JP2001142974A - Electronic commerce system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To computerize a flow for executing careing based on a care plan, collecting a care execution record, preparing an account bill and collating the execution record with the account bill. SOLUTION: As for each of services described in the care plan, an electronic ticket is prepared by a means for assigning a numerical service managing value and a means for applying an electronic signature to the relevant numerical service managing value. After the service is provided, a service client applies an electronic signature on the electronic ticket of the relevant service, besides a care service entrepreneur, who receives the electronic ticket, is provided with an electronic signature verifying means for confirming correctness thereof.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a system for facilitating payment of a fee even when an orderer of a service or a product and a recipient thereof are different. Especially, it belongs to the technical field related to the system related to the care service, and particularly to the technical field of the care management support system for improving the efficiency of the work of the care service provider and the care service remuneration examination payment organization. Note that the difference between the orderer and the receiver includes the case where the information processing device used for ordering and the information processing device to be received are different even if the two are the same person. This includes the case where the information processing device is not used for the reception. Further, even when the same device is used, the case where the position existing at the time of order placement and the position existing at the time of receipt are separated is included.

[0002]

2. Description of the Related Art Care management is a management method for efficiently and effectively providing care (care) to a person requiring care or a patient. In the care management process, first, a care manager, a nurse, and the like make a care plan, which is called a care plan. Based on the care plan, a company that actually provides nursing care services is assigned and care is performed. Although the condition of the care recipient or the patient is improved or deteriorated by the implementation of the care, the care plan is periodically reviewed according to the change in the condition, and services are appropriately taken in and out.

[0003] As a reward system for care services by care management, there is a system for paying by private or public insurance. In a system that pays compensation through insurance, the contents of services provided based on the care plan are summarized in a billing statement, and after submitting to the institution responsible for the examination payment together with the care plan, the contents of the care plan and the billing statement match. After a review is made to determine whether the request is correct or not, the care service provider is paid. When the care plan and the billing statement are operated on a paper basis, the matching work between the care plan and the billing statement is performed manually.

Japanese Patent No. 2673798 "Card for Long-Term Care Insurance" proposes a system using an IC card for care provision management in care management. According to this method, first, a point and a care plan corresponding to the total amount of services according to the degree of care required of the care recipient are recorded on the IC card. The care service provider who provided the service checks the remaining points from the IC card received from the care recipient, provides the service of the care plan recorded on the IC card, and draws out points for the provided service.
The performed service is recorded on the IC card.

[0005]

Generally, a plurality of different care service providers provide care services to a certain care-requiring person based on a care plan. Therefore, it is necessary to match bills submitted by a plurality of contractors with a care plan. At this time, when the care plan and the billing statement are operated on a paper basis, an enormous amount of manual matching work occurs.

If the orderer and receiver of the service (product) other than the care service are different from each other, it is necessary to match the information indicating the order with the information indicating the reception.

[0007] On the other hand, even with a method of recording points corresponding to the total amount of services on an IC card, each care service provider needs to create a care plan and a billing statement. It has the same issues as above.

When electronically creating a care plan and billing statement, the matching process can be performed to some extent automatically. However, in order to secure evidence that the service was actually provided, there is a paper-based service management slip that leaves a stamp or a signature from the care-requiring person who is a service customer. I will. In order to improve the efficiency of care management work, the flow from the implementation of care, the collection of records of its execution, the generation of billing statements from the execution records, and the matching of the billing statement and the care plan are based on the development of a care plan. An environment that is digitized and that allows the data of each document to be reused is desired.
However, the digitized data can be easily falsified, forged, forged, and illegally copied, and the forged or forged bills may cause an improper billing of a care service fee. In particular, it is important to provide appropriate means for electronically securing evidence that the service has been provided.

[0009] This problem also occurs in a system other than the care system in which the orderer and the recipient are different. That is,
In this system as well, the fact that the recipient has received the service (goods) is performed by stamping or signing. Also, forgery, unauthorized copying, etc. of the billing statement occur in the same manner.

[0010] Another object of the present invention is to promptly pay for the service after providing the service to the service provider.

[0011]

In order to solve the above problems, the present invention has the following arrangement. In this specification, “service” also includes shipping of a product unless otherwise specified.

The service provider's information processing device and the payment (settlement) institution's information processing device have at least the corresponding identification information (for example, the same identification number, (E.g., a predetermined result is obtained by performing a predetermined calculation). Here, although the service orderer has approved, the information processing apparatus of the service provider may be configured to create the identification number.

More specifically, the configuration is as follows.

[0014] The information processing apparatus of the service orderer transmits order information indicating an order for a service to be performed to the information processing apparatus of the service provider. The ordering information includes at least one of information for indicating the orderer's request and specifying the content of the service actually performed, the content of the service, the timing, the recipient of the service, and the like. The information for specifying the contents of the service includes a budget. It also transmits identification information.

In the information processing device of the service provider, the service provider executes a service based on the order information. If the service can be performed by the information processing apparatus itself such as distribution of electronic data such as a computer program, the processing is executed.

The service provider or its information processing device receives an approval from the service receiver indicating that the service has been received. This approval includes an electronic approval such as an electronic signature in addition to a seal and a signature.

