount is reduced from the IC card, and the settlement information is stored in a predetermined storage device. This payment information is transmitted to a server of a payment company (operator) via the network every time payment is made. The settlement company performs actual settlement such as bank transactions with the seller based on the collected settlement information.

By the way, in order to use an IC card as an electronic wallet, it is necessary to deposit (charge) an electronic money value into the IC card. As an electronic money deposit machine for realizing this, for example, the one described in Patent Document 1 is known. This electronic money depositing machine includes an IC card reader / writer, a bill identifying device, a wireless communication unit, and a control unit. When a bill is inserted into the bill identifying device, an electronic money value corresponding to the inserted bill amount Is added to the IC card, and the deposit information is stored in a storage unit provided in the control unit. And the payment information memorize | stored in the memory | storage part is transmitted to a predetermined | prescribed management server via a wireless communication unit. This deposit information includes at least the identification information of the IC card and the deposit amount or the electronic money balance. In the deposit information transmission process, the deposit information is encrypted.
JP 2003-36466 A

  By the way, in this type of electronic money deposit machine, it is important to strictly implement theft countermeasures. However, in the conventional electronic money depositing machine, when the electronic money depositing machine is stolen, the cash stored in the banknote identification device can be taken out freely, so not only the cash already stored at the time of theft but also the IC There is a problem that electronic money value can be deposited freely if the card itself is valid.

  The present invention has been made in view of the above circumstances, and an object of the present invention is to provide an electronic money depositing machine that can prevent unauthorized deposit of electronic money value using a stolen electronic money depositing machine, and It is to provide the authentication method.

  In order to achieve the above object, the present invention provides an electronic money depositing machine authentication method for depositing an electronic money value corresponding to cash inserted into a contactless IC chip functioning as an electronic wallet. In addition to the electronic money management server that performs management, a depositing machine authentication server that authenticates the electronic money depositing machine is provided. When the electronic money depositing machine is turned on, the network is not connected to the depositing machine authentication server. And the electronic money depositing machine is authenticated, and the electronic money value settlement process with the non-contact IC chip is performed only when authenticated by the depositing machine authentication server.

  According to the present invention, when the electronic money depositing machine is turned on, the depositing machine itself is authenticated by using the electronic money depositing machine provided separately from the electronic money management server that manages the electronic money value. Since payment processing of electronic money value is possible only in the case of payment, it is possible to prevent payment processing with an illegal deposit machine such as a stolen device.

  Further, address information of each electronic money depositing machine to be authenticated is stored in advance in a predetermined storage unit of the depositing machine authentication server, and a communication path between the electronic money depositing machine and the depositing machine authentication server in the authentication process Is established by calling the electronic money depositing machine using the address information stored in the storage means in response to a call from the electronic money depositing machine to the depositing machine authentication server. is there.

  As described above, according to the present invention, when the electronic money depositing machine is turned on, the depositing machine itself is authenticated using the electronic money depositing machine provided separately from the electronic money management server that manages the electronic money value, Since payment processing of electronic money value is possible only when authenticated, it is possible to prevent payment processing with an illegal deposit machine such as a stolen device.

(First embodiment)
An electronic money deposit machine according to a first embodiment of the present invention will be described with reference to the drawings. FIG. 1 is a configuration diagram of an electronic money deposit system.

  This electronic money deposit machine 100 is a device that charges an electronic money value to an IC card 10 in which a contactless IC functioning as an electronic wallet is embedded. As shown in FIG. The electronic money management server 300 that manages money and the deposit machine authentication server 400 that authenticates the electronic money deposit machine 100 can communicate with each other.

  As shown in FIG. 1, the electronic money deposit machine 100 includes a card unit 110 that is an interface with the IC card 10, a banknote identification device 120 that identifies the correctness and type of the inserted banknote, and a user's An operation unit 130 including a button for inputting a deposit instruction, a communication device 140 for connecting to the network 200, and a main control unit 150 for controlling each device are provided.

