JP4616510B2 - Electronic commerce method, payment agent method, disposable postpaid method information issuance method, and payment request method - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to an electronic commerce method.
[0002]
[Prior art]
In recent years, with the spread of the Internet and the like, various forms of commercial transactions are performed that do not depend on conventional logistics. Among them, there are electronic commerce systems that perform electronic payment using a computer system and the Internet.
[0003]
An example of such an electronic commerce system is given below.
[0004]
First, as a first example, there is an “electronic commerce method and system” disclosed in JP-A-11-353382.
[0005]
The problem that the conventional technology is trying to solve is to "provide an economical and safe electronic commerce system by sending an identification number to a buyer for settlement directly to a settlement agent without giving it to the seller." It is.
[0006]
In order to solve this problem, this conventional technology creates “payment agency data obtained by aggregating a plurality of billing data for each buyer for each predetermined period and payment data related to the payment data, Is sent to the payment agent, and the payment data is sent to the buyer as prompting information for encouraging the buyer to send the settlement number given to the buyer corresponding to the payment agent data from the buyer to the payment agent. "Send" is a requirement. In other words, it is a requirement to collect payments for a certain period and urge the buyer to send an identification number to a payment agent.
[0007]
As a second example, there is an “electronic payment system and electronic commerce service provider device” disclosed in Japanese Patent Laid-Open No. 2000-76366.
[0008]
The problem that the conventional technology is trying to solve is “With respect to an electronic payment authentication system in electronic commerce such as online shopping via the Internet, it is possible to easily and safely perform electronic commerce by preventing leakage of confidential information such as credit card numbers. Is to do.
[0009]
In order to solve this problem, the conventional technology requires that a user terminal is called back using a public network in order to prevent leakage of confidential information.
[0010]
As a third example, there is a “price settlement system and a price settlement method” disclosed in JP-A-11-345264.
[0011]
The problem to be solved by the conventional technology is “to enable price settlement without using a credit inquiry communication device that was necessary for price settlement with a credit card”.
[0012]
In order to solve this problem, the present prior art requires that a “mobile communication terminal device having a caller number sending function” be used instead of the trust inquiry communication device.
[0013]
A fourth example is “Method and apparatus for securing credit card transaction” disclosed in US Pat. No. 5,317,636.
[0014]
According to this prior art, a credit card is used as a smart card, and each time it is used, the sequence number of the number of transactions is encrypted and displayed. Use that value as the credit card password. In the computer that performs authentication, the password is decrypted by a method specific to the credit card to obtain a sequence number, and authentication is performed based on whether or not it matches the one recorded on the computer side.
[0015]
As a fifth example, there is “Electronic commerce using a secure courier system” disclosed in US Pat. No. 5,671,279.
[0016]
According to this prior art, a protocol for securely making payment using a credit card using a public line that may be intercepted is disclosed. According to this, the user can authenticate by sending the encrypted credit card number to the seller, and the seller sends the encrypted credit card number to the payment institution as it is.
[0017]
However, in this prior art, although it is encrypted, there is no difference in teaching the credit card number to the seller.
[0018]
Further, as a sixth example, there is “Secure method and system for communicating a list of credit card numbers over a non-secure network” disclosed in US Pat. No. 5,715,399.
[0019]
According to this prior art, when a plurality of credit card numbers of users who have received orders from the electronic mall side are already known, the user is asked to select which credit card to use this time. At this time, instead of displaying the credit card number, a part of the credit card number is displayed so that the user's credit card number is not known even if it is stolen by others.
[0020]
As a seventh example, there is “Digital active advertising” disclosed in US Pat. No. 5,724,424.
[0021]
According to this conventional technology, as a main matter for user authentication using a credit card online, a flow in which a user sends credit card information to a seller for shopping is disclosed. The credit card information to be specified is simply “Account Information” and is not disclosed specifically. Further, the prior art discloses a method of sending an order form to a sales company after receiving an approval from a settlement agent before sending the order form to the electronic mall.
[0022]
An eighth example is “Secure method for communicating credit card data when placing an order on a non-secure network” disclosed in US Pat. No. 5,727,163.
[0023]
According to this prior art, when a user makes a purchase at an electronic mall, the item, delivery destination, payment method, etc. are entered in the order form, but only a part of the credit card number is entered. When the electronic mall system accepts the order form, it calls the user's telephone number written on the order form, and asks the user to enter the credit card number, for example, by pressing a telephone button. The electronic mall system will accept if the entered number matches the number written on the order sheet.
[0024]
As a ninth example, there is “System, method and articles of manufacture for network electronic payment instrument and certification of payment and credit collection utilizing a payment” disclosed in US Pat. No. 6,016,484.
[0025]
This prior art relates to electronic money.
[0026]
As a tenth example, there is “Method and apparatus for credit card purchase authorization utilizing a comparison of a purchase token with test information” disclosed in US Pat. No. 6,022,682.
[0027]
This conventional technology relates to a credit card reader in a store. When reading a credit card, the user enters a password at the same time and uses the password as a key to encrypt the credit number and the purchase amount. It is sent to the institution, and the settlement institution clears the encrypted information with the password it holds, and determines whether or not to allow the purchase based on whether or not it matches the credit card number and purchase amount sent at the same time. It is characterized by informing.
[0028]
In the above-described conventional techniques, electronic payment methods using the Internet can be broadly classified into a prepaid method and a postpaid method.
[0029]
A typical example of the prepaid method is a prepaid method, and a typical example of the postpaid method is a credit card method.
[0030]
In the prepaid method, a certain amount of money is paid in advance to a prepaid card issuer that is a seller, and purchase of a product is permitted within the range of the paid amount.
[0031]
However, in the case of electronic payment using the prepaid method, payment can be made immediately at the time of purchase, but there is a possibility that the prepaid amount will be left unused, or the unused amount when the prepaid card issuer goes bankrupt May not be recovered.
[0032]
On the other hand, the post-payment method using a credit card eliminates such drawbacks.
[0033]
In the post-payment method using a credit card, the purchaser determines a product group to be purchased first, and performs a settlement for the total amount of the product group using a credit card number.
[0034]
However, this method has many problems because of its high convenience.
[0035]
For example, in this method, it is necessary to send a credit card number using the Internet, but it cannot be said that there is no possibility that someone will eavesdrop on the Internet.
[0036]
In order to avoid this risk, several methods for encrypting information flowing on the Internet have been proposed. These technologies include, for example, SSL (KEB Hickman, The SSL Protocol, Internet Draft <draft-hickman-netscape-ssl-00.txt>, April 1995), HTTP (E. Rescorla, A. Schiffman, The Secure HyperText Transfer Protocol, Internet Draft <draft-rescorla-shttp-00.txt., December 1994), PEM (J. Linn, Privacy Enhancement for Internet Electronic Mail: Part 1: Message Encryption and Authentication Procedures, RFC 1421, February 1993), MOSS (S. Crocker , N. Freed, J. Galvin, MIME Object Security Services, Internet Draft, draft-ietf-pem-mime-08.txt>, March 1995), IPSP (R. Atkinson, Security Architecture for the Internet Protocol, Internet Draft <draft-ietf-ipsec-arch-02.txt>, May 1995).
