JP2002092499A - Communication system and electronic commerce system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a communication system of high security allowing a business matching the information society to be conducted at ease, and to provide an electronic commercial transaction system allowing commercial transactions to be safely and positively performed using the Internet. SOLUTION: A first line and a second line which are physically spaced, make a connection between a first transmitting-receiving person and a second transmitting-receiving person. The first transmitting-receiving person generates random numbers and transmits them to the second transmitting-receiving person using the first line. The second transmitting-receiving person who received the random numbers processes confidential information to the random numbers and transmits processed information on the confidential information to the first transmitting-receiving person using the second line. The first transmitting- receiving person decodes the processed information based on the random numbers.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a communication system for improving communication security in business using a computer network (information system) such as the Internet, and an electronic commerce system using the communication system. In such a case, the communication line must be physically
The present invention relates to an electronic commerce system capable of enhancing security as a line and performing encryption and decryption by a simple method.

[0002]

2. Description of the Related Art Conventionally, there are businesses that sell or purchase products using the Internet. In this case, the seller of the product is worried that the product will be paid even if the product is sent, and the buyer of the product is uncertain whether the product will actually be sent even if the price is paid. Therefore, there are many troubles in payment.
This is especially true when purchasing expensive products such as cars and arts and crafts, and when selling products by downloading them via the Internet.

[0003] It is also known that the Internet has a security problem, and confidential information may be intercepted. In order to prevent confidential information from being decrypted, it is normal to encrypt and communicate. However, encryption and decryption generally use advanced mathematical formulas, resulting in a complicated system.

[0004]

In the case of conducting business transactions using the Internet, even if the communication is intercepted, unauthorized transactions cannot occur unless secret information such as a password is decrypted. In addition, if encryption and decryption can be performed by a simple method, system construction is easy.

The present invention has been made in view of the above circumstances, and an object of the present invention is to provide a highly secure communication system capable of performing a business that matches an information-oriented society with a high degree of security and use the Internet. It is an object of the present invention to provide an electronic commerce system capable of securely and securely performing business transactions with consumers (purchasers), sellers, and financial institutions.

[0006]

SUMMARY OF THE INVENTION The present invention relates to a communication system, and an object of the present invention is to provide a communication system comprising a first line and a second line physically separated between a first transceiver and a second transceiver. Connected, the first sender / receiver generates a random number and transmits it to the second sender / receiver using the first line, and the second sender / receiver receiving the random number processes secret information for the random number. The processing is performed by transmitting the processed information of the secret information to the first transmitter / receiver using the second line, and the first transmitter / receiver decrypts the processed information based on the random number.

The present invention also relates to an electronic commerce system, and an object of the present invention is to provide a business entity, a consumer, a seller and a financial institution connected to each other by a physically separated first line and a second line. In response to the product purchase application from the consumer through the portal site of the business entity, the business entity generates a first random number and notifies the consumer and the financial institution using the first line, The consumer processes a password for the random number, transmits the password processing information to the financial institution via the business entity using the second line, and the financial institution based on the first random number. Decrypts the password processing information, and when the password is correct, the financial institution generates a second random number and transmits it to the business entity using the first line, and stores the current balance against the second random number. The processed balance information The data is transmitted to the business entity using the second line, and the business entity decodes the balance information based on the second random number, and places an order with the seller when the balance exceeds the purchase commodity price. Is achieved by issuing

[0008]

DESCRIPTION OF THE PREFERRED EMBODIMENTS In the present invention, in selling or purchasing a product using the Internet, it is possible to sell or purchase the product with security by enhancing communication security. In this case, it is ensured that funds can be transferred from an account of a financial institution such as a bank.

A communication system according to the present invention will be described below with reference to the drawings.

FIG. 1 shows a schematic configuration of a communication system according to the present invention. A transmitter / receiver 10 and a transmitter / receiver 20 are connected by a telephone line (wired or wireless) 1 and physically separated from the Internet. 2 connected. The transmitter / receiver 10 has a transmitter / receiver 11 for transmission / reception, and first transmits a random number R1 generated by the transmitter / receiver 11 to the telephone terminal 21 of the transmitter / receiver 20 via the telephone line 1 via the transmission port 12. The sender / receiver 20 moves the random number R1 received by the telephone terminal 21 to a terminal (PC) 22 connected to the Internet 2. The movement of the random number R1 is performed when the telephone terminal 21 uses a mobile phone or PHS
In the case of (1), the output unit of the telephone can be attached to a predetermined portion (for example, a connector) of the terminal or connected by a lead wire.

