JP2002197389A - Electronic settlement apparatus, electronic settlement method and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an electronic settlement apparatus capable of performing electronic settlement while reducing the risk carried by both parties concerned of settlement. SOLUTION: A remitter gains access to a page for transfer, and sends a remitter ID, a remittance, and an electronic mail address of a receiver of an electronic coin to a server 1. The server 1 gets confirmation of the remitter, and decreases the remainder of electronic coin of the remitter for the remittance, a receiver ID is created to give electronic coin for the remittance to the receiver, and the receiver is informed by an electronic mail. The electronic coin given to the receiver is made invalid, and an effective ID for making the electronic coin effective is informed to the remitter. The receiver sends the receiver ID to the server 1, and confirms the receipt of the electronic coin. After that, when the receiver delivers the goods and receives the report of the effective ID from the remitter, the receiver sends the receiver ID and the effective ID to the server 1. The server 1 makes effective the electronic coin given to the receiver by the effective ID sent by the receiver.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an electronic settlement apparatus and an electronic settlement method, and more particularly, to an electronic settlement apparatus and an electronic settlement method in which data representing property value is transferred by a party involved in settlement.

[0002]

2. Description of the Related Art In recent years, electronic settlement, in which transactions are settled by exchanging data representing property values instead of money, has become popular. Since the data representing the property value can be easily transferred via a network such as the Internet, the settlement using the network becomes possible according to the electronic settlement method.

[0003]

However, it is difficult to exchange data for goods and the like fairly when the sale of goods and the like is settled by an electronic settlement method. For example, if a seller delivers a product or the like first, it is not always possible to receive data transfer later, and the seller bears the risk of collecting the price. Also, if the data is transferred from the buyer to the seller prior to the delivery of the product or the like, there is a risk that the buyer cannot collect the product or the like. Further, even if the seller and the buyer exchange data and commodities face-to-face, if the seller can keep the same data, the effectiveness of the data transfer cannot be guaranteed.

The present invention has been made in view of the above circumstances, and has as its object to provide an electronic settlement apparatus and an electronic settlement method that can perform electronic settlement while reducing the risk posed by both parties to settlement. I do.

[0005]

In order to achieve the above object, an electronic settlement apparatus according to a first aspect of the present invention stores first score data indicating a score given to a first user. Point storage means for storing in a storage area; transferor designation data for designating the first user; transferee designation data for designating the second user; and a second user from the first user. Transfer receiving means for obtaining transfer amount data indicating the number of points to be transferred from the outside, and the points given to the first user specified by the obtained transferor designation data indicate the obtained transfer amount data. Subtraction means for updating the first score data stored in the score storage means so as to be reduced by the amount corresponding to the score, and the score indicated by the acquired transfer amount data being given to the second user Second score data indicating And generating invalidation data indicating that the point indicated by the transfer amount data indicates that transfer is prohibited, and associating the second point data and the invalidation data with each other in the storage area of the point storage means. Adding means for storing, and validating data for canceling the prohibition of transfer of the point indicated by the second point data associated with the invalidating data, and supplying the validating data to the source of the transferor designation data And an invalidation data generating means for canceling the transfer of the points indicated by the invalidation data by changing or erasing the invalidation data when the externally supplied activation data is supplied to itself. And activation means.

[0006] According to such an electronic settlement apparatus, the points transferred by the first user are invalidated until the activation data is supplied to the activation means. For this reason, even if the first user transfers the points before receiving the delivery of the product, the first user notifies the second user of the activation data after receiving the product, etc. Then, the second user cannot use the transferred score until the second user is in a state where he can know the validation data. In addition, even if the points are invalidated, the points themselves are transferred, so the second user receives the notification of the activation data from the first user after completing the delivery of the product and the like. The points corresponding to the value of the product etc. can be collected. In addition, the transfer of the score itself has been completed, and the score of each user is collectively managed by the electronic settlement apparatus, so that there is no advantage that the first user denies the fact that the score has been transferred, No double transfer of points is allowed. Therefore, according to such an electronic settlement apparatus, electronic settlement is performed while reducing the risk borne by both parties of the settlement.

The adding means generates and outputs inquiry data, and transmits the inquiry data to the second score data, the invalidation data, the first user, and the second user. Means for storing in the storage area of the point storage means in association with the point data, when the inquiry data is supplied to itself, the second point data associated with the inquiry data, the invalidation data,
A means for supplying at least a part of the data representing the first user and the data representing the second user to a supplier of the inquiry data. Is easily grasped by the parties involved.

[0008] Further, an electronic settlement apparatus according to a second aspect of the present invention is a first settlement apparatus which indicates a score given to a first user.
Point storage means for storing the point data in its own storage area, and when an instruction requesting the generation of inquiry data is supplied from the outside, the inquiry data is generated and output in response to the instruction. A storage unit for storing the inquiry data, and authentication data,
When the inquiry data is supplied, the output destination of the inquiry data is authenticated as a second user based on the authentication data, and when the authentication is successful, the second user Reception confirmation means for generating and storing reception confirmation data indicating that the user is willing to receive points from the first user; transferor designation data designating the first user; the inquiry data; Transfer receiving means for obtaining transfer amount data indicating the number of points to be transferred from the user to the second user from outside, and determining whether or not the reception confirmation data is stored, and determining that the reception confirmation data is stored. Then, the score storage is performed so that the score given to the first user specified by the transferor designation data acquired from the outside is reduced by an amount corresponding to the score indicated by the acquired transfer amount data. Subtracting means for updating the first score data stored in the stage; and, when it is determined that the receipt confirmation data is stored, the score indicated by the transfer amount data acquired from the outside is used by the second user. Is generated, and invalidation data indicating that the point indicated by the transfer amount data is prohibited from being transferred is generated, and the second point data and the invalidation data are generated. Adding means for storing the data in the storage area of the storage means in association with the inquiry data; Validation data generating means for generating encrypted data and supplying it to a source of the transferor designation data, and changing or invalidating the invalidated data when the externally supplied validation data is supplied to itself. By erasing comprises an effective means for canceling the prohibition of the transfer of points shown by the invalidation data, and characterized in that.

With such an electronic settlement apparatus, the first
The points transferred by the user are invalidated until the activation data is supplied to the activation means. Even if the points are invalidated, the points themselves have been transferred, and the points of each user are collectively managed by the electronic settlement apparatus. Therefore, even with such an electronic settlement apparatus, electronic settlement is performed while reducing the risk borne by both parties to settlement. Further, in such an electronic settlement apparatus, it is easy for both the assignee and the assignee to start the procedure for giving and receiving points.