[0037]
In addition to this, in Japanese Patent Laid-Open No. 2000-7673 and US Pat. No. 5,727,163, a method in which a credit card number is sent separately using a public telephone network without using the Internet is disclosed in Japanese Patent Laid-Open No. 11-345264. The gazette discloses a method using a portable radio telephone.
[0038]
[Problems to be solved by the invention]
However, even if the credit card number can be sent safely by these methods, there still remains a problem for the purchaser.
[0039]
In other words, in the methods disclosed in these documents, the partner to whom the purchaser gives a credit card number is the seller. Therefore, the purchaser gives the credit card number to the seller along with detailed personal information such as name, address, and telephone number.
[0040]
When configured in this way, it is not only likely to be misused by the seller itself, but also misused by the purchaser, such as when leaked from the seller or when the seller goes bankrupt and the information is resold. And the damage can be significant.
[0041]
In order to avoid such a possibility, in US Pat. No. 5,671,279, the purchaser sends an encrypted credit card number to the seller, and the seller sends the encrypted credit card number to the settlement agency. A method for investigating whether payment is possible is disclosed.
[0042]
However, even if this method is used, there is no change in the purchaser's credit card number remaining at the seller's hand, and it is difficult to assume a secure encryption method for a long time considering the speed of improvement in the current computer capacity, Even if the risk of misuse is reduced, it cannot be said that it has disappeared.
[0043]
Thus, the most secure and secure method is that the purchaser does not have to tell the seller the actual credit card number.
[0044]
US Pat. No. 5,724,424 discloses one method. According to this method, the purchaser attaches the credit card number to the order form and sends it to the settlement agent over the Internet. On the other hand, the settlement agent issues a permit to the purchaser when permitting payment. Therefore, the purchaser sends this permit and the order sheet to the seller using the Internet.
[0045]
However, in this method, when the purchaser is malicious, the risk is imposed on the seller and the settlement organization.
[0046]
For example, suppose that there is a purchaser whose maximum payment is 50,000 yen. The purchaser falsifies the 500,000 yen order table to 50,000 yen, obtains a permission form from the payment institution, attaches it to the original 500,000 yen order list, and passes it to the seller. If the seller believes the permit and ships the goods, the deposit will be only 50,000 yen. Such an accident can occur. It is also possible that a malicious user forges the license itself.
[0047]
In addition, US Pat. No. 5,724,424 discloses that a permit issued by a clearing house is simply impossible to tamper with, and does not disclose a specific method. However, no matter what method is used, even if encryption is performed, considering the development of the computer, if the purchaser performs maliciously, there is absolutely no risk of falsification. In order to completely eliminate this possibility, it is necessary to prevent the purchaser from giving the permit.
[0048]
Accordingly, the present invention has been made in view of the above problems, and an object thereof is to provide an electronic commerce method, a settlement agent method, a disposable postpaid method information issuing method, and a settlement request method from which fraud is eliminated.
[0049]
[Means for Solving the Problems]
In order to achieve such an object, the present invention is an electronic commerce method using a post-payment method for payment for a product, wherein the purchaser terminal is a disposable one issued by a settlement agent system or a post-payment method information issuer system. Settlement request process for requesting payment for goods purchased to seller system using postpay method information, and settlement for requesting payment agent system for payment by seller system using disposable postpay method information The agency request process and the settlement agency system include a price payment agency process in which payment is made using the purchaser's post-payment method information corresponding to the disposable post-payment method information.
[0050]
Thereby, in this invention, it becomes possible to provide the electronic commerce method from which fraud was excluded.
[0051]
Further, the present invention provides a disposable postpaid scheme information requesting step in which the purchaser terminal requests disposable postpaid scheme information from a settlement agent system or a postpaid scheme information issuer system using a message including information identifying the purchaser. And a payment agent system or a postpayment method information issuer having a disposable postpayment method information issuing step of issuing disposable postpayment method information to a purchaser terminal in response to a message.
[0052]
Thereby, in the present invention, it becomes possible to provide disposable postpaid method information according to the purchaser's needs, and the purchaser needs to manage extra information without unnecessarily having the disposable postpaid method information. Disappears.
[0053]
Furthermore, the present invention provides a postpayment method information use notifying step in which the settlement agent system notifies the postpayment method information issuer system that disposable postpaid method information has been used, and the postpayment method information issuer system is a purchaser And a disposable postpaid method information issuing step for newly issuing disposable postpaid method information to the terminal.
[0054]
Thus, in the present invention, it is possible to provide the purchaser with new disposable postpaid scheme information each time the disposable postpaid scheme information is used, so that the purchaser always has disposable postpaid scheme information that can be used. It becomes possible, and it becomes possible to save the extra trouble at the time of purchase.
[0055]
Further, the present invention is characterized in that when the postpaid method information issuer system issues disposable postpaid method information, the settlement agent system has an information corresponding step for taking correspondence between the postpaid method information and the disposable postpaid method information. It is said.
[0056]
Thereby, in the present invention, even when the disposable postpaid scheme information is configured to be issued in the postpaid scheme information issuer system, the correspondence between the postpaid scheme information and the disposable postpaid scheme information in the settlement agent is always in the latest state. Therefore, it is possible to reliably specify the true (regular) postpayment method information of the purchaser from the disposable postpayment method information on behalf of the settlement.
[0057]
Furthermore, the present invention is a disposable postpay method information generating step for generating a new disposable postpay method information to a purchaser when the payment agent system uses disposable postpay method information, and the payment agent system includes: It has an information corresponding step for taking correspondence between the disposable postpaid method information issued in the disposable postpaid method information issuing step and the postpaid method information.
[0058]
As a result, in the present invention, since it becomes possible to issue new disposable postpaid method information in the payment agent system, the correspondence between the disposable postpaid method information and the true postpaid method information is generated and managed in one place. Therefore, management becomes easier and safety can be improved than when similar information exists in a plurality of systems.
[0059]
Furthermore, the present invention is characterized in that the settlement agent system includes a correspondence information deleting step of deleting the used disposable postpay method information from the correspondence.
[0060]
Thereby, in the present invention, it is possible to avoid the use of the once-used disposable postpaid method information being reused, so that the lifecycle of the disposable postpaid method information can be set to an appropriate length according to the purchaser. .
[0061]
Furthermore, the present invention is characterized in that postpayment method information or disposable postpay method information is encrypted and transmitted between a purchaser terminal, a seller system, a settlement agent system, and a postpayment method information issuer system. .
[0062]
As a result, in the present invention, it is possible to make it difficult for an e-commerce party to eavesdrop, and to reduce the possibility of personal information leaking to non-parties.
[0063]
Furthermore, the present invention is characterized in that the settlement agent system and the method information issuer system are the same system.
[0064]
Thereby, in this invention, it becomes possible to simplify the structure for implement | achieving this method, and also in operation, it becomes possible to simplify and implement each process.
[0065]
Further, the present invention relates to a payment agent system of a payment agent system in an electronic commerce method using a postpay method for payment for goods, wherein the payment agent system or the postpay method information issuer system is a request from the purchaser or the purchaser The payment agent request order process from the seller system to receive a payment request for payment using the disposable postpaid method information issued to the purchaser according to the use of the purchaser, and the purchaser corresponding to the disposable postpay method information And a price payment agent process for substituting the price payment using post-payment method information.
[0066]
As a result, in the present invention, it is possible to perform fraudulent settlement while eliminating fraud.
