JP2000311196A - System for processing application procedure and ic card used therefor - Google Patents

Abstract

PROBLEM TO BE SOLVED: To realize a high speed processing by omitting the purchase and adhesion of a stamp in the case of an application procedure while making an application object clear through the use of a simple circulation route. SOLUTION: A user register institution 10 issues an IC card 20, a user terminal 30 transmits stamp purchase requesting data to purchase electronic stamp data and a stamp issuing institution 40 and a financial institution 60 settle a money amount for the portion of a purchase money amount from the account of the financial institution corresponding to identifying information of the card 20. Then electronic stamp data for the portion of the purchase money amount is returned, the IC card is filled up with electronic stamp data in a memory with the user terminal 30, the data corresponding to a stamp money amount for the application procedure is transmitted as an electronic stamp certificate together with document data when the application is executed and an application organ 50 judges the existence of an abnormality in the certificate. Unless the abnormality exists, an application procedure completion announcement is outputted in this application procedure processing system and the IC card is used for the system.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION The present invention relates to an electronic stamp (hereinafter referred to as an electronic stamp) corresponding to an application fee when applying for an electronic document (hereinafter referred to as an "electronic document") to a public organization. The present invention relates to an application procedure processing system for applying by attaching an electronic document to an electronic document and paying the application fee electronically, and an IC card used for the application processing system.

[0002]

2. Description of the Related Art In recent years, with the development of network technology,
2. Description of the Related Art Technologies such as electronic cash (also referred to as electronic money) and electronic settlement have attracted attention. For details of this kind of electronic cash and electronic payment, see, for example, “Series / Mathematics of Information Science, Modern Ciphers, Tatsuaki Okamoto, Hiroshi Yamamoto, Sangyo Tosho Co., Ltd., p. 26
1-281 ".

FIG. 11 is a schematic diagram showing the flow of such general electronic cash. As shown by a broken-line frame in the figure, “Pkx” is the public key of x, “Skx” is the secret key of x, and “Skx surrounded by a double elliptic curve” is the electronic key of x. The method of describing a signature is commonly used in other drawings in this specification.

[0006] First, a user is registered as a user registration institution 1.
Report a card issuance request (ST1). The card issuance request includes the account number, address,
In addition to the issuance request form that describes the application details such as name, phone number and date of birth, such as ordinary credit card,
A copy of a driver's license for identification and a copy of a resident's card are attached.

The user registration organization 1 examines the card issuance request and issues the IC card 3 to the user (ST2). The IC card 3 issues a card ID, which is a unique number for identifying the IC card, a password for confirming the authenticity of the user, an account number for settlement, and electronic cash (value) in an internal IC chip. Secret information such as a public key certificate of a financial institution and a public key pair including a user's public key PkU and a secret key SkU are recorded. Note that the public key pair means a pair of a public key and a secret key which are kept secret in a public key cryptosystem.

[0006] The IC chip has tamper resistance (a part that does not allow arbitrary rewriting and maintains security), and prevents leakage of recorded contents to the outside and illegal rewriting.

Subsequently, the user gives a withdrawal request to the financial institution 2 for settlement (ST3).
Transfer the money from your account to IC card 3. At this time,
The IC card 3 contains the amount set by the user (financial institution 2
Is filled (ST4). On the other hand, the amount corresponding to value 4 (10,000 yen in FIG. 1) is reduced from the user's account. In some cases, this withdrawal is performed via a network from home without visiting the financial institution 2.

After the value is filled, when the user purchases the product 6 at the store 5 or the like using the IC card 3 (or transfers it to another person), the user pays the price of the product from the IC card 3 through the terminal device. Value 7 (2,000 in FIG. 1)
Is paid to the store 5 (ST5). In this way, the user can pay the value 7 by dividing the filled value 4. Payment may also be made at home via a network.

Here, the value 7 is digitally signed with the user's private key SkU and sent to the store 5 together with the user's public key certificate Skc. Upon receiving the value 7 and the public key certificate Skc, the store 5 delivers the product 6 to the user (ST6).

The store (or transferee) 5 removes the digital signature of the user from the electronic cash (value signed by the user and the financial institution) received by the payment, and then stores the digitally signed value of the store 5. 8 and the store's public key certificate Skm to the financial institution (ST
8) It is possible to deposit cash equivalent to value into their own account.

[0011] Deposit is not limited to each payment, but may be made after collecting the received values to some extent. Further, at the time of deposit, the digital signature of the store 5 and the public key certificate Skm may be omitted. The store 5 may apply (or transfer) the received value 8 to another payment without depositing it in the financial institution 2.

By the way, when applying for an electronic document written by a word processor or a personal computer to a public organization, for example, when applying for a patent to the Patent Office, the applicant must submit a request to the application attached to the specification of the patent. They purchase and affix the required amount of stamps for the patent application procedure and apply for it.

As described above, there is a problem that the applicant takes time and effort to purchase a stamp of an amount necessary for the application and attach the stamp to the application document. On the other hand, in view of the situation where electronic cash is being actively experimented recently, it is expected that electronic cash will become widespread in the future. Therefore, payment of fees for application procedures to public institutions may shift to a method using electronic cash.

However, in consideration of payment of an application fee by electronic cash which is currently being developed, there are various types of electronic cash, such as an electronic bill type and a counter type, and there are various forms of payment. Has a problem with many functions.

[0015] In addition, electronic cash, like actual bills,
There is a problem in that the distribution channel becomes complicated when applied to the application procedure because there is a possibility of being transferred from one person to another and used.

[0016]

As described above,
In a conventional application procedure processing system using a stamp, it is troublesome because an applicant purchases a stamp required for the application procedure and affixes the stamp to an application document to apply.

In addition, the electronic cash system has many functions for paying application fees, and among them, the one having the changeability has a complicated distribution channel.

In addition, since the electronic cash system has the confidentiality that the purchased goods and the like are unknown to anyone other than the user, when used in the application procedure, the application target becomes unknown.

Further, since the electronic cash system uses a protocol for securely transferring (securing) only electronic cash, it cannot be securely transmitted simultaneously with the application document.

Furthermore, in the case of electronic cash, there is a premise that electronic cash issued by the issuing organization will be collected in the future. With this collection, it is checked whether the electronic cash is forged or double-used. Therefore, in the case of electronic cash, there is a problem that the electronic cash collected by the financial institution is returned to the issuing institution.

The present invention has been made in view of the above-mentioned circumstances, and can eliminate the trouble of purchasing and attaching a stamp during the application procedure, and can clarify the object of application and realize high-speed processing by a simple distribution channel. An object of the present invention is to provide a feasible application procedure processing system and an IC card used therein.

It is another object of the present invention to be able to safely transmit an electronic stamp and an application object at the same time, thereby ensuring security. Still another object of the present invention is to eliminate the occurrence of a return of electronic cash collected by a financial institution to an issuing institution.

[0023]

According to the first aspect of the present invention, there is provided an application procedure for submitting electronic document data of an application document and electronic stamp data of an application fee. An IC card issuing means for issuing an IC card in which unique identification information is registered and capable of storing the electronic stamp data, and electronic stamp data stored in the IC card issued by the IC card issuing means. A purchaser transmitting stamp-purchase request data, and an amount corresponding to the purchase amount from a financial institution account corresponding to the identification information of the IC card based on the stamp-purchase request data transmitted from the purchaser. Payment means for returning the electronic stamp data corresponding to the purchase price, and a filling means for filling the IC card with the electronic stamp data received from the payment means. When the document data is input and a stamp amount in an application procedure for the document data is designated, the electronic stamp data in the IC card corresponding to the designated stamp amount is sent together with the document data. An application procedure processing system comprising: an application receiving unit that determines whether or not the document data and the electronic stamp data transmitted from the document transmitting unit are abnormal, and outputs an application procedure completion notification when there is no abnormality. .