[0010] Also, the electronic settlement apparatus according to a third aspect of the present invention is a first settlement apparatus which indicates a score given to a first user.
Point storage means for storing the point data in its own storage area, transfer amount data indicating the transfer amount data indicating the points received by the second user from the first user from outside, and inquiry data Storage means for generating and outputting the inquiry data in response to the instruction, and storing the inquiry data and the transfer amount data in association with each other; Thus, when the authentication data and the inquiry data are supplied, the output destination of the inquiry data is authenticated as a second user based on the authentication data,
When the authentication is successful, the second user generates and stores reception confirmation data indicating that the second user intends to receive a score from the first user;
Transfer accepting means for acquiring the transferer designation data designating the user and the inquiry data from the outside, and determining whether or not the receipt confirmation data is stored. The score given to the first user specified by the transferor designation data acquired from the above is decreased by an amount corresponding to the score indicated by the transfer amount data associated with the inquiry data acquired from the outside. Subtracting means for updating the first point data stored in the point storing means; and, when it is determined that the reception confirmation data is stored, the point indicated by the transfer amount data acquired from the outside is the second point. Second point data indicating that the transfer has been given to the second user, and invalidation data indicating that the point indicated by the transfer amount data indicates that transfer is prohibited. Adding means for storing the second point data and the invalidation data in the storage area of the storage means in association with the inquiry data; and a point indicated by the second point data associated with the invalidation data Activation data generating means for generating activation data for canceling the prohibition of transfer of the transfer data and supplying the data to the source of the transferor designation data, and when the activation data supplied to the outside is supplied to itself. Activating means for changing or erasing the invalidation data to cancel the prohibition of transfer of the points indicated by the invalidation data.

With such an electronic settlement apparatus, the first
The points transferred by the user are invalidated until the activation data is supplied to the activation means. Even if the points are invalidated, the points themselves have been transferred, and the points of each user are collectively managed by the electronic settlement apparatus. Therefore, even with such an electronic settlement apparatus, electronic settlement is performed while reducing the risk borne by both parties to settlement. Further, in such an electronic settlement apparatus, it is easy for both the assignee and the assignee to start the procedure of giving and receiving points by designating the transfer amount in advance.

When the inquiry data and the cancellation data indicating that the transfer of the score indicated by the second score data is canceled are supplied to the self, the activating means responds to the cancellation data to receive the invalidation data. The modified data is changed or deleted, and the score given to the first user specified by the transferor designation data is increased within a range corresponding to the score indicated by the second score data. If the cancellation means for canceling the transfer of the score by updating the first score data is provided, it is easy to cancel the transfer of the score.

[0013] The assignee designation data may represent an electronic mail address of the second user. In this case, the adding means includes means for transmitting, to an e-mail address represented by the transferee designation data, an e-mail including transfer notification data indicating that the second user is to receive a point transfer. Thus, the second user may be notified that the offer to transfer the points has been made.

[0014] The score storage means may store the second score data in association with second identification data for identifying the second user. In this case, the transfer notification data includes the second identification data, and the activating unit determines whether the activating data has been supplied to itself until the second identification data is supplied from the outside. Regardless of this, if the prohibition of the transfer of the score indicated by the second score data associated with the second identification data is to be maintained, the second user can transfer the score to himself / herself. After confirming that the transfer is completed, the transfer is completed and the reliability of settlement is improved.

The validating means, when the second identification data and the transferee cancellation data indicating cancellation of the transfer of the score indicated by the second score data are supplied to the self, the transfer cancellation data Changes or deletes the invalidation data in response to the first request specified by the transferor designation data.
The transfer of the transfer of the score is updated by updating the first score data so that the score given to the user increases within a range corresponding to the score indicated by the second score data. The provision of the person revocation means makes it easy for the transferee to cancel the transfer of the points.

[0016] The adding means generates data representing a web page for confirming that the second user is to receive a score, and externally specifies the web page.
When RL (Uniform Resource Locator) is supplied,
Means for outputting data representing the web page to the outside for browsing the web page, wherein the transfer notification data includes a URL specifying the web page;
Until the data representing the web page is output to the outside, irrespective of whether or not the activation data is supplied to the self, the activating means sets the second data associated with the second identification data. In the case where the prohibition of the transfer of the points indicated by the point data is maintained, it is confirmed that the second user knows that the points will be transferred, and then the transfer is completed. , The settlement certainty is improved.

[0017] An electronic settlement apparatus according to a fourth aspect of the present invention is a first settlement apparatus which indicates a score given to a first user.
Point storage means for storing the point data in the own storage area, transferor specifying data for specifying the first user, transferee specifying data for specifying the second user, and the first
Transfer receiving means for externally obtaining transfer amount data indicating the number of points to be transferred from the user to the second user; and Subtracting means for updating the first score data stored in the score storage means so as to decrease by the amount corresponding to the score indicated by the acquired transfer quantity data; and Second point data indicating that the transfer has been given to the second user, and invalidation data indicating that the point indicated by the transfer amount data is prohibited from being transferred, and generating the second point data and Adding means for storing the invalidation data in the storage area of the score storage means in association with each other; authentication data for authenticating the first user; and second data associated with the invalidation data. Score When the activation command requesting that the prohibition of the transfer of the points indicated by the data is released is supplied to itself, the first user is authenticated based on the authentication data. By changing or deleting the invalidation data associated with the second user to whom the first user transfers the score, the transfer of the score indicated by the invalidation data is performed. Enabling means for canceling the prohibition.

With such an electronic settlement apparatus, the first
The points transferred by the user are invalidated until the activation instruction is supplied to the activation means. Also, even if the points have been invalidated, the transfer of the points has been completed,
The score of each user is managed collectively by the electronic payment device. Therefore, even with such an electronic payment device,
Electronic payments are made while reducing the risks borne by both parties to the payment. Further, generation and delivery of the activation data is not required, and the security of the electronic settlement is further improved.

The adding means includes an inquiry command,
When the authentication data is supplied to the user, the user is authenticated based on the authentication data, and when the authentication is successful, the second score data associated with the authenticated user is invalid. Means for supplying at least a part of the converted data and the data representing the partner of the transfer of points with the user to the supplier of the inquiry data, the progress of the transfer of points Can be easily grasped by the parties involved in the exchange.

When the authentication data and the cancellation data indicating that the transfer of the score indicated by the second score data is canceled are supplied to the self, the validating means performs the first authentication based on the authentication data. Authenticating the user, and when the authentication is successful, the authenticated first user changes or deletes the invalidation data associated with the second user who is the partner to whom the score is transferred, The first score data stored in the score storage unit is updated so that the score given to the first user is increased within a range corresponding to the score indicated by the second score data. Thus, if the transferor canceling means for canceling the transfer of the score is provided, the transfer of the score can be easily canceled from the transferor side.

When the authentication data and the cancellation data indicating cancellation of the transfer of the score indicated by the second score data are supplied to the self, the activating means performs the second authentication based on the authentication data. A user who authenticates a user and, when authentication is successful, changes or deletes the invalidation data associated with the authenticated second user and transfers the score to the second user. Updating the first score data stored in the score storage means so that the score given to the first user increases within a range corresponding to the score indicated by the second score data. By doing
If a transferee canceling means for canceling the transfer of the score is provided, it is easy to cancel the transfer of the score from the transferee side.