[0067]
In addition, the present invention uses a message including information for identifying a purchaser from a purchaser terminal in a disposable postpaid method information issuing method of a postpaid method information issuer system in an electronic commerce method using a postpaid method for payment for goods. Disposable post-payment method information is newly issued to the purchaser terminal when disposable post-payment method information is requested, or when use of disposable post-payment method information is notified from the payment agent system The information issuing step and an information correspondence notifying step of notifying the settlement agent system of the correspondence between the disposable postpaid method information issued in the disposable postpaid method information issuing step and the postpaid method information are characterized.
[0068]
Thereby, in this invention, it becomes possible to issue the disposable postpay system information for performing electronic commerce without fraud.
[0069]
Further, the present invention relates to a settlement request method of a seller system in an electronic commerce method that uses a postpaid method for payment for goods, in which the settlement agent system or the postpayment method information issuer system receives a request from the purchaser or the purchaser Depending on the use, a payment request order process is received from the purchaser terminal using the disposable postpaid method information issued to the purchaser, and the settlement is performed using the disposable postpay method information. A settlement agent requesting step for requesting the agent system to perform payment for the payment.
[0070]
As a result, in the present invention, it is possible to prevent the possibility of fraud when requesting payment from the seller to the payment agent.
[0071]
Further, the difference between the above-described conventional technology and the present application is as follows.
[0072]
First, the present invention is different from the first example in the prior art because it is not necessary to make a settlement for each transaction and prompt the buyer to send an identification number to a settlement agent.
[0073]
Further, the present invention is different from the second example in the prior art because the callback is not a requirement and is not necessary.
[0074]
Also, the present invention differs from the third example in the prior art because it does not require a mobile communication terminal as shown.
[0075]
Further, the present invention is different from the fourth example in the prior art because it is not a requirement that the credit card be a smart card and the transaction sequence number is not encrypted.
[0076]
Further, the present invention is different from the fifth example in the prior art in that the present invention is characterized in that the user teaches the distributor a disposable credit card number and does not teach actual credit card information.
[0077]
Further, the present invention is different from the sixth example in the prior art because it is characterized in that the one-time-use disposable credit card number is notified to the electronic mall side.
[0078]
Further, in the present invention, in contrast to the seventh example in the prior art, the credit card information sent to the seller is required to be disposable information, and the disposable credit card issued by the settlement agent to the seller is further requested by the user. This is different because it requires sending information and using it for approval.
[0079]
Further, the present invention is different from the eighth example in the prior art because it is characterized in that the electronic mall is notified of all disposable credit numbers at once.
[0080]
Further, the present invention is different from the ninth example in the prior art because it relates to a payment system using a credit card.
[0081]
Further, the present invention relates to electronic commerce using the Internet with respect to the tenth example in the prior art, and the application field is different.
[0082]
DETAILED DESCRIPTION OF THE INVENTION
[Features of the present invention]
The present invention uses a computer system and a network, a method suitable for performing electronic commerce from purchase of goods to payment procedures on the network, an electronic commerce method for carrying out the method, a settlement agent method, Disposable postpaid method information issuance method and settlement request method.
[0083]
In each embodiment described below, an example will be described in which electronic commerce using settlement means using a credit card is applied to the present invention as a post-payment method.
[0084]
[First Embodiment]
First, a first embodiment in which the present invention is suitably implemented will be described in detail below with reference to the drawings.
[0085]
Hereinafter, the present embodiment will be described with reference to three configuration examples.
[0086]
(First configuration example of the first embodiment)
FIG. 1 is a diagram of a typical electronic commerce system according to the first configuration example of the present embodiment. As shown in FIG. 1, in this configuration example, a purchaser computer B possessed by a purchaser, a merchant computer M possessed by a dealer, and a card information issuing computer I possessed by a settlement agent are connected via the Internet N. Connected. In addition to the Internet N, the payment agent computer P possessed by the payment agent via a relatively secure line (hereinafter referred to as a secure line) such as a dedicated line or a public telephone line is connected to the card information issuing computer I and Connected to merchant computer M. However, the card information issuing computer I may be configured to be held by a card issuer which is a different agent from the settlement agent. This configuration is the same in the following other configuration examples. In the above description, each of the merchant computer M, the settlement agent computer P, and the card information issuer computer I can be configured as one computer or a system including a plurality of computers.
[0087]
In this configuration, the purchaser computer B requests the disposable credit card information (disposable postpaid method information) from the card information issuing computer I at 10 (disposable credit card information request message transmission). On the other hand, the card information issuing computer I sends the disposable credit card information to the purchaser computer B via the Internet N at 20 (disposable credit card information message transmission), and the disposable credit card sent to the purchaser computer B at 25. Corresponding data between the card information and the real credit card information is sent to the settlement agent computer P via a secure line (corresponding data transmission). Further, at 30, the purchaser computer B sends the order table and disposable credit card information to the seller computer M via the Internet N (order message transmission). At 40, the merchant computer M sends the disposable credit card information sent from the purchaser computer B and the order table to the settlement agent computer P via a secure line (sends an examination request message), and requests permission for settlement. . As a result, the settlement agent computer P knows the actual credit card information from the disposable credit card information sent from the seller computer M, determines whether or not settlement is possible from the information and the order table, and sets the result to 50. The message is sent to the seller computer M via a secure line (send message). Further, the merchant computer M informs the purchaser computer B via the Internet N of whether or not the received settlement is possible (send order message or impossible message transmission), and if the settlement is possible, the product shipping process I do.
[0088]
However, in the above configuration, the seller includes an individual seller.
[0089]
(Operation of First Configuration Example of First Embodiment)
Next, the operation of the first configuration example of the present embodiment will be described in detail with reference to the drawings.
[0090]
Referring to FIG. 2, the purchaser uses the purchaser computer B to input personally identifiable information such as his / her credit card information, and creates a disposable credit card information request message including this information (B11). The disposable credit card information request message is sent to the card information issuing computer I via the Internet N (B12 → I11). However, the disposable credit card information request message includes the credit card information requested by the card information issuing computer I (credit card number and password and validity period if necessary) as required.
[0091]
On the other hand, the card information issuing computer I inspects the information for identifying the individual sent from the purchaser computer B, and if it is correct, generates the disposable credit card information, and displays the disposable credit card information message including this. It is created (I12), and this disposable credit card information message is transmitted to the purchaser computer B (I13 → B13). Separately from this operation, the card information issuing computer I creates correspondence data between the purchaser's credit card information and disposable credit card information and creates a correspondence message (I14), which is then used as a settlement agent through a secure line. Send to computer P (I15 → P11). On the other hand, the settlement agent computer P has a table (hereinafter referred to as “table”) that allows the correspondence between the disposable credit card information and the purchaser's credit card information (hereinafter referred to as true credit card information). This is registered in the correspondence table) (P12). This correspondence table is created by a file or a database. Therefore, the correspondence is realized by storing the true credit card information and the disposable credit card information in the same record when created in a relational database, for example.
[0092]
In addition to the disposable credit card information sent from the card information issuing computer I, the purchaser computer B collects the purchase item designated by the purchaser, the number of pieces, and the information (order list) requested by the seller for sale. An order message is created (B14) and sent to the seller computer M via the Internet N (B15 → M11).