  The card unit 110 includes an IC card reader / writer 111 that reads and writes data without contact with the IC card 10, and a card unit controller 112 that controls the IC card reader / writer 111. The card unit 110 is preliminarily given card unit identification information from an electronic money operating company, and the card unit identification information and authentication information such as a password are stored in a predetermined storage unit (not shown). Further, as will be described later, since the card unit 110 performs authentication processing with the main control unit 150, authentication information such as identification information and password of the main control unit 150 is stored in a storage unit (not shown). Yes. Further, an encryption key for encrypting data with the main control unit 150 is stored in a storage unit (not shown).

  The main control unit 150 stores depositing machine identification information and authentication information such as a password required for authentication with the depositing machine authentication server 400 and the card unit 110 in predetermined storage units (not shown). Further, the main control unit 150 stores encryption keys used for communication with the deposit machine authentication server 400 and the card unit 110 in predetermined storage units (not shown).

  The communication device 140 is a communication device such as a modem for connecting to the network 200. In the present embodiment, a public line network is used as the network 200, and the communication device 140 uses a modem correspondingly. The communication path between the electronic money deposit machine 100 and the deposit machine authentication server 400 established via the communication device 140 and the network is encrypted. For this encryption process, an encryption key stored in the main control unit 150 is used.

  The electronic money management server 300 manages the remaining amount, usage history, and the like of the IC card 10 that functions as an electronic wallet. In addition, the electronic money management server 300 authenticates the card unit 110 and the IC card 10 that are communication counterparts in order to prevent unauthorized use in the payment processing related to electronic money.

  The deposit machine authentication server 400 authenticates the legitimacy of the electronic money deposit machine 100, and includes an authentication unit 401 that performs an authentication process and an address information storage unit 402 that stores address information of each electronic money deposit machine 100. I have. The authentication unit 401 stores an encryption key and authentication information for encrypted communication with the electronic money deposit machine 100 in a predetermined storage unit (not shown). The address information storage unit 402 stores deposit machine identification information and address information of each electronic money deposit machine 100. In this embodiment, since a public line network is used as the network 200, the address information is a telephone number.

  Next, the operation of the electronic money deposit machine will be described. The electronic money deposit machine 100 according to the present invention is characterized in that an authentication process is performed in advance when communication for settlement of electronic money value with the electronic money management server 300 is performed. Accordingly, when fraud is detected in this authentication process, it is impossible to deposit electronic money value into the IC card 10. Hereinafter, the authentication process of the electronic money deposit machine will be described with reference to the sequence diagram of FIG.

  When the power is turned on, the electronic money deposit machine 100 performs an authentication process according to the sequence shown in FIG. First, the main control unit 150 calls the deposit machine authentication server 400 (step S1), and the connection between the electronic money deposit machine 100 and the deposit machine authentication server 400 is established. Here, the communication path between the electronic money depositing machine 100 and the depositing machine authentication server 400 is encrypted using an encryption key stored in each device. Then, an authentication process is performed between the electronic money deposit machine 100 and the deposit machine authentication server 400 on the established encrypted communication path (step S2). In this authentication process, authentication information stored in each device is used.

  Next, the deposit machine authentication server 400 acquires the address information of the electronic money deposit machine 100 from the address information storage unit 402, and calls back to the acquired address (phone number in the present embodiment) (step S3). . The communication path here is also encrypted. And an authentication process is performed similarly to said step S2 (step S4).

  Next, in both the electronic money deposit machine 100 and the deposit machine authentication server 400, the encryption key used in the communication path encryption process and the password used in the authentication process are changed (step S5).

  Next, the main control unit 150 of the electronic money deposit machine 100 performs an authentication process with the card unit 110 (step S6). In this authentication process, authentication information stored in each device is used. Then, in both the main control unit 150 and the card unit 110, the encryption key used in the communication path encryption process and the password used in the authentication process are changed (step S7).