Also, in the electronic settlement method according to a fifth aspect of the present invention, the first method for indicating a score given to a first user is provided.
, The transferor designation data designating the first user, the transferee designation data designating the second user, and the transfer from the first user to the second user. Transfer amount data indicating the number of points to be transferred, so that the points given to the first user specified by the obtained transferor designation data are reduced by an amount corresponding to the points indicated by the obtained transfer amount data, The first point data is updated, the second point data indicating that the point indicated by the acquired transfer amount data has been given to the second user, and the point indicated by the transfer amount data being transferred. Is generated, and the second point data and the invalidation data are stored in association with each other, and the second point data associated with the invalidation data is Release of prohibition of transfer of points shown By generating the activation data for supplying to the source of the transferor designation data, and changing or deleting the invalidation data when the externally supplied activation data is supplied from the outside. Prohibiting the transfer of the points indicated by the invalidation data.

According to such an electronic settlement method, the points transferred by the first user are invalidated until the activation data is supplied from the outside. For this reason, even if the first user transfers the points before receiving the delivery of the product, the first user notifies the second user of the activation data after receiving the product, etc. Then, the second user cannot use the transferred score until the second user is in a state where he can know the validation data. In addition, even if the points are invalidated, the points themselves are transferred, so the second user receives the notification of the activation data from the first user after completing the delivery of the product and the like. The points corresponding to the value of the product etc. can be collected. Since the transfer of the points has been completed and the points of each user are managed collectively, there is no advantage that the first user denies the fact that the points have been transferred,
No double transfer of points is allowed. Therefore, according to such an electronic settlement method, the electronic settlement is performed while the risk borne by both parties of the settlement is reduced.

[0024] Further, in the electronic settlement method according to a sixth aspect of the present invention, the first settlement method is a method of indicating a score given to a first user.
When an instruction requesting generation of inquiry data is supplied from the outside, the inquiry data is generated and output in response to the instruction, and the inquiry data is stored. Authentication data,
And, when the inquiry data is supplied, the output destination of the inquiry data is authenticated as a second user based on the authentication data, and when the authentication is successful,
The second user generates and stores receipt confirmation data indicating that he / she wants to receive a score from the first user, and assigns the transferor designation data to designate the first user;
The inquiry data and the second from the first user
Externally obtains transfer amount data indicating the number of points to be transferred to the user, determines whether or not the receipt confirmation data is stored, and determines that the transfer confirmation data is stored. The first data stored so that the score given to the first user specified by the specified data is reduced by an amount corresponding to the score indicated by the acquired transfer amount data.
Is updated, and when it is determined that the receipt confirmation data is stored, a second point indicating that the point indicated by the transfer amount data acquired from the outside is given to the second user. Point data, and invalidation data indicating that the point indicated by the transfer amount data indicates that transfer is prohibited, and associating the second point data and the invalidation data with the inquiry data. And generating activation data for canceling the prohibition of the transfer of the points indicated by the second point data associated with the invalidation data, supplying the data to a source of the transferor designation data, When the validation data supplied to the server is supplied to itself, the prohibition of transfer of the score indicated by the invalidation data is released by changing or deleting the invalidation data.

According to such an electronic settlement method, the first
The points transferred by the user are invalidated until the activation data is supplied. Even if the points are invalidated, the points themselves have been transferred, and the points of each user are managed collectively. Therefore, even with such an electronic payment method, electronic payment is performed while reducing the risk borne by both parties to the payment. Further, in such an electronic settlement method, it is easy for the transferor of the points and the transferee to start the procedure of giving and receiving the points.

Further, in the electronic settlement method according to a seventh aspect of the present invention, the first settlement method is a method of indicating a score given to a first user.
Are transferred from the first user, and transfer command data indicating transfer data indicating the transfer data received by the second user, and an instruction requesting generation of inquiry data are supplied from the outside. In response, the inquiry data is generated and output in response to the command, the inquiry data and the transfer amount data are stored in association with each other, and authentication data and the inquiry data are externally transmitted. When supplied, the output destination of the inquiry data is authenticated as a second user based on the authentication data, and when the authentication is successful, the second user is notified by the first user. Generates and stores receipt confirmation data indicating that the user intends to receive points, and acquires transferor designation data designating the first user and the inquiry data from outside. It is determined whether or not the receipt confirmation data is stored, and when it is determined that the receipt confirmation data is stored, the score given to the first user specified by the transferor designation data acquired from outside is given by the outside. It is assumed that the stored first point data is updated so as to decrease by the amount corresponding to the point indicated by the transfer amount data associated with the acquired inquiry data, and the reception confirmation data is stored. When determined, the second point data indicating that the point indicated by the transfer amount data acquired from the outside has been given to the second user, and the point indicated by the transfer amount data are prohibited from being transferred. Generating invalidation data indicating that the second point data and the invalidation data are stored in association with the inquiry data,
Generated enablement data for canceling the prohibition of transfer of the point indicated by the second point data associated with the invalidation data, supplied to the source of the transferor designation data, and supplied to the outside. By changing or deleting the invalidation data when the activation data is supplied to itself,
Release the prohibition of transfer of the points indicated by the invalidation data,
It is characterized by the following.

According to such an electronic settlement method, the first
The points transferred by the user are invalidated until the activation data is supplied. Even if the points are invalidated, the points themselves have been transferred, and the points of each user are managed collectively. Therefore, even with such an electronic payment method, electronic payment is performed while reducing the risk borne by both parties to the payment. Further, in such an electronic settlement method, it is easy for the transferor of the points and the transferee to easily designate the transfer amount and start the procedure of the point transfer.

Also, in the electronic settlement method according to the eighth aspect of the present invention, the first settlement method may include a first point indicating a point given to the first user.
, The transferor designation data designating the first user, the transferee designation data designating the second user, and the transfer from the first user to the second user. Transfer amount data indicating the number of points to be transferred is obtained from the outside, and the point given to the first user specified by the obtained transferor designation data is reduced by the amount corresponding to the point indicated by the obtained transfer amount data. In this manner, the stored first score data is updated, the second score data indicating that the score indicated by the acquired transfer amount data has been given to the second user, and the transfer amount To generate invalidation data indicating that the point indicated by the data is prohibited from being transferred, store the second point data and the invalidation data in association with each other, and authenticate the first user. Authentication data, and When an activation command requesting release of the prohibition of the transfer of the score indicated by the second score data associated with the validation data is supplied to the self, the first user based on the authentication data And when the authentication is successful, by changing or deleting the invalidation data associated with the second user to which the authenticated first user transfers the score And prohibiting the transfer of the points indicated by the invalidation data.

According to such an electronic settlement method, the first
Will be invalidated until an activation command is supplied. Even if the points are invalidated, the points themselves have been transferred, and the points of each user are managed collectively. Therefore, even with such an electronic payment method, electronic payment is performed while reducing the risk borne by both parties to the payment. Further, generation and delivery of the activation data is not required, and the security of the electronic settlement is further improved.

