JP2001005901A - Electronic settlement system, method for invalidating and restoring settelment data, and recording medium with its program stored therein - Google Patents

Abstract

PROBLEM TO BE SOLVED: To invalidate the storage medium of data in failing in user authentication and to make safely the storage medium of the data restored by a request of the user afterward in an electronic settlement system. SOLUTION: In this electronic settlement system consisting of a financial institution server P and a user client terminal C connected to an open network N, etc., the server P is provided with means Dr and Dks holding user information and a cryptographic key for communication, and the terminal C is provided with a message transmitting means Mm, an operation controlling means Me, a displaying/inputting means Mi, a message processing means Mp and a data converting means Md. Invalidation and restoration processing of settlement data is performed by using a settlement data recording medium Du and an authentication information recording medium Dkc capable of being attached and detached which are distributed as a pair from a financial institution beforehand as a means storing data to be used by the terminal C for services.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an electronic payment system including a financial institution server connected to an open network, client terminals used by a plurality of users, and the like. An electronic payment system capable of invalidating the storage medium of the user's payment data, and thereafter securely recovering the payment data by an application from the user, a method of invalidating and recovering the payment data, and a program therefor. It relates to the stored recording medium.

[0002]

2. Description of the Related Art In an electronic settlement system, a user who contracts with a financial institution communicates with a financial institution server (or a store server) using a client terminal to use various services. In this case, user authentication is generally performed to confirm that the person who uses the data (for example, a card number or the like) necessary for settlement is the user himself. In this case, in the conventional method, user authentication is exchanged with the store server by cryptographic communication using the information of the financial institution server. In the electronic payment system, in consideration of the case where data required for payment is stolen, if user authentication fails more than a specified number of times, the data cannot be used, as is done in financial ATMs etc. Is desirable. However, there is a need for a technique for recovering the data in consideration of a case where a legitimate user makes an operation error.

To solve such a problem, see, for example,
Japanese Patent Application Publication No. 0-143442 discloses a recovery method when a password of a card used for a transaction becomes invalid. In the method described in the above publication, a card-specific ID that cannot be read and a random number generation mechanism are built in the card, and when the card becomes unusable, when the user inputs a recovery request, the card Is generated and sent to the card provider, and the provider calculates a value by a specific operation from the card ID and the transmitted random number according to the user's contact, sends this value to the card, and even within the card the card ID The same operation is performed by using a random number and when the two values match, the card is made usable. In addition, Japanese Patent Laid-Open No. 1-1
In the IC card utilization system described in Japanese Patent Application Laid-Open No. 61593, a function is provided in the IC card for collating the input identification data and disabling the card when a mismatch occurs a predetermined number of times. A system is disclosed in which an IC card is set, and when identification data is normally input, an input prohibition code is reset to enable use of the IC card.

[0004]

In the former device of the above two publications, the random number generated by the card is sent to the card provider, and the user requests the card provider to recover the card from being unusable. It is necessary to contact us by telephone. In the case of contacting by telephone, there is a task of checking the telephone number of the user and dialing it, and certifying that he / she is the user himself / herself through the telephone port. By the way, when such work is performed by communication from the user's terminal, it is necessary to surely confirm the user himself or prevent leakage of information. Uses a password or the like, so that if an unauthorized user obtains a card and a password for identification, the recovery process can be easily performed. That is, the card used for the transaction and the password for recovering the card need to be in a state in which both cannot be easily stolen, but the above publication does not mention that point. On the other hand, the latter device can be used simply by setting an inoperable IC card in the card processing device and inputting the identification data normally. Therefore, if both the card and the password are stolen, the device can be easily used. A serious problem that the IC card can be put into use.

Accordingly, an object of the present invention is to solve these conventional problems and presuppose connection to an open network, and if the user authentication fails more than a specified number of times, the settlement use data of the user cannot be used. In the electronic payment system, when a user applies for recovery of payment usage data from a financial institution, the client terminal can perform the authentication process more securely and prevent the leakage of information, and the data can be transmitted from the client terminal. An object of the present invention is to provide a recoverable electronic payment system, invalidation of payment data and a recovery method thereof, and a recording medium for storing the program.

