JP2001148049A - Proxy collection system and method, and recording medium with proxy collection program recorded thereon - Google Patents

Abstract

PROBLEM TO BE SOLVED: To make local currency value creation by a malicious person meaningless and also to make safely performable transactions between a plurality of service providing devices existing at many places and a settlement acting center. SOLUTION: A proxy collection device 1 manages currency value information while making the currency vale information correspond to the identification information(ID) of an IC card, and the card 3 holds only the ID proper to the card made to correspond to the currency value information managed by the representative settlement device and does not have the currency value information locally. When the card 3 is inputted, the service providing device 2 performs proxy collection to the device 1, and transmits a fund transfer certificate request demanding the sending of a fund transfer certificate, and the device 1 prepares a fund transfer certificate ensuring that a proxy-collected amount is deposited to a designated deposit destination and transmits the fund transfer certificate to the device 2.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a proxy collection system and method using an IC card or the like, and a recording medium on which a proxy collection program is recorded.

[0002]

2. Description of the Related Art In general, a surrogate collection system using a card has a system in which a card has a monetary value such as a common bus card (hereinafter referred to as the former) and a center depending on the place where the monetary value is managed. By managing the monetary value, the user transmits identification information such as ID (ID: IDentifier) to the center, thereby operating the monetary value in the center and collecting it on behalf of the system (hereinafter the latter). Of the two. The monetary value here is a value that can itself be money, for example, data of electronic money.

[0003] The former electronically records monetary value information in a card owned by a user who requests a surrogate collection, and allows the service providing device to read the monetary value information, thereby enabling local settlement. System. As this system, in addition to the common bus card, there is a prepaid-type agency collection system that is currently widely distributed such as a U card and a quo card. However, in a surrogate collection system in which monetary value information is stored in a local card, the creation of electronic value may be performed locally. In addition, as represented by a pachinko card, in a system in which a proxy collection company performs proxy collection, a system in which a company that requests the proxy collection to the proxy collection system, not the individual user, easily obtains cash by forged electronic value. There was a danger that organized crime could take place in places that were not networked, that is, not directly visible to the agency.

[0004] The latter is a surrogate collection system in which a surrogate collection center manages all monetary value information of a user who requests surrogate collection in one place. The user has an ID associated with the monetary value information managed by the settlement agency,
The user notifies the settlement center of the information of the proxy collection request including the ID, so that the proxy collection center changes the money value information in the proxy collection center and delivers the settlement amount to the requested destination. Therefore, there is an advantage that the money value information does not go out of the center and money value creation is not performed locally.

[0005] Conventionally, this center type system includes, for example, Achosys used on the Internet.
In the case of Akosys, the agency collection center communicates with the seller's host to notify it of the agency collection every time a request for agency collection is made from the user. Service for. Since the host is located in one place, the seller can easily deal with the agency and manage the transaction, and after the agency is collected, the seller is surely paid and the trust relationship between the settlement agency and the seller Can be established simply by means of notification of transaction data and was easy.

However, when a plurality of service providing devices such as vending machines exist at multiple points, it is difficult to manage the transactions between the distributor and the agency and to manage the transactions.
Therefore, it is considered that a malicious seller or a malicious payment agent is fraudulent, and it has been difficult to perform reliable transactions between the seller and the agent in the conventional means of simply notifying transaction data. As a transaction management means, a system in which the transaction management is performed centrally by the seller's host by performing the transaction between the agency collection center and a plurality of service providing devices through one host of the seller can be considered. There is a problem that it takes.

[0007]

SUMMARY OF THE INVENTION An object of the present invention is to provide a surrogate collection system using a card that makes it impossible for a malicious person to create monetary value locally or has no meaning, and that a multi-point system can be used. It is an object of the present invention to enable a transaction between a plurality of service providing apparatuses and a settlement agency to be performed with confidence and to reduce communication costs.

[0008]

SUMMARY OF THE INVENTION According to the present invention, the service providing apparatus is capable of performing a fraud-free transaction with a plurality of service providing apparatuses at a plurality of points. Sends the guarantee request to the proxy collection device, creates a fund transfer guarantee for exchanging the amount collected by the proxy collection device with monetary value with the designated destination, and sends it to the service providing device, and the service providing device The most important feature is that the money transfer guarantee is stored. The conventional technology is a center-managed system that does not have local monetary value information, and a proxy collection system that uses a money transfer guarantee to ensure safe and secure transactions with multi-point service providing devices. It is different to make it possible.

In the surrogate collection system of the present invention, a surrogate collection device that manages the monetary value information of the surrogate collection user, a plurality of service providing devices, and identification information (ID: ID) associated with the monetary value information of the surrogate collection device. It is composed of an IC card or the like that can store an Identifier. In the present invention, it is assumed that the IC card owner already owns the IC card associated with the money value information, and the IC card owner has deposited money value information in the proxy collection device.