[0030] A program according to a ninth aspect of the present invention is a program for controlling a computer to store first score data indicating a score given to a first user in its own storage area, Assignee designation data designating the first user, transferee designation data designating the second user, and transfer amount data indicating the number of points to be transferred from the first user to the second user Transfer receiving means for acquiring the transferer designation from the outside, and a first designation designated by the acquired transferor designation data.
Subtracting means for updating the first score data stored in the score storage means such that the score given to the user is reduced by an amount corresponding to the score indicated by the acquired transfer amount data; and The point indicated by the transfer amount data is the second
Second point data indicating that the transfer has been given to the user, and invalidation data indicating that the point indicated by the transfer amount data is prohibited from being transferred, and generating the second point data and the second point data. Adding means for associating the invalidation data with each other and storing the invalidation data in the storage area of the point storage means; and activation for canceling the prohibition of transfer of the point indicated by the second point data associated with the invalidation data. Generate data,
An activation data generating unit that supplies the invalidation data to a source of the transferor designation data, and, when the activation data supplied to the outside is supplied to the self, the invalidation data is changed or deleted, whereby the invalidation data is changed. And a function for canceling the prohibition of the transfer of the points indicated by.

According to the computer that executes such a program, the points transferred by the first user are invalidated until the activation data is supplied to the activation means. For this reason, even if the first user transfers the points before receiving the delivery of the product, the first user notifies the second user of the activation data after receiving the product, etc. Then, the second user cannot use the transferred score until the second user is in a state where he can know the validation data.
In addition, even if the points are invalidated, the points themselves are transferred, so the second user receives the notification of the activation data from the first user after completing the delivery of the product and the like. The points corresponding to the value of the product etc. can be collected. In addition,
Since the transfer of points has already been completed and the points of each user are managed collectively, there is no advantage that the first user denies the fact that the points have been transferred, and double transfers of points can be performed. Absent. Therefore, according to the computer that executes the program recorded on such a recording medium, electronic settlement is performed while reducing the risk posed by both parties to settlement.

[0032] A program according to a tenth aspect of the present invention is a program for controlling a computer to store first score data indicating a score given to a first user in its own storage area, A storage unit for generating and outputting the inquiry data in response to the instruction when an instruction requesting generation of the inquiry data is supplied from the outside, and storing the authentication data from the outside. When the data and the inquiry data are supplied, the output destination of the inquiry data is authenticated as a second user based on the authentication data, and when the authentication is successful, the second user Means for generating and storing reception confirmation data indicating that the user intends to receive a score from the first user; and a transferor finger for designating the first user. Transfer receiving means for externally obtaining data, the inquiry data, and transfer amount data indicating the number of points to be transferred from the first user to the second user, and whether or not the reception confirmation data is stored Is determined, the score given to the first user specified by the transferor designation data acquired from outside corresponds to the score indicated by the acquired transfer amount data. Subtraction means for updating the first point data stored in the point storage means so as to decrease the number of points indicated by the transfer amount data acquired from outside when it is determined that the reception confirmation data is stored Generates the second point data indicating that the point has been given to the second user, and invalidation data indicating that the point indicated by the transfer amount data is prohibited from being transferred. And score data and the invalidation data, adding means for storing in a storage area of said storage means in association with the inquiry data,
Validation data generating means for generating validation data for releasing the prohibition of the transfer of the score indicated by the second score data associated with the invalidation data, and supplying the validation data to the source of the assignee designation data When the validation data supplied to the outside is supplied to itself, validation means for changing or erasing the validation data to cancel the prohibition of transfer of the points indicated by the validation data, It is characterized in that it is intended to function.

[0033] Even with the computer executing such a program, the points transferred by the first user are invalidated until the activation data is supplied to the activation means. Even if the points are invalidated, the points themselves have been transferred, and the points of each user are collectively managed by the electronic settlement apparatus. Therefore, even with a computer that executes such a program, electronic settlement is performed while reducing the risk posed by both parties to settlement. In addition, a computer that executes such a program, both from the assignee and the assignee,
It is easy to start the procedure for giving and receiving points.

[0034] A program according to an eleventh aspect of the present invention comprises: a computer for storing, in a storage area of its own, first score data indicating a score given to a first user; When supplied from outside with the transfer amount data indicating the transfer amount data indicating the points received by the second user and the command requesting the generation of the inquiry data, respond to the command. When the inquiry data is generated and output, and the inquiry data and the transfer amount data are stored in association with each other, and the authentication data and the inquiry data are supplied from outside. Based on the authentication data, authenticate the output destination of the inquiry data as a second user, and when the authentication is successful, the second user Receipt confirmation means for generating and storing receipt confirmation data indicating that the user is willing to receive points from the user, and transfer for externally acquiring the assigner designation data designating the first user and the inquiry data Receiving means for determining whether or not the reception confirmation data is stored, and when determining that the reception confirmation data is stored, a score given to the first user specified by the transferor designation data obtained from outside Subtraction means for updating the first score data stored in the score storage means, so as to decrease by an amount corresponding to the score indicated by the transfer amount data associated with the inquiry data obtained from outside, When it is determined that the receipt confirmation data is stored, a second point indicating that the point indicated by the transfer amount data acquired from the outside has been given to the second user Number data, and,
Generates invalidation data indicating that the point indicated by the transfer amount data indicates that transfer is prohibited, and associates the second point data and the invalidation data with the inquiry data and stores the invalidation data in the storage unit. Adding means for storing in the area, and validating data for releasing the prohibition of the transfer of the point indicated by the second point data associated with the invalidation data, and a source of the transferor designation data And when the externally supplied activation data is supplied to itself, the invalidation data is changed or erased to prohibit the transfer of the points indicated by the invalidation data. It is characterized in that it is an enabling means for canceling, and that it is made to function.

[0035] Even with the computer executing such a program, the points transferred by the first user are invalidated until the activation data is supplied to the activation means. Even if the points are invalidated, the points themselves have been transferred, and the points of each user are collectively managed by the electronic settlement apparatus. Therefore, even with a computer that executes such a program, electronic settlement is performed while reducing the risk posed by both parties to settlement. In addition, a computer that executes such a program, both from the assignee and the assignee,
It is easy to specify the transfer amount in advance and start the procedure for giving and receiving points.