[0006]

In order to achieve the above object, in an electronic settlement system according to the present invention, a detachable settlement data recording medium for storing data used for settlement in a client terminal connected to an open network is provided. And an authentication information recording medium for recording user authentication information,
Using these two recording media, payment data in electronic payment can be invalidated and recovered. Also, user information and an encryption key are stored in a financial institution server, which is a component of the electronic payment system, so that payment data for electronic payment used by a client terminal can be invalidated and recovered. . Further, in the method of invalidating payment data, if a user fails in the user authentication process at the time of starting the service, the client terminal is made to be unable to use the data stored in the payment data recording medium of the user. While processing and encrypting the message to be transmitted, the financial institution server is notified of the fact that the payment data recording medium has become invalid.

Further, according to the method for recovering invalidated data, in a case where a user fails in user authentication processing at the time of starting a service, an electronic payment system in which a payment data recording medium of the user is invalidated is used. Is invalidated, the client terminal applies to the financial institution server for recovery processing of the payment data recording medium using the authentication information recording medium, and recovers the invalid state of the payment data recording medium. Further, in the method of recovering invalidated data, a limit is set on the number of times of the recovery processing application, or control is added to the number of times that the authentication processing of the applicant is allowed to fail during the processing of the recovery processing application. Further, the method for invalidating the settlement data or the method for recovering the invalidation data is programmed so that it can be downloaded to a recording medium or transferred from a network and stored.

[0008]

Embodiments of the present invention will be described below in detail with reference to the drawings. FIG. 1 is a schematic configuration diagram of the electronic payment system of the present invention. Financial institution server P connected to open network N and user client terminal C
In the electronic payment system configured as described above, the financial institution server P has a user database Dc holding personal information and payment data information for each user, and a client terminal C.
Communication key recording unit Dks that stores the encryption key used for communication with
Is provided. On the other hand, the client terminal C has message transmitting / receiving means, message processing means, operation control means, display
It is equipped with means required by the client of the general electronic settlement system, such as input means, data conversion means such as encryption, and detachable settlement data as means for storing data used for services at the client terminal C. It includes a recording medium Du and an authentication information recording medium Dkc used for certifying that the user is an authorized user of the client terminal C.

In FIG. 1, a settlement data recording medium Du records, in addition to the settlement data used for the settlement processing, unique information Didu having a serial ID or the like unique to the recording medium. On the other hand, the authentication information recording medium Dkc includes means for electronically certifying the user, such as a certificate issued by a certificate authority or the like, and unique information stored on the settlement data recording medium Du, for example.
Corresponding information Didk defining a one-to-one relationship with the settlement data recording medium Du is recorded with a value obtained by performing a certain operation (hashing operation or the like) on Didu. Payment data recording medium Du
Is a recording medium such as an IC card in which it is difficult to illegally read information from the outside. Then, by performing a constant operation on the content of the unique information Didu as described above, the corresponding information Didk of the authentication information recording medium Dkc that is paired with the unique information Didu is obtained. An operation that does not permit the use of a medium other than the combination of the media can be realized. The user uses only the settlement data recording medium Du during normal service use, and uses the authentication information recording medium.
Dkc is managed separately. Usually, payment data recording medium Du is IC
A card, and the authentication information recording medium Dkc is an external storage medium such as a magnetic disk or a flexible disk.

[0010] The unique information Didu to be stored in the settlement data recording medium Du is determined in advance, registered in the user information Dc of the financial institution server P, and distributed to the user after applying for the use. Other information may be recorded in advance by the financial institution or may be created by the user at hand. In the present invention, a payment data recording medium using the above configuration
Perform the invalidation and recovery processing of Du as follows. First, if user authentication fails more than the specified number at the start of the service (usually three times), the client terminal C
The data conversion function converts the data used at the time of payment recorded on the payment data recording medium Du into an unusable format, and starts the communication processing by the message processing function and message transmission / reception function in the client terminal computer, A message to the effect that the data has become unavailable is sent to the financial institution server P. After receiving the message, the financial institution P checks with the authorized user, for example, whether authentication processing has failed and provides guidance for data recovery, and whether the recording medium Du has been lost. And take appropriate measures.