[0093]
Thereafter, the seller computer M checks the order table sent from the purchaser computer B and the disposable credit card information included in the order table. Then, the sent-out credit card information and the information requested by the credit company for the review are put together to create a review request message (M12), which is sent to the settlement agent computer P using a secure line (M13). → P13), the payment agent will be examined.
[0094]
The settlement agent computer P searches the correspondence table updated in P12 from the disposable credit card information included in the sent examination request message, obtains the corresponding actual credit card information, and the true credit card information. And other information sent from the seller computer M to create a message (hereinafter, referred to as “acceptability message”) indicating whether or not the payment can be made, and the disposable credits used together. Corresponding data between the card information and the actual credit card information is discarded (however, the disposable credit card information is deleted upon discarding; P14). Thereafter, the availability message is notified to the seller computer M using a secure line (P15 → M14).
[0095]
As described above, when notification of whether payment is possible (whether payment is possible), the seller computer M sends a message based on the examination result sent from the payment agent computer P (an order message or a message that rejects an order). ) Is created (M15), and if the examination result is acceptable, the purchaser computer B is notified via the Internet N that an order has been received, and an order receipt message is transmitted to notify the contents of the order received (M16 → B16). ) Actual product shipping processing is performed (M17, M18 → B17). If it is not possible, the purchaser computer B is informed via the Internet N that the order cannot be received (M16 → B16).
[0096]
In this configuration example, a credit card is used, but other post-payment methods such as a cash card and a debit card may be used.
[0097]
In the operation shown in FIG. 2, when information is sent via the Internet N, information flows on the Internet. Therefore, in order to reduce the risk of information leaking to parties other than the parties, the information is encrypted and sent. Is desirable.
[0098]
Furthermore, when the card information issuing computer I generates disposable credit card information at I12, random information is generated using random numbers, etc., and in what order credit card information is generated from others It is desirable not to be able to visit. However, it should not be the same value as the disposable information currently in use.
[0099]
In this configuration, payment agent computer P and card information issuing computer I are separate computers, but payment agent computer P and card information issuing computer I may be implemented on the same computer.
[0100]
Furthermore, an example of each message in the above will be described in detail with reference to the drawings.
[0101]
・ Disposable credit card information request message
In B11 of FIG. 2, the disposable credit card information request message created by the purchaser computer B includes the information of the requester (purchaser) requesting the disposable credit card information and the requested disposable credit as shown in FIG. Request credit card information indicating the contents of the card information.
[0102]
In this configuration, the purchaser information includes, for example, a name, a true credit card number, a true credit card expiration date, and a true credit card password, as shown in FIG. The disposable credit card information includes, for example, the expiration date and password of the requested disposable credit card. Therefore, the requester information may be configured not to be understood by a third party by encryption or the like.
[0103]
By configuring in this way, the card information issuing computer I can confirm the purchaser's legitimacy and the purchaser's true credit card information, and then newly generate disposable credit card information. .
[0104]
・ Disposable credit card information message
Further, the disposable credit card information message created in I12 of FIG. 2 includes disposable credit card information generated by the card information issuing computer I as shown in FIG. However, since it is not necessary to include the requester information included in the disposable credit card information request message, it is better not to include it. This is to avoid being on the Internet N as much as possible because the requester's information includes information such as a credit card number. Furthermore, for the sake of safety, it is preferable that the disposable credit card information is encrypted so that it cannot be understood by a third party.
[0105]
・ Order message
Further, as shown in FIG. 5, the order message created in B <b> 14 of FIG. 2 includes an order table including the order contents input by the purchaser and disposable credit card information. However, when creating an order message, the purchaser computer B calculates a message digest (order table message digest: highly encrypted checksum) using a one-way hash function or the like for the order table, This may be included in the order message and stored in the purchaser computer B. This is because it is possible to determine whether or not the contents have been tampered by performing the same calculation on the same order table later. This makes it possible to prevent a malicious person from tampering with the data and misusing it. The message digest calculation operation may be executed after an order message transmission command is input from the purchaser and added to the order message. Furthermore, the disposable credit card information may be encrypted.
[0106]
・ Correspondence message
Further, as shown in FIG. 6, the correspondence message created in I14 of FIG. 2 includes true credit card information and single use credit card information. It is comprised so that it may be stored corresponding to. However, at this time, it is desirable that both the true credit card information and the disposable credit card information are encrypted.
[0107]
・ Request message
Further, as shown in FIG. 7, the examination request message created in M12 of FIG. 2 includes an order table, an order table message digest, and disposable credit card information. Here, as the order table message digest, the one notified from the purchaser computer B may be diverted. This is because it is not necessary for the merchant computer M to newly calculate.
[0108]
・ Availability message
Further, as shown in FIG. 8, the availability message created in P15 of FIG. 2 includes an order table, an order table message digest, and availability information. Here, it is necessary that the settlement agent computer P includes the same message digest calculation means as the purchaser computer B. This is because the settlement agent computer P not only needs to confirm the consistency between the order table and the order table message digest, but also needs to attach a message digest for the order table notified to the settlement agent to the propriety message. is there. Accordingly, the settlement agent computer P creates a propriety message including the newly calculated order table message digest, the order table, and the propriety information.
[0109]
・ Order message
Further, the order message is created by the seller computer M in the case of acceptability of settlement in the acceptability information of the acceptability message, and includes an order table, an order table digest, and order data. . Here, as the order table message digest, it is necessary to divert the one notified from the settlement agent computer P as it is. This is because the purchaser computer B that has received the order message determines whether or not the order table has been tampered with. The order information includes the order number added by the dealer (seller computer M) and the shipping date of the product.
[0110]
(Second configuration example of the first embodiment)
Next, a second configuration example of the present embodiment will be described in detail with reference to the drawings. FIG. 10 is a diagram of a typical electronic commerce system according to the second configuration example of the present embodiment. As shown in FIG. 10, in this configuration example, as in the first configuration example, the purchaser computer B, the seller computer M, and the card information issuing computer I are connected via the Internet N. Separately, the settlement agent computer P is connected to the card information issuing computer I and the seller computer M via a relatively secure line such as a dedicated line or a public telephone line.
[0111]
In this configuration, the purchaser computer B sends the order table and the disposable credit card information previously sent from the card information issuing computer I to the seller computer M via the Internet N at 10. At 20, the merchant computer M sends the disposable credit card information and the order table sent from the purchaser computer B to the settlement agent computer P through a secure line, and requests settlement permission. The payment agent computer P knows the actual credit card information from the disposable credit card information sent from the seller computer M, decides whether payment is possible from the information and the order table, and sells it via a secure line at 30. Send to the vendor computer M. At the same time, the settlement agent computer P informs the card information issuing computer I via a secure line that the disposable credit card information has been used 40. The card information issuing computer I generates new disposable credit card information, sends it to the purchaser computer B via the Internet N at 50, and secures the correspondence data between the newly generated disposable credit card information and the actual credit card information at 55 To the payment agent computer P through a simple line. The merchant computer M informs the purchaser computer B via the Internet N of whether or not the settlement that has been sent is 60, and if the settlement is possible, performs a shipping process for the merchandise.
[0112]
(Operation of Second Configuration Example of First Embodiment)
Next, the operation of the second configuration example of the present embodiment will be described in detail with reference to the drawings. However, in this configuration example, the purchaser has disposable credit card information in advance. This is because, in this configuration example, the settlement agent gives a new disposable credit card to the purchaser every time the disposable credit card is used. However, it is assumed that the disposable credit card information used for the first use is given in advance from a settlement agent when applying for a credit card or by a later application.