[0036] A program according to a twelfth aspect of the present invention comprises: a computer for storing a first point data indicating a point given to a first user in its own storage area; Assignee designation data designating the first user, transferee designation data designating the second user, and transfer amount data indicating the number of points to be transferred from the first user to the second user Transfer receiving means for acquiring the transferer designation from the outside, and a first designation designated by the acquired transferor designation data.
Subtracting means for updating the first score data stored in the score storage means such that the score given to the user is reduced by an amount corresponding to the score indicated by the acquired transfer amount data; and The point indicated by the transfer amount data is the second
Second point data indicating that the transfer has been given to the user, and invalidation data indicating that the point indicated by the transfer amount data is prohibited from being transferred, and generating the second point data and the Adding means for associating the invalidation data with each other in the storage area of the score storage means, authentication data for authenticating the first user, and second data associated with the invalidation data When an activation instruction requesting release of the prohibition of the transfer of the score indicated by the score data is supplied to the self, the first
Is authenticated, and when the authentication is successful, the authenticated first user is the other party to whom the score is transferred.
By changing or erasing the invalidated data associated with the user of the above, so as to function as validating means for canceling the prohibition of transfer of the points indicated by the invalidated data. It is characterized by.

The score transferred by the first user is also invalidated by the computer executing such a program until the activation command is supplied to the activation means. Even if the points are invalidated, the points themselves have been transferred, and the points of each user are collectively managed by the electronic settlement apparatus. Therefore, even with a computer that executes such a program, electronic settlement is performed while reducing the risk posed by both parties to settlement. Further, generation and delivery of the activation data is not required, and the security of the electronic settlement is further improved.

[0038]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, an electronic settlement apparatus and an electronic settlement method according to embodiments of the present invention will be described using an electronic money utilizing system as an example.

(First Embodiment) FIG. 1 is a diagram showing a configuration of an electronic money utilizing system according to a first embodiment of the present invention. As shown in the figure, the electronic money utilizing system includes a server 1 and terminals 2-1 to 2-n (n is the total number of terminals). Terminals 2-1 to 2-n
Is connected to the server 1 via a network N constituted by the Internet or the like.

The server 1 comprises a processing section 1A and a storage section 1B connected to the processing section 1A. Processing unit 1
A is a CPU (Central Processing Unit) and DSU
(Data Service Unit) and the like, and executes processing described below under the control of an electronic money settlement program 12 described later stored in the storage unit 1B.

The storage unit 1B stores a hard disk drive or RA
M (Random Access Memory) and the like, an electronic money user database 11, an electronic money settlement program 12, a WWW (World Wide Web) server program 1
3. The transfer page data 14 and the mail tool 15 are stored. Then, in response to the access of the processing unit 1A, these data stored by itself are supplied to the processing unit 1A, and the following data stored in the electronic money user database 11 according to the access of the processing unit 1A. To update.

The electronic money user database 11 stores the following four data (1) to (4):
(1) User ID (IDen) that identifies the user of electronic money
tification) and (2) balance data indicating the balance of electronic money held by the user indicated by the user ID in (1);
(3) With respect to the electronic money whose balance is indicated by the balance data of (2), invalid amount data indicating an amount for which use is temporarily prohibited (invalidated), and an amount indicated by the data of (4) (3) And an activation ID to be supplied to the server 1 to cancel (inactivate) the invalidation of the server.

The electronic money represents a property value. For example, the user identified by the user ID notifies the administrator of the server 1 of the user ID and the exchange amount by an arbitrary method. Then, by notifying that the money is to be redeemed, the user can receive a refund of the amount of the electronic money given to the user corresponding to the notified money amount. In this case, it is assumed that the balance data associated with the user ID of this user is updated through an arbitrary process so as to represent an amount lower than before by the exchange amount.

The WWW server program 13 executes the server 1
Is a program for causing the WWW server to perform processing. Server 1 that executes WWW server program 13
Is a URL (Uniform Resource) indicating the logical location of data.
When the ce Locator) is supplied to itself, the data at the logical position indicated by the URL is read out of the storage area of the storage device accessible by the storage unit 1B and the other processing unit 1A, and the read data is stored in the storage unit 1B. Return to URL supplier.

The transfer page data 14 is data representing an image of a transfer page, which is a web page displayed on the terminals 2-1 to 2-n by the server 1 in accordance with processing to be described later, such as HTML (HyperText Markup Language). Language. The transfer page is a web page used by a user of the electronic money to supply data used for the transfer of the electronic money to the server 1 in accordance with a process described below. Includes a recipient entry field and a submit button. The entry field for the remitter is the user ID of the user (remitter) who remits electronic money
(Sender ID), the amount of electronic money to be remitted (remittance amount), the e-mail address of the user (recipient) who receives the electronic money, and an entry field for entering a message to the recipient. The entry column for the recipient is an entry column for entering a user ID (recipient ID) and an activation ID of the recipient. The transmission button is a button for instructing transmission of an answer to the server 1.

The mail tool 15 is a program for sending an electronic mail to the network N and for causing the server 1 to perform processing for receiving the electronic mail via the network N.

Each of the terminals 2-1 to 2-n is constituted by a computer or the like which performs a function of a client.
In addition, an input device including a keyboard and a mouse, and a display device including a liquid crystal display and the like are provided. Terminal 2
Each of -1 to 2-n executes the processing of the WWW browser. That is, when each of the terminals 2-1 to 2-n inputs a URL according to an operation of the operator, the terminal 2-1 accesses the server 1 and requests transmission of data at a logical position indicated by the URL. Then, the server 1 receives the data transmitted by the server 1 according to the request, and displays an image represented by the received data on a display screen of its own display device. Specifically, when each of the terminals 2-1 to 2-n receives the transfer page data 14, for example, it displays the above-described transfer page.

Then, the terminal displaying the transfer page,
When the operator operates the input device of this terminal to enter characters in the remitter's entry column or the recipient's entry column, the entered characters are entered in the remitter's entry column or the recipient's entry column. indicate. Also, when the operator operates the mouse of this terminal and clicks the send button included in the transfer page, this terminal displays the characters currently written in the remitter entry field or the recipient entry field. The data is transmitted to the server 1.

The terminals 2-1 to 2-n may have a portable structure, and may be a portable telephone or a PHS (Pe
rsonal Handyphone System) and GSM (Grobal System
For example, it may perform a terminal function such as for mobile communication). In this case, the network N may include a packet network including a base station and a telephone line used for mobile telephone communication, and a server computer connected to the telephone line and the Internet. The packet network receives and demodulates the modulated wave transmitted by the terminal 2-x (x is an arbitrary integer of 1 or more and n or less), and information obtained by the demodulation (that is, the terminal 2-x modulates a carrier wave). At the same time) is transmitted to the network N. The packet network receives information addressed to the terminal 2-x from the network N, generates a modulated wave representing the received information, and transmits the modulated wave to the terminal 2-x.

Next, the operation of the electronic money utilizing system will be described with reference to FIG. FIG. 2 is a flowchart showing the procedure of the operation of the electronic money utilizing system.

First, the processing unit 1A of the server 1
The electronic money settlement program 12 is read from B and executed. The processing unit 1A that has started the processing of the electronic money settlement program 12 stores the WWW server program 13 in the storage unit 1B.
Is read and executed, and after the execution is started, a function as a WWW server is performed.