When the authorized user fails in the authentication and the data becomes unusable, the client terminal C starts communication with the financial institution server P for data recovery at the request of the authorized user. Here, the client terminal C stores the correspondence information Didk of the authentication information recording medium Dkc and the settlement data recording medium D
The correspondence of the unique information Didu of u is confirmed, and only when the correspondence is correct, the start of communication is permitted. The security of communication messages is determined by the communication key recording unit Dks of the financial institution server P.
A key pair based on the public key cryptosystem is recorded in the client terminal C, or the public key is received from the financial institution server P or stored in the communication key recording unit Dks of the financial institution server P for each user. The same encryption key as that based on the secret key encryption method is recorded on the authentication information recording medium Dkc, and is guaranteed by a method of using it for message encryption. Then, by using the authentication information recorded on the authentication information recording medium Dkc, communication is performed while certifying the validity of the user, and finally a data recovery message is received from the financial institution server P, so that the data conversion unit Md ( 2), the data recorded on the settlement data recording medium Du is subjected to the conversion process again, and is restored to a usable state. In addition, assuming a malicious user who attempts to execute the above series of processes by stealing both the settlement data recording medium Du and the authentication information recording medium Dkc, another method (such as password verification) during the above communication processing is performed. ) To perform user authentication processing. At this time, if the number of authentication processing failures and the number of application for recovery processing of the payment data recording medium are limited in the user database, and the number of times is retained, an unauthorized user will repeatedly attempt recovery processing. Can be prevented.

FIG. 2 is a detailed block diagram of a client terminal showing one embodiment of the present invention. Client terminal C
The financial institution server P and the seller server S are connected to an open network N such as the Internet to constitute a payment system. The internal configuration of the client terminal C is a message transmitting / receiving unit that communicates with the financial institution server P and the seller server S via the open network N.
Mm, Message processing unit M that processes electronic documents to be sent and received
p, an operation control unit Mc that checks the number of password inputs and performs user authentication processing, and a data conversion unit that converts the payment data into a usable state or a non-use state
Md, a display / input unit Mi that is an interface with the user. In the authentication information recording medium Dkc of the client terminal C,
A key pair using the public key cryptosystem is stored as user authentication information, and a key pair using the same system is also stored in the communication key recording unit Dks of the financial institution server P. These key pairs are authenticated by a certificate authority or the like. Has been certified. As the payment data storage medium Du used in the client terminal C, an IC card having a password authentication function is usually used. Payment data Dp, IC card specific information
Didu is recorded, and a secret key Kcpr, a public key Kcpb, and correspondence information Didk are recorded on the authentication information recording medium Dkc.

(Issuance of Recording Medium to User) First, the user makes an application from the client terminal C to the financial institution server P via the open network N in order to use the settlement system. Financial institutions record unique information Didu and payment data Dp on IC cards used for electronic payment,
Corresponding information Didk calculated from the IC card's unique information Didu by a certain calculation (here, a hash calculation) and an authentication information recording medium Dkc that records a key pair whose validity has been authenticated
And send it to the user. The method of sending the medium may be by mail or Takkyubin. In addition, the financial institution, personal information such as the address and name of the user previously notified from the user to the user database Dc of the financial institution server P, the unique information Didu recorded on the IC card, and invalid Register the password to be entered when recovering a lost IC card. The user who receives the IC card and the authentication information recording medium always carries the IC card and uses it for electronic payment, and stores the authentication information recording medium Dkc separately in a safe place (for example, storing it on a magnetic disk) .

(Invalidation of IC Card) When a user starts using the service and purchases a product provided by the seller server S, the purchase is made between the client terminal C and the seller server S. Are exchanged. It should be noted that messages are exchanged in the same manner when performing financial transactions such as deposits and loans with the financial institution server P. The client terminal C requests the user to enter a password before the message is transmitted, and performs an IC card user authentication process. When the password is correct, the process directly proceeds to the settlement phase. When the password is not correct, the operation control unit Mc checks the number of times of inputting the password and requests the password input up to three times in total. If the password authentication fails three times, the client terminal C creates a transmission message in the message processing unit Mp, and invalidates the payment data as follows by the message transmission / reception unit Mm according to the message sequence described below (FIG. 3). Message transmission / reception for processing is started.