According to a second aspect of the present invention, there is provided an application procedure processing system according to the first aspect, wherein
As the card, the identification information, a pair of public key and private key corresponding to each other, and the own public key certificate are registered. As the purchase means, the IC card is inserted. When executed, an exercise determining means for determining whether or not the exercise of the IC card is valid; an issuer random number requesting means for transmitting an issuer random number request when a determination result by the exercise determining means indicates validity; Upon receipt of the issuer random number in response to the issuer random number request sent by the issuer random number request means, purchase information input means for inputting the issuer random number and the input purchase amount to an IC card; Request data generating means for generating the stamp purchase request data using the secret key, based on the issuer random number and the purchase price input by And a purchase request transmitting unit that transmits the stamp purchase request data and the public key certificate. The settlement unit includes a stamp purchase request based on the public key certificate transmitted from the purchase request transmitting unit. Purchase request verification means for verifying the validity of the request data, and stamp data for generating electronic stamp data for the purchase amount based on the stamp purchase request data when the validity is confirmed by the purchase request verification means Generating means, and stamp data transmitting means for transmitting the electronic stamp data generated by the stamp data generating means, wherein the filling means verifies the validity of the electronic stamp data received from the stamp data transmitting means. Stamp data verifying means, a filling executing means for executing the filling when the validity check by the stamp data verifying means is completed, and a filling executing means According filling is completed, it is the application procedure processing system comprising a filling completion notification means for outputting a filling completion notice.

Further, the invention according to claim 3 is an application procedure processing system according to claim 1, wherein
As the C card, the identification information, a pair of public key pairs including a public key and a secret key corresponding to each other, and the own public key certificate are registered. Is inserted, the exercise determining means for determining whether the exercise of the IC card is valid, and when the result of the exercise determining means shows validity, the electronic stamp data in the IC card is input by inputting a balance display request. A balance display means for displaying an unused balance, a digest creation means for creating document digest information by compressing the document data when the document data is input, and a stamp amount in an application procedure for the document data are designated. Data input means for inputting electronic stamp data corresponding to the designated stamp amount and the document digest information to the IC card, A stamp use certificate creating means for creating an electronic stamp use certificate including the both based on the electronic stamp data corresponding to the stamp amount input by the data input means and the document digest information. A certificate transmitting unit that transmits the electronic stamp use certificate created by the stamp use certificate creating unit and the public key certificate, and the application receiving unit transmits the certificate by the certificate sending unit. An application procedure processing system including a determination unit that determines the presence or absence of the abnormality based on the obtained electronic stamp certificate and the public key certificate.

According to a fourth aspect of the present invention, in the application procedure processing system according to the second aspect, the stamp data transmitting means waits for a predetermined period after transmitting the electronic stamp data, and An application procedure processing system including resending means for retransmitting the electronic stamp data when the charging completion notification is not received from the charging completion notifying means during a period.

According to a fifth aspect of the present invention, in the application procedure processing system according to any one of the first to fourth aspects, an electronic stamp filled by the filling means is used as the IC card. A counter indicating a data balance; and a counter value increasing / decreasing means for substantially increasing the value of the counter when filling by the filling means and substantially decreasing the value of the counter when sending by the document sending means. An application procedure processing system comprising:

The invention corresponding to claim 6 is used in an application procedure processing system for an application procedure for submitting electronic document data of an application document and electronic stamp data of an application fee. Information registration means for registering unique identification information, a plurality of stamp data storage means for individually storing a plurality of electronic stamp data, and the identification information when performing the application procedure. A stamp data reading unit for checking the validity of the application based on the identification information in the registration unit and reading out the electronic stamp data of the stamp data storage unit having the lowest balance among the respective stamp data storage units. It is an IC card.

According to a seventh aspect of the present invention, in the IC card according to the sixth aspect, as the stamp data reading means, at least one of the stamp data storing means is free. An IC card for performing the reading as described above.

The invention according to claim 8 is an IC card according to claim 7, wherein the electronic stamp data is received corresponding to its own identification information, and the electronic stamp data is stored in an empty stamp data storage means. When filling the electronic stamp data, it is determined whether there is a deficit equivalent to the difference between at least the application fee and the total amount of the balances in all other stamp data storage means, An IC card provided with a charging means for performing charging when there is a shortage.

According to a ninth aspect of the present invention, in the IC card according to the sixth aspect, when new electronic stamp data is received in accordance with its own identification information, the presence or absence of an empty stamp data storage means is determined. This IC card is provided with a non-fillable means that makes it impossible to fill new electronic stamp data when there is no empty stamp data storage means.

According to a tenth aspect of the present invention, there is provided an IC card according to the sixth aspect, wherein the electronic stamp data is stored in all the stamp data storing means and the electronic stamp data in all the stamp data storing means is stored. When the total amount of the electronic stamp data is less than the application fee and new electronic stamp data needs to be filled, the stamp data return for returning the electronic stamp data in at least one stamp data storage means so as to create an empty stamp data storage means. Means and a new electronic stamp data which is equal to or more than the application fee with the completion of the settlement of the shortfall amount corresponding to the difference between the electronic stamp data returned by the stamp data return unit and the application fee or the amount exceeding the shortfall amount. Receiving this new electronic stamp data into the empty stamp data storage means. .

(Operation) Therefore, the invention corresponding to claim 1 takes the above-described means, so that the IC card issuing means is capable of registering unique identification information and storing electronic stamp data. And the purchasing means is IC
Transmitting stamp stamp purchase request data for purchasing the electronic stamp data stored in the IC card issued by the card issuing unit, and setting the settlement unit based on the stamp purchase request data transmitted from the purchase unit; The payment amount corresponding to the purchase amount is settled from the account of the financial institution corresponding to the identification information, the electronic stamp data corresponding to the purchase amount is returned, and the filling unit fills the electronic stamp data received from the settlement unit into the IC card,
When the document data is input and the stamp amount in the application procedure for the document data is designated, the document sending means sends the electronic stamp data in the IC card corresponding to the designated stamp amount together with the document data, and The receiving means determines whether there is an abnormality in the document data and the electronic stamp data sent from the document sending means, and outputs an application procedure completion notice when there is no abnormality, so purchase and paste a stamp in the application procedure. This makes it possible to reduce the time and effort and realize a high-speed processing through a simple distribution channel while clarifying the application target.

Also, unlike the function of electronic cash, it is only necessary to confirm the settlement at the time of stamp purchase and to confirm the presence or absence of unauthorized use at the time of application, so that the electronic cash collected at the financial institution is returned to the issuing organization. Occurrence can be eliminated.

According to a second aspect of the present invention, as an IC card, identification information, a pair of public key pairs including a public key and a private key corresponding to each other, and a public key certificate of its own are registered. As the purchasing means, the exercise determining means determines whether or not the exercise of the IC card is valid when the IC card is inserted, and the issuer random number requesting means determines that the determination result by the exercise determining means is valid. When it indicates, the issuer random number request is transmitted, and the purchase information input means receives the issuer random number in response to the issuer random number request transmitted by the issuer random number request means, and the issuer random number and the inputted purchase price are received. And IC
Input to the card, the request data generating means generates stamp purchase request data using a secret key based on the issuer random number and the purchase price input by the purchase information input means, and the purchase request transmitting means outputs the request data generating means The stamp purchase request data and the public key certificate generated by the above are transmitted, and as the settlement means, the purchase request verification means transmits the stamp purchase request data based on the public key certificate transmitted from the purchase request transmission means. The validity is verified, and the stamp data generating means, when the validity is confirmed by the purchase request verifying means, generates electronic stamp data for the purchase price based on the stamp purchase request data, and the stamp data transmitting means The electronic stamp data generated by the stamp data generating means is transmitted, and the stamp data verifying means is used as the filling means by the electronic stamp data received from the stamp data transmitting means. The filling execution means verifies the validity of the data, the filling execution means executes the filling when the validity check by the stamp data verification means is completed, and the filling completion notifying means issues a filling completion notification when the filling by the filling executing means is completed. Since the output is performed, in addition to the operation corresponding to claim 1, the electronic stamp and the application target can be transmitted simultaneously and safely, and security can be ensured.