In an information processing device of a payment (settlement) institution,
The service provider side (at least one of the provider and the information processing device of the provider) compares the information including the identification information transmitted and transmitted from the service orderer side with the identification information transmitted and transmitted from the service provider side, and performs the settlement. Execute (perform processing for settlement execution). Further, when information regarding service implementation is received from the service provider side, settlement may be executed. At this time, the information on the service implementation may be information indicating that the service recipient has approved the service implementation, or information indicating that the service is scheduled to be implemented. Further, when information indicating that the service is to be executed is received, settlement may be performed when approval is received from another public organization or a service orderer. Further, when information indicating that the program is scheduled to be executed is received, payment for items necessary for preparation for execution may be settled.

As yet another mode, the information processing apparatus of the service orderer transmits order information. The information processing device of the service provider that has received the order information creates identification information corresponding to the order information, and returns the identification information to the information processing device of the service orderer. At this time, if the ordering information includes the wishes of the orderer and does not include the service content itself, the service provider side specifies the service content, creates identification information, and returns these. It may be.
At this time, the orderer may be configured to approve the specified service. Also, the service orderer approves the identification information received from the information processing device of the service provider, returns the approval to the service provider side, and transmits the information to the information processing device of the payment institution. Note that approving the identification information may be substituted for approving the service content. This approval may include a service fee.

Further, the order information may include valuable information having a monetary value. In this case, the order information is
The service provider may not be able to use the service simply by transmitting it from the service orderer to the service provider. At this time, the valuable information may be made available when the service recipient approves the service has been performed. With this configuration, the settlement can be simplified and speeded up.

Further, the information processing device of the service provider may be configured to be connected to the information processing device of the service executor that actually executes the service. In this case, the service provider determines an executor suitable for executing the ordered service. For this purpose, the information processing device of the service provider has information on the service executor side, and the executor may be determined by comparing this information with the ordering information.

[0021] Further, the service provider sends information indicating the value of the service to the payment institution, and specifies this information and the contents of the service (or scheduled to be performed) transmitted from the service provider. Alternatively, it may be determined whether to make a payment by comparing the information to be settled.

Further, the embodiments of the present invention include, in addition to the entire system for performing the above-described processing, information processing apparatuses of service orderers, providers, and payment institutions.

In the care system, care is performed based on the care plan transmitted from the care manager to the business.

More specifically, in the care management support system for solving the above-mentioned problems, for each service described in the care plan, a means for assigning a service management value and a means for electronically signing the service management value are provided. It may be characterized in that an electronic ticket is created.

At this time, a random number based on an initial value uniquely assigned to each care provision management device may be used in the means for assigning a service management value for each service described in the care plan.

The care service provider receiving the electronic ticket may include an electronic signature verification unit for confirming the validity of the electronic ticket.

In the above-mentioned care management support system, after the service is provided, a means for performing an electronic signature by the service customer on the electronic ticket of the service may be provided.

At this time, after the service is provided, a means for digitally signing the electronic ticket of the service by the service customer may be performed by an IC card.

Further, in the care management support system, after the service is provided, means for performing a digital signature by the service customer on the electronic ticket of the service is performed by an electronic seal instead of the IC card, and the IC paper is used as a management medium of the electronic ticket. May be used.

Here, in the care management support system, after the service is provided, the electronic ticket of the service is electronically signed by the service customer as a means for performing an electronic signature, and the time stamp based on the clock inside the electronic seal stamp is provided. , A digital signature with an electronic seal may be performed.

In the care management support system,
A means for verifying the service customer's electronic signature attached to the electronic ticket of each service during the service fee payment examination, a means for verifying the electronic signature attached to the electronic ticket, a service management value and care of the electronic ticket Means may be provided for comparing the service management values of the service in the plan.

In the care management support system, after the service is provided, a means for performing an electronic signature by the service customer on an electronic ticket of the service, a time stamp by an internal clock of an electronic signature device having a tamper-resistant structure,
After the electronic ticket is attached to the electronic ticket inside the electronic signature device, the electronic ticket to which the time stamp has been added may be digitally signed by an electronic signature processing unit inside the electronic signature device.

Further, in the care management support system, in care management for managing care provision based on a care plan, means for assigning a service management value for each service described in the care plan, and an electronic signature on the service management value Means for encrypting the digitally signed service management numerical value with the public key of the service customer, and further, the digitally signed service management encrypted with the public key of the service customer. An electronic ticket may be created by means for electronically signing a numerical value.

[0034]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, a care service system according to an embodiment of the present invention will be described with reference to the drawings. Hereinafter, the billing specification is referred to as a claim.

(Embodiment 1) FIG. 1 is a block diagram of a care service provision management system.

In FIG. 1, a care service provision management system 101 includes a storage device 102, a care service provision management unit 103, a portable medium read / write device 104, and a communication device 105. The storage device 102 is composed of a well-known storage device that can be randomly accessed, such as a hard disk device, a magnetic disk device, and an optical disk device. The communication device 105 is used for connection with the care service remuneration examination payment organization 106 and the care service provider 107 via a telephone line, a dedicated line, a local area network, or the like.

The storage plan 102 stores a care plan file 201 as shown in FIG. Here, the care plan is a plan of a care service formulated for each care recipient or patient. In the present embodiment, a weekly schedule table is assumed. That is, it manages what kind of care service is provided for each time frame of each day of the week.

The care plan file 201 is created for each care recipient or patient. In the present embodiment, the care plan file 201 includes, for each line, a day of the week 202, a time frame 203,
It is assumed that, in addition to the service name 204 and the care service provider 205, an electronic ticket 206, an access date and time 207, a scheduled service provision date 208, and a cost 209 are managed. Here, the day of the week 202 and the time frame 203 are the day of the week and the time frame in which the service indicated by the service name 204 is provided by the care service provider 205. The scheduled service providing date 208 is a scheduled date of actually providing a service corresponding to the day 202. In addition, electronic ticket 2
Reference numeral 06 denotes data obtained by digitally signing a service management numerical value such as a random number or a serial number, and the access date / time 207 represents the first time when the electronic ticket 206 was read.