FIG. 3 is a sequence chart of a payment data invalidating process according to an embodiment of the present invention. When the user U has failed the user authentication process more than a specified number of times (S10), the client terminal C transmits a revocation process start request to the financial institution server P (S11). That is, in order to invalidate the contents of the user information provided in the financial institution, a request for starting invalidation processing is made, and thereafter, the recovery processing is performed. In these communications, since transmission / reception is performed via the open network N, the transmission is normally performed in the format of a destination address, a source address, an invalidation processing start request, a check code, and the like. Invalidation processing start request S11
The financial institution server P that has received the public key Kspb stored in the communication key recording unit Dks to the revocation processing start response,
The message is transmitted to the client terminal C (S12). Client terminal
C receives the invalidation process start response S12 by the message transmitting / receiving unit Mm, acquires the public key Kspb of the financial institution server P from the message in the message processing unit Mp, and saves the public key Kspb in the IC card in the operation control unit Mc. Execute the invalidation processing of the settlement data that exists (S13). Invalidation of the payment data can be realized by invalidating the password for authentication processing stored in the IC card (first method). Another method is to store an encryption / decryption key in the data conversion unit Md and use it to encrypt a part (or all) of the data required when using the IC card, so that the payment data Can be invalidated (second method). This allows
The invalidated IC card cannot be restored to the original state until a recovery response message described later is received from the financial institution server P. IC whose user has been disabled
Even if you try to make a payment with a card, client terminal C
Since the password authentication processing of the C card cannot be executed, the authentication processing can be interrupted.

Next, the client terminal C transmits the unique information Didu recorded on the IC card to the public key K of the financial institution server P.
It is encrypted by spb and included in the revocation information registration request and transmitted to the financial institution server P (S14). The financial institution server P that has received the revocation information registration request message S14 has its own private key Ks
The message is decrypted by pr, and the item of the corresponding user in the user database Dc is updated using the unique information Didu acquired from the decrypted message as a key. This allows
The administrator of the financial institution server P uses the user database Dc
By searching for, the user whose payment data is invalid at that time can be known. Finally, the financial institution server P transmits a revocation information registration response to the client terminal C (S15). That is, the financial institution notifies the client that the user information in the database has been invalidated. The client terminal C that has received the response displays a message to the user that the communication has ended and the user's IC card has become unusable (S15).

(Recovery of Invalidated IC Card) FIG. 4 is a sequence chart of a payment data reuse application process according to an embodiment of the present invention. In the system of FIG. 2, if the password input fails three times, the password stored in the payment data recording IC card becomes invalid by the processing shown in FIG. 3 and cannot be used. In this case, the state of the IC card can be recovered by making a request for reuse from the client terminal C to the financial institution server P using the authentication information recording medium Dkc. As shown in FIG.
When the user U requests the reuse of the IC card that has become unusable, the state of the IC card is restored. Also in this sequence, the transmitted / received message is created and decrypted in the message processing unit Mp, and the message
It is transmitted and received by Mm.

First, the user U prepares the invalidated IC card and the separately stored authentication information recording medium Dkc, and starts the IC card recovery process using the client terminal C.
Before making the reuse start request in FIG. 4, the client terminal establishes a one-to-one correspondence between the unique information Didu stored in the IC card and the correspondence information Diuk stored in the authentication information recording medium Dkc. Confirm whether the key pair prepared illegally is used. The correspondence can be confirmed by comparing the value obtained by performing the hash operation on the unique information Didu with the value of the correspondence information Diuk. After confirming the correspondence, the processing in FIG. 4 is started, and the client terminal C issues a reuse start request containing the public key Kcpb in the authentication information recording medium Dkc to the financial institution server.
Send to P (S20). The financial institution server P acquires the public key Kcpb of the user U from the received message.

Next, the financial institution server P transmits a reuse start response including the public key Kspb in the communication key recording unit to the client terminal C (S21). The client terminal C acquires the public key Kspb of the financial institution server P from the received message. Important messages exchanged after this point are encrypted with their own private keys or the communication partner's public key, transmitted and received, and decrypted with the communication partner's public key or their own secret key, thereby obtaining information. Prevent leaks. Here, the client terminal C requests the user U to input a recovery processing PIN registered in the user database Dc of the financial institution server P in advance in order to prove that the user U is the user (S22). ), The user U enters a personal identification number (S23), and the client terminal C uses the IC card specific information Didu
Then, a recovery processing request containing the result of encrypting the password with the secret key Kcpr of the user U is transmitted to the financial institution server P (S24). Thus, the unique information Didu and the corresponding information Diuk
In addition, the recovery process is executed by collation using the user's encryption number.