[0010] The proxy collection device includes IC card authentication means, money value information management means, fund transfer guarantee creation means, and electronic signature means. In the fund transfer guarantee, a fund transfer guarantee identifier, a proxy collection amount, a delivery destination of the proxy collection amount, and the like are described, and further, an electronic signature of the proxy collection entity is added. The fund transfer guarantee is defined as guaranteeing that the proxy collection device hands over the amount of money collected on behalf of the proxy in exchange for the fund transfer guarantee request. By making the fund transfer guarantee identifier unique (for example, a serial number) among all the fund transfer guarantees, there is an effect of guaranteeing the uniqueness of the fund transfer guarantee. The surrogate collection amount has the effect of specifying the amount to be surrogate collection, and the delivery destination name of the surrogate collection amount is a name that is associated with the only one that is socially unique, thereby specifying the delivery destination of the surrogate collection amount This has the effect of eliminating the meaning of copying the fund transfer guarantee by a third party and preventing fraud.

The service providing device includes a fund transfer guarantee requesting unit, a fund transfer guarantee management storage unit, a service providing unit, and the like. The fund transfer guarantee request is defined as an instruction requesting transmission of a fund transfer guarantee in which the proxy collection amount and the delivery destination of the proxy collection amount are described to the service providing apparatus. The surrogate collection amount has the effect of designating the amount to be surrogately collected, and the delivery destination of the surrogate collection amount has the effect of specifying the party with whom the surrogate collection device exchanges the money transfer guarantee with the monetary value.

The IC card is provided with an ID holding unit and an authentication unit for the proxy collection device, and the like. The ID is identification information (Iden) associated with the monetary value information of the proxy collection device.
tifier). An IC card is defined as a card that can be mutually authenticated with a proxy collection device and that can be carried by a user with a configuration in which an ID cannot be altered by anyone other than the proxy collection device.
In the present invention, any card having a similar configuration can be generally used.

The proxy collection user has an IC card associated with the monetary value information of the proxy collection device. When the user having the IC card inputs the IC card to the service providing apparatus and informs the service providing apparatus of his intention, the service providing apparatus creates a fund transfer guarantee request and transmits it to the agent providing apparatus. Upon receiving the fund transfer guarantee request from the service providing apparatus, the proxy collection apparatus first performs mutual authentication with the IC card input to the service providing apparatus, and reads the ID from the IC card. Next, the proxy collection device searches for money value information related to the read ID, and reduces the amount requested in the fund transfer guarantee request. Next, the proxy collection device creates a fund transfer guarantee, adds an electronic signature to the fund transfer guarantee using information that only the proxy collection device can know, and transmits the fund transfer guarantee to the service providing device. Upon receiving the fund transfer guarantee, the service providing device checks whether the contents and the signature of the fund transfer guarantee are correct, and if correct, stores the fund transfer guarantee. Thereafter, the service providing device provides a service to the proxy collection user. In addition, the saved funds transfer guarantee is handed over in some form to the recipient of the surrogate collection amount specified in the funds transfer guarantee, and the recipient of the surrogate collection amount is exchanged with the agency collection device to transfer the fund transfer guarantee to cash. Exchange with the represented monetary value.

According to the proxy collection system, the service providing apparatus can use the proxy collection without worry without a prior contract with the proxy collection apparatus. This is because each service providing device receives the money transfer guarantee, which is a monetary value, directly from the proxy collection device.

[0015] In another aspect of the present invention, the surrogate collection device has information on the monetary value of the delivery destination of the surrogate collection amount, receives the fund transfer guarantee request from the service providing device, and associates the surrogate collection amount with the IC card. Deducted from the denominated monetary value information and transferred to the monetary value information of the delivery destination of the surrogate collection amount.
In this case, the fund transfer guarantee is defined as a certificate indicating that the proxy collection device has transferred the proxy collection amount from the monetary value information corresponding to the IC card to the delivery destination monetary value information of the monetary amount collected. The fund transfer guarantee stored in the service providing device has an effect of preventing fraudulent use of the proxy collection device in which the proxy collection amount is not delivered from the proxy collection device to the money value information of the delivery destination of the proxy collection amount.

According to this aspect, there is no need to handle the monetary value outside the proxy collection device, and there is an effect that it is impossible to create a value locally.

In another aspect of the present invention, the service providing device has means for signing the fund transfer guarantee request using information that only the service providing device can know, and the service transfer device request includes only the service providing device. Is attached with a signature using information that can be known. The proxy collection device checks the signature of the fund transfer guarantee request, and if the signature is correct, saves the fund transfer guarantee request and starts mutual authentication with the IC card.

[0018]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, an embodiment of the present invention will be described in detail with reference to the drawings.

[First Embodiment] FIG. 1 shows an example of the overall configuration of a proxy collection system to which the first embodiment is applied. In FIG. 1, 1 is a proxy collection device that performs proxy collection,
Reference numeral 2 denotes a plurality of service providing devices at multiple points, and reference numeral 3 denotes an IC card owned by a user.

The agent collection device 1 communicates with the service providing device 2 via a network (public packet network, dedicated line, etc.) and a service providing device communication section 11 (typically a modem or the like), and transfers funds. A fund transfer guarantee request management storage unit 12 for managing and saving a guarantee request; a service providing device management database (service providing device management DB) 13 for holding a public key of each service providing device 2;
IC card authentication unit 14 for performing mutual authentication with IC card 3
And an IC card database (I) that holds a common key and the like corresponding to each IC card for performing mutual authentication with the IC card 3.
C card DB) 15 and ID stored in IC card 3
A money value information management unit 16 that manages money value information associated with the number; and a money transfer guarantee creation and storage unit 1 that creates a money transfer guarantee and adds the signature of the proxy collection device 1
7 is comprised.