Further, the invention corresponding to claim 3 is an IC
As the card, identification information, a pair of public key and private key corresponding to each other, and its own public key certificate are registered. When the card is inserted, it is determined whether or not the exercise of the IC card is valid. When the balance display means indicates the validity, the electronic stamp in the IC card is input by inputting the balance display request. The unused balance of the data is displayed, and when the document data is input, the digest creating means creates the document digest information by compressing the document data, and the data input means displays the amount of the stamp in the document data application procedure. When designated, electronic stamp data and document digest information corresponding to the designated stamp amount are input to the IC card, and the stamp use certificate creating means
An electronic stamp use certificate is provided on the IC card and includes the electronic stamp data corresponding to the stamp amount input by the data input unit and the document digest information. The electronic stamp use certificate and the public key certificate created by the certificate creation unit are transmitted, and the application acceptance unit is determined by the determination unit that the electronic stamp certificate and the public key certificate sent by the certificate transmission unit are used. Therefore, in addition to the action corresponding to claim 1, the electronic stamp and the application target can be transmitted safely at the same time, and the security can be ensured.

According to a fourth aspect of the present invention, as the stamp data transmitting means, the retransmitting means waits for a predetermined period after transmitting the electronic stamp data. When the notification is not received, the electronic stamp data is transmitted again, so that the reliability of the transmission can be improved in addition to the operation corresponding to claim 2.

Further, an invention corresponding to claim 5 is an IC
As the card, a counter indicating the balance of the electronic stamp data filled by the filling means, the value of the counter is substantially increased at the time of filling by the filling means, and the counter is substantially increased at the time of sending by the document sending means. Since the counter value increasing / decreasing means for decreasing the value is provided, the same operation as the operation according to any one of claims 1 to 4 can be achieved.

According to a sixth aspect of the present invention, there is provided an identification information registration means for registering unique identification information, a plurality of stamp data storage means for individually storing a plurality of electronic stamp data, When performing, the validity of the application is confirmed based on the identification information in the identification information registration means, and the stamp data reading means reads the electronic stamp data of the stamp data storage means having the lowest balance among the respective stamp data storage means. Read it out,
In addition to the operation similar to the operation corresponding to claim 1, it can be expected that at least one stamp data storage unit is made empty, and the filling / removing process of the electronic stamp data can be smoothly performed.

Further, in the invention corresponding to claim 7, the stamp data reading means performs reading such that at least one of the stamp data storage means is empty. In addition to the operation corresponding to the above, the unusable state of the IC card can be avoided, and the reliability of the operation can be improved.

According to an eighth aspect of the present invention, when the filling means receives electronic stamp data corresponding to its own identification information and fills the empty stamp data storage means with the electronic stamp data, It is determined whether or not the face value of the electronic stamp data is at least the shortfall amount corresponding to the difference between the application fee and the total amount of the balances in all other stamp data storage means. Therefore, in addition to the operation corresponding to claim 7, it is possible to avoid a reduction in the speed of the process of purchasing the electronic stamp data again with the filling of the electronic stamp data of the denomination less than the shortfall amount.

Further, according to the ninth aspect of the present invention, when the filling impossible means receives new electronic stamp data corresponding to its own identification information, it determines whether there is an empty stamp data storage means and determines whether there is an empty stamp data storage means. When there is no stamp data storage means, new electronic stamp data cannot be filled, so that the reliability of the operation can be improved in addition to the action according to claim 6.

According to a tenth aspect of the present invention, in the stamp data returning means, the electronic stamp data is stored in all the stamp data storage means and the total amount of the electronic stamp data in all the stamp data storage means is reduced. When the application fee is not satisfied and new electronic stamp data needs to be filled, electronic stamp data in at least one stamp data storage unit is returned so as to create an empty stamp data storage unit. When new electronic stamp data that is equal to or greater than the application fee is received with the completion of the settlement of the shortfall amount corresponding to the difference between the electronic stamp data returned by the stamp data return means and the application fee or the amount exceeding this shortfall amount, Since the new electronic stamp data is written in the empty stamp data storage means, in addition to the operation corresponding to claim 6, the memory (the stamp data storage means) is full. Even, it is possible to newly fill the electronic stamp data.

[0044]

Embodiments of the present invention will be described below with reference to the drawings. Here, in each embodiment, the card storing the electronic cash and the electronic stamp is an IC card, and for example, an RSA public key method is used as a public key encryption method. A key used in the symmetric key method (encryption and decryption are performed with the same key) is called a common key. In each embodiment, for example, a DES (data encryption standard) common key system is used.

(First Embodiment) FIG. 1 is a schematic diagram showing the entire configuration of an application procedure processing system according to a first embodiment of the present invention, and FIG. 2 is an IC used in the application procedure processing system. FIG. 2 is a block diagram showing a configuration of a card and a stamp issuing organization.

Here, in the application procedure processing system, the user terminal 30 for processing the application procedure using the IC card 20 issued from the user registration organization 10 includes a stamp issuing institution 40 as a stamp issuing computer and an application acceptance. Each is connected to an application organization 50 as a computer for use. The stamp issuing institution 40 is connected to a financial institution 60 as a settlement computer.

Here, when the user registration organization 10 submits an application for joining (not shown), the user registration organization 10 confirms the identification card such as a driver's license and accepts the application for joining. ,
It has the function of issuing an IC card 20 and sending it to the address of the applicant. The application form is a paper document or an electronic document in which at least a name and an address and an account number of a financial institution 60 such as a bank used for settlement of an electronic stamp price are described. The same format as the card application is applicable.

The IC card 20 has tamper resistance,
As shown in FIG. 2, the portable electronic device is a portable electronic device that is inserted into the user terminal 30 for use in holding electronic stamp data, and counts the stamp balance of the electronic stamp data in the memory 21. Counter 22, a balance management unit 23 that manages the stamp balance recorded in the balance counter 22, and an electronic stamp data transmission / reception device that transmits and receives electronic stamp data to and from the stamp issuing organization 40 and the application organization 50 via the user terminal 30. An I / O interface 24 is provided. Note that the memory 21, the balance counter 22, and the balance management unit 23 are realized by tamper-resistant IC chips.

The memory 21 has a card ID, a password, a user account number, a public key / private key pair unique to each IC card, and a public key certificate of the IC card 20. In addition to unique identification information such as a certificate, a public key of the stamp issuing organization 40 and the like are registered, and electronic stamp data corresponding to the initial purchase amount can be written. It is protected from unauthorized access such as tampering or copying.

The public key certificate includes at least the value of the public key of the IC card 20, the name of the certificate authority that issued the public key certificate, and a set of the name of the certificate authority and the value of the public key. It has three signatures digitally signed with a private key.

The balance management unit 23 manages a stamp balance,
It executes processing related to the purchase and use of electronic stamp data. More specifically, when a password input from the user terminal 30 is received via the I / O interface 24 (hereinafter, the user terminal 30 and the The description via the I / O interface 24 between the IC card 20 and the IC card 20 will be omitted for the sake of simplicity.) The entered password is compared with the password in the memory 21 to use the result of the comparison. Function to send to user terminal 30 and user terminal 30
Receives a purchase request signal composed of the random number of the issuer and the stamp purchase amount, generates stamp purchase request data based on the purchase request signal and the contents of the memory 21, and stores the stamp purchase request data and the The function of sending the public key certificate to the stamp issuing institution 40 and sending it to the user terminal 30 and the validity of the electronic stamp data received from the stamp issuing institution 40 via the user terminal 30 are confirmed by verifying the RSA signature. ,
When the validity is confirmed, the electronic stamp data is stored in the memory 21.
And a function of increasing the value of the balance counter 22 by the amount of the stamp purchase amount, and a function of sending a filling completion notice to the user terminal 30 to the stamp issuing organization 40 when the increase process is completed.