Here, it is assumed that the care plan file 201 is registered in the storage device 102 via the portable medium read / write device 104 or the communication device 105. In the operation in the present embodiment, a professional staff who drafts a care plan registers.

In FIG. 1, care service provision management unit 1
03 is a device equipped with a CPU (central processing unit),
It may be a personal computer or a workstation. Here, a series of processes in the care service provision management unit 103 will be described with reference to FIG.

In the service management numerical value generation processing 301, the service management numerical value x is stored in the care plan file 201.
(i) (i = 1 to n: the total number of services in the care plan file 201 is assumed to be n) generated so that a different numerical value is assigned to each service, and the care plan file 2 is generated.
01 for each electronic ticket 206. In the present embodiment, a service management numerical value is generated by generating a random number using a seed uniquely determined for each care service provision management system.

In the electronic signature processing 302, each service management numerical value generated in the service management numerical value generation processing 301 is digitally signed. In the present embodiment, a method of performing an electronic signature in an external electronic signature system as shown in FIG. 4 is assumed. An appropriate place for installing the electronic signature system is the care service remuneration screening payment organization 106 or the like.

Here, the digital signature processing 30 according to FIG.
2 will be described.

Step 401: The care service provision management system sends the care plan file 201 to the electronic signature system. Then, the electronic signature system allocates the care plan number N as the reception number, and records the care plan number N and the care plan file 201 in the storage device 405.

Step 402: The electronic signature system extracts the service management numerical value x (i) set in each electronic ticket 206 from the care plan file 201. At the same time, each cost 209 is extracted as y (i). y (
i) is not particularly limited to cost and may be empty.

Step 403: The electronic signature Dks (x (i)) of the time stamp t, the care plan number N, x (i), and y (i) by the internal clock 406 of the electronic signature system using the secret key ks by the electronic signature system. , Y (i
), T, N). Then, ckt (i) = x (i
), Y (i), t, N + "public key certificate of kp" + Dk
Return s (x (i), y (i), t, N) to the care service provision management system. Here, the format of the public key certificate is, for example, ISO-X. A well-known format such as 509 may be used.

Step 404: After confirming the validity of the ks public key certificate with respect to the returned ckt (i), the care service provision management system uses the ks public key kp in the public key certificate to generate each Ekp. (Dks (x (i),
y (i), t, N)) and x (i), y (i), t, N. If they match, ckt (i) is valid. If there is at least one that does not match, step 401
Is repeated.

Next, returning to FIG.
03 will be described. In the electronic ticket management process 303, x (i) at the place of the electronic ticket 206 in the care plan file 201 is replaced with ckt (i).

In the distribution process 304, the care plan file 201 having the electronic ticket with the digital signature is distributed to all the care service providers specified in the care service provider 205 of the care plan file 201. As means for distribution, a portable medium such as an FD (floppy disk) or distribution via a network can be considered. here,
After receiving the care plan file 201, the care service provider 205 confirms the validity of the ks public key certificate with respect to ckt (i), and then checks the ks (i) in the public key certificate.
Each Ekp (Dks (x (i), y (i)
), T, N)) and x (i), y (i), t, N. If they match, the care plan file 201 is considered valid and the service is provided based on the care plan file 201.

Here, a description will be given of a process in which, when a care service provider provides a service, a service customer who is a care-requiring person or a patient is authorized to provide the service.
In the present embodiment, the care service provider brings the notebook PC 501 to which the IC card reader 503 is connected to the home of the service customer. Note that the notebook PC 501 is of a notebook type, which is not particularly essential in the present invention. The IC card 504 itself is assumed to be stored and managed by a service customer. The IC card 504 is the CPU device 5
05 and a memory 506, and a private key and a public key certificate for an electronic signature, and an electronic signature program are managed in the memory 506.

A process for obtaining approval of service provision from a service customer will be described with reference to FIG.

The notebook PC 501 has the distribution processing 3 shown in FIG.
The care plan file 601 distributed in step 04 is recorded.

After providing the service, the care service provider makes a note PC 501 based on the care plan file 601.
A service list such as 602 is displayed. A service to be provided is designated by selecting a group of services actually provided from the service list by clicking with the mouse 508 or selecting a key with the keyboard 507. In FIG. 6, 60
It is assumed that the row of “3 hours of home visit nursing” is selected, and this row is highlighted. After the service customer shows and confirms the screen 602, the IC card 504 managed by the service customer is received. The received IC card 504 is inserted into the IC card reader 503, and the approval button 604 is clicked.

When the approval button 604 is clicked, the electronic ticket of the specified providing service 603 is taken into the IC card 503 and the electronic signature processing is performed. Here, the digital signature processing 605 will be described with reference to FIG. In FIG. 7, the electronic ticket is represented by c and the service provision date is represented by t.

Step 701: The notebook PC has c, t
Is transferred to the IC card.

Step 702: The IC card verifies the electronic signature for c. Where c is x (i), y (i
), T, N + “public key certificate of kp” + Dks (x (i
), Y (i), t, N). After verifying the validity of the public key certificate of kp, x (i), y (i),
t, N and Ekp (Dks (x (i), y (i), t,
N)), and if they match, the process proceeds to step 703. If they do not match, the processing is interrupted.