In the terminal 22, the transmitter / receiver 20 inputs his / her personal identification number x into a personal identification number input field 221 displayed on the screen, and for example, a random number R1 and a personal identification number x (for example, "12
34 ") to generate the personal identification number information R2 (= R1 + x). The personal identification number information thus generated by the terminal 22
R2 is transmitted to the transceiver 11 of the transceiver 10 via the Internet 2. Since the transceiver 11 knows the random number R1 generated by itself, the transceiver 11 subtracts the random number R1 from the received personal identification number information R2 (R2-R1).
Can know the input password x.

For example, if the random number R1 is "13579" and the password x is "1234", the telephone line 1
“13579” of R1 is transmitted. Then, "1234" of the personal identification number x is added at the terminal 22, so that the personal identification number information R2 becomes "14813" with "13579 + 1234". Accordingly, "14813" of the personal identification number information R2 is transmitted on the Internet 2, and the transceiver 11 subtracts "13579" of the first random number R1 from "14813" of the received personal identification number information R2 to obtain "14813-13579".
Thus, the password “1234” can be decrypted.

The signal transmitted through the telephone line 1 is not a fixed signal but a random number R1 which is different each time the signal is transmitted. The signal transmitted via the Internet 2 is not a password itself but a random number R1 and a password. PIN information with the number x added
R2. Therefore, it is not possible to acquire the personal identification number x only by intercepting the telephone line 1. Further, even if the personal identification number information R2 is intercepted on the Internet 2, the personal identification number x cannot be known because the personal identification number information R2 is obtained by processing the random number R1 for the personal identification number x. In order for a third party to know the password x, the random number R1 must be stolen on the telephone line 1, the password R2 must be stolen on the Internet 2, and the password R2 must be the sum of the random number R1 and the password x. You have to know. Since the telephone line 1 and the Internet 2 are physically separated from each other and have different communication times, it is almost impossible to steal the random number R1 on the telephone line 1 and the personal identification number information R2 on the Internet 2 respectively. That is. Therefore, according to the above communication, the security of the communication between the senders and receivers 10 and 20 can be said to be extremely high.

In the above description, the personal identification number x and the random number R1 are added to obtain the personal identification number information R2. However, four arithmetic operations of subtraction, multiplication and division may be performed. good. Further, the secret number information based on the secret number x and the random number R1 is defined as a function of F (x, R1), and the inverse function F
It is also possible to decrypt the password x by performing ^-1 (R1, R2). Further, in the above description, a password is taken as an example of secret information, but similar communication is possible with other secret information such as customer information and secret documents. Further, the terminal 22 may be a stationary type (desktop) or a portable type (mobile), and may have a function of reading information of the telephone terminal and inputting information such as a personal identification number.

FIG. 2 shows an example of a stationary personal computer used as the terminal 22. The personal computer 22 includes a main body 222 having a CD or DVD or a hard disk,
It comprises a display unit 223 made of a CRT or liquid crystal and displaying images and characters, a keyboard 224 for inputting a password and characters and a mouse 225 for giving operation instructions to the screen. Further, the personal computer 22
It is connected to the communication line 226 by a built-in or external modem or terminal adapter (not shown), and is connected to the Internet 2 via the communication line 226.

FIG. 3 shows an overall schematic configuration example of an electronic commerce system to which the above-mentioned communication system is applied.
The Internet 30 has a web server 4 of the business entity 40
1 is connected, a general consumer 31 who purchases goods via the Internet 30, a seller 32 who sells goods via the Internet 30, and a delivery for actually delivering (delivery) the goods to the consumers who purchase the goods. Each terminal (personal computer) of a financial institution 34 such as a trader 33 and a bank or a post office is connected to the Internet 30. The web server 41 has a management server 42 and a database 43 mounted thereon.
Business entity 40, consumer 31, seller 32, delivery company 3
The financial institution 3 and the financial institution 34 are mutually connected by a telephone line 35. Therefore, the business entity 40, the consumer 31, the seller 3
2. The delivery company 33 and the financial institution 34 can communicate with each other by telephone, and can also communicate with each other via the Internet 30, and the home page of the web server 41 is the consumer 3.
1 can be accessed from the terminal at any time. The seller 32, the delivery company 33, and the financial institution 34 need to be registered with the business entity 40, and necessary data must be stored in the database 43. The consumer 31 has also opened his or her account with the financial institution 34. There is a need. In addition, between the business entity 40 and the financial institution 34, encryption and decryption techniques (keys)
Is predetermined.