FIG. 2 shows an example of the money value information managed by the money value information management unit 16 of the proxy collection device 1. In FIG. 2, for example, the ID number “00” stored in the IC card
This indicates that the cash deposit amount, which is the money value information corresponding to “001”, is 20,000 yen. ID number "0
The same applies to “0002” and “00003”. Each IC card owner pays a predetermined amount of money in advance.

The service providing device 2 includes a proxy collection device communication unit 21 that communicates with the proxy collection device 1 and an IC card communication unit represented by an IC card read / write (R / W) that communicates with the IC card 3. 22, a fund transfer guarantee requesting unit 23 which accepts the intention of use of proxy collection from the IC card owner and creates a fund transfer guarantee request, and a fund transfer guarantee request signature for adding the signature of the service providing device to the fund transfer guarantee request It comprises a section 24, a fund transfer guarantee management storage section 25 for recording and storing the fund transfer guarantee sent from the proxy collection device 1, and a service providing section 26 for actually providing services to the proxy collection user.

The IC card 3 is associated with an external communication unit 31 that communicates with the service providing device 2, a proxy collection device authentication unit 32 that performs mutual authentication with the proxy collection device 1, and monetary value information of the proxy collection device 1. An ID holding unit 33 holds an ID number.

In the proxy collection device 1, the service providing device communication unit 11 includes a fund transfer guarantee request management storage unit 12, an IC card authentication unit 14, and a fund transfer guarantee creation storage unit 1.
7 and the communication with the service providing device 2 via the network. The fund transfer guarantee request management storage unit 12 communicates with the service providing device management DB 13 and the IC card authentication unit 14. The IC card authentication unit 14 further performs IC card management D
B15 communicates with the money value information management unit 16. The money value information management unit 16 further communicates with the fund transfer guarantee creation and storage unit 17.

In the service providing device 2, the proxy collection device communication unit 21 relays the communication between the fund transfer guarantee request unit 23 and the fund transfer guarantee management storage unit 25 and the proxy collection device 1 via the network. The IC card communication unit 22
The communication between the proxy collection device 1 and the IC card 3 is relayed via the proxy collection device communication unit 21 if necessary. The fund transfer guarantee requesting unit 23 further communicates with the fund transfer guarantee request signature unit 24. The fund transfer guarantee management storage unit 25 further communicates with the service providing unit 26.

In the IC card 3, the external communication unit 31 relays communication between the proxy collection device authentication unit 32 and the ID holding unit 33 and the proxy collection device 1 via the service providing device 2.

Next, the operation of this embodiment will be described. The user inputs the IC card 3 into the service providing device 2 to make an intention to use the agency collection. Service providing device 2
When the fund transfer guarantee requesting unit 23 receives the intention to use the transfer collection from the IC card owner via the IC card communication unit 22 and the proxy collection device communication unit 21, the fund transfer guarantee request unit 23 Create The fund transfer guarantee request describes the service providing device name, the amount of the proxy collection, the delivery destination of the proxy collection amount, the fund transfer guarantee request number, the date and time of creation of the fund transfer guarantee request, the network address of the service providing device 2, and the like. Is done. The service providing device name has the effect of specifying the device that requests the surrogate collection, and the surrogate collection amount has the effect of specifying the surrogate collection amount. The transfer destination of the proxy collection amount has the effect of specifying the destination where the proxy collection device 1 transfers cash in exchange for the fund transfer guarantee, eliminating the need to steal the third party's fund transfer guarantee and preventing the theft of the fund transfer guarantee. Has the effect of doing The fund transfer guarantee request number is an identifier used only once by the service providing apparatus, and has an effect of specifying the fund transfer guarantee request uniquely by the fund transfer guarantee request number and the creation date and time. The network address of the service providing apparatus has an effect of notifying the location of the service providing apparatus 2 on the network.

Next, the fund transfer guarantee requesting unit 23 transmits the created fund transfer guarantee request to the fund transfer guarantee request signing unit 24, and the fund transfer guarantee request signing unit 24
When a digital signature is added to the fund transfer guarantee request using a secret key that only the service providing device 2 can know, to prevent tampering and impersonation, the fund transfer guarantee request unit 23
To return. Identifying the service providing device that has created the fund transfer guarantee request using the electronic signature is only useful for collecting information such as analyzing the service providing device using the IC card and grasping the usage trend of the IC card user. In other words, in the event that fraud is performed, the information can be used as information for tracking fraud.

The service providing device 2 transmits the signed fund transfer guarantee request returned to the fund transfer
The information is transmitted to the proxy collection device 1 via the proxy collection device communication unit 21. FIG. 3 shows an example of the fund transfer guarantee request transmitted to the proxy collection device 1.