The stamp purchase request data is, for example, a card I
D, user account number, stamp purchase amount (eg, 1000), IC
The information such as the billing number NUM _{R and the} issuer random number generated in the card 20 is transmitted to the RS by the secret key of the IC card 20.
A signature is given. In addition, at least the account number in the stamp purchase request data is set before the RSA signature.
For example, it is preferable that the data be encrypted in advance with a unique common key between the stamp issuing organization 40 and the user terminal 30.

The electronic stamp data is a card ID, a stamp serial number NU generated when the stamp issuing organization 40 issues the electronic stamp.
For M _S , stamp purchase amount (eg, 1000) and billing number NUM _R ,
SIG _I (ID,
NUM _S , 1000, NUM _R ).

The user terminal 30 has a function of holding the IC card 20 in a detachable manner and, when the IC card 20 is inserted, displaying an unused balance, purchasing a stamp, or applying for an application procedure by an operation of the operator. The function is to perform the operation, and here is a contact terminal of the stamp issuing organization 40.
May be realized as an arbitrary user terminal 30 connected via a network such as the Internet.

The function of making a stamp purchase at the user terminal 30 is to check the validity of the user's authority, such as checking the password with the IC card 20 when the stamp purchase request data is input. A function of transmitting a random number request to the stamp issuing organization 40 after confirmation, a function of receiving a random number of the issuer from the stamp issuing organization 40, displaying a screen for prompting the input of a stamp purchase amount, and a function of inputting. The function of inputting the stamp purchase amount and the random number of the issuer from the stamp issuing organization 40 to the IC card as a purchase request signal, and transmitting the stamp purchase request data and the public key certificate received from the IC card 20 to the stamp issuing organization 40 And the stamp issuing organization 4
It has a function of inputting the electronic stamp data received from the IC card 20 to the IC card 20 and a function of transmitting the filling completion notification received from the IC card 20 to the stamp issuing organization 40.

The user terminal 30 has a function of performing an application procedure. When an application request is input, a function of confirming the validity of the user's authority by collation of a password or the like is performed. A function to display a screen for prompting the user to select data and a stamp usage amount, a function to create a document digest DocDig by compressing the selected document data, and a set of the document digest DocDig and the stamp usage amount
The function to input to the C card 20, the function to display a screen based on the balance shortage message received from the IC card 20, and the electronic stamp use certificate and the public key certificate received from the IC card 20 to the application organization 50. It has a function of transmitting and a function of displaying a screen based on the result of application procedure completion received from the application organization 50.

Here, to compress the document data, for example, M
D5 (message digest algorithm) or SHA (secure
A hash function such as a hash algorithm can be used.

The electronic stamp use certificate is a stamp serial number NU
SIG _U (NUM _S , 500, DocDig) obtained by applying the RSA signature of the IC card 20 to M _S , stamp usage amount (eg, 500) and target document digest information DocDig, and electronic stamp data SIG _I (I
D, NUM _S , 1000, NUM _R ).

Upon receiving the random number request from the user terminal 30, the stamp issuing organization 40 determines the issuer random number and returns the issuer random number to the user terminal 30. Upon receiving the data and the public key certificate, the stamp purchase request data is decrypted, the validity of the stamp purchase request data is confirmed by verifying the RSA signature, and the fact that the issuer random number is included is confirmed. When confirmed, request the financial institution 60 to transfer the amount of the stamp purchase amount from the user's account to the account of the stamp issuing institution 40, and when the financial institution 60 is notified of the transfer completion, When the electronic stamp data corresponding to the stamp purchase amount is generated, the electronic stamp data is transmitted to the user terminal 30 and stored in the retransmission log, and when the filling completion notification is received from the user terminal 30, The function to erase the corresponding electronic stamp data in the resend log after confirming the validity of the filling completion notification of the, and when there is no reception of the filling completion notification or an error notification at the time of filling (for example, a predetermined code And the code, the card ID and the serial number are stored in the IC card 2
(0 is RSA signed), has the function of reading out the electronic stamp data corresponding to the stamp serial number from the retransmission log and retransmitting it to the user terminal 30.

Upon receiving the electronic stamp use certificate and the public key certificate from the user terminal 30, the application organization 60 receives the RSA of the electronic stamp use certificate based on the public key in the public key certificate.
A function for verifying the signature, a function for verifying the RSA signature of the electronic stamp data based on the public key of the stamp issuing organization 40,
It has a function of judging the validity / abnormality of the electronic stamp use certificate based on both verification results, and a function of transmitting the judgment result to the user terminal 30 as an application procedure completion notification or abnormality notification.

Next, the operation of such an application procedure processing system will be described with reference to FIGS. FIG. 3 is a diagram showing a process of purchasing an electronic stamp, and FIG. 4 is a diagram showing an application procedure using an electronic stamp.

(User Registration) When a user submits an application form for registration, the user registration institution 10 confirms an identification card such as a driver's license, receives the application form for application, and receives an IC card. 20 is issued and sent to the user's address. This allows the user to use the application procedure processing system. This registration procedure is the same as that of a known system such as a credit card.

(Purchase Stamp) When the IC card 20 is inserted and a stamp purchase request is input, the user terminal 30
A screen such as a message is displayed so as to prompt the user to input a password for determining whether the card 20 is valid. When the password is input, the user terminal 30 inputs this password into the IC card 20, as shown in FIG. 3 (ST11).

IC card 20 collates the input password with the password in memory 21 and sends the collation result to user terminal 30 (ST12).

The user terminal 30 interrupts the process when the collation result indicates a mismatch between the two passwords. Here, since the collation result indicates a match between the two passwords, the user terminal 30 proceeds to the next process and issues the issuer random number request. This is transmitted to the stamp issuing organization 40 (ST13).

Upon receiving the issuer random number request, the stamp issuing organization 40 determines the issuer random number and returns the issuer random number to the user terminal 30 (ST14).

When the user terminal 30 receives the issuer random number, the user terminal 30 displays a screen for prompting the input of the stamp purchase price. Here, the user terminal 30 may display the value of the balance counter 22 in the IC card 20 (an unused balance of the electronic stamp data) by inputting the balance display request.

Thereafter, the user terminal 30 inputs a stamp purchase amount (eg, 1000 yen) by a user operation.
The user terminal inputs the issuer random number and the stamp purchase price (1000) to the IC card 20 as a purchase request signal (ST
15).

In the IC card 20, based on the purchase request signal, the balance management unit 23 encrypts the user's account number in the memory with a common key with the stamp issuing organization, and uses the encrypted account number, card ID, Stamp purchase amount (1000), bill number NUM _R
In addition, an RSA signature is applied to information such as the issuer random number using the secret key SkU of the IC card 20 to generate stamp purchase request data.

The IC card 20 transmits the stamp purchase request data and the user's public key certificate in the memory 21 to the stamp issuing organization 40 via the user terminal 30 (ST1).
6).

Upon receiving the stamp purchase request data and the public key certificate, the stamp issuing organization 40 decrypts the stamp purchase request data using the user's public key in the public key certificate, and furthermore, prints the stamp purchase request data. Is verified by verifying the RSA signature. The validity is confirmed based on whether or not the issuer random number described above is included in the stamp purchase request data.