Step 703: c and t are converted to secret key kic
Then, Dkis (c, t) is returned to the I notebook PC.

Step 704: Dicks returned
(C, t) is decrypted using the public key Ekicp. c, t and Ekicp (Dkis (c, t))
Is normal if they match. If they do not match, the processing from step 701 onward is repeated.

By the digital signature processing 605, sckt = c, t + from the digital signature data Dks (c, t).
"Kipp's public key certificate" + Dks (c, t)
Is generated and recorded in the care execution record file 607. Here, the format of the care execution record file 607 is shown in FIG.
This will be described below. The care execution record file includes at least the name of the care recipient 802, the service name 803, and the date and time of provision 80.
4, including an electronic ticket 805 that has been electronically signed. sc
kt is recorded at the place of the electronic ticket 805 that has been electronically signed.

Next, a description will be given of a process for creating the receipt data of the care service provider for a predetermined period, for example, at the end of each month. The care service provider's receipt data processing system 901 includes a storage device 902 and a data processing unit 903.
, A portable medium read / write device 904, and a communication device 905. The storage device 902 includes a well-known storage device that can be randomly accessed, such as a hard disk device, a magnetic disk device, and an optical disk device. The communication device 905 is used for connection with, for example, a care service remuneration examination payment organization 906 and a care service provision management system 907 by a telephone line, a dedicated line, a local area network, or the like.

The processing of the receipt creation processing unit will be described with reference to FIG.

As a result of the data collection processing 1101, the care plan file 1102 distributed by the distribution processing 304 of FIG. 3 from the care service provision management system 907 to the storage device 902, and the care execution record file generated by the series of processing of FIG. 1103 is collected.

The receipt creation process 1104 is a process for creating a receipt data file. FIG. 10 shows the format of the receipt data file. The receipt data file 1001 is created for each care recipient or patient, and at least the name 100 of the care recipient or patient is required.
2. Care service provider name 1003, service name 100
4. Provision date and time 1005, digitally signed electronic ticket 1
006.

In the receipt creation processing 1104, first, the name 1002 of the care-requiring person or the patient, the name of the care service company 10
03, the service name 803, the provision date / time 804, and the electronic ticket 805 shown in the format of FIG. 8 are provided from the care execution record file 1103, the service name 1004 shown in the format of FIG. At date and time 1005, the electronic ticket 1006 is copied to the electronic ticket 1006.

In the receipt saving process 1105, the receipt file created in the receipt creation process 1104 is saved in the storage device 902.

In the transfer processing 1106, the receipt data file and the care plan file 1102 saved in the receipt saving processing 1105 are transmitted to the care service remuneration examination payment organization 906 via the communication device 905 of the receipt data processing system 901.

In this embodiment, network transfer is assumed. However, the receipt data file and the care plan file are copied to a portable medium such as an FD via the portable medium read / write device 904, and care is performed by using the portable medium. Means for delivering to the service remuneration examination payment organization 906 may be used. The care plan file may be transferred from the care service provision management system 907 directly to the care service remuneration screening payment organization 806.

The care service remuneration screening and payment organization performs service screening and payment processing using the above-mentioned receipt data file and care plan file. The care service remuneration screening payment processing system 1201 of the care service remuneration screening and payment organization includes a storage device 1202, a data processing unit 1203, a portable medium read / write device 1204, and a communication device 1205. Storage device 1202
Is composed of a well-known storage device that can be randomly accessed, such as a hard disk device, a magnetic disk device, and an optical disk device. The communication device 1205 is used for connection with, for example, a settlement system 1206 via a telephone line, a dedicated line, a local area network, or the like.

In the examination process, the following process is performed for each service in the receipt data file.

Step 1301: The electronic signature of the electronic ticket 1006 that has been electronically signed is verified. The digitally signed electronic ticket 1006 is: sckt = c, t +
"Kipp's public key certificate" + Dkicks (c,
t), but after confirming the validity of the public key certificate of kicp, c, t and Ekicp (Dkis
(C, t)). That is, the verification performed here is about the electronic signature performed by the service customer.
If the electronic signature is valid, go to step 2. Otherwise, go to step 1307.

Step 2: The time stamp t is compared with the provision date 1005 of the receipt data file and the date and time of the scheduled service provision date 308 of the care plan file. If they fall within a predetermined threshold, the process proceeds to step 1303. Otherwise, step 1307
Proceed to. Here, the threshold may be one day or the like.

Step 3: Similarly, verification is performed on the electronic ticket c. The electronic ticket is ckt (i) = x (i
), Y (i), t, N + "public key certificate of kp" + Dk
s (x (i), y (i), t, N).
First, after verifying the validity of the kp public key certificate, x
(i), y (i), t, N and Ekp (Dks (x (i),
y (i), t, N)). That is, the verification performed here is an electronic signature performed by an electronic signature system installed in a care service remuneration examination payment organization or the like. If the electronic signature is valid, go to step 4. Otherwise, go to step 1307.

Step 1304: As described above, the verification process guarantees that the service has been approved by the service customer, and if the electronic ticket is valid, the corresponding service in the care plan file is deleted. It is checked whether the service management value of the ticket 206 matches the service management value x (i) of the electronic ticket verified in step 1302. If they match, the process proceeds to step 1305. Otherwise, go to step 1307.

Step 1305: A payment calculation process is performed.