In the proxy collection device 1, the service providing device communication unit 11 receives the signed fund transfer certificate request from the service providing device 2, and the fund transfer certificate request management storage unit 12
Send to The fund transfer guarantee request management storage unit 12 checks the electronic signature of the fund transfer guarantee request using the public key of the service providing apparatus 2 held in the service providing apparatus management DB 13, and determines that the electronic signature is a correct signature. The fund transfer guarantee request is stored, and the contents described in the fund transfer guarantee request are notified to the IC card authentication unit 14. The saved fund transfer guarantee request has an effect of providing evidence that the service providing apparatus 2 has certainly requested the proxy collection apparatus 1 to perform proxy collection.

Next, the IC card authentication section 14 is held in the IC card management DB 15. Using a common key, the service providing device communication unit 1 based on the network address of the service providing device 2 described in the fund transfer guarantee request
1. Proxy collection device communication unit 21 and IC card communication unit 22 of service providing device 2, external communication unit 31 of IC card 3.
, Mutual authentication with the proxy collection device authentication unit 32 of the IC card 3 is performed. Mutual authentication is a process in which two parties confirm that they have confidential information that only the other party or a limited party can know, and determine who the other party is. For example, a challenge response method using a common key is common. If the mutual authentication succeeds, the IC card 3 notifies the proxy collection device authentication unit 32 to set a flag that enables the ID holding unit 33 to read the ID number, and the IC card authentication unit 14 IC card 3
The ID number is read from the IC card holding unit 33 of. Thereafter, the IC card authentication unit 14 sends the read ID number and the content described in the fund transfer guarantee request to the money value information management unit 16. The monetary value information management unit 16 reduces the proxy collection amount described in the fund transfer guarantee request from the monetary value information associated with the ID number, and stores the contents described in the fund transfer guarantee request in the fund transfer guarantee creating and storing unit 17. Send to

The fund transfer guarantee creation and storage unit 17 creates a fund transfer guarantee, adds an electronic signature using a secret key that can be known only by the proxy collection device 1, and provides the service providing device via the service providing device communication unit 11. Send to 2. Further, the fund transfer guarantee creation and storage unit 17 stores the fund transfer guarantee. The fund transfer guarantee includes a fund transfer guarantee request number corresponding to the fund transfer guarantee number, a proxy collection amount, a delivery destination name of the proxy collection amount, and the like. The fund transfer guarantee is a monetary value that guarantees that the transfer collection device 1 will pass the amount collected on behalf of the fund transfer guarantee to the delivery destination, and the fund transfer guarantee number is the only one of the issued fund transfer guarantee. The transfer number guarantee request number has the effect of corresponding to the issued fund transfer guarantee, the transfer collection amount has the effect of specifying the transfer amount, and the name of the transfer destination This has the effect of specifying the destination from which the surcharged amount can be received.

FIG. 4 shows an example of a fund transfer guarantee document stored by the proxy collection device 1 and transmitted to the service providing device 2. This shows a fund transfer guarantee issued in response to the fund transfer guarantee request of FIG.

The service providing device 2 receives the fund transfer guarantee with the electronic signature sent from the proxy collection device 1 by the proxy collection device communication unit 21 and receives the fund transfer guarantee management storage unit 25.
Send to The fund transfer guarantee management storage unit 25 checks whether the electronic signature added to the fund transfer guarantee is actually made by the proxy collection device 1 and confirms that the electronic signature is a valid fund transfer guarantee. The information is stored and notified to the service providing unit 26 to perform the service, and the service providing unit 26 provides the service to the IC card owner. In addition, the saved fund transfer guarantee is passed to the delivery destination of the surrogate collection amount described in the fund transfer guarantee, and the transfer destination of the surrogate collection amount is transferred between the surrogate collection device 1 and the fund transfer guarantee and cash. Will be replaced.

According to the system shown in FIG. 1, the IC card 3 only needs to hold the ID associated with the money value information managed by the proxy collection device 1, and does not need to have the money value information. As an effect, even if the tamper-resistant structure of the IC card is broken, it is impossible to create value, that is, increase the amount only locally. Further, the fund transfer guarantee stored in the service providing apparatus 2 has a fixed destination and amount of the proxy collection amount, so that even if a third party commits wrongdoing, the third party can obtain a profit. The third party can be prevented from being fraudulent. Since the funds transfer guarantee is guaranteed to be unique by the funds transfer guarantee number, it is impossible for the recipient of the surrogate collection amount to make a profit by copying the funds transfer guarantee. In addition, the fund transfer guarantee completely guarantees that the proxy collection amount will be delivered to the destination of the proxy collection amount in exchange for the fund transfer guarantee, and the fraudulent operation of the proxy collection device 1 can be prevented. Reliable transactions and transaction management with the proxy collection device 1 are possible.

FIG. 5 shows an example of the processing sequence of this embodiment. This is based on the situation that the owner of the IC card 3 has already paid cash to the proxy collection device 1, and the proxy collection device 1 has already increased the cash amount received in the monetary value information corresponding to the IC card 3. Then, the service providing device 2 receiving the intention to use the surrogate collection by the IC card owner communicates with the surrogate collection device 1 to request the surrogate collection, receives the fund transfer guarantee from the surrogate collection device 1, and performs the service. 3 shows a processing sequence of the first embodiment. Here, a proxy collection center as the proxy collection device 1, a juice vending machine as the service providing device 2, and a sales of canned juice as a service are exemplified.

