JP2006195896A - Anonymous settlement method, system and content server in content drifting model - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To conceal a content seller and purchaser, in a content drifting model. <P>SOLUTION: A content server is provided independently of a seller terminal, a content is separated from the seller, direct access between a purchaser terminal and the seller terminal is not performed, and settlement is performed between an agent server, the purchaser terminal, a bank server and the seller terminal, through the content server. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an anonymous settlement method and system and a content server in a content drift model, and in particular, a settlement between a purchaser and a seller in a content drift model, which is a network model in which content moves between various servers. The present invention relates to an anonymous settlement method and system and a content server in a content drift model for performing anonymously.

Conventionally, in the settlement of a credit card or the like, there is a method of performing settlement by notifying a specific third party, such as a credit card company, personal information such as customer information, purchase store, purchase date / time, purchased item (for example, Non-patent document 1).
“Examination of Anonymous Payment System in CBN” Yasuchi Sugaya and 3 other authors, IEICE General Conference 2002, Communication 2, p. 299, B-7-72, issued March 7, 2002

  However, in the above conventional method, it is difficult to conceal customer information and store information even during a third-party period because it is a mechanism for notifying all personal information when making a payment such as a credit card. There is a problem.

  The present invention has been made in view of the above points, and an object thereof is to provide an anonymous settlement method and system and a content server in a content drift model that can conceal a content seller and a purchaser.

  FIG. 1 is a diagram for explaining the principle of the present invention.

The present invention relates to a purchaser terminal used by a purchaser, a bank server of a financial institution with which the purchaser has a contract, an agent server used by an agent who mediates settlement processing, and a sale used by the seller In an anonymous settlement method in a content drift model, which is a network model in which content moves between various servers,
A content server is provided independently of the seller terminal,
Purchaser terminal, bank account number, bank passwords, and, in the message MC obtained by encrypting the purchase price with the public key PK _B of the bank, to create a message MCC _O plus the purchase price of plain text, transmitted to the content server (Step 1)
Content server reads the message MCC _O, creates a message MC _O A from the public key PK _M of the message MCC _O and sellers, and sends to the agent server (Step 2),
The agent server reads the received message MC _O A, creates a message MAB from the message MC _O A and the agent transaction number NA, and sends it to the bank server (step 3).
The bank server decrypts the message MC part included in the received message MAB, authenticates whether the account number and password are valid, and if so, purchases the purchase amount from the account corresponding to the account number. debit only, transaction number NB and the purchase price of the bank, to create a message MBA obtained by adding a transaction number NA to those encrypted with the public key PK _M of the seller the signature of the bank, and sends it to the agent server ( Step 4),
Attorney server creates a message MAC _O excluding the transaction number from the received message MBA, and transmitted to the content server (step 5),
Content server, to keep the message MAC _O (Step 6),
The seller terminal creates a message MMC _O from the signature of the seller and sends it to the content server (step 7).
The content server authenticates the message signature MMC _O and sends the stored message M _OCO to the seller terminal (step 8).

  FIG. 2 is a principle configuration diagram of the present invention.