[0113]
Referring to FIG. 11, the purchaser uses the purchaser computer B, in addition to the disposable credit card information previously sent from the card information issuing computer I, the purchase item designated by the purchaser, the number of items, and the seller image. Creates an order message by gathering together information required for sales (B21), and transmits it to the seller computer M via the Internet N (B22 → M21).
[0114]
On the other hand, the seller computer M checks the order table sent from the purchaser computer B and the disposable credit card information included in the order table.
After that, the sent-out credit card information and the information requested by the credit company are compiled and an examination request message is created (M22), which is transmitted to the settlement agent computer P using a secure line. (M23 → P21), the payment agent is examined.
[0115]
The settlement agent computer P searches for correspondence data sent in advance from the card information issuing computer I using the disposable credit card information sent to know the corresponding true credit card information. Thereafter, an examination is performed using actual credit card information and other information sent from the seller computer M to determine whether payment (substitution of payment) is permitted or not, and a message including this determination (acceptance message) Is created (P22), and this is notified to the seller computer M using a secure line (P23 → M24).
[0116]
In addition, the settlement agent computer P notifies the seller computer M of the availability message and creates a message (usage notification message) notifying the card information issuing computer I that the disposable credit card information has been used (P24). This is notified to the card information issuing computer I through a secure line (P25 → I21), and the corresponding data of the used disposable credit card information and the actual credit card information is discarded from the correspondence table (P24).
[0117]
Further, the card information issuing computer I generates a new disposable credit card information message instead of the used disposable credit card information sent from the payment agent computer P and creates a new disposable credit card information message (I22). This is sent to the purchaser computer B (I23 → B24).
At the same time, the card information issuing computer I creates correspondence data between the actual credit card information and the disposable credit card information and creates a correspondence message (I24), which is sent to the settlement agent computer P through a secure line ( I25 → P26).
[0118]
Further, the seller computer M creates a message (an order message or a message notifying that payment is not possible) according to the examination result sent from the payment agent computer P. Here, if it is determined that payment is possible, the merchant computer M creates an order receipt message notifying that an order has been received (M25), and notifies this to the purchaser computer B via the Internet N (M26). → B23), the product shipping process is actually performed (M27, M28 → B25). On the other hand, if payment is not possible, the purchaser computer B is informed via the Internet N that an order cannot be received (corresponding to M26 → B23).
[0119]
In this configuration example, a credit card is used, but other post-payment methods such as a cash card and a debit card may be used.
[0120]
In FIG. 11, when information is transmitted via the Internet N, information flows on the Internet. Therefore, it is desirable to encrypt and flow the information in order to reduce the risk of information leakage to parties other than the parties.
[0121]
Furthermore, when the card information issuing computer I generates disposable credit card information at I22, random information is generated using random numbers, etc., and in what order credit card information is generated from others It is desirable not to be able to visit. However, it should not be the same value as the disposable information currently in use.
[0122]
Furthermore, in this configuration, the payment agent computer P and the card information issuing computer I are separate computers, but the payment agent computer P and the card information issuing computer I may be realized on the same computer. .
[0123]
In this configuration example, the order message, examination request message, availability message, order receipt message, and corresponding message are all the same as those in the first configuration example. The usage notification message in this configuration example includes used disposable credit card information, and the new disposable credit card information message includes disposable credit card information newly assigned by the card information issuing computer I. It is.
[0124]
Further, in this configuration example, the order message, the examination request message, the availability message, the order receipt message, and the corresponding message are the same as those in the first configuration example. The use notification message includes used disposable credit card information, and the new disposable credit card information message includes newly added disposable credit card information.
[0125]
(Third configuration example of the first embodiment)
Next, a third configuration example of the present embodiment will be described in detail with reference to the drawings. FIG. 12 is a diagram of a typical electronic commerce system according to the third configuration example of the present embodiment. As shown in FIG. 12, in this configuration example, as in the first configuration example, the purchaser computer B, the seller computer M, and the card information issuing computer I are connected via the Internet N. Separately, the settlement agent computer P is connected to the card information issuing computer I and the seller computer M via a relatively secure line such as a dedicated line or a public telephone line.
[0126]
In this configuration, the purchaser computer B sends the order table and the disposable credit card information previously sent from the card information issuing computer I to the seller computer M via the Internet N at 10. At 20, the merchant computer M sends the disposable credit card information and the order table sent from the purchaser computer B to the settlement agent computer P through a secure line, and requests settlement permission. The payment agent computer P knows the actual credit card information from the disposable credit card information sent from the seller computer M, decides whether payment is possible from the information and the order table, and sells it via a secure line at 30. Send to the vendor computer M. At the same time, the payment agent computer P generates new disposable credit card information and informs the card information issuing computer I at 40 via a secure line. The card information issuing computer I sends new disposable credit card information 50 to the purchaser computer B via the Internet N. The merchant computer M informs the purchaser computer B via the Internet N at 60 according to whether the settlement is sent or not, and if the settlement is possible, performs a merchandise shipping process.
[0127]
(Operation of the third configuration example of the first embodiment)
Next, the operation of the third configuration example of the present embodiment will be described in detail with reference to the drawings.
[0128]
Referring to FIG. 13, in addition to the disposable credit card information sent in advance from the card information issuing computer I, the purchaser collectively orders the purchase item and quantity designated by the purchaser and the information requested by the seller for the sale. A message is created (B31) and sent to the seller computer M via the Internet N (B32 → M31). However, the disposable credit card information used for the first time is the same as that in the second configuration example.
[0129]
Further, the dealer computer M checks the order table and the disposable credit card information sent from the purchaser computer B. Thereafter, the sent-out credit card information and the information requested by the credit company are collected together to create a review request message (M32), which is sent to the settlement agent computer P using a secure line ( M33 → P31), payment (substituting for payment) is examined.
[0130]
The settlement agent computer P retrieves correspondence data from the disposable credit card information sent to know the corresponding actual credit card information. Further, the credit card information and other information sent from the merchant computer M are used for examination to determine whether or not to accept. Thereafter, a message (possibility message) for notifying this determination is created (P32), and this is notified to the dealer computer M using a secure line (P33 → M34).
[0131]
Further, in the case where payment agency is possible, the payment agent computer P notifies the seller computer M of a message indicating whether or not payment is possible, and generates new disposable credit card information. The data corresponding to the credit card information is updated (P34), and a new disposable credit card information message including the new disposable credit card information is notified to the card information issuing computer I through a secure line (P35 → I33).
[0132]
On the other hand, the card information issuing computer I transfers the disposable credit card information message sent from the settlement agent computer P to the purchaser computer B via the Internet N.
[0133]
In addition, in the seller computer M, if the payment result (payment for payment) is acceptable in the examination result sent from the payment agent computer P, the order received is notified to the purchaser computer B via the Internet N. A message is transmitted (M36 → B33), and the product shipping process is actually performed (M37, M38 → B35). In addition, if the content of the payment acceptability message notified from the settlement agent computer P indicates that the payment is not possible, the purchaser computer B is notified to the purchaser computer B via the Internet N (corresponding to M36 → B33).
[0134]
In this configuration example, a credit card is used, but other post-payment methods such as a cash card and a debit card may be used.