Next, the financial institution server P decrypts the encrypted part of the received message with the public key Kcpb of the user U, and the unique information Didu of the user U's IC card and a password for recovery processing. To get. By this processing, it can be confirmed that the message has been encrypted with the user's secret key Kcpr. Then, a pre-registered password for recovery processing is acquired from the user database Dc using the unique information Didu as a key, and is compared with the password obtained from the message. If the two passwords are different, the client terminal C is notified that the passwords are incorrect, and the communication is terminated. Since the notification in this case only informs that the password is incorrect, there is no need to encrypt the contents. On the other hand, the financial institution server P, which has confirmed the validity of the personal identification number by matching the collation, encrypts the recovery processing response with its own secret key Kspr and transmits it to the client terminal C (S25). The client terminal C applies a decryption process using the public key Kspb of the financial institution server P to the received message. Only when the recovery processing response has been correctly decoded, the IC card recovery processing is performed (S26). The recovery of the IC card is performed by processing for validating the password inside the IC card. Here, the same state as before is restored by validating the password of the same number as before. Specifically, the activation process is performed by turning on the password valid flag in the IC card.

Next, upon completion of the recovery processing, the client terminal C encrypts the revocation information deletion request with the secret key Kcpr of the user U and transmits it to the financial institution server P (S27). The financial institution server P applies a decryption process using the public key Kcpb of the user U to the received message, and only when the decryption process is correctly performed, the uniqueness of the IC card received in the recovery process request message S24 Using the information Didu as a key, the user data in the user database Dc is changed to a state before the settlement data has expired. That is, the previous state (valid state) is returned by deleting the revocation information in the database Dc. Then, the financial institution server P transmits a revocation information deletion response to the client terminal (S28). The client terminal C that has received the revocation information deletion response message S28 notifies the user U of a message in which the payment data in the IC card has been recovered (S29), and ends the payment data reuse application process.

(Restriction on plagiarism) In the system shown in FIG. 1, the user database Dc of the financial institution server P is used.
Then, the number of executions of the payment data reuse application process and the number of failures in the password confirmation process (S23, S24 in FIG. 4) performed during the application process are recorded for each user. As a result, it is possible to add a limit to the number of payment data reuse application processes and determine the allowable number of confirmation process failures. That is,
If an unauthorized user plagiarizes both the settlement data recording medium Du and the authentication information recording medium Dkc, only the personal identification number is unknown to the plagiarism, and requests for reuse application processing are made many times, or Since it is expected that the authentication process will be attempted, the above-described restriction process will surely prevent the plagiarism from being accepted.

[0023]

As described above, according to the present invention,
In an electronic payment system constructed on an open network, if the client terminal user fails the user authentication process a specified number of times or more, the data used by the user for payment is invalidated, and the invalidation state of the data is changed to financial status. It becomes possible to manage safely and quickly in the institution server. In addition, since only a legitimate user having a correct set of payment data recording medium and authentication information recording medium can safely recover the data from the client terminal, the unauthorized use of data is suppressed. It is possible to Furthermore, for a thief who attempts to perform authentication processing many times by plagiarizing both the payment data recording medium and the authentication information recording medium, a limit on the number of reuse applications and the number of authentication processing are added to the financial institution server. By doing so, it is possible to deal with it effectively.

[Brief description of the drawings]

FIG. 1 is a schematic explanatory diagram of an electronic payment system of the present invention.

FIG. 2 is a configuration diagram of an electronic payment system according to an embodiment of the present invention.

FIG. 3 is a sequence chart of a settlement data invalidation process showing one embodiment of the present invention.

FIG. 4 is a sequence chart of a payment data reuse application process according to an embodiment of the present invention.