The IC card owner inserts the IC card 3 into the vending machine 2 and presses a desired can juice button.
Notify the vending machine 2 of the intention to use the surrogate collection (S1
1). The vending machine 2 creates a fund transfer guarantee request requesting the proxy collection center 1 to perform proxy collection (S12). The fund transfer guarantee request describes the name of the vending machine, the amount of the surrogate collection, the delivery destination of the surrogate collection amount, the fund transfer guarantee request number, the date and time of the fund transfer guarantee request, the network address of the vending machine 2, and the like. You. The vending machine name specifies the device for which surrogate collection is requested, and the surcharge amount specifies the amount of can juice to be surrogately collected.
The transfer destination of the transfer collection amount specifies the destination where the transfer collection center 1 transfers the cash in exchange for the fund transfer guarantee, so that there is no point in stealing the third party's transfer guarantee and the theft of the transfer guarantee can be prevented. In addition, by setting the fund transfer guarantee request number as an identifier used only once by the vending machine, the fund transfer guarantee request number and the creation date and time can specify the fund transfer guarantee request uniquely. The network address of the vending machine notifies the location of the vending machine 2 on the network. The vending machine 2 adds an electronic signature to the fund transfer guarantee request using a secret key that can be known only by the vending machine 2 (S13), and transmits the signed fund transfer guarantee request to the agent collection center 1 (S13). S14).

When the proxy collection center 1 confirms that the electronic signature of the received fund transfer guarantee request is indeed that of the vending machine 2 and that the request for fund transfer guarantee has not been tampered with (A11), The transfer guarantee request is saved (A12). The saved fund transfer guarantee request is evidence that the vending machine 2 has certainly requested the surrogate collection center 1 to perform surrogate collection in the event of a trouble after the fact. next,
The agent collection center 1 performs mutual authentication with the IC card 3 (A13, I11). Mutual authentication is performed by a challenge response method using a common key or the like, and is performed by a method that cannot be decrypted or imitated by, for example, a vending machine 2 other than the IC card 3 and the authentication device 1. If the mutual authentication succeeds, the IC card 3 makes the ID stored in the IC card readable, and the agency collection center 1 requests the IC card 3 to read the ID (A14).
Notifies the agent to the agency collection center 1 (I12).

The agency collection center 1 reduces the amount described in the fund transfer guarantee request from the money value information corresponding to the ID received from the IC card 3 (A15). Next, the agent collection center 1 creates a fund transfer guarantee (A
16). The fund transfer guarantee is a monetary value that guarantees that the agency collection center 1 passes the above amount to the destination of the agency collection amount in exchange for the fund transfer guarantee, and includes a fund transfer guarantee number, a corresponding fund transfer guarantee request number, , A proxy collection amount, a delivery destination name of the proxy collection amount, and the like. The fund transfer guarantee number indicates the uniqueness of the issued fund transfer guarantee, and the fund transfer guarantee request number corresponds to the issued fund transfer guarantee. The surrogate collection amount specifies the amount of the surrogate collection, and the delivery destination name of the surrogate collection amount specifies the destination that can receive the surcharged amount. Next, the surrogate collection center 1 adds an electronic signature to the fund transfer guarantee using a secret key that only the surrogate collection center 1 can know to prevent falsification and impersonation (A17). Send to vending machine 2 (A1
8).

When the vending machine 2 receives the fund transfer guarantee from the agency collection center 1, the vending machine 2 checks the electronic signature of the fund transfer guarantee (S15), and the content described in the fund transfer guarantee is a request for the fund transfer guarantee. It is checked whether it matches the requested contents (S16), and if it is normal, the fund transfer guarantee is saved (S17), and can juice is provided to the IC card owner (S18). Thereafter, the saved fund transfer guarantee is passed to the delivery destination of the surrogate collection amount described in the fund transfer guarantee, and the transferee of the surrogate collection amount exchanges the fund transfer guarantee and cash with the surrogate collection center 1. Will be replaced.

According to the processing sequence of FIG. 5, the communication between the vending machine 2 and the agency collection center 1 except for the communication with the IC card 3 sends the fund transfer guarantee request from the vending machine 2 to the agency collection center. 1 and the time when the fund transfer guarantee is transmitted from the agent collection center 1 to the vending machine 2.
It is clear that the number of communications is clearly reduced as compared to the case where a center for centrally managing vending machines is separately installed and transactions are made between the vending machine and the agency collection center through this center. .

[Embodiment 2] In the present embodiment, the proxy collection device has the monetary value information of the destination of the proxy collection amount, receives the fund transfer guarantee request from the service providing device, and associates the proxy collection amount with the IC card. The received money value information is transferred to the money value information of the delivery destination of the surrogate collection amount. In this embodiment, the significance of the fund transfer guarantee is different from that of the first embodiment. That is, in the first embodiment, the fund transfer guarantee is passed to the transfer destination of the transfer collection amount, and the transfer destination of the transfer collection amount exchanges the cash transfer guarantee and cash with the transfer collection device. Has monetary value.
On the other hand, in the case of the present embodiment, since the transfer of the monetary value information is completed in the proxy collection device, the fund transfer guarantee has no monetary value, but is a certificate (support) for proof that the monetary value has moved. It has the meaning as a handled certificate).

