JP2006221462A - Service user apparatus, service provider apparatus, charging management apparatus, network connection service system, and charging method in network connection service. - Google Patents

Abstract

A plurality of network connection services can be easily used, and appropriate charging for a user is realized.
The service user device 2 includes an electronic money requesting unit 201 that transmits electronic money request information to the charge management device 5, and an electronic money filling unit 202 that performs a filling process on a balance of electronic money data. The connection request unit 205 that transmits a connection request for requesting connection to the connection destination device 4 and its own electronic certificate to the service provider device 3, and the electronic certificate and fee returned from the service provider device 3 A fee table verification unit 211 that verifies the fee table information based on the table information, and a payment process that calculates a connection fee based on the fee table information and then performs a fee payment process based on the balance and the fee of the electronic money data Unit 212 and a payment proof transmission unit 214 that adds the electronic signature data to the proof of fee payment processing and transmits it to the service provider apparatus 3.
[Selection] Figure 1

Description

  The present invention relates to a service user apparatus, a service provider apparatus, a charging management apparatus, a network connection service system, and a charging method in a network connection service.

  Conventionally, there is a communication service capable of selecting a provider (provider) of a network connection service such as an ad hoc network or a wireless local area network (LAN) at any time in various places. As a type of such a communication service, an “ad hoc network compatible (Terminode) type” is known in which virtual currency in an ad hoc network is attached to a packet and transferred, and the packet transfer is paid by the virtual currency (described below). Non-Patent Documents 1 and 2). The virtual currency in this method is managed by a counter in the node facility.

There is also known a “real-time payment type” in which a token dedicated to a communication carrier stored in a terminal is transmitted according to the service used (see Non-Patent Documents 1 and 2 below). Furthermore, a “non-repudiation billing type” that can be charged according to the amount of data transmitted / received by the terminal and the service usage time is also used (see Non-Patent Document 3 below).
L. Blazevic, et al., “Self-Organization in Mobile Ad Hoc Networks: The Approach of Terminodes”, IEEE Communications Magazine, June 2001 L. Buttyan and J.-P. Hubaux, “Nuglets: A Virtual Currency to Stimulate Cooperation in Self-Organized Mobile Ad Hoc Networks”, Tech Report DSC / 2001/001, Swiss Federal Institute of Technology, Lausanne, 2001 Jianying Zhou, "Non-repudiation in Electronic Commerce". ISBN 1-58053-247-0, Computer Security Series, Artech House, 2001

  However, in the ad hoc network compatible type, in order to prevent maliciously increasing the counter in the node equipment, the tamper-resistant device is provided in all the node equipment related to packet forwarding such as the transmitting node, the forwarding node, and the receiving node. There must be. Therefore, it is difficult for a plurality of providers to cope with this method at the same time. In addition, since the virtual currency is attached to the packet, the packet once sent may be discarded due to a lack of virtual currency.

  In the real-time payment type, when a provider service is used, it is necessary to purchase a token dedicated to the provider. In the non-repudiation billing type, when connecting to a network other than the home network that the user has previously contracted with, a roaming connection for mutual connection with the home network is used. In this case, it is impossible to connect to a network that is not interconnected with the home network. Therefore, with these methods, it is difficult to connect to a new provider immediately.

  Therefore, the present invention has been made in view of such problems, and it is possible to easily use a plurality of network connection services and to provide a service user apparatus and a service that enable appropriate charging for the user It is an object of the present invention to provide a user apparatus, a charge management apparatus, a network connection service system, and a charge method in a network connection service.

  In order to solve the above-mentioned problem, the service user apparatus according to the present invention transmits an electronic money request information requesting a predetermined amount of electronic money data to a billing management apparatus that is an electronic money issuer. And an electronic money filling means for filling the balance of electronic money data held in advance based on the electronic money data transmitted from the billing management apparatus in response to the electronic money request information, and a connection destination via the communication network A connection request means for transmitting a connection request for requesting connection with a device and its own proof data to a specific service provider device, proof data returned from the service provider device in response to the connection request, and Charge table verification means for verifying the charge table information based on the charge table information, electronic money data after calculating the connection charge based on the charge table information It includes a payment processing means for performing payment process based on the balances and rates, by adding the electronic signature data to the evidence of payment processing, and a payment proof transmitting means for transmitting to the service provider device.

  A service provider device according to the present invention includes a fee table storage unit that stores fee table information related to a connection via a communication network, and a service user device that uses a service related to a connection to a connection destination device via a communication network. A connection request receiving means for receiving a connection request for requesting connection and proof data for the service user device; a certificate returning means for returning self-certification data in response to reception of the connection request; and a connection request. In response to the reception, the fee table transmitting means for adding the electronic signature data to the fee table information stored in the fee table storage means and transmitting the information to the service user device, and the connection transmitted from the service user device Based on payment proof receiving means for receiving proof of fee payment processing, proof data of service user equipment and proof of fee payment processing, Payment evidence verification means for verifying the basis, communication control means for controlling connection between the service user apparatus and the connection destination apparatus in response to receipt of the evidence of charge payment processing, and evidence of charge payment processing Communication history storage means, and communication history transmission means for transmitting evidence of fee payment processing stored in the communication history storage means to a billing management apparatus that is an issuer of electronic money.

  The billing management apparatus of the present invention comprises an electronic money request receiving means for receiving electronic money request information for requesting a predetermined amount of electronic money data from a service user device that uses a service related to connection via a communication network, and an electronic money According to request information, an electronic money transmission means for transmitting electronic money data corresponding to a predetermined amount to a service user device, and a communication history for receiving proof of fee payment processing related to the service from the service provider device providing the service Receiving means and payment processing means for performing payment processing for the service provider device based on the evidence of the fee payment processing.

  The network connection service system of the present invention includes the above-described service user device, the above-described service provider device, and the above-described charging management device.

  In the billing method in the network connection service of the present invention, a service user device that uses a service related to a connection through a communication network requests a predetermined amount of electronic money data from a billing management device that is an issuer of electronic money. An electronic money request step for transmitting electronic money request information, an electronic money request receiving step for receiving an electronic money request information for requesting a predetermined amount of electronic money data from a service user device, and an accounting management device The electronic money transmission step of transmitting electronic money data corresponding to a predetermined amount to the service user device according to the electronic money request information, and the service user device based on the electronic money data transmitted from the billing management device E-money filling that fills the balance of pre-held electronic money data A connection request means for transmitting a request for connection between the service user device and the connection destination device via the communication network to the specific service provider device, and a service. The provider device receives the connection request and the proof data of the service user device from the service user device, and the service provider device certifies itself when receiving the connection request. A certificate return step for returning data for use, and a charge table transmission step in which the service provider device adds electronic signature data to the charge table information related to the connection and transmits it to the service user device upon receipt of the connection request. And a fee table verification step in which the service user device verifies the fee table information based on the certification data and the fee table information returned from the service provider device. And a payment processing step in which the service user device calculates a connection fee based on the fee table information and then performs a fee payment process based on the balance and fee of the electronic money data, and the service user device A payment proof transmitting step of adding electronic signature data to the payment processing proof and transmitting it to the service provider device; a payment proof receiving step of receiving the proof of fee payment processing by the service provider device; and a service provider device A payment proof verification step for verifying the proof of fee payment processing based on the proof data of the service user device and the proof of fee payment processing, and the service provider device in response to receiving the proof of fee payment processing. A communication control step for controlling the connection between the service user apparatus and the connection destination apparatus, and the service provider apparatus A communication history transmission step for transmitting to the management device; a charging history management device for receiving a proof of fee payment processing for the service from the service provider device; and a charging management device based on the proof of the fee payment processing. And a payment processing means for performing a payment process for the service provider device.

  According to such a service user device, service provider device, billing management device, network connection service system, and billing method in the network connection service, electronic money data is filled in advance from the billing management device in the service user device, The settlement relating to the distribution of the electronic money data is concentrated in the billing management device. In addition, when the service user device uses a connection service with the connection destination device, the fee table information and the electronic signature data are sent from the service provider device to the service user device. After the table information is verified, a fee is calculated based on the fee table information, and a fee payment process using electronic money is performed based on the calculation result. Further, the service user apparatus sends a proof of fee payment processing and electronic signature data to the service provider device, and verifies the proof of fee payment processing in the service provider device. Controls the connection with the connection destination device. In addition, a proof of fee payment processing is sent from the service provider device to the billing management device, and settlement processing for the service provider is executed in the billing management device. Thereby, even when there are a plurality of service providers, it is possible to immediately connect to the communication network selected by the service user by filling the common electronic money. In addition, since electronic signature data is exchanged between the service user device and the service provider device, it is possible to prevent impersonation of another person and to realize appropriate charging for the user.

  In addition, the service user device described above includes a parameter generation unit that generates a key exchange parameter for exchanging a secret key used in the common key cryptosystem, and a parameter transmission unit that transmits the key exchange parameter to the service provider device. And secret key derivation means for deriving a secret key from the key exchange parameter received from the service provider device, and when transmitting information to the service provider device, the secret key may be used for encryption. preferable. With such a configuration, a secret key is shared between the service user device and the service provider device, and information is transmitted and received using the secret key, so that information leakage in the communication network is prevented and appropriate for the user. It is possible to achieve both billing.

