JPH09305666A - Electronic settling method and its system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To enable specifying a problem place when the unmatch of settlement occurs byissuing a certificate where an electronic signature is executed in the respective stages of a processing. SOLUTION: A purchaser transmits a merchandise to purchase to a store (1). The store transmits a written estimate with a store signature to the purchaser (2). The purchaser recognizes the signature and a price and transmits the written estimate and authenticating information to a settlement server (3). The server issues an exchange certificate with a server signature after the authentication of the purchase and the recognition of the store (4). The purchaser transfers the exchange certificate to the store (5). The store recognizes the signature of the server and a face value, transmits an exchange certificate receipt with the store signature to the purchaser (6), the merchandise is dispatched and a demand is transmitted to the server (7). The server transmits a payment acknowledgement certificate with the server signature to the store (8) and executes actual settlement.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an electronic settlement method and system for selling and buying products on a network.

[0002]

2. Description of the Related Art Conventionally, when making a payment using a credit card or the like, a store receives information about a purchaser's payment and sends the information to a server having a payment function such as a credit company. That is, processing is performed by the store relaying the identifier and password of the purchaser in addition to the price of the product, which is information that the store knows, and the server returning an acknowledgment or negative response to the store.

[0003]

In the prior art, a series of transactions is performed from a store apparatus to a settlement center such as a credit company, but since a state in the middle is not left,
If for some reason there was inconsistency in payment processing, there was no function to identify the problem area. This is because there is a problem that the state in the middle is treated as tamperable mere data, and it is premised that the store does not commit fraud. Also, the purchaser's authentication information for the settlement center,
For example, since a credit number, a password, etc. pass through the store, it is necessary to separately provide a mechanism for not showing personal information to the store. Further, since this one transaction process is large, there is a problem that error processing becomes complicated and the processing module becomes large.

An object of the present invention is to provide an electronic settlement method and system using an exchange certificate, which solves the problems of the prior art.

[0005]

[Means for Solving the Problems] A purchaser device, a store device, and a settlement server are mutually connected via a network. The purchaser device informs the store device of the product to be purchased. The store device creates a quotation for the product, sends it to the purchaser device with an electronic signature certifying that it has been issued and has not been tampered with. The buyer's device confirms the electronic signature of the quote, the amount of money, and the product name,
Authentication information is added and the quote is transferred to the settlement server to request a face value exchange certificate described in the quote. The payment server certifies that the purchaser is who he / she is, and confirms that the purchaser has the electronic signature of the quote, and then creates the exchange certificate for the face value stated in the quote and uses the exchange certificate. An electronic signature including it is sent to the buyer's device. After confirming the amount of the exchange certificate, the purchaser's device transfers the exchange certificate to the store device. The store device confirms by electronic signature that the exchange voucher received is a legitimate payment server, confirms that the face value of the quote and the exchange voucher are equal, and sends the exchange voucher receipt to the purchaser device, and Actual payment is performed by sending the bill to the payment server. That is, the store ships the product to the purchaser, and the payment server pays the store. In addition, the payment server separately charges the purchaser for the purchase amount, and the purchaser pays the money.

As described above, according to the present invention, in the case where a settlement process inconsistency occurs, in order to identify the problematic point, a certificate with an electronic signature is issued at each stage of the process. This is guaranteed by the electronic signature that it cannot be confirmed by the creator and tampered with by a third party.
Fraud from shops and buyers can be detected. Conversely, the store and the purchaser can assert their own legitimacy by presenting the certificate when they are not cheating. In other words, as a model, the settlement server can be trusted, but it can be applied to a realistic model in which a store and a purchaser may act fraudulently.

Further, error processing can be simplified and a processing module is small by repeating a small transaction as compared with the conventional settlement transaction. Further, even if the transaction processing is interrupted midway due to some failure, since the certificate of each stage remains, it is possible to restart the processing from there. Also, double use can be detected by embedding a sequence number in the certificate. Further, since the authentication information of the purchaser for the payment server is not passed through the store, the store cannot know the personal information regarding the payment.