[0135]
In FIG. 13, when information is sent via the Internet N, information flows on the Internet. Therefore, in order to reduce the risk of information leakage to parties other than the parties, it is desirable to flow the information encrypted.
[0136]
Furthermore, in P34, when the payment agent computer P generates disposable credit card information, random information is generated using random numbers, etc., and in what order the credit card information is generated from others. It is desirable not to be able to visit. However, it should not be the same value as the disposable information currently in use.
[0137]
Furthermore, in this configuration, the payment agent computer P and the card information issuing computer I are separate computers, but the payment agent computer P and the card information issuing computer I may be realized on the same computer. .
[0138]
In addition, the order message, the examination request message, the availability message, the order receipt message, and the new disposable credit card information message in this configuration example are the same as those in the second configuration example.
[0139]
(Effects of the first embodiment)
With this configuration, in this embodiment, the purchaser can perform electronic commerce without knowing the personal information of his / her postpayment method to the seller. In addition, merchants can conduct transactions with payment authorization without changing existing equipment.
[0140]
Furthermore, according to the present embodiment, the purchaser can obtain the disposable postpay method information only when necessary, and can save the trouble of holding extra information.
[0141]
Furthermore, according to the present embodiment, wiretapping by a party other than the party is difficult, and personal information is not leaked to parties other than the party.
[0142]
Furthermore, according to the present embodiment, the payment agent company does not need to newly install an extra facility.
[0143]
Furthermore, according to the present embodiment, the purchaser always holds disposable postpay information that can be used, and the extra work of obtaining it becomes unnecessary.
Furthermore, according to the present embodiment, the payment agent generates and manages the correspondence between the disposable postpaid scheme information and the actual postpaid scheme information in one place, and the management is more than in the case where similar information is present in a plurality of places. It becomes easier and safer.
[0144]
[Second Embodiment]
Next, a second embodiment in which the present invention is preferably implemented will be described in detail with reference to the drawings. However, this embodiment is different from the first embodiment and has a configuration in which the card information issuing computer I is not provided.
[0145]
(Configuration of Second Embodiment)
FIG. 14 is a diagram of a typical electronic commerce system according to this embodiment.
[0146]
As shown in FIG. 14, in this embodiment, there are a purchaser, a seller, and a payment agent, where the purchaser is the purchaser computer B, the seller is the seller computer M, and the payment agent is the payment agent. Each has a vendor computer P, and each computer is connected via the Internet N.
[0147]
In FIG. 14, the order table is sent from the seller computer M to the purchaser computer B at 10, and the combined information of the order table and postpayment method information is sent from the purchaser computer B to the settlement agent computer P at 20. The order table and the payment permission are sent from the settlement agent computer P to the seller computer M at 30 and the buyer computer B is notified that the seller computer M has received an order from the purchaser at 40. Has been.
[0148]
(Operation of Second Embodiment)
Based on the above configuration, the operation of the present embodiment will be described in detail with reference to the drawings.
[0149]
Referring to FIG. 15, in this configuration, the purchaser first selects the type of credit card (credit card company to be used) together with information necessary for the transaction (order table) such as purchase item, quantity, address, name, telephone number, etc. (Information to be specified) is input to the purchaser computer B, and a purchase request message for requesting purchase is created (B1). Further, the purchaser computer B creates the purchase request message created in this way, and transmits it to the seller computer M via the Internet N (B2 → M1).
[0150]
On the other hand, upon receiving the purchase request message, the seller computer M confirms the purchase item and quantity based on the contents of the order table included in the purchase request message, inspects the inventory, etc. After calculating the grand total, an order message is added to the notified order list by adding the sales price and information identifying the merchant itself issued by the credit card issuing company notified from the buyer computer B. It is created (M2) and transmitted to the purchaser computer B via the Internet N (M3 → B3). That is, in the present embodiment, a registration contract or the like is made in advance between the seller and the payment agent, and information for identifying (specifying) the seller or the seller computer M is registered in the payment agent computer P. Or managed by a payment agent.
[0151]
In this way, when the order message is notified from the seller computer B, the purchaser confirms whether or not there is an error in the sent order list, and if it matches his request, the purchaser. The credit card information (credit card number, etc.) is added to the received order table, and a payment request message for requesting the payment agent to the payment agent is created (B4). To the settlement agent computer P (B5 → P1).
[0152]
On the other hand, the settlement agent computer P checks the order table and the credit card information included in the settlement request message sent from the purchaser computer B, and determines whether or not to permit the payment (whether the settlement is performed). Or not). If the payment is permitted as a result of the determination, the settlement agent computer P adds a message (permission for settlement) to the order table included in the received settlement request message with information for permitting payment (substituting for settlement). (Availability message to which the availability information to be added) is added (P2). Further, the settlement agent computer P specifies the seller or the seller computer M from the information for specifying the seller attached to the received order table, and sends the created N / A message to the seller computer M via the Internet N. (P3 → M4). At this time, the credit card information (credit card number or the like) sent from the purchaser computer B is not sent to the seller computer M. In addition, when the payment agent computer P does not allow payment (payment for payment), a message for notifying the purchaser computer B that payment is not allowed (payment for payment) (additional information indicating whether payment is not permitted) is added. Created (P2) and sends it to the seller computer M via the Internet N (P3 → M4).
[0153]
In addition, when the acceptance message is received in this way, when the settlement is permitted, the merchant computer M checks the order table included in the sent availability message and the information permitting payment, and if correct, the order is received. Is received (M5), and is transmitted to the purchaser computer B via the Internet N (M6 → B6).
[0154]
However, in the above example, a credit card is used. However, other post-payment methods such as a cash card and a debit card may be used.
[0155]
In addition, since information flows on the Internet when sending information in each step, it is desirable to encrypt the information in order to reduce the risk of information leaking to non-parties.
[0156]
Furthermore, when the seller creates an order list in M2, the message digest (highly encrypted checksum) using a one-way hash function or the like based on the created data is simultaneously executed on the seller computer M. It is preferable to calculate and add to the order table, send it to the purchaser computer B, and store it. In this way, by adding the message digest to the order table, the seller can determine whether or not the contents have been tampered with by performing the same calculation for the same order table later. This makes it possible to prevent malicious purchasers and eavesdroppers from tampering with data and misusing it.
[0157]
・ Order message
Here, FIG. 16 shows an example of the order message created in M2. Referring to FIG. <Order list> and A message digest is calculated and added using the data between the </ order table>.
[0158]
Further, in B4, the purchaser checks whether or not the information input by himself / herself in B1 matches the contents of the order table received from the seller computer M, and proceeds to the next only when they match. Therefore, even if the information sent by B2 → M1 is falsified, it is only necessary to proceed from B4. Therefore, when sending information from B2 → M1, encryption is necessary to prevent eavesdropping. Processing is not necessary.
[0159]
Further, in B4, information (hereinafter referred to as credit card information data) designated by the institution executing the credit card settlement such as own credit card information, credit card number, password, etc. is added to the order table sent from the dealer computer M. At this time, the purchaser computer B calculates a message digest for the combined data of the order table and the credit card information data, adds it simultaneously, and sends it to the settlement agent computer P and stores it. . By adding this message digest, the purchaser can know whether or not the content has been tampered by performing the same calculation on the same data later. However, since the credit card information is very important, it is desirable to send it encrypted so that it cannot be intercepted.