On the other hand, the operator of the terminal 2-k (where k is an arbitrary integer of 1 or more and n or less) that executes the processing of the WWW browser operates the input device of the terminal 2-k to transfer the page data 14 for transfer. Upon input of the URL, the terminal 2-k accesses the server 1 and requests transmission of the transfer page data 14 (FIG. 2, step S101). The server 1 reads the transfer page data 14 from the storage unit 1B in accordance with this request, and transmits it to the terminal 2-k. The terminal 2-k is connected to the server 1
Receives the transfer page data 14 transmitted by the user, and displays the transfer page.

Then, the operator operates the input device of the terminal 2-k, and enters a remitter ID, a remittance amount, an e-mail address of the recipient and a message to the recipient in a remitter entry column, Next, it is assumed that the mouse of the terminal 2-k is operated and the transmission button of the transfer page is clicked. Then
The terminal 2-k is a sender I entered in the sender's entry field.
D, the remittance amount, the e-mail address of the recipient, and a message to the recipient are transmitted to the server 1 (step S1).
02).

When the processing unit 1A of the server 1 receives and temporarily stores the data transmitted by the terminal 2-k in step S102, the data representing the image (confirmation image) for urging the remitter to confirm the remittance is received. Is generated and transmitted to the terminal 2-k (step S201). The confirmation image includes the data transmitted by the terminal 2-k in step S102 and a confirmation button for notifying the server 1 of confirming the remittance. The data representing the confirmation image may be any data that describes the contents of the confirmation image in HTML format, for example.

The terminal 2-k receives the data representing the confirmation image transmitted by the server 1 in step S201, and displays the confirmation image. Then, when the operator operates the mouse of the terminal 2-k and clicks a confirmation button included in the confirmation image, the terminal 2-k notifies the server 1 that the remitter has confirmed the remittance ( Step S103).

When the processing unit 1A of the server 1 receives a notification from the terminal 2-k that the remitter has confirmed the remittance, the processing unit 1A accesses the electronic money user database 11 stored in the storage unit 1B. Then, the balance data associated with the remitter ID transmitted by the terminal 2-k in step S102 is updated so as to be reduced by the remittance amount transmitted by the terminal 2-k in step S102 (step S202).

Next, the processing section 1A generates the above-mentioned recipient ID which is a user ID for identifying a recipient who receives the electronic money to be remitted by the remitter, and stores it in the electronic money user database 11. (Step S203). Further, in step S203, the processing unit 1A determines that the terminal 2-k performs step S203.
Remaining amount data representing the balance equal to the remittance amount transmitted in 102 and invalid amount data representing that the entire amount of the balance has been invalidated are generated, and these two data are newly stored in the receiver ID And stored in the electronic money user database 11. Then, the processing unit 1A reads the mail tool 15 from the storage unit 1B, executes the mail tool 15, and, under the control of the mail tool 15, stores the recipient ID and the message to the recipient transmitted by the terminal 2-k in step S102. The terminal 2-k sends the e-mail to the recipient's e-mail address transmitted in step S102.

Further, the processing section 1A provides an activation I for validating the remittance amount of the electronic money confirmed by the remitter as remittance.
D is generated and stored in the electronic money user database 11 in a form associated with the receiver ID stored in the electronic money user database 11 in step S203. Then, in order to notify the activation ID, data representing an image displaying the activation ID is generated and transmitted to the terminal 2-k (step S204). The terminal 2-k performs Step S20
In step 4, the data transmitted by the server 1 is received, and an image represented by the data is displayed.

On the other hand, the recipient of the electronic money, etc.
The e-mail sent by the server 1 to itself in 203 is
For example, the reception is performed using any one of the terminals 2-1 to 2-n or another arbitrary device connected to the network N. Then, an operator such as a recipient operates the input device of the terminal 2-j (j is an integer of 1 or more and n or less) that executes the processing of the WWW browser, and transfers the transfer page data 14.
Is entered. Then, the terminal 2-j performs substantially the same processing as that of the terminal 2-k in step S101, receives the transfer page data 14 from the server 1, and
A transfer page is displayed (step S301).

With the terminal 2-j displaying the transfer page, the operator operates the input device of the terminal 2-j to enter the recipient ID in the entry column for the recipient, and the mouse of the terminal 2-j Is operated and the transmission button of the transfer page is clicked, the terminal 2-j transmits the recipient ID entered in the entry column for the recipient to the server 1 (step S302).

When the processing unit 1A of the server 1 receives the receiver ID transmitted by the terminal 2-j in step S302, the processing unit 1A indicates that the receiver has indicated that the remitter intends to take over the electronic money corresponding to the remittance amount transmitted by the remitter. It confirms (step S205), generates data representing an image notifying that the transfer of the electronic money has been completed, and transmits it to the terminal 2-j (step S206).
The terminal 2-j receives the data transmitted by the server 1 in step S206, and displays an image represented by the data.
Note that the image represented by the data generated in step S206 may be any image that displays, for example, the remitter ID or the remittance amount taken over by the recipient.

On the other hand, the remitter or the like writes the activation ID transmitted by the server 1 to the terminal 2-k in step S204, for example,
Using one of the terminals 2-1 to 2-n or any other device connected to the network N, the electronic money is sent to the e-mail address of the receiver, and is activated for the receiver. The ID is notified (step S104). The timing of notifying the activation ID is optional. For example, if the electronic money has been remitted as the price of the product, the remitter or the like transmits the activation ID after the remitter has received the product. Good.

Then, the terminal 2-h (h is an integer of 1 or more and n or less) executing the processing of the WWW browser is substantially the same as step S301 in accordance with the operation of the operator such as the recipient. To display the transfer page (Step S
303) It is assumed that the recipient ID and the activation ID are entered in the entry fields for the recipient on the transfer page, and the transmission button is clicked. Then, the terminal 2-h transmits the recipient ID and the activation ID entered in the entry column for the recipient to the server 1 (step S304), and the processing unit 1A of the server 1 transmits the recipient ID And an activation ID.

When the processing unit 1A that has received the recipient ID and the activation ID has already completed the processing up to step S206, it accesses the electronic money user database 11 and receives the recipient ID transmitted in step S304. By deleting the invalid amount data associated with the invalid amount data (or updating the invalid amount data to indicate that the invalidated amount is 0), the amount indicated by this invalid amount data is validated (step S207). ). Then, in step S207, the processing unit 1A generates data representing an image notifying that the activation of the electronic money has been completed, and transmits the data to the terminal 2-h.
If the processing up to step S206 has not been completed, the processing section 1A does not perform the processing at step S207.

The terminal 2-h receives the data transmitted by the server 1 in step S207, and displays an image represented by the data. Note that the image represented by the data generated in step S207 is, for example, an activated amount of electronic money,
Anything that displays the total amount of electronic money available to the recipient may be used.