Step 1306: If the payment calculation process results in paying a total amount z to the care service provider, the payment system 1206 is sent to the settlement system 1206 through the communication device 1205 to receive the account of the care service remuneration screening payment institution. To transfer z to the account of the care service provider. The means of electronic settlement via the network performed in this step may be a known protocol such as SECE or SET.

Step 1307: The present care plan file and the receipt data file are registered in the examination case list by the expert.

In this embodiment, the payment is calculated in step 1305 after step 1304. However, it is necessary to perform a manual process by an expert such as determining whether the care plan is appropriate for the condition of the care recipient. Is also assumed. If such a case is considered, step 1
Between the step 304 and step 1305, a process for performing a detailed examination by an expert may be added.

Second Embodiment In the first embodiment, when a care service provider provides a service, an IC card is used for a process of obtaining approval of service provision from a care-requiring person or a service customer who is a patient. In the present embodiment, an embodiment using IC paper and an electronic seal will be described.

The electronic seal stamp 1401 is an IC (integrated circuit) 1
402, a power supply 1403, an antenna 1404, a pressure sensor 1405, a display device 1409, and an internal clock 1410. The IC paper 1406 is formed by embedding an IC 1407 and an antenna 1408 in paper. IC paper 1
When the electronic seal 1401 is stamped on the electronic seal 1401 like an ordinary seal, the pressure sensor 14
05 senses the pressure at the time of stamping, the IC operates, and data processing and data transmission / reception between the IC paper 1406 and the electronic seal stamp 1401 via the antennas 1404 and 1408 are possible. In the present embodiment, the IC 1402 of the electronic seal stamp 1401 reads the data of the IC 1407 of the IC paper, performs a digital signature, and performs a process of writing the digital signature data into the IC 1407.

In this embodiment, the IC paper is given the role of a service receipt. The electronic seal is assumed to be stored and managed by each patient and the care recipient. One IC paper is assigned to each service of the care plan file 201.

In FIG. 15, a care service provision management system 1501 includes a storage device 1502, a care service provision management unit 1503, and an IC paper read / write device 150.
4 and a communication device 1505. The storage device 1502 includes a hard disk device, a magnetic disk device,
It comprises a well-known storage device such as an optical disk device that can be accessed randomly. The communication device 1505 is used for connection to a care service remuneration screening payment organization or a care service provider via a telephone line, a dedicated line, a local area network, or the like.

In FIG. 15, a care service provision management unit 1503 is a device having a CPU (central processing unit), and may be a personal computer, a workstation, or the like. Here, a series of processes in the care service provision management unit 1503 will be described, but the first embodiment described with reference to FIG.
Processing is basically the same as However, in the electronic ticket management process 303, the IC paper read / write device 14
Record ckt (i) via the C.T. FIG. 16 shows an IC
This shows an overview of the paper. Service company name 160
1, service name 1602, etc. are printed in advance,
The name of the care recipient 1603, the date 1604, etc. will be added later. The reception stamp column 1605 is a place where the stamp is stamped with the electronic seal stamp.

Next, a description will be given of a process in which, when a care service provider provides a service, a service customer who is a care-requiring person or a patient is authorized to provide the service.

First, after the care service provider provides the service, one IC paper corresponding to the provided service is taken out and presented to the service customer. After the service customer confirms the content, the customer stamps 1605 with an electronic seal stamp. When the seal is applied, the pressure sensor 1405 of the electronic seal stamp 1401 senses the pressure at the time of the seal, and the IC operates.
The following processing indicated by 7 is performed. Here, c is an electronic ticket. Although t is a time stamp, the present embodiment uses the date and time of the internal clock 1410 of the electronic seal stamp 1401.

Step 1701: The electronic seal stamp reads c recorded in the IC of the IC paper.

Step 1702: The electronic seal verifies the electronic signature for c. Where c is x (i), y (i
), T, N + “public key certificate of kp” + Dks (x (i
), Y (i), t, N). After verifying the validity of the public key certificate of kp, x (i), y (i),
t, N and Ekp (Dks (x (i), y (i), t,
N)), and if they match, the process proceeds to step 1703.
If they do not match, the processing is interrupted.

Step 1703: After obtaining t by the internal clock 1410 of the electronic seal stamp 1401, c and t are encrypted with the secret key kics, and the public key Ekicp of Dkis (c, t) and the secret key kics is returned to the IC paper. I do.

Step 1704: Dicks returned
(C, t) is decrypted using the public key Ekicp. c, t and Ekicp (Dkis (c, t))
Is normal if they match. If they do not match, the processing from step 1701 is repeated.

When the above processing is completed, the electronic seal stamp 140
"Electronic signature completed" is displayed on the first display device 1409. After "Electronic signature completed" is displayed, the electronic seal
Separated from the C paper, and the electronic signature is completed.

Next, at a predetermined period, for example, at the end of each month, the care service provider creates a receipt data file 1001 for each care-requiring person or patient. Here, the name of the care recipient or the patient 1002, the name of the care service provider 1003
The provided service name 1004 and the provided date and time 1005 are filled in. The electronic ticket 1006 that has been electronically signed is managed by IC paper.
Leave blank.

In the care service remuneration examination payment organization, the examination and payment processing of the service is performed by the receipt data file, the care plan file, and the IC paper in the present embodiment. The care service remuneration screening payment processing system 1801 of the care service remuneration screening payment organization includes a storage device 1802, a data processing unit 1803, an IC paper read / write device 1804, and a communication device 1805. The storage device 1802 is composed of a well-known storage device that can be randomly accessed, such as a hard disk device, a magnetic disk device, and an optical disk device. Communication device 18
Reference numeral 05 is used for connection with, for example, a settlement system 1806 via a telephone line, a dedicated line, a local area network, or the like.