The present invention relates to a purchaser terminal 10 used by a purchaser, a bank server 40 of a financial institution with which the purchaser has a contract, an agent server 30 used by an agent who mediates settlement processing, and a seller An anonymous settlement system in a content drift model, which is a network model in which content moves between various servers, in a system comprising seller terminals 50 to be used,
The content server 20 is provided independently of the seller terminal 50,
The purchaser terminal 10
Input means 11 for inputting the account number of bank B, the purchase amount P, and the PIN code of bank B;
Account number of the bank B, which is input by the input means 11, and the purchase price P, the first encryption means 12 to generate an encrypted with the public key PK _B a personal identification number of the bank B encrypted message MC,
The encrypted encrypted message MC with the first encryption means 12, a first message creation unit 13 for creating a message MCC _O added with the purchase amount P of plain text,
A first message transmitting unit 14 for transmitting a message MCC _O created in the first message creation unit 13 to the content server has,
The content server 20
Message MCC _O sent from the buyer terminal _10, receives the message MMC _O sent from the seller terminal, also a first transmitting and receiving means 21 for transmitting the generated message MC _{O A} Attorney server 30,
And the amount of money check means 22 to check the purchase price, which was written in the message MCC _O plaintext received from the purchaser terminal 10,
If it is determined to be valid in amount checking means 22, the public key PK _M merchants, in addition to the message MCC _O, and the second message creating means 23 for generating a message MC _{O A,}
A message storage means 24 for holding the message MAC _O received from the proxy server 30,
Includes a signature authentication unit 25 for authenticating the signature of the message MMC _O received from the seller terminal 50, a,
The agent server 30
And message MC _{O A} from the content server 20 receives the message MBA from the bank server 40 sends a message MAB to the bank server 40, and the second transceiver means for transmitting a message MAC _O created the content server 20 31,
A third message creating means 32 for reading the transaction number NA from the message MBA received from the bank server 40, identifying the destination content server 20 and creating a message MIC _O with the transaction number NA deleted from the message MBA; Have
The bank server 40
A third transmitting / receiving means 41 for receiving the message MAB from the agent server 30 and transmitting the created message MBA to the agent server 30;
First decryption means 42 for decrypting the message MAB received from the agent server 30;
An authentication unit 43 that compares the purchase amount P decrypted by the first decryption unit 42 with the purchase amount P in plaintext and authenticates whether they are the same;
Purchase price, signature of the bank, and the second encryption means 44 for encrypted with the public key PK _M of the seller a transaction number NB,
A fourth message creating means 45 for creating a message MBA by adding the transaction number NA added by the agent to the message encrypted by the second encryption means 44;
The merchant terminal 50
A fifth message creating means 51 for creating a message MMC _O comprising a collection message and a signature of the seller M;
Send a message MMC _O to the contents server, also a fourth receiving means 52 for receiving a message MAC _O from the content server 20,
A second decoding means 53 for decoding the message MAC _O received from the content server 20, the.

The present invention relates to a purchaser terminal used by a purchaser, a bank server of a financial institution with which the purchaser has a contract, an agent server used by an agent who mediates settlement processing, and a seller terminal used by a seller A content server on an anonymous settlement system in a content drift model that is a network model that moves between,
A first transmission / reception means for receiving a message MCC _O transmitted from the purchaser terminal and a message MMC _O transmitted from the seller terminal, and transmitting the generated message MC _O A to the agent server;
And the amount of money check means to check the purchase price, which was written in plain text of the message MCC _O received from the purchaser terminal,
If it is determined to be valid in amount checking means, the public key PK _O merchants, in addition to the message MCC _O, a first message generation means for generating a message MC _{O A,}
And message storing means for storing the message MAC _O received from the proxy server,
It has a signature authentication unit that authenticates the signature of the message MMC _O received from the seller terminal, a.

The content server receives a message MBA from the bank server, and transmits a message MAB to the bank server;
Read the transaction number NA from the message MBA received from the bank server further includes a second message generation means for generating a message MAC _O deleting the transaction number NA from the message MBA, a.

  As described above, according to the present invention, the content server is provided independently of the seller terminal, and by separating the content from the seller, the purchaser and the seller have no direct access to each other. Keep secret. As a result, the purchaser can make a payment without knowing the identity of the seller and without knowing the seller and the item to be purchased by the financial institution with which the purchaser has contracted.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings.

  FIG. 3 shows a system configuration according to an embodiment of the present invention.

  The system shown in FIG. 1 includes a purchaser terminal 10 used by a purchaser C, a content server 20 that provides content, an agent server 30 used by an agent A who mediates payment processing, a bank server 40 of a bank B, sales A seller terminal 50 of the seller M and a network 60 connecting these devices. Note that the agent server 30 is a third-party organization that mediates the settlement process because it becomes impossible to purchase and sell anonymously when the operator of the content server 20 and the operator of the bank server 40 collide. Provided.