[0160]
・ Payment request message
Here, an example of the settlement request message created in B4 is shown in FIG. Referring to FIG. <Settlement request> and A message digest is calculated and added using the data between the </ settlement request>.
[0161]
Further, in P2, the settlement agent computer P checks the sent credit card information and checks whether it is correct. At that time, if possible, share the method of creating a message digest with the buyer computer B, and first calculate the message digest of the order table and credit card information included in the sent payment authorization request message. And check that it is not tampered with, and check that it is equal to that attached. However, if the credit card information is encrypted, it is decrypted and inspected.
[0162]
Further, the settlement agent computer P shares a method for calculating the message digest of the order table with the seller computer P if possible, and compares the value calculated from the order table with the attached value. It is configured to check that the values are the same and confirm that they have not been tampered with.
[0163]
In this way, after all of these confirmations are obtained, the payment agent (credit card payment agency) checks the other conditions and data sent, for example, whether the payment amount exceeds the limit. It is judged that payment is possible if these conditions are satisfied.
[0164]
Here, when it is determined that payment is possible, the credit card information and the message digest information added by the purchaser computer B, if any, are deleted from the data sent from the purchaser computer B, and the remaining seller computer Information indicating that the payment agent (payment agent computer P) has permitted the payment is added to the order table created by M and the message digest information added by the seller computer M, if any. After that, a message digest is calculated from the completed information (payment permission message) and further added, and the notification data (address, etc.) of the seller computer M is obtained from the information identifying the seller himself / herself in the completed data. And a payment permission message is transmitted to the merchant computer M via the Internet N.
[0165]
・ Availability message
Here, FIG. 18 shows an example of the permission / prohibition message created by the payment P2. Referring to FIG. <Settlement permission> A message digest is calculated and added using the data between </ settlement permission>. Further, since the credit card information included in FIG. 17 is not included in this message, the purchaser's credit card information is not known to the seller. Therefore, there is no need for the purchaser to worry that information is leaked from the seller and misused.
[0166]
In M5, the merchant computer M checks the data sent from the settlement agent computer P. Here, if possible, the merchant computer M shares the message digest calculation method with the settlement agent computer P, calculates the message digest of the sent data, and determines whether or not they match, Configure to ensure that it has not been tampered with. In M5, it is also confirmed that the order form data matches that stored, and it is confirmed that the order form data has not been tampered with. Thereafter, after confirming that there is information permitting the payment sent from the settlement agent computer P, data (order receipt message) notifying the purchaser computer B that the order has been received is transmitted. As the data notifying that the order has been received, the same data as the data sent to the purchaser computer B before is added with the information notifying the date of shipment, etc., and the data is calculated, and the message digest is calculated and sent. . At the same time, the seller starts the actual product shipping process.
[0167]
・ Order message
Here, an example of the order receipt message created in M5 is shown in FIG. Referring to FIG. <Order List> and A message digest is calculated and added using the data between the </ order sheet>. Since the permission information included in FIG. 18 is not included in this message, the purchaser does not know the format of the permission information created by the settlement agent. Therefore, it is difficult for the purchaser to impersonate the payment agent and forge the permission information, and the seller can be trusted without checking by other means whether the forgery has been forged.
[0168]
Further, the purchaser computer B receives data notifying that the order has been received from the seller computer M, and then notifies the purchaser via the display or the like. Here, in the purchaser computer B, when the data including the order table and the shipping date is sent from the seller computer M, it is first checked whether or not the order table is the same as the previously sent order table. After checking that there has been no falsification and confirming that the falsification has not been made, the purchaser is notified of the order received by providing information such as the shipping date to the purchaser.
[0169]
If the payment agent (or the payment agent computer P) refuses payment (payment agent) for some reason at P2, the payment agent computer P transmits a payment permission message to the seller computer M ( (P3 → M4) Instead, data indicating that payment is not permitted is transmitted to the purchaser computer B. The data notifying that payment is not permitted includes, for example, an order table, message digest data of the seller computer M, and information indicating that payment is rejected. On the other hand, the purchaser computer B to which the data indicating that payment is not permitted is displayed to the purchaser, for example, the contents of the order table, and the payment is rejected by the settlement agent computer P regarding the settlement. Let me know.
[0170]
(Effects of the second embodiment)
By configuring in this way, in this embodiment, the purchaser can perform electronic commerce without having the seller know the personal information of the post-payment method. Further, since the information that authorizes payment by the payment agent is directly sent from the payment agent to the seller, there is no risk of being counterfeited by the purchaser. In the present embodiment, since only the information necessary for processing by each of the purchaser, the seller, and the settlement agent is passed to each, there is no risk of forgery, and the reliability of the settlement business is improved.
[0171]
Furthermore, according to the present embodiment, wiretapping by a party other than the electronic commerce party is difficult, and personal information is not leaked to parties other than the party.
[0172]
Furthermore, according to the present embodiment, even if the order table is falsified, the seller computer M can easily find the falsification by recalculating the message digest, and can prevent an accident.
[0173]
Furthermore, according to the present embodiment, the seller computer M can quickly find a malicious counterfeit order table and prevent an accident.
[0174]
Furthermore, according to the present embodiment, even if the data sent to the payment agent computer P is falsified, the purchaser computer B can easily find the falsification by recalculating the message digest, thereby preventing an accident. it can.
[0175]
Furthermore, according to the present embodiment, the postpayment method information is encrypted by an encryption method known only by the purchaser computer B and the payment agent computer P, and thus it is more difficult to eavesdrop and the personal information is concealed.
[0176]
Furthermore, according to the present embodiment, the settlement agent computer P can confirm that the data sent from the purchaser computer B has not been tampered with and can prevent an accident.
[0177]
Furthermore, according to the present embodiment, the settlement agent computer P can confirm that the order table in the data sent from the purchaser computer B has not been tampered with and can prevent an accident.
[0178]
Furthermore, according to the present embodiment, even if the data is falsified, the payment agent computer P can easily find the falsification by recalculating the message digest and can prevent an accident.
[0179]
Furthermore, according to the present embodiment, the merchant computer M can confirm that the data sent from the settlement agent computer P has not been tampered with and can prevent an accident.
[0180]
Furthermore, according to this embodiment, even if the data is falsified, the merchant computer M can easily find the falsification by recalculating the message digest, and can prevent an accident.
[0181]
Further, according to the present embodiment, the purchaser computer B can confirm that the data sent from the seller computer M has not been tampered with, and can prevent an accident.
[0182]
【The invention's effect】
As described above, according to the invention described in claim 1, it is possible to provide an electronic commerce method in which fraud is eliminated. In other words, it becomes possible for the purchaser to conduct electronic commerce without notifying the seller of the personal information of the post-payment method. Furthermore, according to the present invention, it becomes possible for a dealer to perform a transaction after receiving authentication of payment without changing the equipment using the conventional postpaid method information.
[0183]
Further, according to the invention described in claim 2, it becomes possible to provide disposable postpaid method information according to the purchaser's needs, and there is no need for the disposable postpaid method information, and the purchaser is extraneous. No need to manage information.
[0184]
Furthermore, according to the invention described in claim 3, since it becomes possible to provide the purchaser with new disposable postpaid method information every time the disposable postpaid method information is used, the disposable postpay is always usable by the purchaser. It becomes possible to hold the method information, and it is possible to save extra trouble at the time of purchase.