The overall system configuration of this embodiment is shown in FIG.
Are basically the same as those described above, and a description thereof will be omitted. However, the monetary value information management unit 16 in the proxy collection device 1 stores the monetary value information associated with the delivery destination of the proxy collection amount in addition to the monetary value information associated with the ID number stored in the IC card 3. to manage. FIG. 6 shows an example of the money value information managed by the money value information management unit 16 in the present embodiment. Here, "ABC Co., Ltd.", "DEF Co., Ltd.", "Taro Nihon", etc. indicate the delivery destination of the surcharge amount. However, it is also possible that the ID is the delivery destination, and the above company name or individual name is the delivery source.

Next, the operation of the second embodiment will be described with reference to the system configuration of FIG. The user inputs the IC card 3 into the service providing device 2 to make an intention to use the agency collection. In the service providing apparatus 2, the fund transfer guarantee requesting unit 23 receives an intention to use the transfer collection from the system IC card owner, and creates a fund transfer guarantee request.
The fund transfer guarantee request describes the service providing device name, the amount of the proxy collection, the delivery destination of the proxy collection amount, the fund transfer guarantee request number, the date and time of creation of the fund transfer guarantee request, the network address of the service providing device 2, and the like. Is done.
In the case of the present embodiment, the service providing device 2 sends a proxy collection amount to the proxy collection device 1
It has the meaning of requesting delivery from the money value information associated with the card 3 to the money value information associated with the corresponding destination. That is, the delivery destination of the surrogate collection amount in the fund transfer guarantee request has the meaning of specifying the monetary value information to which the surrogate collection device 1 receives the fund transfer guarantee request and delivers the surrogate collection amount. The meaning of other description contents in the fund transfer guarantee request is basically the same as that in the first embodiment. The fund transfer guarantee requesting unit 23 sends the created fund transfer guarantee request to the fund transfer guarantee request signing unit 24,
The fund transfer guarantee request signature unit 24 adds an electronic signature to the fund transfer guarantee request using a secret key that only the service providing apparatus 2 can know, and returns the digital signature to the fund transfer guarantee request unit 23.

The service providing device 2 transmits the signed fund transfer guarantee request of the service providing device 2 returned to the fund transfer guarantee requesting unit 23 to the proxy collection device 1 via the proxy collection device communication unit 21. FIG. 7 shows a proxy collection device 1
An example of the fund transfer guarantee request transmitted to the client is shown below. This is basically the same as the contents in FIG.

The proxy collection device 1 sends the signed fund transfer certificate from the service providing device 2 to the fund transfer certificate request management storage unit 12 through the service providing device communication unit 11. The fund transfer guarantee request management storage unit 12 stores the service providing device 2 stored in the service providing device management DB 13.
The electronic signature of the fund transfer guarantee request is inspected using the public key of the above, and when it is determined that the signature is correct, the fund transfer guarantee request is stored, and the IC card authentication unit 14 describes the electronic signature of the fund transfer guarantee request. Notify the contents. The saved fund transfer guarantee request is evidence that the service providing apparatus 2 has certainly requested the proxy collection apparatus 1 to perform proxy collection.

The IC card authentication unit 14 uses a common key held in the IC card management unit 15 and performs a challenge response method or the like based on the network address of the service providing apparatus 2 described in the fund transfer guarantee request. Service providing device communication unit 11-proxy collection device communication unit 21-I
Mutual authentication is performed with the proxy collection device authentication unit 32 of the IC card 3 via the C card communication unit 22-external communication unit 31. If the mutual authentication is successful, the IC card 3 notifies the proxy collection device authentication unit 32 to set a flag that enables the ID holding unit 33 to read out the ID number, and the IC card authentication unit 14 of the proxy collection device 1 Reads the ID number from the IC card holding unit 33. Next, the IC card authentication unit 14 transmits the read ID number and the content described in the fund transfer guarantee request to the money value information management unit 16. The monetary value information management unit 16 subtracts the surrogate collection amount described in the fund transfer guarantee request from the monetary value information associated with the ID number and associates the surrogate collection amount with the delivery destination of the surrogate collection amount also described in the fund transfer guarantee request. The received money value information is increased by the surrogate collection amount. Next, the money value information management unit 16
Transmits the contents described in the fund transfer guarantee request to the fund transfer guarantee creation and storage unit 17.

The fund transfer guarantee creation and storage unit 17 creates a fund transfer guarantee, adds an electronic signature using a secret key that only the surrogate collection device 1 can know, and transfers the signed fund transfer guarantee to the service providing device. The data is transmitted to the service providing device 2 via the communication unit 11. Further, the fund transfer guarantee creation and storage unit 17 stores the fund transfer guarantee. In the case of the present embodiment, the money transfer guarantee is based on the
This is a certificate showing that the proxy collection amount has been transferred from the monetary value information corresponding to the transfer to the delivery destination monetary value information of the proxy collection amount, the fund transfer guarantee number and the corresponding fund transfer guarantee request number, and the proxy collection The amount and the name of the delivery destination of the surcharge are described. The Fund Transfer Guarantee Number indicates the uniqueness of the issued Fund Transfer Guarantee, the Fund Transfer Guarantee Request Number indicates the correspondence with the issued Fund Transfer Guarantee, the surrogate collection amount specifies the amount to be surrogate collection, and the surrogate collection amount The delivery destination name specifies the monetary value information of the destination that receives the monetized amount.