  Next, the main control unit 150 of the electronic money deposit machine 100 calls the electronic money management server 300 (step S8) and performs an authentication process (step S9). The authentication process here authenticates the validity of the card unit 110, and the identification information of the card unit 110 is used as the authentication information.

  When all the authentication processes are completed by the above processes, the electronic money value deposit process to the IC card 10 is enabled thereafter. On the other hand, if any of the authentication processes in steps S2, S4, S6, and S9 fails, the electronic money value is not accepted into the IC card 10 thereafter. Since the operation of the electronic money depositing machine 100 during the depositing process is the same as that of the conventional one, the description is omitted here.

  Thus, according to the electronic money depositing machine 100 according to the present embodiment, since the electronic money depositing machine 100 itself is authenticated when the power is turned on, even if the electronic money depositing machine 100 is stolen. Unauthorized electronic money value deposits can be prevented.

(Second Embodiment)
An electronic money deposit machine according to a second embodiment of the present invention will be described with reference to the drawings. FIG. 3 is a block diagram of an electronic money deposit system.

  The electronic money depositing machine 100 according to the present embodiment is different from the first embodiment in the configuration of the communication device as shown in FIG. That is, in electronic money deposit machine 100 according to the present embodiment, card unit 110 and main control unit 150 can communicate with network 200 via communication devices 140 and 160, respectively. Other configurations are the same as those of the first embodiment.

  The authentication process of the electronic money deposit machine 100 will be described with reference to the sequence diagram of FIG.

  When the power is turned on, the main control unit 150 of the electronic money depositing machine 100 calls the depositing machine authentication server 400 (step S21), and the connection between the electronic money depositing machine 100 and the depositing machine authentication server 400 is made. Is established. Here, the communication path between the electronic money depositing machine 100 and the depositing machine authentication server 400 is encrypted using an encryption key stored in each device. Then, an authentication process between the electronic money depositing machine 100 and the depositing machine authentication server 400 is performed on the established encrypted communication path (step S22). In this authentication process, authentication information stored in each device is used.

  Next, the deposit machine authentication server 400 acquires the address information of the electronic money deposit machine 100 from the address information storage unit 402, and calls back to the acquired address (phone number in the present embodiment) (step S23). . The communication path here is also encrypted. And an authentication process is performed similarly to said step S2 (step S24).

  Next, in both the electronic money deposit machine 100 and the deposit machine authentication server 400, the encryption key used in the communication path encryption process and the password used in the authentication process are changed (step S25).

  Next, the main control unit 150 of the electronic money deposit machine 100 performs an authentication process with the card unit 110 (step S26). In this authentication process, authentication information stored in each device is used. Then, in both the main control unit 150 and the card unit 110, the encryption key used in the communication path encryption process and the password used in the authentication process are changed (step S27).

  Next, the card unit 110 of the electronic money deposit machine 100 calls the electronic money management server 300 (step S28), and performs an authentication process using the authentication information stored in each device (step S29). .

  When all the authentication processes are completed by the above processes, the electronic money value deposit process to the IC card 10 is enabled thereafter. On the other hand, if any of the authentication processes in steps S22, S24, S26, and S29 fails, the electronic money value is not accepted into the IC card 10 thereafter.

  As described above, according to the electronic money depositing machine 100 according to the present embodiment, the electronic money depositing machine 100 itself is authenticated when the power is turned on, as in the first embodiment. Even in such a case, it is possible to prevent illegal electronic money value deposits.

  As mentioned above, although embodiment of this invention was explained in full detail, the said embodiment is an illustration and this invention is not limited to this. The scope of the invention is set forth in the appended claims, and all modifications that come within the meaning of the claims are intended to be embraced by the invention.

  For example, in the second embodiment, the main control unit 150 and the card unit 110 are connected to the network 200 using the communication devices 140 and 160, respectively. ) Is high. Therefore, as shown in FIG. 5, the main control unit 150 and the card unit 110 may be connected to a LAN 170, and a communication device 180 such as a router may be arranged in this LAN, so that the cost can be reduced.