  FIG. 4 shows the configuration of the purchaser terminal in one embodiment of the present invention.

The purchaser terminal 10 shown in FIG. 1 includes an input unit 11, an encryption unit 12, a message creation unit 13, a message transmission unit 14, and a memory (public key PK _B ) 15.

  The input unit 11 inputs the bank B account number, the purchase amount P, and the bank B password.

Encryption unit 12, account number of the bank B, which is input by the input unit 11, the purchase price P, the public of the bank, which is stored the personal identification number of the bank B in the memory 15 key PK _B in an encrypted and encrypted message MC Is generated.

Message creating unit 13 creates a message MCC _O added with the purchase amount P of plain text to the encrypted message MC encrypted by the encryption unit 12.

Message transmission unit 14 transmits a message MCC _O created in the message creation unit 13 to the content server 20.

Memory 15 stores the public key PK _B.

  FIG. 5 shows the configuration of the content server in one embodiment of the present invention.

The content server 20 includes a transmission / reception unit 21, an amount check unit 22, a message creation unit 23, a message holding unit 24, a signature authentication unit 25, and a memory (public key PK _M ) 26.

Transceiver 21 receives a message MCC _O sent from the buyer terminal _10, the message MMC _O sent from the seller terminal 50 _(For messages to be described later), also transmits a message MAC _O.

The amount check unit 22 checks the purchase price P that are written in plain text of the message MCC _O received from the purchaser terminal 10.

Message generation unit 23, when it is determined to be valid in the amount checker 22, in addition to the message MCC _O which receives the public key PK _M merchants stored in the memory 26, a message MC _O A Is generated.

Message storage unit 24 holds the message MAC _O received from the proxy server 30.

Signature authentication unit 25 authenticates the signature of the message MMC _O received from the seller terminal 50.

Memory 26 stores the public key PK _M of the seller.

  FIG. 6 shows the configuration of the agent server in one embodiment of the present invention.

  The agent server 30 includes a transmission / reception unit 31 and a message creation unit 32.

Transceiver 31, and a message MC _O A from the content server 20 receives the message MBA from the bank server 40 sends a message MAB the bank server 40, also sends a message MAC _O to the content server 20.

Message creating unit 32 reads the transaction number NA from the message MBA received from the bank server 40 identifies the destination of the content server 20 creates a message MAC _O deleting the transaction number NA from the message MBA.

  FIG. 7 shows the configuration of the bank server in one embodiment of the present invention.

The bank server 40 shown in the figure includes a transmission / reception unit 31, a decryption unit 42, an authentication unit 43, an encryption unit 44, a message creation unit 45, and a memory (public key PK _M ) 46.

  The transmission / reception unit 41 receives the message MAB from the agent server 30 and transmits the message MBA to the agent server 30.

  The decrypting unit 42 decrypts the message MAB received from the agent server 30.

  The authentication unit 43 compares the decrypted purchase amount P and the plaintext purchase amount P, and if they are the same, notifies the encryption unit 44 of authentication OK.

Encryption unit 44, the purchase price P, the signature of the bank B, and encrypted with the public key PK _M of the seller, which is stored the transaction number NB to the memory 46.

  The message creation unit 45 creates a message MBA in which the transaction number NA added by the agent server 30 is added to the one encrypted by the encryption unit 44.

Memory 46 stores the public key PK _M of the seller.

  FIG. 8 shows the configuration of the seller terminal in one embodiment of the present invention.

  The seller terminal 50 includes a message creation unit 51, a transmission / reception unit 52, and a decryption unit 53.

Message creating section 51 creates a recovery message MAC _O, a message MMC _O consisting signature merchant M.