FIG. 4 shows a flow of the operation. The registered seller 32 displays a portal site on the website 41 of the business entity 40 (step P).
1) The consumer 31 can browse the portal site (step P2), and if there is a product to be purchased, apply for product purchase to the business entity 40 (step P2).
3). Let w be the price of the product. The business entity 40 generates a random number R1 upon receiving an application for purchasing a product (step P4), and transmits it to the consumer 31 and the financial institution 34 using the telephone line 35 (steps P5 and P6). The consumer 31 inputs his / her personal identification number x to the received random number R1 (step P7), and multiplies (R1 × x) the random number R1 and the personal identification number x, for example, to obtain personal identification number information R2 (= R1 × x). ) Is generated, and the personal identification number information R2 is transmitted to the financial institution 34 via the business entity 40 via the Internet 30 (step P8). The financial institution 34 can decrypt the personal identification number x by dividing the transmitted personal identification number information R2 by the random number R1 (R2RR1). Since the consumer 31 has an account with the financial institution 34 and the password x is registered in advance with the account, the financial institution 34 determines whether or not the decrypted password x is correct for the user. (Step P10).

If the financial institution 34 determines that the decrypted personal identification number x does not belong to the person, the business entity 4
0 on the telephone line 35 or the Internet 30 and if the financial institution 34 determines that it is correct for the person,
A random number R3 is generated (step P11) and is notified to the business entity 40 via the telephone line 35 (step P12). Then, the balance information R4 generated by multiplying the current balance y of the account by the random number R3 (y × R3) is transmitted to the business entity 40 via the Internet 30 (step P13). The business entity 40 can know the balance y of the account of the consumer 31 by dividing the transmitted balance information R4 by the random number R3 (R4 ÷ R3).

The business entity 40 determines whether or not the acquired balance y is greater than the price w of the purchased product, that is, y ≧ w (step P14). ) Is notified to the consumer 31 via the telephone line 35 or the Internet 30 (step P15). On the other hand, if the balance y is larger than the price w of the purchased product, the product can be purchased. Therefore, a formal order is placed with respect to the seller 32 (step P16), and a random number R5 is generated (step P2).
0) and transmit it to the delivery company 33 via the telephone line 35 or the Internet 30 (step P21). The seller 32 who has received the formal order will contact the affiliated delivery company 33
The delivery of the goods is entrusted by the telephone 35 or the Internet 30 (step P17). The delivery company 33 delivers the goods to the consumer 31 (step P22), and multiplies the random number R5 by the number z of the goods receipt confirmation (R5 × z) to obtain the receipt number information R6 (=
R5 × z) and receive number information R6 on the Internet 3
It transmits to the business entity 40 at 0 (step P23). The business entity 40 divides the received receipt number information R6 by a random number R5 (R
By performing 6５R5), the receiving number z can be confirmed (step P24). If the receipt is correct, the transfer instruction is issued to the financial institution 34 (step P25).
If not correct, the fact is notified to the seller 33 (step P26).

FIG. 5 shows an example of a registration operation to the business entity 40, in which the consumer 31 applies for membership registration to the website 41 as the business entity 40 (step S1).
1) This registration application is made by writing predetermined items (address, name, age, occupation, gender, etc.) on the website 41. In response to the registration application, the website 41 accepts the membership registration, performs the ID number registration and the membership card issuance procedure, and registers after the examination (step S1).
2). Similarly, the seller 32 also applies for membership registration to the website 41 by writing predetermined items (address, corporate name, business type, capital, establishment year, etc.). In response to the registration application, the website 41 accepts the membership registration, performs a membership card issuance procedure, and registers after the examination (step S12). After such registration, the financial institution 34
, A new member registration notification and an account opening request are made (step S13). When the financial institution 34 opens an account,
Issue an account number corresponding to the ID number, a passbook, a membership card and a bank card to the consumer 31 (step S14).
Issue an account number corresponding to the ID number, a passbook, a membership card and a bank card to the seller 32 (step S).
15).