When the validity is confirmed, the stamp issuing organization 4
0 is an RSA signature on the newly generated stamp serial number NUM _S , the card ID in the stamp purchase request data, the stamp purchase amount (1000), and the bill number NUM _R , and the electronic stamp data SIG _I
(ID, NUM _S , 1000, NUM _R ) and the financial institution 60 with respect to the electronic stamp data SIG _I (ID, NUM _S , 1000, NUM _R ).
Settlement processing is performed between and.

As the settlement processing, for example, the stamp issuing organization 4
0 notifies the financial institution 60 of the user account number and the stamp purchase amount (1000) in the stamp purchase request data (ST17),
The financial institution 60 performs a so-called account transfer in which the stamp purchase amount (1000) is reduced from the user's account and the stamp purchase amount (1000) is increased to the stamp issuing institution 40 account. After the fund transfer is completed, the financial institution 60 transmits a fund transfer completion notification to the stamp issuing institution 40 (ST18), and completes the settlement process.

After the completion of the settlement process, the stamp issuing institution 40
The electronic stamp data SIG _I (ID, NUM _S , 1000, NUM _R ) is encrypted with the common key and transmitted to the user terminal 30 (ST1).
9) The electronic stamp data SIG _I (ID, NUM _S , 1000, NUM _R ) is stored in the retransmission log at the time of error.

The user terminal 30 inputs the received electronic stamp data SIG _I (ID, NUM _S , 1000, NUM _R ) to the IC card 20.

In the IC card 20, the balance management unit 2
3 is the received electronic stamp data SIG _I (ID, NUM _S , 1000, NUM _R )
Is verified by verifying the RSA signature. Validity, claim number NUM _R is confirmed is verified by decrypting the RSA signature. When the validity is confirmed, the balance management unit 2
In step 3, the electronic stamp data SIG _I (ID, NUM _S , 1000, NUM _R ) is stored in the memory 21, and the stamp balance of the balance counter 22 is increased by the stamp purchase amount (1000).

After the completion of the increase processing, the IC card 20
The balance management unit 23 makes an RSA signature on the card ID and the stamp serial number NUM _S in the memory 12 to create a filling (increase) completion notification, and sends the filling completion notification to the stamp issuing institution 40 via the user terminal 30. (ST20).

Upon receiving the notice of completion of filling, the stamp issuing organization 40 confirms its validity, and then deletes the corresponding electronic stamp data SIG _I (ID, NUM _S , 1000, NUM _R ) in the retransmission log. .

Note that the stamp issuing organization 40 has the IC card 2
If no filling completion notification is received from 0 or an error notification at the time of filling (for example, a predetermined code is provided for each error content,
When the IC card 20 receives the code, the card ID and the stamp serial number NUM _S (the RSA signature is given by the IC card 20), the electronic stamp data SIG _I corresponding to the stamp serial number NUM _S is received.
_{(ID, NUM S, 1000,} NUM R) reads from the retransmission logs retransmits to the user terminal 30.

As described above, the electronic stamp data SIG _I (ID, NU
And M _S, 1000, NUM _R) to purchase procedure is complete, the user terminal 30, to discharge the IC card, the process is terminated. (Application Procedure) When the IC card 20 is inserted and an application request is input, the user terminal 30 displays a screen for prompting the input of a password as described above. Subsequently, as described above, as shown in FIG. 4, a password is input (ST21), collation is performed by the IC card 20, and the collation result is transmitted to the user terminal 30 (ST22).

The user terminal 30 interrupts the process when the collation result indicates that the two passwords do not match. Here, since the collation result indicates that the two passwords match, the user terminal 30 proceeds to the next process, and proceeds to the application target document data. And a screen display for prompting the user to select the stamp usage amount.

When the user terminal 30 selects the document data and the stamp usage fee by the operation of the operator, the user terminal 30 compresses the document data by a hash function and outputs the document digest information.
Create DocDig, this document digest information DocDig,
The stamp usage amount (eg, 500) is input to the IC card 20 (ST23).

In the IC card 20, the balance management unit 23 inspects the stamp balance recorded in the balance counter 22, and when the stamp balance is less than the stamp usage amount, sends a balance shortage message including the shortage amount to the user terminal 30. Reply.

The user terminal 30 displays a screen on the basis of the balance shortage message to urge the user to purchase a new stamp.

On the other hand, as shown in FIG. 5, for example, the IC card 20 stores the stamp balance (1000
When the amount of money (¥) is equal to or more than the amount of used stamp (500 yen), the balance management unit 23 stores the electronic stamp data SIG _I (ID, NUM _S , 1) in the memory 21.
000, NUM _R ), stamp serial number NUM _S , digital stamp usage certificate [SIG _I (ID, NUM _S , 1000, NUM _R ), SI based on the stamp usage amount (500) and document digest information DocDig entered earlier
G _U (NUM _S , 500, DocDig)], and the stamp balance (1000 yen) of the balance counter 22 is converted into the stamp usage amount (50
0 yen).

Thereafter, in the IC card 20, the balance management unit 23 transmits the electronic stamp use certificate and the public key certificate in the memory 21 to the application organization 50 via the user terminal 30 (ST24). .

Next, upon receiving the electronic stamp use certificate and the public key certificate, the application organization 50 verifies the RSA signature of the electronic stamp use certificate based on the user's public key in the public key certificate. Then, the RSA signature of the electronic stamp data is verified based on the public key of the stamp issuing organization 40.

Further, the application organization 50 determines whether the electronic stamp use certificate is normal or abnormal based on the verification result, and transmits a notification of completion of the application procedure in a normal state or a notification of an abnormality in an abnormal state to the user terminal 30 according to the result of the determination. By doing (ST2
5) Notify the user of the result of the application procedure (whether the process was completed normally or not).

As described above, according to the present embodiment, the user registration organization 10 issues an IC card 20 in which unique identification information is registered and which can store electronic stamp data, and the user terminal 30 The stamp issuing request data for purchasing the electronic stamp data stored in the card 20 is transmitted, and the stamp issuing institution 40 and the financial institution 60 transmit the financial stamp corresponding to the identification information of the IC card 20 based on the stamp purchasing request data. The settlement amount is settled from the account of the institution, the electronic stamp data corresponding to the purchase amount is returned, and the balance management unit 23 in the IC card 20 fills the memory 21 with the electronic stamp data via the user terminal 30. Then, when the document data is input and the stamp amount of the application procedure for the document data is designated, the electronic stamp data in the IC card 20 corresponding to the designated stamp amount is converted to the document data. (Document digest information DocDig) is sent out as an electronic stamp certificate, and the application institution 50 determines whether or not the electronic stamp certificate has an abnormality. If there is no abnormality, a notification of the completion of the application procedure is output. In this case, the labor for purchasing and attaching the stamp can be omitted, and high-speed processing can be realized by a simple distribution channel while clarifying the application target.

That is, in the application procedure, it is possible to save the trouble of purchasing and attaching a stamp as in the past, and to apply for the application. Since only the security function is provided, the application procedure can be performed at high speed.

Also, unlike the function of electronic cash, the settlement is completed at the time of stamp purchase, and it is sufficient to confirm the presence or absence of unauthorized use at the time of application, so that the electronic cash collected at the financial institution is returned to the issuing institution. Occurrence can be eliminated.

Further, as the IC card 20, identification information, a pair of a public key pair including a public key and a secret key corresponding to each other, and its own public key certificate are registered.
When the IC card 20 is inserted, the user terminal 30 determines whether or not the exercise of the IC card 20 is valid. When the result of the determination indicates validity, the user terminal 30 transmits an issuer random number request. When the issuer random number is received in response to the issuer random number request, the issuer random number and the input purchase amount are input to the IC card 20 and the balance management unit 23 in the IC card 20 is input.
Generates the stamp purchase request data using the secret key based on the issuer random number and the purchase amount, transmits the stamp purchase request data and the public key certificate via the user terminal 30, and 40 verifies the validity of the stamp purchase request data based on the public key certificate. When the validity is confirmed, the electronic stamp data corresponding to the purchase amount is set after the settlement processing based on the stamp purchase request data. Generate and send
The balance management unit 23 of the C card 20 verifies the validity of the received electronic stamp data, executes the filling when the validity is confirmed, and outputs a filling completion notification when the filling is completed. And the application subject can be sent safely at the same time,
Safety can be ensured.