First, a process of extracting an electronic ticket with an electronic signature from a plurality of IC papers and embedding the electronic ticket in the corresponding electronically signed electronic ticket 1006 field of the receipt data file is performed.

Step 1901: IC from each IC paper
An electronic ticket wj (j = 1 to 1) with an electronic signature recorded on the IC 1407 via the paper reading / writing device 1804.
n: assume that there are n IC papers).

"Hereafter, steps 1902 and 1903 are repeated for each wj (j = 1 to n)." Step 1902: The electronic ticket with the electronic signature is wj
= C, t + "public key certificate of kicp" + Dkic
In the form of s (c, t), the electronic ticket is c = x (i
), Y (i), t, N + "public key certificate of kp" + Dk
s (x (i), y (i), t, N). here,
N is selected, and the electronic ticket 20 of the care plan file 201 that matches x (i) is selected.
Part 6 is searched. If there is no match, the process proceeds to step 1905. If there is a match, the process proceeds to step 1903.

Step 1903: applicable service name 2
The wj is embedded in the electronic ticket 1006 that has been digitally signed in the line of the 04 receipt data file.

Step 1904: Step 13 in FIG.
01 to Step 1307 are executed.

Step 1905: The present care plan file and the receipt data file are registered in the examination case list by the expert.

(Embodiment 3) In this embodiment, an embodiment will be described in which an electronic ticket can be used as electronic money once an electronic signature has been received from a service customer by changing the electronic ticket issuing method. Here, the electronic money is electronic data to which a monetary value is assigned.

In the first embodiment, an electronic ticket is generated by the processing shown in FIG. In the present embodiment, the system configuration of the care service provision management system in FIG. 1 is the same, and the processing flow of the care service provision management unit in FIG. 3 is also the same. However, the electronic signature processing 303 generates an electronic ticket according to the processing in FIG.

Step 2001: The care service provision management system sends the care plan file 201 to the electronic signature system. Then, the electronic signature system allocates the care plan number N as the reception number, and records the care plan number N and the care plan file 201 in the storage device 2008.

Step 2002: The electronic signature system
From the care plan file 201, each electronic ticket 206
The service management numerical value x (i) set in is extracted. At the same time, each cost 209 is extracted as y (i). y
(i) is not particularly limited to cost and may be empty.

Step 2003: The electronic signature Dks (x (i)) of the time stamp t, the care plan number N, x (i), y (i) by the internal clock 2009 of the electronic signature system using the secret key ks by the electronic signature system. , Y (i
), T, N). Then, ckt (i) = x (i
), Y (i), t, N + "public key certificate of kp" + Dk
s (x (i), y (i), t, N) is returned to the care service provision management system. Here, the format of the public key certificate is, for example, ISO-X. A well-known format such as 509 may be used.

Step 2004: After confirming the validity of the public key certificate of ks with respect to the returned ckt (i), the care service provision management system uses the public key kp of ks in the public key certificate for each Ekp. (Dks (x (i
), Y (i), t, N)) and x (i), y (i), t, N. If they match, ckt (i) is valid. If there is at least one that does not match, the processing from step 401 is repeated.

Step 2005: The ckt (i) is encrypted using the public key P of the care-requiring person obtained in advance and sent back to the electronic signature system.

Step 2006: P (ckt (i))
Then, an electronic signature is performed using the secret key Dks of the electronic signature system, and ctkm (i) = P (ckt (i)) + “kp
Public key certificate ”+ Dks (P (ckt (i))) to the care service provision management system.

Step 2007: P (ckt (i))
And Ekp (Dks (P (ckt (i))).
If they match, ctkm (i) is valid. If there is at least one that does not match, step 2005
Is repeated.

Here, the electronic ticket management processing 30 shown in FIG.
In step 3, x (i) at the location of the electronic ticket 206 in the care plan file 201 is replaced with ctkm (i). The distribution processing 304 is the same.

Here, a description will be given of a process in which, when a care service provider provides a service, a service customer who is a care-requiring person or a patient is authorized to provide the service.
The system configuration in FIG. 5 and the processing flow in FIG. 6 are the same.
However, the electronic signature processing 605 by the IC card in FIG. 6 is different, and will be described with reference to FIG.

Step 2101: The notebook PC transfers c to the IC card.

Step 2102: The IC card verifies the electronic signature for c. Here, c is P (ckt (i
)) + “Public key certificate of kp” + Dks (P (ckt
(I))). After confirming the validity of the public key certificate of kp, P (ckt (i)) and Ekp
(Dks (P (ckt (i)))), and if they match, the process proceeds to step 2103. If they do not match, the processing is interrupted.

Step 2103: Next, the public key P (=
With the private key Dkics of the public key Ekicp), P
When (ckt (i)) is digitally signed, ckt (i)
Is decrypted. This ckt (i) is sent back to the notebook PC.

Step 2104: The returned ckt (i
) Was in the form of x (i), y (i), t, N + "public key certificate of kp" + Dks (x (i), y (i), t, N). Where x (i), y (i), t, N and Ekp
(Dks (x (i), y (i), t, N)) are compared, and if they match, it is normal.