  In the above embodiment, the authentication process is performed only when the electronic money depositing machine 100 is turned on. However, the security can be further improved by increasing the authentication frequency as necessary. For example, it is conceivable that the authentication process is performed periodically, such as once a day, or every time the deposit process is performed, prior to the deposit process.

  Furthermore, in the above embodiment, the security is improved by changing the encryption key used in the encryption process and the password used in the authentication process for each authentication process. However, the communication protocol is changed for each authentication process. Thus, security can be further improved.

  Furthermore, in the above-described embodiment, the electronic money deposit dedicated machine including the banknote identification device 120 and the operation unit 130 has been described. However, the present invention can be implemented as a multifunction machine with a vending machine, for example. Moreover, the structure which does not provide the banknote identification apparatus 120 and the operation part 130, connects an external apparatus, such as a POS terminal, and deposits electronic money value by the payment instruction | indication from this apparatus may be sufficient.

1 is a configuration diagram of an electronic money deposit system according to a first embodiment. Authentication sequence diagram in the electronic money deposit system according to the first embodiment Configuration diagram of electronic money deposit machine according to the second embodiment Authentication sequence diagram in the electronic money deposit system according to the second embodiment Configuration diagram of an electronic money deposit machine according to another example of the second embodiment

Explanation of symbols

  DESCRIPTION OF SYMBOLS 10 ... IC card, 100 ... Electronic money deposit machine, 110 ... Card unit, 111 ... IC card reader / writer, 112 ... Card unit control part, 120 ... Banknote identification part, 130 ... Operation part, 140, 160, 170 ... Communication apparatus , 150 ... main control unit, 180 ... LAN, 200 ... network, 300 ... electronic money management server, 400 ... depositing machine authentication server, 401 ... authentication unit, 402 ... address information management unit.

Claims (6)

In an authentication method of an electronic money depositing machine that deposits an electronic money value corresponding to the cash that is inserted into a non-contact IC chip that functions as an electronic wallet,
Separately from an electronic money management server that manages electronic money value, a depositing machine authentication server that authenticates an electronic money depositing machine is provided.
When the electronic money depositing machine is turned on, it connects to the depositing machine authentication server via the network to authenticate the electronic money depositing machine, and only when the depositing machine authentication server authenticates the contactless IC An authentication method for an electronic money depositing machine characterized in that electronic money value settlement processing with a chip is performed. The deposit machine authentication server stores the address information of each electronic money deposit machine to be authenticated in a predetermined storage means,
The communication path between the electronic money depositing machine and the depositing machine authentication server in the authentication process is stored in the storage unit in response to a call from the electronic money depositing machine to the depositing machine authentication server. The authentication method for an electronic money depositing machine according to claim 1, wherein the authentication method is established by calling back to the electronic money depositing machine using address information. The authentication method for an electronic money depositing machine according to claim 1, wherein the authentication process is performed for each depositing process of electronic money value to a non-contact IC chip or periodically. The communication path between the electronic money depositing machine and the depositing machine authentication server in the authentication process is encrypted, and a key to be used for the encryption every time the electronic money value is deposited into the contactless IC chip or periodically. The authentication method for an electronic money depositing machine according to any one of claims 1 to 3, wherein the authentication method is changed. The protocol used in the communication between the electronic money depositing machine and the depositing machine authentication server in the authentication process is changed every time the electronic money value is deposited into the contactless IC chip or periodically. 5. An authentication method for an electronic money depositing machine according to any one of 1 to 4. In an electronic money depositing machine that deposits an electronic money value corresponding to the inserted cash to a non-contact IC chip that functions as an electronic wallet,
When the power is turned on, the electronic money depositing machine is authenticated by connecting to the depositing machine authentication server, which is provided separately from the electronic money management server that manages the electronic money value, via the network, An authentication method for an electronic money depositing machine, comprising: a control unit that performs an electronic money value settlement process with a contactless IC chip only when authenticated by a depositing machine authentication server.

Images