FIG. 6 shows an application procedure for purchasing and ordering a product. When the consumer 31 accesses the homepage (step S51) and wants to purchase the product, the necessary information (item A on the company A product purchase application page) is displayed. Product name, ID, quantity,
The purchase of the product is performed by filling in (color, size, etc.) (step S52). The website 41 accepts the purchase application, checks the stock of the purchased application product with the seller 32 (step S53), and reports the inventory of the product such as the presence or absence of the purchased product and the number of stock to the website 41. (Step S54). Then, after the formal order is placed, a shipping schedule is notified to the purchase applicant, and the purchase application is confirmed (step S55). Upon confirmation of purchase application,
When purchasing the applied product, the consumer reports a confirmation of the purchase intention (step S56). After confirming this intention, the website 41 reports the order to the consumer 31.

FIG. 7 shows the operation of the transfer instruction, and when the delivery company 33 reports the delivery result (step S).
87), the website 41 issues a balance transfer instruction to the financial institution 34 (step S91). In accordance with the transfer instruction, the financial institution 34 transfers the trading value of the account of the consumer 31 to the account of the business entity 40 (step S92), and reports the transfer to the website 41 (step S92).
93). Thereafter, the transfer of payment is instructed to the financial institution 34 (step S94), and the financial institution 34 transfers the transfer from the account of the business entity 40 to the account of the seller 32 (step S95). Thereby, the settlement from the consumer 31 who purchased the product to the seller 33 ends.

[0023]

As described above, according to the communication system according to the present invention, since the communication system is doubled and encrypted, a communication system for safe and reliable information matching the information society can be realized. it can. Further, since the above communication system is applied to business transactions using the Internet, there is a great merit in future business development.

[Brief description of the drawings]

FIG. 1 is a block diagram showing an overall configuration of a communication system according to the present invention.

FIG. 2 is a configuration diagram illustrating an example of a terminal.

FIG. 3 is a block diagram illustrating a configuration example of an electronic commerce system of the present invention.

FIG. 4 is a flowchart showing an operation example of the electronic commerce system of the present invention.

FIG. 5 is a flowchart showing an operation example of a membership registration and membership card issuance procedure.

FIG. 6 is a flowchart showing an operation example of a purchase application process from a consumer and an ordering procedure to a dealer.

FIG. 7 is a flowchart illustrating an operation example of a transfer instruction;

[Explanation of symbols]

 1, 35 telephone line 2, 30 Internet 10, 20 sender / receiver 11 transceiver 12 outgoing port 21 telephone terminal 22 terminal (PC)

Claims (12)

[Claims] 1. A first transmitter / receiver and a second transmitter / receiver are connected by physically separated first and second lines, and the first transmitter / receiver generates a random number and generates the first line. Is transmitted to the second sender / receiver, and the second sender / receiver receiving the random number processes secret information for the random number,
A communication system, wherein processed information of the secret information is transmitted to the first transmitter / receiver using a line, and the first transmitter / receiver decrypts the processed information based on the random number. 2. The communication system according to claim 1, wherein said first line is a telephone line including a mobile phone and a PHS. 3. The communication system according to claim 1, wherein said second line is the Internet. 4. The communication system according to claim 1, wherein the processing of the secret information is an arithmetic operation. 5. The communication system according to claim 1, wherein the processing of the secret information is a function operation. 6. A business entity, a consumer, a distributor and a financial institution are connected to each other by a first line and a second line which are physically separated from each other, and products from the consumer through a portal site of the business entity. For the purchase application, the business entity is the first
A random number is generated and notified to the consumer and the financial institution using the first line, the consumer processes a password for the random number, and uses the second line for the password processing information. To the financial institution via the business entity, the financial institution decodes the password processing information based on the first random number, and when the password is correct, the financial institution generates a second random number and Transmitting the balance information obtained by processing the current balance with respect to the second random number to the business entity using the first line, and transmitting the balance information to the business entity using the second line; An electronic commerce system wherein the balance information is decrypted on the basis of the above, and an order is placed to the seller when the balance exceeds the price of the purchased commodity. 7. The business entity generates a third random number after the order and notifies the delivery company using the first line, and the delivery company sends the ordered product to the consumer together with the third random number. And the consumer processes a receipt number for the third random number to generate receipt number information, and transmits the receipt number information to the business entity using the second line. The electronic commerce system according to claim 6. 8. The business entity decodes the receipt number information based on the third random number, and transmits a transfer instruction to the financial institution when the receipt number is correct. Electronic commerce system described in. 9. The electronic commerce system according to claim 6, wherein said first line is a telephone line including a mobile phone and a PHS. 10. The electronic commerce system according to claim 6, wherein said second line is the Internet. 11. The electronic commerce system according to claim 6, wherein the processing is an arithmetic operation. 12. The electronic commerce system according to claim 6, wherein the processing is a function operation.