  The service provider apparatus described above includes a parameter generating means for generating a key exchange parameter for exchanging a secret key used in the common key cryptosystem, and a parameter transmitting means for transmitting the key exchange parameter to the service user apparatus. And a secret key deriving unit for deriving a secret key from the parameter for key exchange received from the service user apparatus, and when the information is transmitted to the service user apparatus, the information can be encrypted using the secret key. preferable. With such a configuration, a secret key is shared between the service user device and the service provider device, and information is transmitted and received using the secret key, so that information leakage in the communication network is prevented and appropriate for the user. It is possible to achieve both billing.

  ADVANTAGE OF THE INVENTION According to this invention, while being able to use a some network connection service easily, the appropriate charge with respect to a user is realizable.

  Hereinafter, preferred embodiments of a network connection service system according to the present invention will be described in detail with reference to the drawings. In the description of the drawings, the same elements are denoted by the same reference numerals, and redundant description is omitted.

[First Embodiment]
The network connection service system according to the first embodiment of the present invention is a communication system that provides a network connection service between two devices in a communication network such as an ad hoc network or a wireless LAN. As shown in the figure, the network connection service system 1 includes a service user device 2, a service provider device 3, a connection destination device 4, and a charge management device 5. The service user device 2, the service provider device 3, and the charge management device 5 can transmit and receive information to and from each other via a communication network N1 such as the Internet network or a LAN. The device 3 and the connection destination device 4 can exchange information with each other via a communication network N2 such as an ad hoc network or a wireless LAN. In addition, each of the service user device 2, the service provider device 3, the connection destination device 4, and the charge management device 5 is a device having tamper resistance that is not easily subjected to data analysis and falsification of internal programs and data. .

  The service user device 2 includes a personal computer, a PDA (Personal Digital Assistance), a mobile communication terminal, and the like, and is a communication node device of a user (U) who uses a network connection service via the communication network N2. As shown in FIG. 2, the service user apparatus 2 includes an electronic money requesting unit (electronic money requesting unit) 201, an electronic money filling unit (electronic money filling unit) 202, an electronic money information storage unit 203, and a filling process. Evidence transmission unit 204, connection request unit (connection request unit) 205, parameter reception unit 206, secret key derivation unit (secret key derivation unit) 207, parameter generation unit (parameter generation unit) 208, parameter transmission unit (Parameter transmission means) 209, fee table reception unit 210, fee table verification unit (charge table verification unit) 211, payment processing unit (payment processing unit) 212, payment evidence generation unit 213, payment evidence transmission unit (Payment Evidence Transmitting Means) 214, a communication evidence reception unit 215, a communication evidence verification unit 216, a payment completion evidence generation unit 217, and a payment completion evidence transmission unit 218 are provided. To have.

  Hereinafter, each component of the service user apparatus 2 will be described in detail.

In response to an instruction from a service user before using the network connection service, the electronic money request unit 201 transmits electronic money request information for requesting a predetermined amount of electronic money data to the charge management apparatus 5. At this time, the electronic money request unit 201 transmits the electronic money request information with the electronic signature data added thereto. The electronic money data handled here may be a prepaid type or a postpay type. The electronic money request information includes payment means information representing a means for paying a fee of the service user and filling amount information representing the amount of requested electronic money data. For example, the payment means information includes information such as “credit card number”, “card expiration date”, and “card user name”. Also, electronic money request unit 201, by encrypting the payment means information and filling amount information in its own secret key SK _U, generates the electronic signature data "Sig {SK _U, electronic money request information}". Here, “Sig {SK _U ,}” is a signature generation function when the secret key SK _U is used.

  The electronic money filling unit 202 performs electronic money filling processing after receiving the electronic money data transmitted from the charge management device 5 in accordance with the electronic money request information. That is, the electronic money filling unit 202 reads the filling amount from the received electronic money data, and then adds the read filling amount to the balance of electronic money data held in advance in the electronic money information storage unit 203. The electronic money filling unit 202 outputs the electronic money data to the filling process evidence transmission unit 204 before validating (commiting) the balance data update process in the electronic money information storage unit 203. When the electronic money filling unit 202 receives the electronic money validation instruction from the charge management apparatus 5 via the filling process evidence sending unit 204, the electronic money filling unit 202 commits the balance data update process and sends the electronic money validation instruction within a predetermined time. If it cannot be received, the balance data update process is invalidated (rolled back).

The filling process evidence transmission unit 204 transmits the electronic signature data “Sig {SK _U , electronic money data}” of the electronic money data received from the electronic money filling unit 202 to the charge management apparatus 5 as electronic money filling evidence information. Further, when receiving the electronic money validation instruction from the charge management device 5, the filling process evidence transmitting unit 204 outputs the electronic money validation instruction to the electronic money filling unit 202.

In response to an instruction from the service user, the connection request unit 205 requests the service provider device 3 to connect to the connection destination device 4 via the communication network N2 and its own electronic certificate. Certificate (certification data) Cert _U. The electronic certificate Cert _U includes the identification information ID _U of the service user, the public key PK _U of the service user, and the electronic signature data “Sig {by the certificate authority (CA) of the identification information ID _U and the public key PK _U. SK _CA , identification information ID _U + public key PK _U +.

The parameter receiving unit 206 receives from the service provider device 3 the electronic certificate Cert _SP of the service provider device 3 and the key exchange parameter _asp generated in the service provider device 3 and its electronic signature data “Sig {SK _SP , a connection request response Certificate including “a _sp }” is received. The electronic certificate Cert _SP includes the identification information ID _SP of the service provider, the public key PK _SP of the service provider, and the electronic signature data “Sig {SK by the certificate authority (CA) of the identification information ID _SP and the public key PK _{SP. CA} , identification information ID _SP + public key PK _SP +. As the key exchange parameter _asp , for example, a parameter exchanged at the time of secret key exchange in the DH (Diffie-Hellman) method is used. The parameter receiving unit 206 reads the electronic certificate Cert _SP , the key exchange parameter _asp , and the electronic signature data “Sig {SK _SP , _asp }” from the connection request response certificate, and generates a secret key derivation unit 207 and a parameter generation unit. It outputs to 208.

The parameter generation unit 208 verifies the electronic certificate Cert _SP of the service provider device 3 and generates a key exchange parameter b _U to be passed to the service provider device 3. Specifically, the parameter generation unit 208 verifies the electronic signature data of the electronic certificate Cert _SP using the public key PK _CA of the certificate authority, and trusts the corresponding electronic certificate from the contents of the electronic certificate Cert _SP. The digital certificate Cert _SP is verified by confirming whether the certificate is issued by a certificate authority or whether the digital certificate has expired. In addition, when the verification of the electronic certificate Cert _SP is normally completed, the parameter generation unit 208 generates a key exchange parameter b _U to be passed to the service provider device 3 by using, for example, the DH method. The parameter generation unit 208 outputs the generated key exchange parameter b _U to the parameter transmission unit 209.

The secret key derivation unit 207 verifies the electronic signature data “Sig {SK _SP , _asp }” using the public key PK _SP of the service provider device 3 and uses the service exchange device 3 from the key exchange parameter _asp. A secret key K1 is derived for sharing with. As this derivation method, for example, a derivation method of a secret key by the DH method is used.

The parameter transmission unit 209 includes the key exchange parameter b _U generated by the parameter generation unit 208, the electronic signature data “Sig {SK _U , b _U }”, and the encrypted data “ID information ID _T of the connection destination device 4”. The tariff request Tariff Request including “E {PK _SP , ID _T }” is transmitted to the service provider device 3. Here, E {PK _SP ,} ”is a public key encryption function using the public key PK _SP of the service provider.

The fee table receiver 210 receives the fee table information Service Tariff returned from the service provider device 3 in response to the tariff request Tariff Request. This tariff information Service Tariff is a common key encryption of tariff data Tariff _SP that represents the tariff of network connection service provided by the service provider, and the digital signature “Sig {SK _SP , Tariff _SP }” of tariff data Tariff _SP Data “e {k1, Tariff _SP + Sig {SK _SP , Tariff _SP }}” encrypted by the method. The fee table reception unit 210 outputs the received fee table information Service Tariff to the fee table verification unit 211.

The fee table verification unit 211 verifies the fee table information Service Tariff using the fee table information Service Tariff and the public key PK _SP included in the digital certificate Cert _SP . More specifically, the fee table verification unit 211 first decrypts the fee table information Service Tariff using the secret key K1 shared with the service provider device 3. Further, the fee table verification unit 211 verifies the digital signature data “Sig {SK _SP , Tariff _SP }” included in the decrypted fee table information Service Tariff using the public key PK _SP . Then, the fee table verification unit 211 outputs the verification result of the fee table information Service Tariff to the payment processing unit 212.