[0008]

DETAILED DESCRIPTION OF THE INVENTION An embodiment of the present invention will be described below with reference to the drawings. FIG. 1 is a system configuration of an embodiment of the present invention, which is a purchaser device 10 and a store device 2 of user terminals.
0, the payment server 30 of the payment center is mutually connected via a network. The purchaser device 10 has an electronic signature confirmation function 11, a public key encryption / decryption function 12, and a private key encryption / decryption function.
It has a decryption function 13. The store apparatus 20 has an electronic signature creation function 21, an electronic signature confirmation function 22, and a quotation document creation function 2.
3, bill creation function 24, exchange receipt receipt creation function 25,
Public key encryption / decryption function 26, private key encryption / decryption function 27
Is provided. The payment server 30 has an electronic signature creation function 31,
Electronic signature confirmation function 32, purchaser authentication function 33, exchange certificate creation function 34, payment approval creation function 35, billing function 36,
Public key encryption / decryption function 37, private key encryption / decryption function 38
Is provided.

FIG. 2 shows a message flow for electronic payment between the purchaser terminal 10, the store apparatus 20, and the settlement server 30 when the purchaser purchases an item from the store. Hereinafter, description will be given with reference to FIG.

First, symbols and the like are defined. The purchaser device is represented by u (= user), the store device is represented by m (= mall), and the settlement server is represented by s (= server). {Message} Ks
Is the public key K of the public key cryptosystem of the payment server (s)
It means Message encrypted with s. This {Message}
The secret key of the public key cryptosystem, which is the key to decrypt Ks, is Ks.
^{Notated as -1} . At this time, the electronic signature for the Message of the settlement server (s) is {Message} Ks ^-1 , and the signature can be confirmed by the publicly available Ks. Similarly,
{Message} Km indicates the Message encrypted with the public key Km of the store apparatus (m), and the electronic signature is {Message} Km.
It becomes ^-1 .

{Message} Ks, u is a settlement center (s)
Shows a message encrypted by a secret key Ks, u of a secret key cryptosystem shared by the purchasing device (u) and
Decoding is performed with the same Ks, u. {Message} Ks, m, {M
The same applies to essage} Ku, m.

The server ID and the shop ID are identifiers for identifying the payment server and the shop, respectively, and are assumed to be open to the whole system. The product ID is an identifier for identifying the product to be purchased, and is managed by the store apparatus. It does not have to be public. Also, store seq, server seq
Is a sequence number assigned to each certificate (quote, exchange certificate, etc.) issued by the store device and the payment server.

In the initial state, the payment server 30 sets Ks
Keep ^-1 in secret and publish Ks. In addition, the store device 2
0 also keeps Km ^-1 secret and discloses Km. The disclosed keys are the settlement server 30, the store device 20, and
It can be accessed from any of the purchaser devices 10.

Purchase Request Instruction In the public key encryption / decryption function 12, the purchaser device 10 encrypts which product is to be purchased with Km and notifies the store device 20 of the product. This is a store device 2 with Km ^-1
I can only read 0. Further, the purchaser apparatus 10 also sends a secret key Ku, m used for secret communication between the purchaser apparatus Ks ^-1 store apparatus 20 at the same time. At this time, the data sent from the purchaser device 10 to the store device 20 is {designation of product, Ku,
It is represented by m} Km.

The quotation issuance The store apparatus 20 uses the public key encryption / decryption function 26 to decrypt the purchase request {designation of product, Ku, m} Km with Km ⁻¹ ,
{Specify product, Ku, m} is obtained. After that, a quoted quote of the store that "sell this product at this price" is created, encrypted with Ku, m, and sent to the purchaser device 10. Specifically, first, the estimate creation function 23 creates an estimate {store ID, product ID, store seq, price}, and then
The digital signature creating function 21 makes an electronic signature with Km ^-1 , and finally the private key encryption / decryption function 27 encrypts with Ku, m. At this time, the data sent from the store apparatus 20 to the purchaser apparatus 10 is represented by {{store ID, product ID, store seq, price} Km ^-1 } K u, m.

Quotation and Authentication Information Transmission The purchaser device 10 uses the secret key encryption / decryption function 13 to quote the quote with the store {{store ID, product ID, store se.
After q, price} Km ⁻¹ } Ku, m is decrypted by Ku, m, the electronic signature confirmation function 11 uses Km to confirm the electronic signature of the quote, the amount, the product, and the like. And public key encryption /
In the decryption function 12, the quote with store signature {store ID,
Product ID, store seq, price} Km ^-1 and authentication information {UserI
D, Password} is encrypted with Ks and sent to the payment server 30 to request an exchange certificate. It can only be read by the payment server 30 that has Ks ^-1 . Furthermore, the purchaser device 10
Simultaneously sends the secret key Ku, s used for secret communication between the purchaser device 10 and the settlement server 30. At this time, the data sent from the purchaser device 10 to the settlement server 30 is {{store ID, product ID, store seq, price} Km ^-1 , Use.
rID, Password, Ku, s} Ks. here,
The User ID and Password are information for certifying the identity of the purchaser to the payment server 30.