Here, it is assumed that the electronic signature system of FIG. 20 is installed in a bank or a business entity that provides a finance service in which a receipt is converted into a bond. ckt (i
), If y (i) is a cost, the digital signature system uses ck
At the stage of generating t (i), the total amount y (i) is deducted and pooled from the account of the care service remuneration examination payment institution or the service customer. Finally, a care service provider transfers ckt (i) generated by the processing of FIG. 21 to a bank or obtains ck
By bringing in the IC paper with t (i) recorded,
Transfer the pooled y (i) to the care service provider's account. At this time, of course, the electronic signature of ckt (i) is verified and its validity is confirmed.

[0114]

According to the structure of the present invention, it is possible to realize an electronic commerce system capable of easily executing settlement even if the orderer of the service is different from the recipient of the service. Note that the difference between the orderer and the receiver includes the case where the information processing device used for ordering and the information processing device to be received are different even if the two are the same person. This includes the case where the information processing device is not used for the reception. Further, even when the same device is used, the case where the position existing at the time of order placement and the position existing at the time of receipt are separated is included.

[Brief description of the drawings]

FIG. 1 is a system configuration diagram according to an embodiment of the present invention.

FIG. 2 is a diagram illustrating a care plan file according to the embodiment of the present invention.

FIG. 3 is a view for explaining a processing flow in the embodiment of the present invention.

FIG. 4 is a view for explaining a processing flow in the embodiment of the present invention.

FIG. 5 is a system configuration diagram according to the embodiment of the present invention.

FIG. 6 is a view for explaining a processing flow in the embodiment of the present invention.

FIG. 7 is a view for explaining a processing flow in the embodiment of the present invention.

FIG. 8 is a view for explaining a care execution record file according to the embodiment of the present invention.

FIG. 9 is a system configuration diagram according to the embodiment of the present invention.

FIG. 10 is a view for explaining a receipt data file in the embodiment of the present invention.

FIG. 11 is a view for explaining a processing flow in the embodiment of the present invention.

FIG. 12 is a system configuration diagram according to an embodiment of the present invention.

FIG. 13 is a view for explaining a processing flow in the embodiment of the present invention.

FIG. 14 is a functional configuration diagram of the electronic seal stamp and the IC paper according to the embodiment of the present invention.

FIG. 15 is a system configuration diagram in the embodiment of the present invention.

FIG. 16 is a print image of IC paper according to the embodiment of the present invention.

FIG. 17 is a view for explaining a processing flow in the embodiment of the present invention.

FIG. 18 is a system configuration diagram in the embodiment of the present invention.

FIG. 19 is a view for explaining a processing flow in the embodiment of the present invention.

FIG. 20 is a view for explaining a processing flow in the embodiment of the present invention.

FIG. 21 is a view for explaining a processing flow in the embodiment of the present invention.

[Explanation of symbols]

101: care service provision management system, 102: storage device, 103: care service provision management unit, 104: general medium read / write device, 105: communication device, 106: care service remuneration examination payment organization, 107: care service provider, 201: care plan file, 202: day of the week, 20
3: time frame, 204: service name, 205: care service provider, 206: electronic ticket, 207: access date and time, 208: scheduled service provision date, 209: cost, 3
01: service management numerical value generation processing, 302: electronic signature processing, 303: electronic ticket management processing, 304: distribution processing, 401: transfer of a care plan file, 402: processing for taking out each service ticket, 403: electronic for each service ticket Processing for attaching a signature, 404: processing for verifying the electronic signature of each service ticket, 405: storage device,
406: internal clock, 501: notebook PC, 502: display device, 503: IC card reader, 504: IC card, 505: memory, 506: CPU device, 507: keyboard, 508: mouse, 601: care plan file, 602 : Screen display example, 603: selected service example, 604: approval button, 605: electronic signature by IC card, 606: care execution record file, 701: electronic ticket and time stamp transfer processing, 702: electronic ticket verification Processing, 703: electronic ticket and time stamp electronic signature processing, 704: electronic ticket and time stamp electronic signature verification processing, 801: care execution record file, 802: care recipient name, 803: service name,
804: Provision date and time, 805: Electronic ticket, 901: Reception processing system, 902: Storage device, 903: Reception creation processing unit, 904: Portable medium read / write device, 90
5: Communication device, 906: Care service remuneration examination payment organization, 907: Care service provision management system, 100
1: Reception data file, 1002: Name of care recipient, 1003: Care service provider name, 1004: Service name, 1005: Provision date and time, 1006 Electronically signed electronic ticket, 1101: Data collection processing, 1102:
Care plan file, 1103: Care implementation record file, 1104: Recept creation processing, 1105: Data storage processing, 1106: Transfer processing, 1201: Care service remuneration examination payment system, 1202: Storage device, 120
3: Care service remuneration examination payment processing unit, 1204: Portable medium read / write device, 1205: Communication device, 1206:
Payment system, 1301: Verification of electronic signature by service customer, 1302: Comparison of date and time, 1303: Verification of electronic signature of electronic ticket, 1304: Comparison of care plan and service management numerical value of receipt data file, 1305:
Payment calculation processing, 1306: Electronic settlement, 1307: Registered in a list of examination cases by experts, 1401: Electronic seal stamp, 1
402: IC, 1403: power supply, 1404: antenna,
1405: pressure sensor, 1406: IC paper, 14
07: IC paper, 1408: antenna, 1409: display device, 1410: internal clock, 1501: care service provision management system, 1502: storage device, 1503: care service provision management unit, 1504: general media read / write device, 1505: Communication device, 1506: Care service remuneration screening payment institution, 1507: Care service provider, 16
01: service provider name, 1602: service name, 16
03: Name of care recipient, 1604: Date, 1605: Receipt stamp column, 1701: Electronic ticket transmission, 1702: Verification of electronic ticket, 1703: Acquisition of time stamp by internal clock and electronic signature processing with electronic ticket, 170
4: verification of the time stamp and the electronic signature of the electronic ticket,
1801: Care service remuneration examination payment system, 180
2: storage device, 1803: care service remuneration examination payment processor, 1804: portable medium read / write device, 1805:
Communication device, 1806: payment system, 1901: processing of extracting an electronic ticket with an electronic signature from IC paper,
1902: Matching process with care plan, 1903:
Embedding of an electronic ticket with an electronic signature in a receipt file, 1904: Same processing as steps 1301 to 1307 in FIG. 13, 1905: Registration in examination case list by expert, 2001: Transfer of care plan file, 2002: Each Process for taking out service ticket, 2
003: Processing for electronically signing each service ticket,
2004: processing for verifying the electronic signature of each service ticket, 2005: encryption processing using the public key of the service customer, 2006: processing for adding an electronic signature again to the result encrypted with the public key of the service customer, 2007: service Processing for verifying a digital signature resulting from encryption with a customer public key, 2008: storage device, 2009:
Internal clock 2101: electronic ticket transfer processing, 210
2: Electronic ticket verification processing, 2103: Electronic signature processing using the private key of the electronic ticket service customer, 210
4: Digital signature verification process