FIG. 8 shows an example of the fund transfer guarantee document stored by the proxy collection device 1 and transmitted to the service providing device 2. The content of the description is basically the same as that of FIG. 4, but in FIG. 4, “the following amount is delivered”, whereas in FIG. 8, “the following amount is guaranteed”.
The meaning of the transfer guarantee is different.

The service providing apparatus 2 sends the signed fund transfer guarantee sent from the proxy collection apparatus 1 to the fund transfer certificate management storage unit 25 via the proxy collection apparatus communication unit 21. The fund transfer guarantee management storage unit 25 checks whether the electronic signature added to the fund transfer guarantee is actually made by the proxy collection device 1 and confirms that the electronic signature is a valid fund transfer guarantee. The IC card is stored and notified to the service providing unit 26 to perform the service, and the service providing unit 26 provides the service to the IC card owner.
Note that the fund transfer guarantee stored in the service providing apparatus 2 indicates the proxy collection amount to the proxy collection apparatus 1 when the proxy collection amount is not delivered from the proxy collection apparatus 1 to the monetary value information of the delivery destination of the proxy collection amount. Used to request delivery of

FIG. 9 shows an example of the processing sequence of the second embodiment. This is basically the same as the processing sequence of FIG. The difference is that the agent collection center 1
After subtracting the surrogate collection amount described in the fund transfer guarantee request from the monetary value information corresponding to the ID received from the IC card 3 (A15-1), the delivery of the surrogate collection amount described in the fund transfer guarantee request is continued. A process of increasing the surrogate collection amount to the corresponding money value information (A15-
Only point 2) is added.

According to the second embodiment, the IC card has the ID
Only need to be held, and there is no need to have monetary value information. Also, the fund transfer guarantee document stored in the service providing device is a certificate that the transfer of the monetary value has been performed by the proxy collection device, and thus does not have the money value information. As an effect, even if the tamper-resistant structure of the IC card is broken or the service providing device is fraudulent, it is impossible to create value, that is, increase the amount only locally. In addition, the fund transfer guarantee is a complete assurance that the transfer collection amount has been delivered to the recipient of the transfer collection amount in exchange for the fund transfer guarantee, preventing fraud of the transfer collection device, and providing the service providing device and the transfer collection device. Safe transactions and transaction management with the device can be performed.

Although the two embodiments of the present invention have been described above, the present invention is not limited to these embodiments, and various modifications can be made, for example, omitting an electronic signature. The algorithm of the processing sequence shown in FIGS. 5 and 9 is described in a program language that can be executed by a computer, and is divided into, for example, an IC card, a service providing device, and a proxy collection device. It is also possible to provide it by storing it in a readable recording medium (FD, CD-ROM, etc.). By installing the program (proxy collection program) of this recording medium into each of the IC card, the service providing apparatus, and the proxy collection apparatus, the proxy collection system is realized.

[0054]

According to the surrogate collection system to which the present invention is applied, the following effects can be obtained. (1) It is possible to collect money on behalf of a locally managed card without risk of fraud. (2) By specifying the money transfer guarantee stored in the service providing device that can be exchanged for money, fraud by a third party can be prevented, and the security of the entire system can be improved. (3) It is possible to facilitate the establishment of trust between the agent and the service provider, and prevent fraud between the agent and the service provider. (4) Compared to the case where a center or the like for collectively managing the service providing apparatuses is installed, a system can be constructed in which communication costs that hinder the online system are suppressed. (5) A general-purpose agency collection service that can be used by many service providers is particularly effective.

[Brief description of the drawings]

FIG. 1 is a diagram showing a configuration example of a system to which the present invention is applied.

FIG. 2 is a diagram illustrating an example of money value information managed by a proxy collection device.

FIG. 3 is a diagram showing an example of a fund transfer guarantee request.

FIG. 4 is a diagram showing an example of a fund transfer guarantee.

FIG. 5 is a diagram showing an example of a processing sequence of a system provided with the present invention.

FIG. 6 is a diagram illustrating another example of money value information managed by the proxy collection device.

FIG. 7 is a diagram showing another example of a fund transfer guarantee request.

FIG. 8 is a diagram showing another example of the fund transfer guarantee.