Similarly, as the user terminal 30, I
When the C card 20 is inserted, it is determined whether or not the exercise of the IC card is valid. When the result of the determination is valid, an unused balance of the electronic stamp data in the IC card is displayed by inputting a balance display request. When document data is entered,
Compress this document data to get document digest information DocDig
When the stamp amount in the application procedure is selected (designated), the electronic stamp data and the document digest information DocDig corresponding to the stamp amount are input to the IC card 20, and the balance management unit 23 in the IC card 20 Based on electronic stamp data corresponding to the input stamp amount and document digest information DocDig, an electronic stamp use certificate including both is created,
The application stamp 50 transmits the electronic stamp use certificate and the public key certificate, and the institution 50 determines whether there is any abnormality based on the electronic stamp certificate and the public key certificate. In addition, the electronic stamp and the application target can be transmitted safely at the same time, and security can be ensured.

The stamp issuing organization 40 transmits the electronic stamp data, stores the data in the retransmission log at the time of error, and waits for a predetermined period of time. Since the data is transmitted again, the reliability of the transmission can be improved.

Further, as shown in FIG. 5 and the like, the stamp purchase and application procedure is based on the electronic stamp data SIG _I (ID, NUM _S , 1000, NU).
M _R ) itself, and the IC card 20 manages the stamp balance of the electronic stamp data. Therefore, the reliability of the electronic stamp data can be improved, and the management of the stamp balance of the electronic stamp data in the IC card 20 can be facilitated.

An institution (a stamp improper use inspection organization) that centrally manages the stamp use certificate gathered at the application organization 50 is provided. In the institution, the stamp serial number of the used electronic stamp data, the stamp issuance amount, and May be centrally managed with the cumulative number of stamp usage amounts in the stamp usage certificate. Thereby, unauthorized use can be detected more reliably.

(Second Embodiment) FIG. 6 is a block diagram showing an I-mode used in an application procedure processing system according to a second embodiment of the present invention.
FIG. 3 is a block diagram showing the configuration of the C card, in which the same components as those in the above-mentioned drawings are denoted by the same reference numerals, detailed description thereof will be omitted, and different components will be mainly described here. In the following respective embodiments, the duplicated description will be omitted in the same manner.

For example, it is assumed that the current stamp balance is 500 yen, but an application fee of 500 yen or more is required for the next application. However, in the IC card 20, the original electronic stamp data and the newly purchased electronic stamp data are individually managed, and cannot be combined into one.

Therefore, when electronic stamp data having a small balance increases, unless the IC card 20 is properly controlled, the memory capacity of the IC card 20 may become insufficient. Further, even if an upper limit is set for the number of electronic stamp data stored in the IC card 20, appropriate management is required so that the IC card 20 cannot be used.

The present embodiment has been made from such a viewpoint, and handles a plurality of electronic stamp data using a plurality of memories. At least one of the plurality of memories is a new electronic stamp. The stamp data is emptied so that it can be stored.

As a simple example, a case where two memories are used will be described. As shown in FIG.
w includes a first memory 21a, a second memory 21b, a first balance counter 22a, a second balance counter 22b, a balance management unit 23w, and an I / O interface 24.

The first and second memories 21a and 21b are each capable of recording one piece of electronic stamp data. The first and second balance counters 22a and 22b count the stamp balances of the corresponding first or second memories 21a and 12b, respectively.

In addition to the above-described functions, the balance management unit 23w empties at least one of the first and second memories 21a and 21b so as to empty the memory 21a (21b).
It has a function to preferentially use the electronic stamp data of the minimum stamp balance. Incidentally, when the memory 21 the electronic stamp data with the lowest stamp balance stored there are two or more may be used, for example less from the electronic stamp data of stamp serial number NUM _S.

When receiving new electronic stamp data in accordance with its own identification information, the balance management unit 23w determines whether there is an empty first or second memory 21a, 21b.
When there is no empty first or second memory 21a, 21b,
From the viewpoint of improving the reliability of the operation, a function of making it impossible to fill in new electronic stamp data may be provided.

Next, the operation of the application procedure processing system configured as described above will be described with reference to FIG. Now, as described above, the processing of step ST23 is completed, and the document digest information DocDig to be applied and the stamp usage amount (eg, 10
00) is input to the IC card. At this time, the first
Electronic stamp data SIG _I (ID, NU
M _S1 , 500, NUM _R1 ), and there is no electronic stamp data in the second memory 21b.

Here, the IC card 20w has the stamp balance 5
A balance shortage message urging the user terminal 30 to purchase an electronic stamp having a deficit of 500 yen or more from 00 yen is returned to the user terminal 30.

Accordingly, for example, the user newly enters 2,0 in the same manner as in steps ST13 to ST19 described above.
It is assumed that an electronic stamp SIG _I (ID, NUM _S2 , 2000, NUM _R2 ) for 00 yen has been purchased (ST16a, ST19a). At this time, I
The C-card 20w is the digital stamp data SIG _I (ID, NU
M _S2, 2000, NUM _R2) it is determined whether or not the shortage amount of money more than face value, when more than lack of money, electronic stamp data SIG _I of this 2,000 yen _{(ID, NUM S2, 2000,} NUM R2) Is filled in the second memory 21b which is the last empty memory (note that when the electronic stamp data is less than the deficit amount, the IC card 20w cannot be filled).

Then, when the user sets the document digest information Do
When applying for cDig, the stamp balance management unit 23w
Electronic stamp data SIG in the memory 21a_I(ID, NUM_S1, 500, NU
M_R1) First, then 2,000 yen electronic stamp data
Data SIG_I(ID, NUM_S2, 2000, NUM _R2) Of 500 yen
Take it out as an application fee.

Then, the IC card 20w uses the two electronic stamp data to generate two electronic stamp use certificates [SIG _I (ID,
_{NUM S1, 500, NUM R1)} , SIG U (NUM S1, 500, DocDig)], [SIG
_I (ID, NUM _S2 , 2000, NUM _R2 ), SIG _U (NUM _S2 , 500, DocDig)], make the stamp balance of the first balance counter 22a zero, and change the stamp balance of the second balance counter 22b. 150
Make it 0 yen.

As a result, 1,50 is stored in the second memory 21b.
The electronic stamp data of 0 yen remains, and the first memory 21a becomes empty. Thereafter, the IC card 20w transmits these electronic stamp use certificates to the application organization 50 together with the public key certificate (ST24a). Hereinafter, the application process is completed as described above.

As described above, according to the present embodiment, the first
In addition to the effects of the embodiment, in the application procedure, after confirming the validity of the application by checking the password etc. as described above,
The balance management unit 23w of the IC card 20w performs the first and second
Since the electronic stamp data of the memory 21a (or 21b) having the lowest balance among the memories 21a and 21b is read,
At least one of the memories 21a (or 21b) can be expected to be empty, and the filling / removal processing of the electronic stamp data can be smoothly performed, so that the unusable state of the IC card can be avoided. Thus, the reliability of the operation can be improved.

When the IC card 20w receives the electronic stamp data corresponding to the identification information of itself and fills the empty memory 21b with the electronic stamp data, the face value of the electronic stamp data is at least equal to the application fee. It is determined whether there is an insufficient amount corresponding to the difference from the total amount of the balances in all the other memories 21a, and when there is the insufficient amount, filling is performed. It is possible to avoid slowing down the processing of purchasing the electronic stamp data again with the filling of the data.