The transmission / reception unit 52 transmits the message MMC _O to the content server 20.

Decoding unit 53 decodes the message MAC _O received from the content server 20.

  Next, messages used in the present invention will be described.

"Message MCC _O" is created by the purchaser terminal 10, is a message to be sent to the content server 20 from the purchaser terminal 10, bank account number, bank passwords, encryption the purchase price P with the public key PK _B of the bank This is a message in which a purchase amount A in plain text is added to the converted message MC.

The “message MC _O A” is created by the content server 20, is composed of the message MC CC _O and the public key PK _M of the seller M, and is transmitted from the content server 20 to the agent server 30.

The “message MAB” is created by the agent server 30, is composed of the message MC _O A and the transaction number NA of the agent A, and is transmitted from the agent server 30 to the bank server 40.

"Message MBA" is created in the bank server 40, in the message obtained by adding a transaction number NA to those encrypted with the public key PK _M of the seller M the signature of the bank transaction number NB and the purchase price A and Bank B Yes, from the bank server 40 to the agent server 30.

The “message MAC _O ” is created by the agent server 30, is composed of the message MC _O A and the transaction number NA of the agent A, and is transmitted from the agent server 30 to the bank server 40.

The “message MMC _O ” is created by the seller terminal 50, is composed of a collection message and the signature of the seller, and is transmitted to the content server 20.

The “message MC _O M” is created by the content server 20, is composed of a plurality of messages MAC _O, and is transmitted to the seller terminal 50.

  Next, the operation of the system in the above configuration will be described.

  FIG. 9 is a sequence chart of operations in one embodiment of the present invention.

Step 101) the purchaser terminal 10, the account number of the bank B, the purchase price P, the encrypted message MC with the public key PK _B a personal identification number of the bank B, create a message MMC _O was added to the purchase price P in the clear To do.

Step 102) the buyer terminal 10 transmits a message MCC _O created the content server 20.

Step 103), the content server 20 checks the purchase price P that has been written in the message MCC _O, if a legitimate amount of money, to create a message MC _{O A} added with the public key PK _M of the seller in the message MCC _O .

Step 104) The content server 20 transmits the created message MC _O A to the agent server 30.

Step 105) representative server 30 creates a message MAB imparted with transaction number NA in the message MC _O A received from the content server 20.

  Step 106) The agent server 30 transmits the message MAB to the bank server 40.

Step 107) The bank server 40 decrypts the MC portion of the received message MAB and compares the encrypted purchase amount P with the plaintext purchase amount P. If they are the same, the account number and the personal identification number are obtained. authenticate, if authentication is legitimate, to encrypt the signature and transaction number NB of the purchase price P and the bank B with the public key PK _M of the seller, the encrypted message, agent a was added transaction A message MBA with the number NA added is created.

  Step 108) The bank server 40 transmits the created message MBA to the agent server 30.

Step 109) representative server 30 reads the transaction number NA from the message MBA received from the bank server 40 identifies the destination of the content server 20 creates a message MAC _O removal of the transaction number NA from the message MBA.

Step 110) representative server 30 transmits the message MAC _O created the content server 20.

Step 111) The content server 20 receives the message MAC _O from agent server 30, holds.

Step 112) The merchant terminal 50 creates a message MMC _O composed of the collection message and the signature of the merchant M. Here, the collection message is a fee collection message in content sales and is for notifying that digital cash has been transferred to the seller's account.

Step 113) The seller terminal 50 transmits the created message MMC _O to the content server 20.

Step 114) The content server 20 authenticates the signature of the message MMC _O received from the seller terminal 50, if the authentication is valid, it sends a message MAC _O that has been stored in the seller terminal 50.

Step 115) seller terminal 50 decrypts the message MAC _O received from the content server 20, merchant M is take this to the bank B.

Step 116) Bank bank server 40 of the B authenticates whether the message MAC _O the seller M brought to you is legitimate, bank B will pay a fee if the result is legitimate.