The payment processing unit 212 calculates the fee related to the network connection service to which the service user intends to connect when the verification of the fee table information Service Tariff is normally completed, and pays the fee to the service provider using the electronic money data. Process. That is, the payment processing unit 212 refers to the tariff data Tariff _SP and calculates a fee related to the network connection service. For example, when the charging rule represented by the tariff data Tariff _SP is “XX yen every 3 minutes” for the user attribute “60 years or older” and “YY yen every 3 minutes” for the user attribute “under 60 years” The unit charge corresponding to the user attribute of the service user is determined. The payment processing unit 212 performs fee payment processing by subtracting a unit fee from the balance of electronic money data stored in the electronic money information storage unit 203. At this time, the payment processing unit 212 outputs a trigger to the payment evidence generation unit 213 before committing the electronic money data update processing in the electronic money information storage unit 203. The payment processing unit 212 commits the electronic money data update processing when the verification result regarding the communication evidence received from the communication evidence verification unit 216 is “OK”. Further, the payment processing unit 212 outputs evidence of completion of the fee payment processing to the payment completion proof generation unit 217 when the update processing of the electronic money data is completed. The evidence of the completion of the fee payment processing includes a service ID for individually identifying the network connection service to be used, a sequence number for identifying evidence of completion of the fee payment processing for each service, service user identification information, service provider Identification information, connection destination identification information, information about tariff data Tariff _SP , unit charges calculated in the fee payment processing, and the like.

The payment proof generation unit 213 generates proof of the start of fee payment processing before the electronic money data update processing. The proof of the start of the fee payment process includes time information of the fee payment process start. Further, the payment proof generation unit 213 generates electronic signature data “Sig {SK _U , evidence of fee payment processing start}” and outputs it to the payment evidence transmission unit 214 together with the evidence of fee payment processing start.

The payment proof transmission unit 214 encrypts the fee payment processing start proof received from the payment proof generation unit 213 and its electronic signature data by a common key encryption method. Further, the payment proof transmitting unit 214 transmits the created encrypted data “e {k1, proof of start of fee payment processing + Sig {SK _U , proof of start of fee payment processing}}” to the service provider device 3.

The communication evidence receiving unit 215 receives the verification result regarding the communication evidence transmitted from the service provider device 3 and decrypts the verification result. Specifically, the communication evidence receiving unit 215 verifies the verification result information “OK / NG” indicating the quality of the verification result and the data “e {k1,“ OK / NG ”+ Sig {SK _SP ” obtained by encrypting the electronic signature data. , 'OK / NG'}} "is received, and the verification result"'OK / NG' + Sig {SK _SP , 'OK / NG'} "is read by decrypting using the secret key K1. Then, the communication evidence receiving unit 215 outputs the verification result ““ OK / NG ”+ Sig {SK _SP ,“ OK / NG ”}” to the communication evidence verifying unit 216.

The communication evidence verification unit 216 verifies the electronic signature data included in the verification result “'OK / NG' + Sig {SK _SP , 'OK / NG'}” using the public key PK _SP . The communication evidence verification unit 216 outputs verification result information “OK / NG” to the payment processing unit 212 when the verification of the verification result is normally completed.

The payment completion proof generation unit 217 generates electronic signature data “Sig {SK _U , proof of fee payment processing completion}” based on the proof of completion of the fee payment processing received from the payment processing unit 212. The payment completion proof generation unit 217 adds a proof of charge payment processing completion to the generated electronic signature data and outputs the result to the payment completion proof transmission unit 218.

The payment completion proof transmission unit 218 encrypts the fee payment processing completion proof received from the payment completion proof generation unit 217 and its electronic signature data using a common key encryption method. Further, the payment completion proof transmitting unit 218 transmits the created encrypted data “e {k1, proof of completion of fee payment processing + Sig {SK _U , proof of completion of fee payment processing}}” to the service provider device 3.

  Next, each component of the charge management apparatus 5 will be described.

  The charge management device 5 is a computer system that includes a server device, a personal computer, and the like. The billing management device 5 centrally performs issuance processing of electronic money distributed in the network connection service system 1, fee settlement processing accompanying electronic money exchange, and user information management of service users and service providers. As shown in FIG. 3, the billing management apparatus 5 includes an electronic money request receiving unit (electronic money request receiving unit) 501, a credit processing unit 502, a settlement processing unit 503, and an electronic money transmitting unit (electronic money transmitting unit). 504, an electronic money enabling unit 505, a communication history receiving unit (communication history receiving unit) 506, a usage fee totaling unit 507, a settlement processing unit (settlement processing unit) 508, a distribution evidence transmitting unit 509, a receipt An evidence receiving unit 511 and a user information storage unit 512 are provided.

The electronic money request receiving unit 501 receives electronic money request information and electronic signature data “Sig {SK _U , electronic money request information}” from the service user apparatus 2. Electronic money request receiving unit 501, SSL (Secure Socket Layer) After the pre mutual authentication and obtains the public key PK _U and the service user apparatus 2 by the protocol, the electronic signature data "Sig using the public key PK _U {SK _U , electronic money request information} ”is verified. The electronic money request receiving unit 501 outputs the electronic money request information to the credit processing unit 502 and the settlement processing unit 503 when the verification of the electronic signature data is normally completed.

  The credit processing unit 502 reads the credit information of the service user stored in the user information storage unit 512, and then determines whether or not the amount indicated by the filling amount information exceeds the credit balance of the service user. As a result, the credit processing related to the service user is executed. The credit processing unit 502 outputs the result of the credit processing to the settlement processing unit 503.

  When the credit processing by the credit processing unit 502 ends normally, the settlement processing unit 503 collects a charge corresponding to the electronic money to be filled from the service user using the settlement means information included in the electronic money request information. Settlement process to do. More specifically, the settlement processing unit 503 generates billing information to be sent to a credit card company, a financial institution, or the like while referring to settlement means information and filling amount information. The payment processing unit 503 outputs a trigger to the electronic money transmission unit 504 after the payment processing is completed.

  When the electronic money transmission unit 504 receives the trigger from the settlement processing unit 503, the electronic money transmission unit 504 transmits electronic money data corresponding to the filling amount information included in the electronic money request information to the service user apparatus 2.

The electronic money enabling unit 505 receives electronic signature data “Sig {SK _U , electronic money data}” as evidence information for filling electronic money from the service user apparatus 2 and verifies the electronic signature data. Also, the electronic money validation unit 505 transmits an electronic money validation instruction for validating the electronic money filling process to the service user apparatus 2 when the verification process of the electronic signature data is normally completed. .

The communication history receiving unit 506 receives communication history information and electronic signature data “Sig {SK _SP , communication history information}” from the service provider device 3. The communication history receiving unit 506 performs mutual authentication with the service provider device 3 and acquisition of the public key PK _SP in advance using the SSL (Secure Socket Layer) protocol, and then uses the public key PK _SP to create the electronic signature data “Sig { SK _SP , communication history information} ”is verified. Further, the communication history receiving unit 506 outputs the communication history information to the usage fee totaling unit 507 when the verification of the electronic signature data is normally completed.

The usage fee totaling unit 507 totals fees related to services for each service provider based on the communication history information. The usage fee totaling unit 507 outputs the totaled fee and the service provider identification information ID _SP to the settlement processing unit 508.

The settlement processing unit 508 starts settlement processing for the service provider based on the total fee received from the usage fee totaling unit 507 and the service provider identification information ID _SP . Specifically, the payment processing unit 508 reads the payment means information regarding the service provider by referring to the user information storage unit 512 based on the identification information ID _SP . Then, the settlement processing unit 508 starts a settlement process corresponding to the settlement means information. For example, when the settlement means is bank transfer, transfer request information to be sent to a financial institution is generated. If the settlement means is electronic money, electronic money data corresponding to the total fee is created and a process for sending the electronic money data to the service provider device 13 is started. Note that the settlement processing unit 508 outputs the total fee and the service provider identification information ID _SP to the distribution evidence transmission unit 509 before committing the execution of the settlement process. Further, the payment processing unit 212 commits the execution of the settlement process when the verification result regarding the evidence of fee information reception received from the receipt proof receiving unit 511 is “OK”.

  The distribution evidence transmission unit 509 transmits the total fee received from the settlement processing unit 508 to the service provider device 3 as distribution evidence.

The receipt proof receiving unit 511 receives from the service provider device 3 proof of fee information receipt and its electronic signature data “Sig {SK _SP , proof of fee information receipt}”. Further, the receipt evidence receiving unit 511 verifies the received electronic signature data “Sig {SK _SP , fee information receipt evidence}”, and outputs “OK / NG” as a result of the verification to the settlement processing unit 508.

  Next, each component of the service provider device 3 will be described.

  The service provider device 3 includes a server device, a personal computer, a PDA (Personal Digital Assistance), a mobile communication terminal, and the like, and is a communication node device of a service provider (SP) that provides a network connection service via the communication network N2. is there. As shown in FIG. 4, the service provider apparatus 3 includes a connection request receiving unit (connection request receiving unit) 301, a parameter generating unit (parameter generating unit) 302, and a parameter transmitting unit (certificate returning unit, parameter transmitting unit). ) 303, parameter receiving unit 304, secret key deriving unit (secret key deriving unit) 305, connection request unit 306, fee table transmitting unit (fee table transmitting unit) 307, fee table storage unit (charge table storage) Means) 321, payment evidence receiving unit (payment evidence receiving unit) 308, payment evidence verifying unit (payment evidence verifying unit) 309, communication evidence requesting unit 310, communication evidence receiving unit 311, and communication evidence verifying unit 312. A communication evidence transmission unit 313, a payment completion evidence reception unit 314, a payment completion evidence verification unit 315, a communication control unit (communication control means) 316, and a communication history storage unit (communication history storage unit). And means) 322, communication history transmission unit (communication history transmitting means) 317, a distribution evidence receiving unit 318, and a margin received transmission unit 320.