[Explanation of symbols]

C: client terminal, Dc: user database of financial institution server, Didk: information that guarantees one-to-one correspondence with the payment data recording medium stored in the authentication information recording medium, Did
u: Specific information stored in the payment data recording medium, Dkc: Authentication information recording medium used by the client terminal, Dks: Communication key recording unit of the financial institution server, Du: Payment data recording medium used by the client terminal, Kcpb: Client terminal Kcpr: Private key stored in the authentication information recording medium of the client terminal, Kspb: Public key stored in the communication key recording unit of the financial institution server, Ks
pr: private key stored in the communication key recording unit of the financial institution server, Mc: operation control unit of the client terminal, Md: data conversion unit of the client terminal, Mi: display / input unit of the client terminal, Mp: of the client terminal Message processing unit, Mm: Message transmission / reception unit of client terminal, N: Open network, P: Financial institution server, S: Seller server, etc., components of electronic payment system, U: Client terminal user.

Continued on the front page (72) Inventor Kenichi Endo 5030 Totsukacho, Totsuka-ku, Yokohama-shi, Kanagawa Prefecture Inside the Hitachi, Ltd.Software Division (72) Inventor Kenichi Fujioka 5030 Totsukacho, Totsuka-ku, Yokohama-shi, Kanagawa Hitachi, Ltd. Within the Software Division of the Manufacturing Company (72) Koji Ono 5030 Totsuka-cho, Totsuka-ku, Yokohama-shi, Kanagawa Prefecture F-term within the Software Division of the Hitachi, Ltd.F-term (reference) HA19 JJ01 KK05 KK16 KK19

Claims (5)

[Claims] 1. An electronic payment system in which at least a financial institution server and a client terminal are connected to an open network, wherein the client terminal includes a removable payment data recording medium for storing data used for payment, An authentication information recording medium that records, as authentication information of a user, correspondence information that defines a one-to-one relationship with the data used for the payment, wherein the financial institution server has user information and an encryption key for communication. The financial institution server issues the payment data recording medium and the authentication information recording medium to a user using the client terminal, and stores information of the issued medium as user information. Electronic payment system for invalidating and recovering payment data in electronic payment used by the client terminal Tem. 2. A financial institution server distributes a payment data recording medium holding detachable specific information to a plurality of client terminals via an open network in advance, and transmits the distributed medium to the financial institution server. An electronic payment system processing method for storing user information and a communication encryption key, wherein, when a service is started, if user authentication fails more than a predetermined number of times at the time of service start, The client terminal makes a request to start the invalidation processing of the user's payment data to the financial institution server, and the financial institution server stores the user's payment data in the user's payment data recording medium for the client terminal. The client terminal instructs the data to be unusable and transmits an encryption key number of the financial institution server; Of the user, the user's unique information is encrypted by using the encryption key number of the financial institution server, and the user's unique information is transmitted to the financial institution server. The financial institution server converts the received unique information into a key. Retrieving usage information of the user from all user information, registering the revocation of the payment data of the user, and then notifying the client terminal of the completion of the registration of the revocation information. Treatment method. 3. A settlement data recording medium that holds detachable specific information in advance from a financial institution server to a plurality of client terminals via an open network, and a value obtained by performing a predetermined operation on the specific information. The authentication information recording medium that holds the corresponding information is distributed, and the financial institution server retains the user information and the communication encryption key of the distributed medium, and when the service starts, the user fails in the user authentication process The method of processing of the electronic payment system for invalidating the payment data recording medium of the user when the payment data has been invalidated, wherein the client terminal used by the user whose payment data has been invalidated has the invalidated payment data record. After transmitting the encryption key between the financial institution server and the financial institution server using the medium and the authentication information recording medium, the user's decision is made to the financial institution server. While applying for the recovery process of the data recording medium, using the encryption key of the financial institution server, encrypt the unique information and the password of the user with the encryption key of the financial institution server, and transmit the encrypted data. Searching for a password for the use from all user information using the received unique information as a key, collating the password with the received password, and if the result of the collation is a match, a recovery processing response is sent to the client terminal. A method of recovering invalidated payment data, characterized by causing the client terminal to perform payment data recovery processing by encrypting and transmitting the encrypted data with the encryption key number of the user. 4. The recovery processing method for invalidated payment data according to claim 3, wherein a limit is added to the number of applications for recovery processing of the payment data recording medium, or the processing is performed during the application processing. A method for recovering invalidated payment data, wherein a limit is added to the number of times the password number matching process fails, or a limit is added to both. 5. The method for invalidating payment data according to claim 2 or the method for recovering invalidated payment data according to claim 3 or 4, respectively. Or a recording medium that can be distributed via a network.