Steps S101 to S10 described above
4. By performing the processing of S201 to S207 and S301 to S304, the transfer of the electronic money from the remitter to the receiver is completed. After receiving the electronic money by transfer, the receiver can use this electronic money to transfer the electronic money to another person as a remitter. In this electronic money utilizing system, since the remitter first remits the electronic money, the receiver can surely receive the electronic money. In addition, the remittance of the electronic money is invalidated until the remitter notifies the recipient of the activation ID. Therefore, if the remittance of the goods or the like is remitted using the electronic money use system, the remittance is not performed. Can surely receive goods and the like. On the other hand, the revoked state is different from the unremitted state and the remittance itself has been completed, so the recipient of the electronic money, which supplies the goods etc., has a risk of failing to collect the money Never bear. In addition, since the server 1 collectively manages the balances of the electronic money of the remitter and the receiver, there is no danger that the remitter transfers the balance to a plurality of persons, and the effectiveness of the balance transfer is reduced. Guaranteed.

The structure of the electronic money utilizing system is not limited to the above. For example, the remitter's entry field on the transfer page may include an entry field for entering the recipient ID. In this case, when the recipient ID is entered in this entry field, the terminal 2-k determines in step S102 that the recipient I
D may be transmitted to the server 1.

In step S102, terminal 2-k receives recipient I
When D is transmitted to the server 1, the server 1 does not create a recipient ID in step S <b> 203, and transmits the newly created balance data and invalid amount data to the user stored in the electronic money user database 11. Terminal 2-k of ID
May be stored in the storage unit 1B in a form associated with substantially the same recipient ID transmitted from the storage unit 1B.

In the transfer page, the entry field for the sender is as follows:
It is not necessary to have a space for a message to the recipient. In addition, the remitter or the like may fill in the address of the recipient or any other information that can be used to transmit information such as the recipient ID to the recipient, instead of the email address of the recipient. .

The notification of the recipient ID in step S203 and the notification of the activation ID in step S104 do not necessarily need to be performed using an e-mail, and need not be performed via the network N. . Therefore, for example, the remitter, the administrator of the server 1, or the like may communicate the recipient ID or the activation ID to the recipient verbally or in writing, or may use the mail to send the recipient ID or the activation ID. You may tell.

Further, the recipient of the electronic money, etc.
If the operator knows the activation ID at the time when the process of 301 is performed, the operator writes the activation ID in addition to the recipient ID in the recipient entry column in step S302, and
−j to the server 1. In this case, the server 1 may skip the processing of steps S205 and S206 and immediately perform the processing of step S207.

(Second Embodiment) Next, an electronic money utilizing system according to a second embodiment of the present invention will be described. The configuration of the electronic money utilizing system of the second embodiment is substantially the same as the configuration of the first embodiment shown in FIG.

Hereinafter, the operation of the electronic money utilizing system according to the second embodiment will be described with reference to FIG. FIG. 3 is a flowchart illustrating a procedure of an operation of the electronic money utilizing system according to the second embodiment.

First, the processing unit 1A of the server 1
The WWW server program 13 is read from B and executed, and after the execution is started, functions as a WWW server are performed. On the other hand, it is assumed that the terminal 2-k is executing WWW browser processing. Then, the operator of the terminal 2-k
Transfer page data 1 by operating the input device of terminal 2-k
4, the terminal 2-k performs substantially the same processing as the above-described processing of step S101 (FIG. 3, step S401), and thereafter, the terminal 2-k and the server 1
According to the operation of the operator, the above-described steps S102 and S2
01, S103, and S202 are sequentially performed (Steps S402, S501, and S40).
3 and S502).

When the processing up to step S502 is completed,
The processing unit 1A of the server 1 generates data representing an image of a receiving page for receiving electronic money, and stores the data in the storage area of the storage unit 1B. Then, the processing unit 1A
The mail tool 15 is executed, and under the control of the mail tool 15, the URL of the receiving page and the message to the recipient transmitted by the terminal 2-k in step S402 are transmitted to the terminal 2
-K is transmitted to the e-mail address of the recipient transmitted in step S402 (step S503).

The receiving page is a page generated uniquely for each remittance performed by the remitter. The receiving page includes, for example, the remitter ID and the remittance amount transmitted by the terminal 2-k in step S402, and a confirmation button for notifying the server 1 that the electronic money has been received. ing. Note that the data representing the page for reception may be any data that describes the contents of the page for reception in HTML format, for example.

Further, the processing section 1A executes the processing in step S2 described above.
The activation ID is generated by performing substantially the same processing as the processing in step 04, the activation ID is stored in the storage area of the storage unit 1B, and the activation ID is displayed on the terminal 2-k. (Step S504). However, step S5
In 04, the processing unit 1A sets the activation ID to, for example,
Sender I transmitted from terminal 2-k in step S402
It is assumed that the data is stored in the storage unit 1B in a form associated with D or the e-mail address of the recipient.

On the other hand, the recipient of the electronic money, etc.
The e-mail sent by the server 1 to itself at 503 is
For example, the reception is performed using any one of the terminals 2-1 to 2-n or another arbitrary device connected to the network N. Then, an operator such as a receiver operates an input device of a terminal 2-j (j is an integer of 1 or more and n or less) that executes a process of a WWW browser to obtain a URL of data representing a reception page. Suppose you enter. Then, the terminal 2-j
The input URL is transmitted to the server 1, and the processing unit 1A of the server 1 reads data representing the page for reception from the storage unit 1B and supplies the data to the terminal 2-j, and the terminal 2-j receives the data, Display the receiving page (Step S60)
1). When the operator operates the mouse of the terminal 2-j and clicks the confirmation button on the receiving page, the terminal 2-j notifies the server 1 that the recipient has accepted the reception of the electronic money.

When the processing unit 1A of the server 1 receives, from the terminal 2-j, a notification that the recipient has accepted the receipt of the electronic money, the recipient ID identifying the recipient who accepted the receipt is received.
Is generated and stored in the electronic money user database 11 (step S505).

Next, the processing section 1A compares the balance data indicating the balance equal to the remittance amount transmitted by the terminal 2-k in step S402 with the invalid amount data indicating that the entire amount of the balance has been invalidated. The two data are generated and stored in the electronic money user database 11 in association with the recipient ID newly stored in step S505 (step S506). The activation ID generated in step S504 and stored in the storage unit 1B is also stored in step S505.
Is stored in the electronic money user database 11 in association with the newly stored recipient ID.

Then, the processing section 1A generates data representing an image notifying that the transfer of the electronic money has been completed, and transmits the data to the terminal 2-j (step 507). Terminal 2-j is
In step S507, the data transmitted by the server 1 is received, and an image represented by the data is displayed. Note that the image represented by the data generated in step S507 may be the same as the image represented by the data generated in step S206, for example.