[0185]
Further, according to the invention described in claim 4, even when the disposable postpaid method information is configured to be issued in the postpaid method information issuer system, the postpay method information and the disposable postpay are always kept in the payment agent in the latest state Since it is possible to manage the correspondence with the method information, it is possible to reliably specify the true (regular) postpayment method information of the purchaser from the disposable postpay method information when performing payment.
[0186]
According to the invention described in claim 5, since it becomes possible to issue new disposable postpaid method information in the settlement agent system, the correspondence between the disposable postpaid method information and the true postpaid method information can be handled at one place. It is possible to generate and manage, management becomes easier than when similar information exists in a plurality of systems, and safety can be improved.
[0187]
Furthermore, according to the invention described in claim 6, since it becomes possible to avoid the use of the once-used disposable postpaid method information being reused, the life cycle of the disposable postpaid method information is set to an appropriate length according to the purchaser. It becomes possible.
[0188]
Furthermore, according to the seventh aspect of the invention, it is possible to make it difficult for eavesdroppers other than those involved in electronic commerce to eavesdrop, and it is possible to reduce the possibility that personal information leaks to other parties.
[0189]
Further, according to the invention described in claim 8, it is possible to simplify the configuration for realizing the present method, and it is possible to perform each process in a simplified manner in operation.
[0190]
Furthermore, according to the ninth aspect of the present invention, it is possible to perform fraudulent settlement and perform settlement.
[0191]
Furthermore, according to the invention described in claim 10, it is possible to issue disposable post-payment method information for conducting electronic commerce without fraud.
[0192]
According to the eleventh aspect of the invention, it is possible to prevent the possibility of fraud when requesting payment from the seller to the payment agent.
[Brief description of the drawings]
FIG. 1 is a diagram of a typical electronic commerce system according to a first configuration example according to a first embodiment of the present invention.
FIG. 2 is a flowchart in which electronic commerce is performed among a seller computer, a purchaser computer, a settlement agent computer, and a card information issuing computer corresponding to the first configuration example in the first embodiment of the present invention.
FIG. 3 is a diagram showing an example of a disposable credit card information request message according to the first configuration example of the first embodiment of the present invention.
FIG. 4 is a diagram showing an example of a disposable credit card information message according to the first configuration example of the first embodiment of the present invention.
FIG. 5 is a diagram showing an example of an order message according to the first configuration example of the first embodiment of the present invention.
FIG. 6 is a diagram illustrating an example of a correspondence message according to the first configuration example of the first embodiment of the present invention.
FIG. 7 is a diagram showing an example of an examination request message according to the first configuration example of the first embodiment of the present invention.
FIG. 8 is a diagram illustrating an example of a propriety message according to the first configuration example of the first exemplary embodiment of the present invention.
FIG. 9 is a diagram illustrating an example of an order receipt message according to the first configuration example of the first exemplary embodiment of the present invention.
FIG. 10 is a diagram of a typical electronic commerce system according to a second configuration example in the first embodiment of the present invention.
FIG. 11 is a flowchart in which electronic commerce is performed among a seller computer, a purchaser computer, a settlement agent computer, and a card information issuing computer corresponding to the second configuration example in the first embodiment of the present invention.
FIG. 12 is a diagram of a typical electronic commerce system according to a third configuration example in the first embodiment of the present invention.
FIG. 13 is a flowchart in which electronic commerce is performed among a seller computer, a purchaser computer, a settlement agent computer, and a card information issuing computer corresponding to the third configuration example in the first embodiment of the present invention.
FIG. 14 is a diagram of an exemplary electronic commerce system according to the second embodiment of the present invention.
FIG. 15 is a flowchart in which electronic commerce is performed between a seller computer, a purchaser computer, and a payment agent computer in the second embodiment of the present invention.
FIG. 16 is an example of an order message sent by a merchant computer to a purchaser computer in the second embodiment of the present invention.
FIG. 17 is an example of a payment request message for obtaining a payment permission that the purchaser computer sends to the payment agent computer in the second embodiment of the present invention.
FIG. 18 is an example of a propriety message indicating whether or not a proxy for payment is sent from a settlement agent to a seller computer in the second embodiment of the present invention.
FIG. 19 is an example of an order receipt message indicating that an order received is sent from the seller computer to the purchaser computer in the second embodiment of the present invention.
[Explanation of symbols]
B Purchaser computer
I card information issuing computer
M dealer computer
N Internet
P Settlement agent computer

Claims (5)

A purchaser terminal of a purchaser who purchases a product, a seller system of a seller who sells the product, and a postpayment method information issuer system of a postpayment method information issuer that issues postpayment method information of the purchaser. An electronic device connected via a network, and a payment agent system of a payment agent that performs a payment agent on behalf of the seller is connected to the seller system and the postpay method information issuer system via a secure line An electronic commerce method that uses a post-payment method to pay for goods in a commerce system ,
The purchaser terminal, by sending an order message, including a deferred payment method information of disposable that the deferred payment method information the issuer system has been issued, and the settlement request process to request the payment of goods to purchase to the seller system,
A settlement agent requesting step for requesting the payment agent system to perform the payment for the payment by transmitting an examination request message including disposable postpay method information included in the order message , to the seller system;
The payment agent system refers to a correspondence table in which the disposable postpaid method information and the purchaser's postpaid method information are associated with each other, and uses the purchaser's postpaid method information corresponding to the disposable postpay method information. To determine whether or not the payment is possible, and when the payment is possible, a payment payment proxy process for substituting the payment;
Postpayment method information use notification step of transmitting a use notification message to the postpayment method information issuer system for notifying that the disposable postpay method information has been used when the payment agent system performs the payment. When,
When the postpayment method information issuer system receives the usage notification message, a new disposable postpayment method that issues new disposable postpayment method information different from the disposable postpayment method information used to the purchaser terminal. Information issuing process;
When the post-payment method information issuer system issues the new disposable post-payment method information, the new one-time post-payment method information and the purchaser's post-payment method information are associated with the settlement agent system. New disposable postpay method information sending process for sending a correspondence message;
When the settlement agent system receives the correspondence message, based on the correspondence message, the new disposable postpay method information and the purchaser's postpay method information are associated with each other and registered in the correspondence table. Process,
An electronic commerce method characterized by comprising: Before the settlement request process,
The buyer terminal, by a sending a message including information identifying the buyer, a disposable deferred payment method information request step of requesting the deferred payment method information of the disposable before Symbol postpaid method information issuer system,
Before SL postpaid method information issuer, a disposable deferred payment method information issuing step of issuing a deferred payment method information of the disposable to the buyer terminal according to the message,
The electronic commerce method according to claim 1, further comprising: When the post-payment method information issuer system issues the disposable post-payment method information, the settlement agent system associates the post-payment method information and the disposable post-payment method information and registers them in the correspondence table. The electronic commerce method according to claim 2 , further comprising: The electronic commerce method according to any one of claims 1 to 3, wherein the settlement agent system includes a correspondence information deletion step of deleting the used disposable postpay method information from the correspondence table . The post-payment method information , the disposable post-payment method information , or the new disposable post-payment method information between the purchaser terminal, the seller system, the settlement agent system, and the post-payment method information issuer system. electronic commerce method according to any one of the preceding claims 4, characterized in that for transmitting encrypted.

Images