Further, the IC card 20w receives the new electronic stamp data in accordance with its own identification information, and judges whether there is an empty first or second memory 21a, 21b,
When there is no empty first or second memory 21a, 21b,
If the new electronic stamp data cannot be filled, the reliability of the operation can be improved.

(Third Embodiment) Next, an application procedure processing system according to a third embodiment of the present invention will be described with reference to FIGS. This embodiment is a modification of the second embodiment. In the balance management unit 23w of the IC card 20w shown in FIG. 6, the function of preferentially using electronic stamp data of the lowest stamp balance is omitted. It was done. Further, there is provided a stamp improper use inspection organization 70 for inspecting electronic stamp data common to both the stamp issuing organization 40 and the application organization 50.

Here, the stamp improper use inspection organization 70 has a function of centrally managing the electronic stamp use certificate gathered at the application organization 50 and the unused stamp returned to the stamp issuing organization 40. Specifically, The electronic stamp use certificate gathered at the application organization 50 is inspected for unauthorized use and the inspection result is notified to the application organization 50. The unused stamp returned to the stamp issuing organization 40 is inspected for unauthorized use. It has a function of notifying the inspection result during the stamp issuance period 40.

The unused stamp uses the document absence information NULL indicating that there is no application document in place of the document digest information DocDig in the form of the electronic stamp use certificate. In other words, unused stamps are stamp serial numbers
NUM _S, stamp unused amount (e.g., 500) and those subjected to RSA signature of the IC card 20w to the document No Info NULL SIG _U
(NUM _S , 500, NULL) and electronic stamp data SIG _I (ID, NUM _S , 500, NULL)
NUM _R ). It should be noted that the no-document information may be replaced with “NULL” by using another data to indicate that there is no application document.

Next, the operation of the application procedure processing system configured as described above will be described. For example, IC card 20w
Then, electronic stamp data for 500 yen is stored in the first memory 21a.
SIG _I (ID, NUM _S1 , 500, NUM _R1 ) is held, and the second memory 21b
Electronic stamp of 300 yen to the data _{SIG I (ID, NUM S2,} 300, NU
M _R2 ).

Here, it is assumed that when a user wants to apply for certain document digest information DocDig, 1,000 yen is required. At this time, the user needs to purchase electronic stamp data for at least 200 yen.

However, the first and second memories 21a, 21a
Since both b hold electronic stamp data, new electronic stamp data cannot be filled. Therefore, the electronic stamp data having the unused stamp balance is returned to the stamp issuing organization 40, and the face value (1000 yen) obtained by adding the unused stamp balance (800 yen) and the new purchase amount (200 yen) is added. Request the issuance of new electronic stamp data.

Specifically, as shown in FIGS. 8 and 9,
The IC card 20w includes first and second memories 21a and 21a.
electronic stamp data [SIG _I (ID, ID,
NUM _{S 1} , 500, NUM _{R 1} ) and SIG _I (ID, NUM S ₂ , 300, NUM _{R 2} )] to the stamp issuing organization 40 via the user terminal 30 (ST
16b1).

Further, a new purchase of the shortfall of 200 yen is made, and stamp purchase request data for the electronic stamp data of a total of 1,000 yen is transmitted to the stamp issuing organization 40 (ST).
16b2).

The stamp issuing organization 40 receives the stamp purchase request data and the electronic stamp data [SIG _I (ID, NUM _S1 , 500, NU
M _R1 ), SIG _I (ID, NUM _S2 , 300, NUM _R2 )] to the stamp unauthorized use inspection organization 70 (ST16b3). The stamp improper use inspection organization 70 inspects the electronic stamp data for improper use, and returns the inspection result to the stamp issuing organization 40 (ST16b4).

The stamp issuing organization 40 interrupts the process when the inspection result indicates that there is unauthorized use. However, since the inspection result shows that there is no unauthorized use, the stamp issuing organization 40 setstle the payment information (user's The account number is transmitted to the financial institution 60 for settlement (ST17b).

As described above, the financial institution 60 performs an account transfer in which 200 yen of the user's account is transferred to the account of the stamp issuing institution 40, and after completion of the transfer, transmits a notice of the completion of the account transfer to the stamp issuing institution 40 ( ST18b).

Upon receiving the notice of the completion of the debit transfer, the stamp issuing organization 40, based on the stamp purchase request data of 1,000 yen, newly purchased electronic stamp data of 200 yen and unused electronic stamp data of 800 yen. Then, electronic stamp data SIG _I (ID, NUM _S3 , 1000, NUM _R3 ) for 1,000 yen is generated and transmitted to the user terminal 30 (ST19b).

The user terminal 30 inputs the electronic stamp data to the IC card 20w, and the IC card 20w stores the electronic stamp data in, for example, the second memory 21b, and acquires the stamp balance of the second balance counter 22b for stamp purchase. Amount (10
00 yen).

Thereafter, as described above, the application procedure is executed by inputting the application request. That is, based on the operation of the operator, the IC card 20w uses the electronic stamp use certificate [SIG _I (ID, NUM _S3 , 1000, NUM _R3 ), SIG _U (NUM) for 1,000 yen.
_S3, 1000, DocDig)] as well as creating a stamp balance of the second balance counter 22b to 0 yen. Thereafter, the IC card 20w transmits the electronic stamp use certificate to the application organization 50 via the user terminal 30 in the same manner as in step ST24 described above.
(ST24).

[0128] The application institution 50 checks the electronic stamp data SIG _I (ID, NUM _S3 , 1000, NUM) for 1,000 yen used in the application procedure.
_R3 ) to the stamp unauthorized use inspection organization 70 (ST24).
b1).

The stamp improper use inspection organization 70 inspects the electronic stamp data for improper use, and returns the inspection result to the application organization 50 (ST24b2).

When the inspection result indicates that there is unauthorized use, the application organization 50 interrupts the process. However, since the inspection result indicates that there is no unauthorized use, the application organization 50 sends the application procedure completion notification to the user in the same manner as in step ST25 described above. The application procedure is completed by replying to the terminal 30 (ST25).

As described above, according to the present embodiment, the first
In addition to the effects of the embodiment, the IC card 20w may be used in a case where the electronic stamp data is stored in all the memories 21a and 21b and the total amount of the electronic stamp data in all the memories 21a and 21b is less than the application fee. When it is necessary to fill the electronic stamp data, the electronic stamp data in the first and second memories 21a and 21b is returned so as to create an empty memory,
When new electronic stamp data exceeding the application fee is received upon completion of settlement of the shortfall amount corresponding to the difference between the returned electronic stamp data and the application fee or the amount exceeding the shortfall amount, the new electronic stamp data is received. Since the data is written in the empty second memory 21b, the electronic stamp data can be newly filled even if all the memories 21a and 21b are full.

In this embodiment, all the memories 21
A case has been described in which the electronic stamp data of a and 21b is returned to create an empty memory. However, the present invention is not limited to this. The electronic stamp data of at least one memory 21a (or 21b) is returned and the empty memory 21a (or With the configuration that makes 21b), the present invention can be implemented in the same manner and the same effect can be obtained.

In the present embodiment, a plurality of memories 21
The same effect can be obtained by the same processing as shown in FIG. 10 even if the configuration is changed to a configuration having one memory 21 as in FIG.

In addition, the present invention can be variously modified and implemented without departing from the gist thereof.

[0135]

As described above, according to the present invention, it is possible to eliminate the trouble of purchasing and pasting stamps during the application procedure, and to clarify the object of application and to use a simple distribution channel.
An application procedure processing system capable of realizing high-speed processing and an IC card used therein can be provided. In addition, the electronic stamp and the application target can be transmitted safely at the same time, and security can be ensured. Further, it is possible to eliminate the occurrence of a return of the electronic cash collected by the financial institution to the issuing institution.