In the above embodiment, the content server 20 and the agent server 30 are described as being independent. However, the present invention is not limited to this example, and the content server 20 may have the function of the agent server 30. Is possible. In this case, the message MC _O A, MAB, and MAC _O that the agent server 30 transmits / receives are transmitted / received by the transmitter / receiver 21 of the content server 20, and the content server 20 has the message creation unit 32 of the agent server 30. It becomes.

  The operations of the customer terminal 10, the content server 20, the agent server 30, the bank server 40, and the seller terminal 50 are each constructed as a program and distributed through a network, or the CPU of each computer is controlled. It is also possible for the means to execute.

  In addition, the constructed program may be a hard disk, a flexible disk, a CD-ROM, or the like connected to a computer used as the customer terminal 10, content server 20, agent server 30, bank server 40, and seller terminal 50. It is also possible to store it in a portable storage medium and distribute it.

  The present invention is not limited to the above-described embodiment, and various modifications and applications can be made within the scope of the claims.

  The present invention is applicable to a commercial transaction system in which settlement between a customer and a seller is performed anonymously.

It is a figure for demonstrating the principle of this invention. It is a principle block diagram of this invention. 1 is a system configuration diagram according to an embodiment of the present invention. It is a block diagram of the purchaser terminal in one embodiment of the present invention. It is a block diagram of the content server in one embodiment of this invention. It is a block diagram of the agent server in one embodiment of this invention. It is a block diagram of the bank server in one embodiment of this invention. It is a block diagram of the seller terminal in one embodiment of this invention. It is a sequence chart of operation in one embodiment of the present invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 Customer terminal 11 Input means, input part 12 1st encryption means, encryption part 13 1st message creation means, message creation part 14 1st message transmission means, message transmission part 15 Memory 20 Content server 21 1st Transmission / reception means, transmission / reception section 22 amount check means, amount check section 23 second message creation means, message creation section 24 message holding means, message holding section 25 signature authentication means, signature authentication section 26 memory 30 agent server 31 second Transmission / reception means, transmission / reception section 32, third message creation means, message creation section 40, bank server 41, third transmission / reception means, transmission / reception section 42, first decryption means, decryption section 43, authentication means, authentication section 44, second encryption Means, encryption section 45 Fourth message creation means, message creation section 46 Memory 50 Terminal 51 fifth message creation means, message producing section 52 fourth receiving means, transmitting and receiving unit 53 second decoding means, the decoding unit 60 network

Claims (4)