The connection request receiving unit 301 receives a connection request Service Request and a service user's electronic certificate Cert _U from the service user device 2. The connection request reception unit 301 outputs the electronic certificate Cert _U of the service user to the parameter generation unit 302.

The parameter generation unit 302 verifies the electronic certificate Cert _U of the service user device 2 and generates a key exchange parameter _asp to be passed to the service user device 2. Specifically, the parameter generation unit 302 verifies the electronic signature data of the electronic certificate Cert _U using the public key PK _CA of the certificate authority and verifies the contents of the electronic certificate Cert _U. Further, when the verification of the electronic certificate Cert _U is normally completed, the parameter generation unit 302 generates a key exchange parameter _asp to be passed to the service user apparatus 2 by using, for example, the DH method. The parameter generation unit 302 outputs the generated key exchange parameter _asp to the parameter transmission unit 303.

The parameter generation unit 302 also verifies the electronic certificate Cert _T of the connection destination device 4 and generates a key exchange parameter b _SP to be passed to the connection destination device 4. Specifically, the parameter generation unit 302 verifies the electronic signature data of the electronic certificate Cert _T using the public key PK _CA of the certificate authority, and verifies the contents of the electronic certificate Cert _T. Further, when the verification of the electronic certificate Cert _T is normally completed, the parameter generation unit 302 generates a key exchange parameter b _SP to be passed to the connection destination device 4 using, for example, the DH method. The parameter generation unit 302 outputs the generated key exchange parameter b _SP to the parameter transmission unit 303.

The parameter transmission unit 303 includes the key exchange parameter _asp generated by the parameter generation unit 302, the electronic signature data “Sig {SK _SP , _asp }”, and the electronic certificate Cert _SP of the service provider device 3. A connection request response certificate is transmitted to the service user apparatus 2.

In addition, the parameter transmission unit 303 transmits the key exchange parameter b _SP generated by the parameter generation unit 302 and the electronic signature data “Sig {SK _SP , b _SP }” to the connection destination apparatus 4.

The parameter receiving unit 304 receives the electronic certificate Cert _T of the connection destination device 4 from the connection destination device 4, the key exchange parameter a _T generated in the connection destination device 4, and the electronic signature data “Sig {SK _T , a _T }. Connection request response Connection Response including “is received. The parameter receiving unit 304 reads the electronic certificate Cert _T , the key exchange parameter a _T , and the electronic signature data “Sig {SK _T , a _T }” from the connection request response Connection Response, and generates the secret key derivation unit 305 and the parameter generation To the unit 302.

Further, the parameter receiving unit 304 receives from the service user device 2 the key exchange parameter b _U generated by the service user device 2, its electronic signature data “Sig {SK _U , b _U }”, and the connection destination device 4. The tariff request including the encrypted data “E {PK _SP , ID _T }” of the identification information ID _T is received. The parameter receiving unit 304 outputs the key exchange parameter b _U and the electronic signature data “Sig {SK _U , b _U }” to the secret key derivation unit 305 and also encrypts the encrypted data “E {PK of the identification information ID _T ”. _SP , ID _T } ”is output to the connection request unit 306.

The secret key derivation unit 305 verifies the electronic signature data “Sig {SK _U , b _U }” using the public key PK _U of the service user apparatus 2 and uses the service user apparatus 2 from the key exchange parameter b _U. A secret key K1 is derived for sharing with. As this derivation method, for example, a derivation method of a secret key by the DH method is used.

Also, the secret key derivation unit 305, the electronic signature data _{"Sig {SK T, a T} }" using the public key PK _T of the connected device 4 while verifying, from the key exchange parameters a _T, connected device 4 A secret key K2 is derived for sharing with. After deriving the secret key K2, the secret key deriving unit 305 outputs a trigger to the fee table transmitting unit 307.

The connection request unit 306 decrypts the encrypted data “E {PK _SP , ID _T }” of the identification information ID _T and receives the identification information ID at the timing when the tariff request Tariff Request is received from the service user apparatus 2. _A connection request Connection Request is transmitted to the connection destination device 4 indicated by _T. This connection request includes the electronic certificate Cert _SP of the service provider device 3.

The fee table transmission unit 307 transmits the fee table information Service Tariff to the service user apparatus 2 at the timing when the trigger is received from the secret key derivation unit 305. Specifically, the tariff table transmission unit 307 generates the tariff data Tariff _SP representing the tariff table of the network connection service used by the service user and the digital signature “Sig {SK _SP , Tariff _SP }” of the tariff data Tariff _SP. Data “e {k1, Tariff _SP + Sig {SK _SP , Tariff _SP }}” encrypted by the common key encryption method is generated as the charge table information Service Tariff. At this time, the tariff data Tariff _SP is read from the charge table storage unit 321 that stores the charge table information related to the network connection service provided by the service provider device 3.

The payment proof receiving unit 308 receives encrypted data including the proof of the start of fee payment processing from the service user apparatus 2. The payment proof receiving unit 308 outputs the received encrypted data “e {k1, proof of fee payment processing start + Sig {SK _U , proof of fee payment processing start}}” to the payment proof verification unit 309.

Payment evidence verifying unit 309, the encrypted data "e {k1, payment processing start evidence + Sig {SK _U, evidence of payment processing start}}" and a public key PK _U contained in the electronic certificate Cert _U To verify evidence of the start of payment processing. More specifically, the payment proof verification unit 309 first decrypts the encrypted data using the secret key K1 shared with the service user apparatus 2. Furthermore, the payment evidence verifying unit 309, the decoded digital signature data "Sig {SK _U, evidence of payment processing start}" verified using the public key PK _U. Then, the payment evidence verification unit 309 outputs the verification result of the evidence of the start of the fee payment process to the communication evidence request unit 310.

  The communication evidence request unit 310 transmits a communication evidence request to the connection destination device 4 when the verification result in the payment evidence verification unit 309 is normal. More specifically, the communication evidence request unit 310 transmits data “e {K2, time information}” obtained by encrypting time information indicating the current time with the secret key K2 as a communication evidence request.

The communication evidence receiving unit 311 receives the encrypted data related to the communication evidence transmitted from the connection destination device 4 and decrypts the encrypted data. Specifically, the communication evidence receiving unit 311 receives communication evidence and encrypted data “e {k2, communication evidence + Sig {SK _T , communication evidence}}” as encrypted data. After that, the communication evidence and its electronic signature data are read by decrypting using the secret key K2. Then, the communication evidence receiving unit 311 outputs the read communication evidence and its electronic signature data to the communication evidence verification unit 312.

The communication evidence verification unit 312 verifies the electronic signature data “Sig {SK _T , communication evidence}” using the public key PK _T. The communication evidence verification unit 312 outputs verification result information “OK / NG” to the communication evidence transmission unit 313.

The communication evidence transmission unit 313 generates electronic signature data “Sig {SK _SP ,“ OK / NG ”}” based on the verification result information “OK / NG” regarding communication evidence. Further, the verification result information and the electronic signature data are encrypted by a common key encryption method. Further, the communication evidence transmission unit 313 transmits the encrypted data “e {k1,“ OK / NG ”+ Sig {SK _SP ,“ OK / NG ”}}” to the service user apparatus 2.

The payment completion proof receiving unit 314 receives the encrypted data related to the proof of completion of the fee payment processing transmitted from the service user apparatus 2 and decrypts the encrypted data. Specifically, the payment completion proof receiving unit 314 uses the encrypted data “e {k1, proof of completion of fee payment processing + Sig {SK _U , After receiving the payment processing completion evidence}} ”, the private key K1 is used for decryption to read the fee payment processing completion evidence and its electronic signature data. Then, the payment completion evidence receiving unit 314 outputs the read fee payment processing completion evidence and the electronic signature data to the payment completion evidence verifying unit 315.

Payment complete evidence verifying unit 315 verifies with the "electronic signature data Sig {SK _U, evidence of payment process completion}" public key targeting PK _U. The payment completion proof verification unit 315 outputs verification result information “OK / NG” to the communication control unit 316.

  The communication control unit 316 controls the connection between the service user apparatus 2 and the connection destination apparatus 4 when the verification result of the evidence of completion of the charge payment process is “OK”. More specifically, the communication control unit 316 relays communication data such as packet data between the service user apparatus 2 and the connection destination apparatus 4 when the service provider apparatus 3 has a role of a relay node. To start. When the service provider device 3 does not have the role of a relay node, control is performed so as to permit relaying of communication data between the service user device 2 and the connection destination device 4. In addition, the communication control unit 316 stores the evidence of the completion of the fee payment process in the communication history storage unit 322 when receiving the evidence of the completion of the fee payment process from the service user device 2.