In the public key encryption / decryption function 36, the exchange server issuance settlement server 30 uses {{store ID, product ID, store seq, price} Km ^-1 ,
After decrypting the UserID, Password, Ku, m} Ks with Ks ^-1 , first, the purchaser authentication function 33 authenticates the identity of the purchaser, and the electronic signature confirmation function 32 further executes Km.
Use to confirm that the electronic signature of the quote is for the registered store. Next, the exchange certificate creating function 34 creates an exchange certificate for the face value described in the quotation. The exchange certificate also includes the servers seq and ServerID. Then, the electronic signature creation function 31 electronically signs the exchange certificate including the quotation with Ks ^-1 , and the private key encryption / decryption function 38 encrypts it with Ku, s and sends it to the purchaser apparatus 10.
At this time, the data sent from the settlement server 30 to the purchaser device 10 is {{{store ID, product ID, store seq, price} Km ^-1 , server seq, face value, ServerID} Ks ^-1 } K
It is represented by u, s.

Exchange Certificate Transfer In the private key encryption / decryption function 13, the purchaser device 10 uses the server signature exchange certificate {{{{store ID, product ID, store seq, price} Km ⁻¹ , server seq, face value, ServerID. }
After Ks ^-1 } Ku, s is decrypted by Ku, s, the electronic signature confirmation function 11 uses Ks to confirm the electronic signature of the exchange certificate and its face value. And public key encryption / decryption function 1
At 2, the exchange certificate encrypted with Km is transferred to the store apparatus 20. At this time, the data sent from the purchaser device 10 to the store device 20 is {{{store ID, product ID, store se
q, price} Km ^-1 , server seq, face value, ServerID} Ks
^-1 , Ku, m} Km.

Issue of Exchange Receipt Receipt The store apparatus 20 uses the public key encryption / decryption function 26 as follows.
Exchange certificate with server signature {{{store ID, product ID, store se
q, price} Km ^-1 , server seq, face value, ServerID} Ks
After decrypting ^-1 , Ku, m} Km with Km- ¹ , the electronic signature confirmation function 22 uses Ks to confirm that the exchange certificate is an authorized settlement server by the electronic signature. further,
Also make sure that the face value of the quote and the exchange certificate are the same and that there is no double use of the exchange certificate. Then, in the exchange receipt receipt creating function 25, the store ID, the product ID, the store seq, the price,
Create an exchange receipt consisting of the server seq. And
In the electronic signature creation function 21, the exchange receipt
^-1 makes a digital signature, and in the private key encryption / decryption function 27,
It is encrypted with Ku, m and sent to the purchaser device 10. At this time, the data sent from the store device 20 to the purchaser device 10 is {{store ID, product ID, store seq, price, server s
eq} Km ^-1 } Ku, m. At the same time as this processing, the store ships the product to the purchaser.

Issue of Bill On the other hand, the store apparatus 20 uses the bill creating function 24 to
A bill is created from the store ID, the product ID, the store seq, etc., and Km ^-1 is added to the bill by the electronic signature confirmation function 21.
Digital signature with Ks in public key encryption / decryption function 26
Encrypted and sent to the settlement server 30. At this time, the data sent from the store apparatus 20 to the settlement server 30 is represented by {{store ID, price, server seq} Km ^-1 , Ks, m} Ks.

Issue of Payment Acknowledgment Payment server 30 uses public key encryption / decryption function 37 to invoice with store signature {{{{store ID, price, server se
After decrypting q} Km ⁻¹ , Ks, m} Ks with Ks ⁻¹ , the electronic signature confirmation function 32 uses Km to confirm that the invoice belongs to the registered store. At this time, the server
With seq, it is possible to detect inflated bills in stores. After that, the payment approval creating function 35 creates a payment approval approval, and the electronic signature creating function 31 electronically signs with Ks ⁻¹ ,
The public key encryption / decryption function 37 encrypts with Ks, m and sends the payment approval document with the server signature to the store apparatus 20. At this time, the data sent from the settlement server 30 to the store apparatus 20 is {{store ID, price, server seq} Ks ^-1 } Ks, m.
Is represented by

At the same time as this processing, the settlement server 30
Separately, the billing function 36 is used to perform actual settlement processing for the purchaser. That is, the payment server 30 charges the purchaser an amount of money equivalent to the purchased product. Furthermore, money is paid to the shops.