A purchaser terminal used by a purchaser, a bank server of a financial institution with which the purchaser has a contract, an agent server used by an agent who mediates settlement processing, and a seller terminal used by the seller In the system, in the anonymous settlement method in the content drift model, which is a network model in which content moves between various servers,
A content server is provided independently of the seller terminal,
The purchaser terminal, bank account number, bank passwords, and, in the message MC obtained by encrypting the purchase price with the public key PK _B of the bank, to create a message MCC _O plus the purchase price of the plain text, the content server To
The content server reads the message MCC _O, creates a message MC _O A from the public key PK _M of the message MCC _O and sellers, and sends to the proxy server,
The agent server reads the received message MC _O A, creates a message MAB from the message MC _O A and the agent transaction number NA, and sends it to the bank server;
The bank server decrypts the message MC part included in the received message MAB, authenticates whether the account number and the password are valid, and if valid, from the account corresponding to the account number. the purchase amount of money only debit, transaction number NB and the purchase price of the bank, to create a message MBA obtained by adding a transaction number NA to those encrypted with the public key PK _M of the seller the signature of the bank, said agent To the server,
The proxy server creates a message MAC _O excluding the transaction number NA from the message MBA received, and transmitted to the contents server,
The content server, to keep the message MAC _O,
The merchant terminal creates a message MMC _O from the merchant's signature and sends it to the content server,
The content server authenticates the signature MMC _O of the message and transmits the stored message M AC _O to the seller terminal. An anonymous settlement method in a content drift model. A purchaser terminal used by a purchaser, a bank server of a financial institution with which the purchaser has a contract, an agent server used by an agent who mediates settlement processing, and a seller terminal used by the seller In the system, an anonymous settlement system in a content drift model, which is a network model in which content moves between various servers,
A content server independent of the seller terminal;
The buyer terminal
An input means for inputting the bank B account number, the purchase amount P, and the bank B PIN;
Account number of the bank B, which is input by the input means, and the first encryption means for generating the purchase price P, the bank encryption to encrypted message MC a personal identification number with the public key PK _B of B,
The first of said encrypted message MC encrypted by the encryption means, the first message generation means for generating a message MCC _O added with the purchase amount P of plain text,
Anda first message transmitting means for transmitting a message MCC _O created the content server in the first message creation means,
The content server
A first transmission / reception means for receiving a message MCC _O transmitted from the purchaser terminal, a message MMC _O transmitted from the seller terminal, and transmitting the generated message MC _O A to the agent server;
And amount checking means for checking the purchase amount written in plain text of the message MCC _O received from the buyer terminal,
If it is determined to be valid in the amount checking means, the public key PK _M merchants, in addition to the message MCC _O, and the second message generation means for generating a message MC _{O A,}
And message storage means for storing said message MAC _O received from the proxy server,
Anda signature authentication unit for authenticating the signature of the message MMC _O received from the seller terminal,
The agent server is
Wherein from said content server message MC _{O A} and receives messages MBA from the bank server sends a message MAB to the bank server, and the second transceiver means for transmitting a message MAC _O created in the content server When,
Read the transaction number NA from the message MBA received from the bank server, to identify the destination content server, the third message creating means for creating a message MAC _O deleting the transaction number NA from the message MBA, the Have
The bank server
Third transmission / reception means for receiving the message MAB from the agent server and transmitting the created message MBA to the agent server;
First decryption means for decrypting the message MAB received from the agent server;
Authentication means for comparing the purchase amount P decrypted by the first decryption means with the purchase amount P in plaintext and authenticating whether they are the same;
Purchase price, Bank of signature, and the second encryption means for encrypted with the public key PK _M of the seller a transaction number NB,
Fourth message creating means for creating a message MBA in which the transaction number NA added by the agent is added to the message encrypted by the second encryption means;
The merchant terminal is
A fifth message creating means for creating a message MMC _O comprising the collection message and the signature of the seller M;
Transmitting the message MMC _O to the content server, also a fourth reception means for receiving the message MAC _O from the content server,
Anonymous payment system in a content drift model and having a second decoding means for decoding the message MAC _O received from the content server. Moves between a purchaser terminal used by the purchaser, a bank server of a financial institution with which the purchaser has a contract, an agent server used by an agent who mediates settlement processing, and a seller terminal used by the seller A content server on an anonymous settlement system in a content drift model that is a network model,
A first transmission / reception means for receiving a message MCC _O transmitted from the purchaser terminal, a message MMC _O transmitted from the seller terminal, and transmitting the generated message MC _O A to the agent server;
And amount checking means for checking the purchase amount written in plain text of the message MCC _O received from the buyer terminal,
If it is determined to be valid in the amount checking means, the public key PK _O merchants, in addition to the message MCC _O, a first message generation means for generating a message MC _{O A,}
And message storage means for storing said message MAC _O received from the proxy server,
Content server and having a signature authentication unit for authenticating the signature of the message MMC _O received from the merchant terminal. Second transmitting / receiving means for receiving a message MBA from the bank server and transmitting the message MAB to the bank server;
The reading of the transaction number NA from the message MBA received from the bank server, the content server according to claim 3, further comprising a second message generation means for generating a message MAC _O deleting the transaction number NA from the message MBA, the .

Images