FIG. 9 is a diagram showing another example of the processing sequence of the system provided by the present invention.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 Proxy collection device 2 Service providing device 3 IC card 11 Service providing device communication unit 12 Fund transfer guarantee request management storage unit 13 Service providing device management DB 14 IC card authentication unit 15 IC card management DB 16 Money value information management unit 17 Fund transfer Guarantee creation / storage unit 21 Agency collection unit communication unit 22 IC card communication unit 23 Fund transfer guarantee request unit 24 Fund transfer guarantee request signature unit 25 Fund transfer guarantee management storage unit 26 Service providing unit 31 External communication unit 32 Agency collection device authentication unit 33 ID holding unit

──────────────────────────────────────────────────続 き Continued on the front page (51) Int.Cl. ⁷ Identification symbol FI Theme coat ゛ (Reference) G07F 7/08 G06F 15/30 350A 7/10 360 G06K 19/00 R G07F 7/08 Q (72) Invention Person Masahiro Hori 2-3-1 Otemachi, Chiyoda-ku, Tokyo Nippon Telegraph and Telephone Corporation (72) Inventor Hironobu Okuyama 2-3-1 Otemachi, Chiyoda-ku, Tokyo Nippon Telegraph and Telephone Corporation F-term (Ref.)

Claims (7)

[Claims] 1. A service providing device using a card and a proxy collection device are connected to each other by a network, and transmit and receive a fund transfer guarantee request and a fund transfer guarantee, and the proxy collection device collects a service amount provided by the service providing device. A system for receiving money transfer guarantee request from the service providing device, a means for mutual authentication with the card, a means for managing money value information in association with the identification information of the card, It has a means to create a fund transfer guarantee that guarantees delivery of the surrogate collection amount to a specific partner and sends it to the service providing apparatus, and the service providing apparatus performs surrogate collection and requests sending of the fund transfer guarantee A means for creating a guarantee request and sending it to the proxy collection device, and receiving and managing the fund transfer guarantee from the proxy collection device And a means for providing a service to the card user, wherein the card holds the identification information of the card associated with the monetary value information managed by the proxy collection device, and a mutual authentication with the proxy collection device. A surrogate collection system, comprising: 2. A service providing device using a card and a proxy collection device are connected to each other by a network, and transmit and receive a fund transfer guarantee request and a fund transfer guarantee, and the proxy collection device collects a service amount provided by the service providing device. A surrogate collection device, which includes means for receiving a fund transfer guarantee request from the service providing device, means for mutually authenticating with the card, and identification information of the card and a delivery destination of the surrogate collection amount. A means for managing the value information and a means for creating a fund transfer guarantee that guarantees the delivery of the surrogate collection amount to a specific partner and transmitting the same to the service providing apparatus, and the service providing apparatus performs surrogate collection and transfers funds A means for creating a fund transfer guarantee request requesting the shipment of a guarantee and transmitting it to the proxy collection device, and funds from the proxy collection device Means for receiving and managing the security certificate, and means for providing a service to the card user, wherein the card holds identification information of the card associated with the money value information managed by the proxy collection device; And a means for mutual authentication with a proxy collection device. 3. A surrogate collection method in a system in which a card providing service providing device and a surrogate collection device are connected to each other by a network, wherein the service providing device performs the surrogate collection when receiving the surrogate collection use from a card user. Create a fund transfer guarantee request requesting the sending of the fund transfer guarantee and send it to the proxy collection device. The proxy collection device receives the fund transfer guarantee request, performs mutual authentication with the card, and if the mutual authentication is successful, Taking in the identification information stored in the card, subtracting the surrogate collection amount described in the fund transfer guarantee request from the monetary value information associated with the identification information, and transferring the surrogate collection amount described in the fund transfer guarantee request First, a fund transfer guarantee document that guarantees the delivery of the surrogate collection amount is created and transmitted to the service providing device. Receiving and managing the funds transfer guarantee from the collection device and providing services to card users,
A surrogate collection method characterized by the following. 4. A surrogate collection method in a system in which a card providing service providing device and a surrogate collection device are connected to each other by a network, wherein the service providing device, upon receiving surrogate collection and use from a card user, performs surrogate collection. Create a fund transfer guarantee request requesting the sending of the fund transfer guarantee and send it to the proxy collection device. The proxy collection device receives the fund transfer guarantee request, performs mutual authentication with the card, and if the mutual authentication is successful, Taking in the identification information stored in the card, subtracting the surrogate collection amount described in the fund transfer guarantee request from the monetary value information associated with the identification information, and transferring the surrogate collection amount described in the fund transfer guarantee request Increase the monetary value information linked earlier and deliver the surrogate collection amount to the surrogate collection amount delivery destination specified in the fund transfer guarantee request To create a fund transfer warranty to guarantee himself and sends it to the service providing apparatus, the service providing apparatus receives the funds transfer guarantee from the agency collection devices to manage, perform a service to the card user,
A surrogate collection method characterized by the following. 5. The proxy collection method according to claim 3 or 4, wherein the proxy collection device adds an electronic signature of the proxy collection device to the fund transfer guarantee and transmits the certificate to the service providing device. Inspect the electronic signature of the transfer guarantee, and if correct, save the fund transfer guarantee,
Providing a service. 6. The proxy collection method according to claim 3, 4 or 5, wherein the service providing apparatus adds an electronic signature of the service providing apparatus to the fund transfer guarantee request and transmits the request to the proxy collection apparatus. Is a method of inspecting an electronic signature of a fund transfer certificate request, and if the signature is correct, storing the fund transfer certificate request and performing mutual authentication with the card. 7. A computer-readable recording medium storing a proxy collection program for causing a computer to execute the process of the proxy collection method according to claim 3, 4, 5, or 6.