FIG. 5 shows a configuration of evidence of completion of the fee payment process stored in the communication history storage unit 322. As shown in the figure, the evidence of completion of fee payment processing includes a service ID “SID” for individually identifying the network connection service to be provided, and a sequence number “Seq1” for identifying evidence of completion of fee payment processing for each service. ”, Service user identification information“ ID _U ”, service provider identification information“ ID _SP ”, connection destination identification information“ ID _T ”, price list“ Tariff _SP ”, unit charge“ Charge ” ”, The charge“ Charge1 ”paid by the service user this time, and the payment method information“ prepaid ”indicating the type of payment method.

The communication history transmission unit 317 reads the proof of charge payment processing completion from the communication history storage unit 322 at a timing when data is stored in the communication history storage unit 322 or at a regular timing, and is used as communication history information. Send to 5. At this time, the communication history transmission unit 317 adds the electronic signature data of the communication history information and transmits it. Specifically, the communication history transmission unit 317 generates electronic signature data “Sig {SK _SP , communication history information}” by encrypting the communication history information with its own secret key SK _SP .

The distribution evidence receiving unit 318 receives the total amount distributed from the charge management apparatus 5 to the service provider. The distribution proof receiving unit 318 determines the validity of the received aggregate amount, and then creates proof of receipt of the charge information and the electronic signature data “Sig {SK _SP , proof of receipt of the charge information} of the proof of receipt of the charge information} Is generated.

The receipt proof transmitting unit 320 transmits the fee information receipt proof created by the distribution proof receiving unit 318 and the electronic signature data “Sig {SK _SP , fee information receipt proof}” to the charge management apparatus 5.

  Next, each component of the connection destination device 4 will be described.

  The connection destination device 4 includes a personal computer, a PDA (Personal Digital Assistance), a mobile communication terminal, and the like, and is a communication node device of a connection destination user (T) to which a service user wants to connect. As illustrated in FIG. 6, the connection destination device 4 includes a connection request reception unit 401, a parameter generation unit 402, a parameter transmission unit 403, a parameter reception unit 404, a secret key derivation unit 405, and a communication evidence request reception unit. 406, a communication evidence request verification unit 407, a communication evidence generation unit 408, and a communication evidence transmission unit 409.

The connection request receiving unit 401 receives a connection request Connection Request and a service provider's electronic certificate Cert _SP from the service provider device 3. The connection request reception unit 401 outputs the electronic certificate Cert _SP of the service provider to the parameter generation unit 402.

The parameter generation unit 402 verifies the electronic certificate Cert _SP of the service provider device 3 and generates a key exchange parameter a _T to be passed to the service provider device 3. Specifically, the parameter generation unit 402 verifies the electronic signature data of the electronic certificate Cert _SP using the public key PK _CA of the certificate authority and verifies the contents of the electronic certificate Cert _SP . In addition, when the verification of the electronic certificate Cert _SP is normally completed, the parameter generation unit 402 generates a key exchange parameter a _T to be passed to the service provider device 3 using, for example, the DH method. The parameter generation unit 402 outputs the generated key exchange parameter a _T to the parameter transmission unit 403.

The parameter transmission unit 403 includes a connection including the key exchange parameter a _T generated by the parameter generation unit 402, the electronic signature data “Sig {SK _T , a _T }”, and the electronic certificate Cert _T of the connection destination device 4. A request response Connection Response is transmitted to the service provider device 3.

The parameter receiving unit 404 receives the key exchange parameter b _SP generated by the service provider device 3 and the electronic signature data “Sig {SK _SP , b _SP }” from the service provider device 3. The parameter receiving unit 404 outputs the key exchange parameter b _SP and its electronic signature data “Sig {SK _SP , b _SP }” to the secret key deriving unit 405.

The secret key derivation unit 405 verifies the electronic signature data “Sig {SK _SP , b _SP }” using the public key PK _SP of the service provider device 3 and uses the service exchange device 3 from the key exchange parameter b _SP. A secret key K2 is derived for sharing with.

  The communication evidence request receiving unit 406 receives the encrypted data “e {K2, time information}” from the service provider device 3 as a communication evidence request. The communication evidence request reception unit 406 outputs the received encrypted data to the communication evidence request verification unit 407.

  The communication evidence request verification unit 407 decrypts the encrypted data transmitted from the service provider device 3. Specifically, the communication evidence request verification unit 407 reads the communication evidence request by decrypting the encrypted data “e {K2, time information}” using the secret key K2. Then, the communication evidence request verification unit 407 verifies whether or not the read communication evidence request is valid data, and outputs the verification result to the communication evidence generation unit 408.

The communication evidence generation unit 408 creates communication evidence when the verification result regarding the communication evidence request is normal. Further, the communication evidence generation unit 408 generates electronic signature data “Sig {SK _T , communication evidence}” corresponding to the communication evidence. Further, the communication evidence generation unit 408 encrypts the communication evidence and the electronic signature data using a common key encryption method. Then, the communication evidence generation unit 408 outputs the encrypted data “e {K2, communication evidence + Sig {SK _T , communication evidence}}” to the communication evidence transmission unit 409.

The communication evidence transmission unit 409 transmits the encrypted data “e {K2, communication evidence + Sig {SK _T , communication evidence}}” output from the communication evidence generation unit 408 to the service provider device 3.

  Hereinafter, the operation of the network connection service system 1 will be described with reference to FIG. 7 to FIG. 12, and a charging method in the network connection service system will be described in detail.

  With reference to FIG. 7, the operation | movement at the time of electronic money data filling in the network connection service system 1 is demonstrated.

  First, mutual authentication processing and key exchange processing are performed between the service user apparatus 2 and the charge management apparatus 5 according to an instruction from the service user (step S1). Next, the electronic money request information and its electronic signature data are transmitted from the service user apparatus to the charge management apparatus 5 (step S2). Thereafter, the electronic signature data is verified in the charge management device 5 (step S3). Further, in the charge management device 5, a charge settlement process corresponding to the charged amount of electronic money is executed (step S4). Then, the electronic money data corresponding to the filling amount is created in the charge management device 5 (step S5). Thereafter, the created electronic money data is transmitted from the charge management device 5 to the service user device 2 (step S6).

  On the other hand, the service user device 2 starts a process of filling the balance of the electronic money data stored in the service user device 2 based on the transmitted electronic money data (step S7). Next, before the update of the balance of the electronic money data is committed, the electronic signature data of the electronic money data is transmitted from the service user device 2 to the charge management device 5 as evidence information for filling the electronic money. (Step S8). Thereafter, the electronic signature data of the electronic money data is verified by the billing management apparatus 5 (step S9). When the verification of the electronic signature data is normally completed, an electronic money validation instruction is transmitted from the charge management apparatus 5 to the service user apparatus 2 (step S10). When the service user device 2 receives the electronic money validation instruction, the update of the balance of the electronic money data is committed (step S11).

  Next, referring to FIG. 8, when providing a connection service in the network connection service system 1, a secret key sharing process between the service user apparatus 2 and the service provider apparatus 3, and the service provider apparatus 3 and the connection destination are performed. The secret key sharing process with the apparatus 4, the fee payment process from the service user apparatus 2 to the service provider apparatus 3, and the connection process between the service user apparatus 2 and the service provider apparatus 3 It is executed in order. Here, the fee payment process and the connection process are repeated at a predetermined charging process timing while the network connection service is provided. The charging process timing may be a regular timing or a timing when a predetermined event such as “connection start” or “connection end” occurs.

  First, a secret key sharing process between the service user device 2 and the service provider device 3 will be described with reference to FIG.

First, a connection request Service Request and an electronic certificate Cert _U are transmitted from the service user device 2 to the service provider device 3 (step S12). Next, after receiving the connection request Service Request and the electronic certificate Cert _U , the service provider device 3 verifies the electronic certificate Cert _U and generates a key exchange parameter _asp (step S13). Thereafter, the service provider device 3 returns the key exchange parameter _asp , its electronic signature data, and the electronic certificate Cert _sp to the service user device 2 (step S14).

In contrast, in the service user apparatus 2, verification of the received electronic certificate Cert _sp, generation of key exchange parameters b _u, and the verification of the electronic signature data key exchange parameters a _sp performed (step S15). Then, the service user device 2 sends to the service provider device 3 a fee table including the key exchange parameter b _u , its digital signature data, and the encrypted data by the public key encryption of the identification information ID _T of the connection destination device 4. A request Tariff Request is transmitted (step S16).

  Thereafter, the service user apparatus 2 and the service provider apparatus 3 verify the digital signature data of the received key exchange parameter and derive the secret key K1 based on the key exchange parameter (step S17).

  Next, a secret key sharing process between the service provider device 3 and the connection destination device 4 will be described with reference to FIG.

First, the service provider device 3 transmits a connection request Connection Request and an electronic certificate Cert _sp to the connection destination device 4 (step S18). Next, after the connection destination device 4 receives the connection request Connection Request and the electronic certificate Cert _sp , the electronic certificate Cert _sp is verified and the key exchange parameter a _T is generated (step S19). Thereafter, the connection destination device 4 returns a connection request response Connection Response including the key exchange parameter a _T , its electronic signature data, and the electronic certificate Cert _T to the service provider device 3 (step S20).

In response to this, the service provider device 3 performs verification of the received electronic certificate Cert _T , generation of the key exchange parameter b _sp , and verification of the electronic signature data of the key exchange parameter a _T (step S21). Then, the service provider device 3 transmits the key exchange parameter _bsp and its electronic signature data to the connection destination device 4 (step S22).