 ──────────────────────────────────────────────────続 き Continuing on the front page (72) Inventor Teruji Sakozawa 1099 Ozenji Temple, Aso-ku, Kawasaki City, Kanagawa Prefecture F-term in Hitachi, Ltd. System Development Laboratory (Reference) 5B049 AA00 BB42 CC03 CC05 CC11 CC36 DD01 DD04 EE02 EE23 FF09 GG02 GG04 GG09 GG10

Claims (10)

[Claims] An electronic commerce system in which an orderer of a service and a receiver of a service enable different electronic commerce, a network, and a service order for transmitting order information indicating ordering of a service through the network. Service provider device that is connected to the service orderer device via the network, receives the order information, identifies the order information, and understands the identification number approved by the service orderer device. And connected to the service orderer apparatus and the service provider apparatus via the network, receiving the identification number and the price information specifying the price of the ordered service from the service orderer apparatus, and Information on the performance of the service, the corresponding identification information and the service ordered Receiving, from the service provider device, billing information indicating a charge for the price, comparing the identification information received from the service orderer device with the identification information received from the service provider device, the price information and the execution information An electronic commerce system comprising: a payment institution device for executing a process related to settlement of the billing information based on the payment information. 2. The electronic commerce system according to claim 1, wherein the service is nursing care, the service orderer apparatus orders a care plan that is a care plan, and the service provider apparatus includes: An e-commerce system, which performs a process for performing nursing care. 3. A service orderer device for transmitting order information indicating a service order via a network, and a service providing device for receiving the order information and performing a process for performing a service corresponding to the received order information. A settlement device connected to the client device, connected to the network, receiving from the service orderer device first identification information specifying the order information and price information relating to the price of a service corresponding to the order information, Execution information related to the execution of a service corresponding to the order information from the service provider device, a service corresponding to the order information, identifying second identification information approved by the service orderer device; Receiving means for receiving price information for charging for a service corresponding to the order information; Settlement means connected to the means for executing settlement of the price charged in the billing information based on the comparison result of the first identification information and the second identification information, the price information and the execution information. A settlement apparatus, wherein the orderer of the service and the recipient of the service execute settlement in different electronic commerce. 4. The settlement apparatus according to claim 3, wherein the first identification information and the second identification information are numerical information, and the receiving unit is configured to receive the first identification information and the second identification information. A settlement apparatus that executes settlement when the values of identification information match. 5. The settlement apparatus according to claim 3, wherein the second identification information is transmitted from the service orderer apparatus to the service provider apparatus via the network. Characteristic payment device. 6. The settlement apparatus according to claim 3, wherein the first identification information is created by the service provider apparatus based on the order information, and is received by the service orderer apparatus. Settlement apparatus characterized in that the approval is given. 7. The payment apparatus according to claim 3, wherein at least one of said first identification information and said second identification information is encrypted, and said first identification information is encrypted. And a decryption means for decrypting at least one of the second identification information. 8. The settlement apparatus according to claim 3, wherein said settlement means executes settlement when the amount indicated by said consideration information matches the amount indicated by said billing information. Payment device. 9. A service orderer device for transmitting order information indicating a service order via a network, and a service provider device connected to a settlement device for a price of a service corresponding to the order information, wherein Receiving means for receiving the order information and first identification information for specifying the order information from the service orderer apparatus; connected to the receiving means, for performing a service corresponding to the order information; Processing means for creating execution information corresponding to the service implementation status; and charging information indicating that the execution information, the first identification information and the service are to be charged, which is connected to the creation means and the network. Transmitting means for transmitting to the settlement apparatus, wherein the settlement apparatus transmits The second identification information corresponding to the transmitted first identification information and the first identification information are compared, and the comparison result corresponds to the execution information and the order information transmitted from the service orderer apparatus. A service provider apparatus for performing settlement of a price charged by the billing information based on price information indicating a price of the service. 10. The service provider device according to claim 9, wherein the processing unit creates the execution information by a recipient of the service approving that a person who received the service received the service. And performing the settlement in place of the settlement apparatus by converting the order information received from the service orderer apparatus into usable financially valuable information using the created execution information. A service provider device characterized by the following.