[0023]

As described above, according to the electronic settlement method and system of the present invention, when a settlement process inconsistency occurs, it is possible to identify the problematic point.
In addition, by using a form that can be stored in a file called a certificate as an intermediary, it becomes possible to create specifications that are independent of the communication protocol dependent part, the computer dependent part, and the store system dependent part.

Further, error processing can be simplified by repeating a small transaction as compared with the conventional settlement transaction, and even if the transaction processing is interrupted in the middle, a certificate (quote, exchange certificate) of each stage is obtained. Etc.) remains, so it is possible to restart the process from there. In addition, the authentication information of the purchaser for the settlement center (server) is not passed through the store,
It is impossible for a store to know personal information regarding payment.

[Brief description of drawings]

FIG. 1 is a block diagram of an embodiment of an electronic payment system of the present invention.

FIG. 2 is a diagram showing a message flow in an embodiment of the electronic payment method of the present invention.

[Explanation of symbols]

 10 Purchaser Device 11 Electronic Signature Confirmation Function 12 Public Key Encryption / Decryption Function 13 Private Key Encryption / Decryption Function 20 Store Equipment 21 Electronic Signature Creation Function 22 Electronic Signature Confirmation Function 23 Quote Creation Function 24 Invoice Creation Function 25 Exchange Certificate Receipt Document creation function 26 Public key encryption / decryption function 27 Private key encryption / decryption function 30 Payment server 31 Electronic signature creation function 32 Electronic signature confirmation function 33 Purchaser authentication function 34 Redemption certificate creation function 35 Payment approval note creation function 36 Billing function 37 Public key encryption / decryption function 38 Private key encryption / decryption function

Claims (2)

[Claims] 1. An electronic payment method in which a purchaser of a product pays a price by interposing a redemption certificate on a network, wherein the store device receives the purchase request data of the product from the purchaser device. The quotation data with an electronic signature is issued to the purchaser device, the purchaser device sends the quotation data together with the purchaser authentication information to the payment server, and the payment server is the purchaser authentication information and the store device. Of the electronic signature of the payment server, issues the exchange certificate data with the electronic signature of the payment server to the purchaser device, the purchaser device transfers the exchange certificate data to the store device, and the store device Confirm the electronic signature of the received exchange certificate data and the legitimacy of the face value in the exchange certificate, send the exchange certificate receipt data to the purchaser device and the bill data to the settlement data, and send the product to the purchaser. Send That instruction was carried out, the settlement server, electronic payment method according to claim against the purchaser, to make an electronic compensation claims processing, which corresponds to the price of the commodity. 2. An electronic payment system in which a purchaser device, a store device, and a payment server are connected by a network, wherein the purchaser device has an electronic signature confirmation function and an encryption / decryption function, and the store device creates an electronic signature.・ Confirmation function, quotation creation function,
It has an invoice creation function, an exchange receipt receipt creation function, and an encryption / decryption function. The settlement server has an electronic signature creation / confirmation function, a purchaser authentication function, an exchange certificate creation function, a payment approval note creation function, and a billing function. And the encryption / decryption function, the purchaser device encrypts the purchase request data of the merchandise and sends it to the store device, and the store device decrypts the purchase request data, and then the quote with the electronic signature of the store The data is encrypted and sent to the purchaser's device. The purchaser's device decrypts the quote data, confirms the electronic signature and price of the store, encrypts the quote data and the authentication information, and sends them to the settlement server. The payment server decrypts the quotation data and the authentication information, confirms the authentication of the purchaser and the electronic signature of the store, and sends the exchange certificate data with the electronic signature of the payment server to the purchaser device. Is the exchange certificate day After decrypting, the encrypted data is transferred to the store device, and the store device decrypts the exchange certificate data, confirms the electronic signature and face value of the payment server, and encrypts the exchange certificate receipt data with the electronic signature of the store. Send the product to the purchaser's device and instruct the product to be sent, encrypt the invoice data with the electronic signature of the store and send it to the payment server. The payment server decrypts the invoice data and confirms the contents. Then, the electronic payment system is characterized in that the payment request processing of the product is performed, and the payment approval document with the electronic signature of the server is encrypted and sent to the store apparatus.