  Thereafter, the service provider device 3 and the connection destination device 4 verify the electronic signature data of the received key exchange parameter and derive the secret key K2 based on the key exchange parameter (steps S23 and S24). .

  Next, fee payment processing from the service user apparatus 2 to the service provider apparatus 3 will be described with reference to FIG.

  The service provider device 3 transmits the fee table information Service Tariff to the service user device 2 at the timing when the secret key K2 is derived (step S25). In response to this, the service user apparatus 2 decrypts the tariff information Service Tariff and verifies the electronic signature data included in the decrypted data (step S26). Next, the service user apparatus 2 calculates a fee for the network connection service to be connected and performs a fee payment process for the service provider, and also creates evidence of the start of the fee payment process and its electronic signature data. (Step S27). Further, the service user apparatus 2 transmits to the service provider apparatus 3 evidence of start of fee payment processing and encrypted data of the electronic signature data (step S28).

  In response to this, the service provider device 3 decrypts the encrypted data and verifies the electronic signature included in the decrypted data (step S29). Then, when the verification result of the electronic signature is normal, the service provider device 3 transmits encrypted data for requesting communication evidence to the connection destination device 4 (step S30).

  Thereafter, in the connection destination device 4, after the encrypted data of the communication proof request is decrypted, and the communication proof request included in the decrypted data is valid data, the communication proof and its electronic Signature data is created (step S31). The created communication evidence and electronic signature data are encrypted and transmitted to the service provider device 3 (step S32).

  In response to this, the service provider device 3 decrypts the received encrypted data and verifies the electronic signature data included in the decrypted data (step S33). Next, the service provider device 3 creates verification result information and its electronic signature data, encrypts the data, and transmits the encrypted data to the service user device 2 (step S34). The transmitted encrypted data is decrypted by the service user apparatus 2, and then the electronic signature data included in the decrypted data is verified (step S35). Furthermore, when the verification result information included in the decrypted data is “OK”, the service user apparatus 2 is committed to update the electronic money data in the fee payment process, and evidence of the completion of the fee payment process and its Electronic signature data is created (step S36). Thereafter, the service user apparatus 2 transmits to the service provider apparatus 3 evidence of completion of the fee payment process and encrypted data of the electronic signature data (step S37).

  The service provider device 3 decrypts the received encrypted data, and then verifies the electronic signature data included in the encrypted data (step S38). Then, when the verification result of the electronic signature data is normal, the service provider device 3 transmits a service start message Service Start to the service user device 2 (step S39), and the service user device 2 and the connection destination Relaying of communication data with the device 4 is started (step S40).

  Next, with reference to FIG. 12, the operation | movement at the time of the charge settlement between the service provider apparatus 3 and the charge management apparatus 5 in the network connection service system 1 is demonstrated.

  First, mutual authentication processing and key exchange processing are performed between the service provider device 3 and the charge management device 5 according to a predetermined timing or an instruction from the service provider (step S41). Next, the service provider device 3 transmits the communication history information stored in the communication history storage unit 322 and its electronic signature data to the charge management device 5 (step S42). On the other hand, after the communication history information and the electronic signature data are received, the billing management apparatus 5 verifies the electronic signature data (step S43). Furthermore, when the verification result of the electronic signature data is normal, the billing management apparatus 5 aggregates the charges for each service provider based on the communication history information, and to the service provider based on the aggregated charges. Is started (step S44). At the same time, the charge management device 5 transmits to the service provider device 3 fee information indicating the total amount to be processed (step S45).

  The service provider device 3 determines the validity of the received total amount by comparing it with the communication history information (step S46). Thereafter, when the service provider device 3 determines that the total amount is valid, the service provider device 3 starts data storage processing of the charge information in the communication history storage unit 322 (step S47). The “data storage process” here refers to a deposit process such as an erase process for communication history information. Further, the service provider device 3 creates a proof of receipt of fee information and its electronic signature data (step S48). Then, the service provider device 3 transmits the fee information receipt proof and the electronic signature data to the charge management device 5 (step S49).

  The billing management apparatus 5 verifies the electronic signature data as evidence of receipt of fee information (step S50). Thereafter, if the verification result of the electronic signature data is OK, a charge information validation instruction is transmitted from the charge management apparatus 5 to the service provider apparatus 3 (step S51). On the other hand, when receiving the charge information validation instruction, the service provider device 3 commits the data storage processing in the charge information communication history storage unit 322 (step S52). Further, the billing management apparatus 5 commits the payment process to the service provider (step S53).

  Hereinafter, the operation and effect of the network connection service system 1 will be described.

  According to the network connection service system 1, the service user apparatus 2 is preliminarily filled with electronic money data from the charge management apparatus 5, and settlement relating to the distribution of the electronic money data is performed centrally in the charge management apparatus 5. When the service user device 2 uses a connection service with the connection destination device 4, the fee table information and the electronic signature data are sent from the service provider device 3 to the service user device 2, and the service user device. In 2, the fee table information is verified, the fee is calculated based on the fee table information, and the fee payment processing using electronic money is performed based on the calculation result. Further, the service user apparatus 2 sends the proof of fee payment processing and the electronic signature data to the service provider device 3, and the service provider device 3 verifies the proof of fee payment processing, thereby using the service. The connection between the user device 2 and the connection destination device 4 is controlled. At the same time, the proof of fee payment processing is sent from the service provider device 3 to the billing management device 5, and the billing management device 5 executes settlement processing for the service provider device 3. Thereby, even when there are a plurality of service providers, it is possible to immediately connect to the communication network selected by the service user by filling the common electronic money. In addition, since electronic signature data is exchanged between the service user device 2 and the service provider device 3, it is possible to prevent impersonation of other people, falsification of data, and the like, thereby realizing appropriate charging for the user.

  In addition, since a secret key is shared between the service user device 2 and the service provider device 3 and between the service provider device 3 and the connection destination device, information is transmitted and received using the secret key. Thus, it is possible to achieve both prevention of information leakage in the communication network and appropriate charging for the user.

[Second Embodiment]
Next, a second embodiment of the present invention will be described. The network connection service system 11 according to the present embodiment shown in FIG. 13 does not share a secret key between the service provider device 13 and the connection destination device 14, and when the service provider device 13 starts a connection service. Does not request communication evidence from the connection destination device 14, and shares the secret key between the service user device 12 and the connection destination device 14 after starting the service, as in the first embodiment. Different.

That is, referring to FIG. 14, the parameter receiving unit 221 of the service user device 12 sends a connection request response including the electronic certificate Cert _SP of the service provider device 13 and its encrypted data from the service provider device 13. Receive the certificate. The encrypted data includes a combination of the secret key K _USP generated in the service provider device 13 and the service identification information Index _USP, and the electronic signature data “Sig {SK _SP , Index _USP + K _USP }” of the combination. Is encrypted data “E {PK _U , Index _USP + K _USP + Sig {SK _SP , Index _USP + K _USP }}”. The parameter receiving unit 221 reads the digital certificate Cert _SP and the encrypted data “E {PK _U , Index _USP + K _USP + Sig {SK _SP , Index _USP + K _USP }}” from the connection request response Certificate and secretly reads them. The data is output to the key verification unit 222.

The private key verification unit 222 verifies the electronic certificate Cert _SP of the service provider device 13. Also, the secret key verifying unit 222, the encrypted data using the private key SK _U of the service user apparatus _{12 "E {PK U, Index} USP + K USP + Sig {SK SP, Index USP + K USP}}" And the digital signature data included in the decrypted data is verified using the public key PK _SP of the service provider. Further, the private key verification unit 222 outputs the verification result of the electronic signature to the parameter transmission unit 223.

The parameter transmission unit 223 includes encrypted data “e {K _USP , ID _T }” using the common key encryption of the identification information ID _T of the connection destination device 14 when the verification result by the secret key verification unit 222 is normal. A tariff request Tariff Request is transmitted to the service provider device 13.

The connection destination confirmation unit 224 receives the service start message Service Start from the service provider device 13 when the verification result of the evidence of payment processing start in the service provider device 13 is normal. Further, when receiving the service start message Service Start, the connection destination confirmation unit 224 transmits a connection destination confirmation request including its own electronic certificate Cert _U to the connection destination device 14.

In addition, the connection destination confirmation unit 224 receives the encrypted data “E {PK _U , K _UT + Sig {SK _T , K _UT }}” and the electronic certificate Cert _T returned in response to the connection destination confirmation request. When received, these data are output to the connection destination verification unit 225.

The connection destination verification unit 225 decrypts the encrypted data “E {PK _U , K _UT + Sig {SK _T , K _UT }}” and verifies the electronic certificate Cert _T of the connection destination device 14. The connection destination verification unit 225 verifies the electronic signature data “Sig {SK _T , K _UT }” when the verification result of the electronic certificate Cert _T is normal. Further, the connection destination verification unit 225 outputs the verification result “OK / NG” of the electronic signature data “Sig {SK _T , K _UT }” to the payment processing unit 212.