[Brief description of the drawings]

FIG. 1 is a schematic diagram showing an entire configuration of an application procedure processing system according to a first embodiment of the present invention.

FIG. 2 is a block diagram showing a configuration of an IC card and a stamp issuing organization in the embodiment.

FIG. 3 is a sequence diagram for explaining the operation in the embodiment;

FIG. 4 is a sequence diagram for explaining the operation in the embodiment;

FIG. 5 is a sequence diagram for explaining the operation in the embodiment;

FIG. 6 is a block diagram showing a configuration of an IC card used in an application procedure processing system according to a second embodiment of the present invention.

FIG. 7 is a sequence diagram for explaining the operation in the embodiment;

FIG. 8 is a schematic diagram showing an entire configuration of an application procedure processing system according to a third embodiment of the present invention.

FIG. 9 is a sequence diagram for explaining the operation in the embodiment.

FIG. 10 is a sequence diagram for explaining the operation of the modification of the embodiment.

FIG. 11 is a schematic diagram showing a general flow of electronic cash.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 10 ... User registration organization 20, 20w ... IC card 21, 21a, 21b ... Memory 22, 22a, 22b ... Balance counter 23, 23w ... Balance management unit 24 ... I / O interface 30 ... User terminal 40 ... Stamp issuing organization 50: Applicant organization 60: Financial institution 70: Inspection organization for unauthorized use of stamps

 ────────────────────────────────────────────────── ─── Continuing on the front page (72) Inventor Toshiaki Toshiaki 1 Toshiba-cho, Fuchu-shi, Tokyo F-term in the Fuchu factory of Toshiba Corporation 5B049 AA01 AA02 AA05 AA06 BB46 EE22 EE25 GG10 5B055 HA17 KK05 KK18 5J104 AA08 LA03 NA02 NA35 PA12 9A001 JJ08 JJ71 KZ61

Claims (10)

[Claims] Claims 1. An application procedure processing system for an application procedure for submitting digitized document data of an application document and electronic stamp data of an application fee, wherein unique identification information is registered and IC card issuing means for issuing an IC card capable of storing the electronic stamp data, and purchase for transmitting stamp purchase request data when purchasing electronic stamp data stored in the IC card issued by the IC card issuing means. Means, based on the stamp purchase request data transmitted from the purchase means, settles the amount of the purchase amount from the account of the financial institution corresponding to the identification information of the IC card, and converts the electronic stamp data for the purchase amount. Settlement means for replying; filling means for filling the IC card with the electronic stamp data received from the settlement means; When the stamp amount in the data application procedure is designated, the document sending unit sends the electronic stamp data in the IC card corresponding to the designated stamp amount together with the document data, and the document sending unit sends the stamp data. An application procedure processing system comprising: an application receiving unit that determines whether or not document data and electronic stamp data are abnormal, and outputs an application procedure completion notification when there is no abnormality. 2. The application procedure processing system according to claim 1, wherein the IC card has the identification information, a pair of public keys including a public key and a secret key corresponding to each other, and an own public key certificate. The purchase means, when the IC card is inserted, exercise determination means for determining whether or not the exercise of the IC card is valid, and the determination result by the exercise determination means indicates validity When the issuer random number requesting means for sending the issuer random number request, and when the issuer random number is received in response to the issuer random number request sent by the issuer random number request means, the issuer random number and the inputted purchase price are received. And a purchase information input unit for inputting the stamp purchase request data into the IC card. Request data generating means, and a purchase request transmitting means for transmitting the stamp purchase request data generated by the request data generating means and the public key certificate, wherein the settlement means transmits from the purchase request transmitting means A purchase request verification unit that verifies the validity of the stamp purchase request data based on the transmitted public key certificate; and when the validity is confirmed by the purchase request verification unit,
Based on the stamp purchase request data, stamp data generating means for generating electronic stamp data for the purchase price, and stamp data transmitting means for transmitting the electronic stamp data generated by the stamp data generating means, The filling means includes: a stamp data verifying means for verifying the validity of the electronic stamp data received from the stamp data transmitting means; and a filling executing means for executing the filling when the validity check by the stamp data verifying means is completed. And a filling completion notifying means for outputting a filling completion notice when the filling by the filling executing means is completed. 3. The application procedure processing system according to claim 1, wherein the IC card has the identification information, a pair of public keys including a public key and a secret key corresponding to each other, and an own public key certificate. A document is registered, the document sending means determines, when the IC card is inserted, whether or not the exercise of the IC card is valid, and the exercise determination means determines that the exercise result is valid. A balance display means for displaying an unused balance of electronic stamp data in the IC card by inputting a balance display request; and when the document data is input, compressing the document data to create document digest information When a digest creation means and a stamp amount for the application procedure of the document data are designated,
A data input unit for inputting electronic stamp data corresponding to the designated stamp amount and the document digest information to the IC card; and an electronic unit provided on the IC card and corresponding to the stamp amount input by the data input unit. A stamp use certificate creating means for creating an electronic stamp use certificate including both based on the stamp data and the document digest information; an electronic stamp use certificate created by the stamp use certificate creating means; A certificate transmitting unit for transmitting a key certificate; and the application receiving unit, based on the electronic stamp certificate and the public key certificate transmitted by the certificate transmitting unit, the presence or absence of the abnormality. An application procedure processing system, comprising: a determination unit for determining the application procedure. 4. The application procedure processing system according to claim 2, wherein the stamp data transmitting unit waits for a predetermined period after transmitting the electronic stamp data, and charges the charging completion notification unit during the waiting period. An application procedure processing system comprising resending means for retransmitting the electronic stamp data when a completion notification is not received. 5. The application procedure processing system according to claim 1, wherein the IC card comprises: a counter indicating a balance of electronic stamp data filled by the filling means; A counter value increasing / decreasing means for substantially increasing the value of the counter at the time of filling by means, and substantially decreasing the value of the counter at the time of sending by the document sending means. Procedure processing system. 6. An IC card used in an application procedure processing system for an application procedure for submitting digitized document data of an application document and electronic stamp data of an application fee. Identification information registration means in which identification information is registered; a plurality of stamp data storage means in which a plurality of electronic stamp data are individually stored; and when performing the application procedure, based on the identification information in the identification information registration means. An IC card, comprising: stamp data reading means for confirming the validity of the application and reading out the electronic stamp data of the stamp data storing means having the lowest balance among the respective stamp data storing means. 7. The IC card according to claim 6, wherein the stamp data reading means performs the reading such that at least one of the stamp data storing means is empty. Characteristic IC card. 8. The IC card according to claim 7, wherein the electronic stamp data is received according to the identification information of the IC card, and the electronic stamp data is filled in the empty stamp data storage means. It is determined whether there is a deficit amount at least corresponding to the difference between the application cost and the total amount of the balances in all other stamp data storage means, and when there is the deficit amount, filling is performed. An IC card comprising a filling means. 9. The IC card according to claim 6, wherein when new electronic stamp data is received in accordance with its own identification information, the presence or absence of an empty stamp data storage unit is determined, and the empty stamp data storage unit is determined. An IC card characterized by being provided with a charging impossible means for making it impossible to charge new electronic stamp data when there is no data. 10. The IC card according to claim 6, wherein electronic stamp data is stored in all stamp data storage means, and a total amount of the electronic stamp data in all stamp data storage means satisfies the application fee. When new electronic stamp data needs to be filled, the stamp data returning means for returning the electronic stamp data in at least one stamp data storage means so as to create an empty stamp data storage means, Upon receiving new electronic stamp data that is equal to or greater than the application fee, upon completion of the settlement of the shortfall amount corresponding to the difference between the returned electronic stamp data and the application fee or the amount exceeding the shortfall amount, the new electronic stamp data is received. An IC card comprising: stamp data writing means for writing stamp data into an empty stamp data storage means.