Referring to FIG. 15, the parameter generation unit 323 of the service provider device 13 verifies the electronic certificate Cert _U of the service user device 12, and secret key K _USP and service identification information Index passed to the service user device 12. Generate _USP . At this time, the parameter generation unit 323 generates the secret key K _USP and the service identification information Index _USP to be passed to the service user device 12 when the verification of the electronic certificate Cert _U is normally completed. The parameter generation unit 323 outputs the generated secret key K _USP and service identification information Index _USP to the parameter transmission unit 324.

The parameter generation unit 323 also verifies the electronic certificate Cert _T of the connection destination device 14 and generates a random number R to be passed to the connection destination device 14. At this time, the parameter generation unit 323 generates a random number R to be passed to the connection destination apparatus 14 when the verification of the electronic certificate Cert _T is normally completed. The parameter generation unit 323 outputs the generated random number R to the parameter transmission unit 324.

  Further, the parameter generation unit 323 decrypts the encrypted data “e {R, R}” received from the connection destination device 14, and the random number R obtained as a result and the random number R generated by the parameter generation unit 323. Are matched, and if they match, a trigger is output to the charge table transmission unit 307.

The parameter transmission unit 324 uses the public key encryption to combine the combination of the private key K _USP and the service identification information Index _USP generated by the parameter generation unit 323 and the electronic signature data “Sig {SK _SP , Index _USP + K _USP }”. Encrypt. The parameter transmission unit 324 includes a connection including encrypted data “E {PK _U , Index _USP + K _USP + Sig {SK _SP , Index _USP + K _USP }}” and the service provider's electronic certificate Cert _SP. A request response certificate is transmitted to the service user apparatus 12.

Further, the parameter transmission unit 324 generates the electronic signature data “Sig {SK _SP , R}” from the random number R generated by the parameter generation unit 323, and also encrypts the encrypted data by public key encryption from the random number R and the electronic signature data. “E {PK _T , R + Sig {SK _SP , R}}” is generated. Then, the parameter transmission unit 324 transmits the generated encrypted data “E {PK _T , R + Sig {SK _SP , R}}” to the connection destination device 14.

The parameter receiving unit 325 receives the tariff request Tariff Request including the encrypted data “e {K _USP , ID _T }” of the identification information ID _T of the connection destination device 14 from the service user device 12. The parameter receiving unit 325 outputs the encrypted data “e {K _USP , ID _T }” of the identification information ID _T to the connection request unit 306.

Further, the parameter receiving unit 325 receives a connection request response Connection Response including the electronic certificate Cert _T of the connection destination device 14 from the connection destination device 14. The parameter receiving unit 325 reads the electronic certificate Cert _T from the connection request response Connection Response and outputs it to the parameter generation unit 323.

  Further, when the parameter receiving unit 325 receives the encrypted data “e {R, R}” of the random number R from the connection destination device 14, the parameter receiving unit 325 outputs the encrypted data to the parameter generating unit 323.

Next, with reference to FIG. 16, the parameter generation unit 421 of the connection destination device 14 verifies the electronic certificate Cert _SP of the service provider device 13. In addition, the parameter generation unit 421 outputs a trigger to the parameter transmission unit 422 when the verification of the electronic certificate Cert _SP is normally completed. In addition, the parameter generation unit 421 decrypts the encrypted data “E {PK _T , R + Sig {SK _SP , R}}” received from the connection destination device 14 in response to the connection request response Connection Response, and the electronic signature data Verify “Sig {SK _SP , R}”. Further, when the verification result of the electronic signature data “Sig {SK _SP , R}” is normal, the parameter generation unit 421 encrypts the random number R using the key R with the common key encryption, and the obtained encrypted data “E {R, R}” is output to the parameter transmission unit 422.

The parameter transmission unit 422 transmits a connection request response Connection Response including the electronic certificate Cert _T of the connection destination device 14 to the service provider device 13 when the verification of the electronic certificate Cert _SP is normally completed. Further, upon receiving the encrypted data “e {R, R}” from the parameter generation unit 421, the parameter transmission unit 422 transmits the encrypted data “e {R, R}” to the service provider device 13.

The connection request receiving unit 423 receives the encrypted data “E {PK _T , R + Sig {SK _SP , R}}” sent from the service provider device 13 in response to the connection request response Connection Response, and then generates parameters. Output to the unit 421.

The parameter receiving unit 424 receives a connection destination confirmation request including the electronic certificate Cert _U from the service user device 12. The parameter receiver 424 outputs a connection destination confirmation request to the secret key generator 425.

The secret key generation unit 425 verifies the electronic certificate Cert _U and generates a secret key _KUT for sharing with the service user apparatus 12. Also, the secret key generating unit 425, after generating the digital signature data of the secret key _{K UT "Sig {SK T,} K UT}", by encrypting the secret key K _UT and the electronic signature data using the public key cryptography encryption Generated data “E {PK _U , K _UT + Sig {SK _T , K _UT }}”.

The secret key transmission unit 426 adds the own electronic certificate Cert _T to the encrypted data “E {PK _U , K _UT + Sig {SK _T , K _UT }}” generated by the secret key generation unit 425, and performs service. Transmit to user device 12.

  Next, the operation of the network connection service system 11 will be described with reference to FIGS. As shown in FIG. 17, when providing a connection service in the network connection service system 11, a secret key sharing process between the service user device 12 and the service provider device 13, and from the service provider device 13 to the connection destination device 14. Existence confirmation processing, fee payment processing from the service user device 12 to the service provider device 13, and connection processing between the service user device 12 and the service provider device 13 are executed in this order.

  First, a secret key sharing process between the service user device 12 and the service provider device will be described with reference to FIG.

First, a connection request Service Request and an electronic certificate Cert _U are transmitted from the service user device 12 to the service provider device 13 (step S112). Next, the service provider device 13, after receiving a connection request Service Request and the electronic certificate Cert _U, performs verification of the digital certificate Cert _U, if the verification result is normal, the secret key K _USP and Service identification information Index _USP and electronic signature data “Sig {SK _SP , Index _USP + K _USP }” of the combination are generated (step S113). Thereafter, the service provider device 13, to the service user apparatus 12, an electronic certificate Cert _SP and the encrypted data _{"E {PK U, Index USP} + K USP + Sig {SK SP, Index USP + K USP} } "Is returned (step S114).

In contrast, in the service user apparatus 12, after decrypting the encrypted data, verification of the digital certificate Cert _sp, and the verification of the electronic signature data included in the decoded data is performed (step S115). If the verification result is normal, the service user device 12 sends a tariff request Tariff Request including encrypted data using the common key encryption of the identification information ID _T of the connection destination device 14 to the service provider device 13. Are transmitted (step S116).

Thereafter, in the service provider device 13, the received encrypted data is decrypted using the secret key K _USP , and the identification information ID _T is obtained (step S117).

  Next, the presence confirmation process from the service provider device 13 to the connection destination device 14 will be described with reference to FIG.

First, the service provider device 13 transmits a connection request Connection Request and an electronic certificate Cert _sp to the connection destination device 14 (step S118). Next, after the connection destination device 14 receives the connection request Connection Request and the electronic certificate Cert _sp , the electronic certificate Cert _sp is verified (step S119). Thereafter, the connection destination device 14 returns a connection request response Connection Response including the electronic certificate Cert _T to the service provider device 13 (step S120).

On the other hand, after verifying the received electronic certificate Cert _T , the service provider device 13 generates a random number R and electronic signature data of the random number R (step S121). Then, the service provider device 13 transmits encrypted data of a combination of the random number R and the electronic signature data to the connection destination device 14 (step S122).

  Thereafter, the connection destination device 14 decrypts the received encrypted data and verifies the digital signature data (step S123). Then, in the connection destination device 14, when the verification result of the electronic signature data is normal, encryption using the key R of the random number R is performed (step S124). Next, the encrypted data of the random number R is transmitted from the connection destination device 14 to the service provider device 13 (step S125).

  The service provider device 13 decrypts the received encrypted data using the key R, and then compares the decrypted random number R with the generation value R (step S126). If the comparison result is “match”, the service provider device 13 continues the process.

  Next, with reference to FIG. 20, the connection process between the service user apparatus 12 and the service provider apparatus 13 is demonstrated. In addition, since each process of step S127-S131 in FIG. 20 is the same as each process (refer FIG. 11) of step S25-S29 explained in full detail in 2nd Embodiment, it differs from 1st Embodiment, respectively. The processing of S132 to S140 will be described.

The service provider device 13 updates the electronic money data in the fee payment process by sending a service start message Service Start to the service user device 12 when the verification result of the evidence of the fee payment processing is normal. Is committed (step S132). In response to this, a connection destination confirmation request including the electronic certificate Cert _U is transmitted from the service user device 12 to the connection destination device 14 (step S133). Thereafter, the received electronic certificate Cert _U is verified in the connection destination device 14 (step S134). If the verification result of the electronic certificate Cert _U is normal, the connection destination device 14 generates the secret key _KUT shared with the service user device 12 and the electronic signature data of the secret key (step S135). . Then, a connection destination confirmation response including the electronic certificate Cert _T , the private key K _UT, and the encrypted data of the electronic signature data of the private key is transmitted from the connection destination device 14 to the service user device 12 (step). S136).

In response to this, the service user apparatus 12 decrypts the received encrypted data (step S137). Next, the service user apparatus 12 verifies the received electronic certificate Cert _T and verifies the electronic signature data included in the decrypted data (step S138). As a result, when the verification result of the electronic signature data is normal, the service provider device 13 starts relaying communication data between the service user device 12 and the connection destination device 14 (step S139).

  According to the network connection service system 11 described above, key exchange parameters are not generated and exchanged between the service provider device 13 and the connection destination device 14 before the network connection service is provided. The processing time is shortened. In addition, processing for key sharing between the service provider device 13 and the connection destination device 14 is reduced, and the processing time until network connection is further shortened.

  In addition, since a key sharing process is added between the service user device 12 and the connection destination device 14, the confidentiality of communication between the service user device 12 and the connection destination device 14 can be improved. it can.

  In addition, this invention is not limited to embodiment mentioned above. For example, in the network connection service systems 1 and 11, electronic signature data using a public key encryption method is used, but this uses electronic signature data using a common key using a MAC (Message Authentication Code) method. May be.

It is a figure which shows the structure of the network connection service system concerning 1st Embodiment of this invention. It is a figure which shows the structure of the service user apparatus of FIG. It is a figure which shows the structure of the charge management apparatus of FIG. It is a figure which shows the structure of the service provider apparatus of FIG. It is a figure which shows the structure of the data stored in the communication log | history storage part of FIG. It is a figure which shows the structure of the connecting point apparatus of FIG. It is a sequence diagram which shows the operation | movement at the time of electronic money data filling in the network connection service system of FIG. It is a sequence diagram which shows the outline | summary of the operation | movement at the time of the connection service provision in the network connection service system of FIG. It is a sequence diagram which shows the secret key sharing process between the service user apparatus and service provider apparatus in FIG. FIG. 9 is a sequence diagram illustrating secret key sharing processing between the service provider device and the connection destination device in FIG. 8. It is a sequence diagram which shows the fee payment process from the service user apparatus in FIG. 8 to a service provider apparatus. FIG. 9 is a sequence diagram illustrating an operation at the time of fee settlement between the service provider device and the charge management device in FIG. 8. It is a figure which shows the structure of the network connection service system concerning 2nd Embodiment of this invention. It is a figure which shows the structure of the service user apparatus of FIG. It is a figure which shows the structure of the service provider apparatus of FIG. It is a figure which shows the structure of the connecting point apparatus of FIG. It is a sequence diagram which shows the outline | summary of the operation | movement at the time of the connection service provision in the network connection service system of FIG. FIG. 18 is a sequence diagram showing secret key sharing processing between the service user device and the service provider device in FIG. 17. It is a sequence diagram which shows the presence confirmation process from the service provider apparatus in FIG. 17 to a connecting point apparatus. It is a sequence diagram which shows the fee payment process from the service user apparatus in FIG. 17 to a service provider apparatus.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1,11 ... Network connection service system, 2,12 ... Service user apparatus, 3,13 ... Service provider, 4,14 ... Connection destination apparatus, 5,15 ... Charge management apparatus, 201 ... Electronic money request part (electronic Money requesting unit), 202 ... Electronic money filling unit (electronic money filling unit), 205 ... Connection requesting unit (connection requesting unit), 207 ... Secret key deriving unit (secret key sending unit), 208 ... Parameter generation unit (parameter generation) Means), 209, 223... Parameter transmission unit (parameter transmission unit), 211... Charge table verification unit (charge table verification unit), 212... Payment processing unit (payment processing unit), 214. Means), 301... Connection request receiving unit (connection request receiving means), 302, 323... Parameter generating unit (parameter generating means), 303, 324. Transmission unit (certificate return unit, parameter transmission unit), 305... Secret key derivation unit (secret key transmission unit), 307... Charge table transmission unit (charge table transmission unit), 308. 309... Payment evidence verification unit (payment evidence verification means) 316 Communication control unit (communication control means) 317 Communication history transmission unit (communication history transmission unit) 321 Charge table storage unit (charge table storage unit) ) 322... Communication history storage (communication history storage means) 501... Electronic money request receiving section (electronic money request receiving means) 508... Payment processing section (payment processing means) 504. Transmission means), 506... Communication history receiving unit (communication history receiving means).

Claims (7)

Electronic money requesting means for transmitting electronic money request information for requesting a predetermined amount of electronic money data to a billing management apparatus that is an issuer of electronic money;
Electronic money filling means for filling the balance of electronic money data held in advance based on the electronic money data transmitted from the billing management apparatus to the electronic money request information;
A connection request means for requesting a connection with a connection destination device via a communication network, and a self-certification data to be transmitted to a specific service provider device;
Rate table verification means for verifying the rate table information based on the certification data and rate table information returned from the service provider device in response to the connection request;
Payment processing means for calculating a charge related to the connection based on the charge table information, and performing a charge payment process based on the balance of the electronic money data and the charge;
Payment proof sending means for adding electronic signature data to the fee payment processing proof and sending it to the service provider device;
A service user device comprising: Parameter generating means for generating a key exchange parameter for exchanging a secret key used in the common key cryptosystem;
Parameter transmitting means for transmitting the key exchange parameter to the service provider device;
A secret key derivation means for deriving a secret key from the parameter for key exchange received from the service provider device,
When transmitting information to the service provider device, encrypt using the secret key,
The service user device according to claim 1. Charge table storage means for storing charge table information relating to connection via a communication network;
A connection request receiving means for receiving a connection request for requesting connection with a connection destination device via the communication network and proof data of the service user device from a service user device that uses the service related to the connection; ,
In response to receiving the connection request, certificate return means for returning self-certification data;
In response to receiving the connection request, a fee table transmission unit that adds electronic signature data to the fee table information stored in the fee table storage unit and transmits the data to the service user device;
Payment proof receiving means for receiving proof of fee payment processing related to the connection transmitted from the service user device;
Payment evidence verification means for verifying the fee payment processing evidence based on the proof data of the service user device and the fee payment processing evidence;
Communication control means for controlling connection between the service user device and the connection destination device in response to reception of evidence of the fee payment processing;
Communication history storage means for storing evidence of the fee payment process;
Communication history transmission means for transmitting evidence of the fee payment processing stored in the communication history storage means to a charge management device that is an issuer of electronic money;
A service provider device comprising: Parameter generating means for generating a key exchange parameter for exchanging a secret key used in the common key cryptosystem;
Parameter transmitting means for transmitting the key exchange parameter to the service user device;
A secret key derivation means for deriving a secret key from the parameter for key exchange received from the service user device,
When transmitting information to the service user device, the information is encrypted using the secret key.
The service provider device according to claim 3. An electronic money request receiving means for receiving electronic money request information for requesting a predetermined amount of electronic money data from a service user device that uses a service related to connection via a communication network;
Electronic money transmission means for transmitting electronic money data corresponding to the predetermined amount to the service user device according to the electronic money request information;
Communication history receiving means for receiving evidence of fee payment processing related to the service from a service provider device that provides the service;
Payment processing means for performing payment processing for the service provider device based on the evidence of the fee payment processing;
An accounting management apparatus comprising: The service user device according to claim 1 or 2,
The service provider device according to claim 3 or 4,
The charge management device according to claim 5;
A network connection service system comprising: An electronic money request in which a service user device that uses a service related to a connection via a communication network transmits electronic money request information for requesting a predetermined amount of electronic money data to a billing management device that is an electronic money issuer Steps,
An electronic money request receiving step in which the charge management device receives electronic money request information for requesting a predetermined amount of electronic money data from the service user device;
The billing management device transmits electronic money data corresponding to the predetermined amount to the service user device according to the electronic money request information,
An electronic money filling step in which the service user device performs a filling process to a balance of electronic money data held in advance based on the electronic money data transmitted from the charge management device;
A connection request means for the service user device to send a connection request for requesting connection with a connection destination device via the communication network, and data for own certification to a specific service provider device;
A connection request receiving step in which the service provider device receives the connection request and proof data of the service user device from the service user device;
A certificate returning step in which the service provider device returns its certification data in response to receiving the connection request;
The service provider device, in response to receiving the connection request, adds electronic signature data to the fee table information related to the connection and transmits the fee table to the service user device; and
A charge table verification step in which the service user device verifies the charge table information based on certification data and charge table information returned from the service provider device;
A payment processing step in which the service user device calculates a charge related to the connection based on the charge table information and then performs a charge payment process based on the balance of the electronic money data and the charge;
A payment proof transmission step in which the service user device adds electronic signature data to the fee payment processing proof and transmits the digital signature data to the service provider device; and
A payment proof receiving step in which the service provider device receives proof of the fee payment processing;
A payment proof verification step in which the service provider device verifies the proof of the fee payment processing based on the proof data of the service user device and the proof of the fee payment processing;
A communication control step in which the service provider device controls connection between the service user device and the connection destination device in response to reception of evidence of the fee payment processing;
A communication history transmission step in which the service provider device transmits evidence of the fee payment processing to the charge management device;
A communication history receiving step in which the charge management device receives evidence of fee payment processing related to the service from the service provider device;
Payment processing means for performing a payment process for the service provider apparatus based on the evidence of the charge payment process;
A billing method for a network connection service, comprising:

Images