On the other hand, the remitter notifies the recipient of the activation ID in the same procedure as in step S104 (step S104).
404). Then, the terminal 2-h (h is an integer of 1 or more and n or less) that executes the processing of the WWW browser is operated in accordance with the operation of the operator such as the recipient or the like in steps S303 and S303.
Display the transfer page in substantially the same procedure as 304,
The receiver ID and the activation ID are transmitted (step S60).
2, S603). Upon receiving the transmitted recipient ID and validation ID, the processing unit 1A of the server 1 performs substantially the same process as the process of step S207, thereby associating with the recipient ID transmitted in step S603. Validate the amount indicated by the invalid amount data. And
An image notifying that the activation has been completed is displayed on the terminal 2-h (step S508). However, the processing unit 1A
If the processing up to step S507 is not completed, even if the receiver ID and the activation ID are received, step S50 is performed.
Step 8 is not performed.

Steps S401 to S40 described above
4. The transfer of the electronic money from the remitter to the receiver is also performed by the processing of S501 to S508 and S601 to S603. In the second embodiment, the recipients are terminals 2-1 to 2-1.
If the receipt page is accessed using any one of 2-n, the transfer of the electronic money is completed, and the amount of operations performed by the recipient is reduced. Also in this electronic money utilizing system, the receiver can surely receive the electronic money without risking a failure to collect the price of the goods and the like, and the remitter can surely receive the goods and the like.

The structure of the electronic money utilizing system is not limited to the above. For example, the remitter's entry column on the transfer page may include an entry column for entering the recipient ID, and the terminal 2-k transmits the recipient ID entered in this entry column to the server 1. You may. In this case, the server 1 does not create the recipient ID in step S505,
User ID stored in the electronic money user database 11 with the newly created balance data and invalid amount data
The storage may be stored in the storage unit 1B in a form associated with the recipient ID transmitted from the terminal 2-k. Also, the remitter's entry field on the transfer page does not need to have an entry field for writing a message to the recipient, and the URL of the receipt page is transmitted to the recipient instead of the recipient's email address. Any information that can be used for this purpose may be used.

Further, the receiving page may have an entry column for entering an activation ID. And terminal 2
If the recipient of the electronic money knows the activation ID at the time when −j displays the reception page, and the operator enters the activation ID in the entry field of the reception page, the process proceeds to step S60.
In step 1, the terminal 2-j may transmit the activation ID entered in this entry field to the server 1 when the confirmation button is clicked. In this case, the server 1 determines in step S50
7 may be skipped and the process may be shifted from step S506 to step S508 immediately.

(Third Embodiment) Next, an electronic money utilizing system according to a third embodiment of the present invention will be described. FIG. 4 is a diagram showing a configuration of the electronic money utilizing system. As shown in the figure, the configuration of this electronic money utilizing system is substantially the same as the configuration of the first embodiment shown in FIG. 1 except for the points described below.

In the electronic money utilizing system shown in FIG. 4, the storage unit 1B of the server 1 stores, as shown in FIG.
1. ID retransmission page data 162, ID retransmission page data 163, and inquiry page data 164
Is further stored.

Refund page data 161, ID re-transmission page data 162, ID re-reception page data 163
The inquiry page data 164 includes a payout page, an ID retransmission page, an ID rereceiving page, and an inquiry page, which are web pages displayed on the terminals 2-1 to 2-n by the server 1 in accordance with processing described later. Which is described in a language such as HTML.

The refund page is a web page used to supply data used for refund of electronic money to the server 1, and includes a refund entry field and a send button. The refund entry fields are for entering an inquiry ID that specifies the individual remittance procedures for electronic money, a field for entering the recipient ID of the recipient of the remittance to be canceled, and for canceling the remittance. And a column for entering an activation ID or a cancellation ID to be used. The transmission button is a button for instructing transmission of the inquiry ID, the recipient ID, the activation ID, or the cancellation ID to the server 1.

The ID retransmission page is a web page used to cause the server 1 to retransmit an e-mail to be transmitted to the receiver (e-mail address of the receiver) of the electronic money. The ID retransmission page includes an entry column for entering the above-mentioned inquiry ID, and a transmission button for instructing the entered inquiry ID to be transmitted to the server 1.

[0091] The ID re-receiving page is a web page used to cause the server 1 to retransmit an electronic mail to be sent to the sender (e-mail address of the sender) of the electronic money. The ID re-receiving page includes an entry column for entering the above-described inquiry ID and the e-mail address of the remitter, a transmission button for instructing the entered inquiry ID and e-mail address to be transmitted to the server 1, and Contains.

The inquiry page is a web page used to inquire about the status of the remittance procedure.
The inquiry page includes an entry column for entering the above-described inquiry ID, an entry column for entering the e-mail address of the remitter or recipient, and the entered inquiry ID and e-mail address to the server 1. And a submit button for instructing to do so.

In the electronic money using system of FIG. 4, the entry fields for the remitter on the transfer page represented by the transfer page data 14 are the remitter ID, the remittance amount, the recipient's e-mail address and the recipient's email address. In addition to a column for entering a message, the system further includes a column for entering the name of the sender, the e-mail address of the sender, and a password for authenticating the user.

The electronic money user database 11
In addition to the above-mentioned data (1) to (4) (user ID, balance data, invalid amount data, and activation ID), (5) the electronic data of the user indicated by the user ID An e-mail address, (6) the password for authenticating the user indicated by the user ID in (1), and (7)
The inquiry ID specifying the remittance procedure of the electronic money indicated by the invalid amount data of (3) is stored in a state where these data are associated with each other.

The electronic money user database 11
Is associated with the above inquiry data (data of (7)), and (8) of the remitter who has remitted the remittance amount indicated by the invalid amount data of (3) to the user indicated by the user ID of (1). The user ID and (9) the name of the remitter indicated by the user ID in (8) are stored.

(Third Embodiment: Operation) Hereinafter, FIGS.
The operation of the electronic money utilizing system according to the third embodiment will be described with reference to FIG. FIG. 5 is a flowchart showing a normal processing procedure of the electronic money utilizing system.
FIG. 6 is a flowchart illustrating a procedure of processing for retransmitting the ID to the recipient. FIG. 7 is a flowchart illustrating a procedure of a process of canceling remittance from a recipient. FIG. 8 is a flowchart illustrating a procedure of a process of retransmitting an ID to a remitter.
FIG. 9 is a flowchart illustrating a procedure of a process of canceling a remittance from a remitter. FIG. 10 is a flowchart illustrating a procedure of an inquiry process.

(Third Embodiment: Normal Processing) First, the processing section 1A of the server 1 reads out and executes the WWW server program 13 from the storage section 1B, starts executing the program, and thereafter functions as a WWW server. I do.

Then, the operator of the terminal 2-k (k is an arbitrary integer of 1 to n) executing the processing of the WWW browser operates the terminal 2-k to transfer the page data 14 for transfer.
When the terminal 2-k inputs the URL of
The terminal 2-k and the server 1 perform substantially the same processing as the processing of step 101 (FIG. 5, step S3101).
According to the operation of the operator, the above-described steps S102 and S2
01 and S103 are sequentially performed (steps S3102, S3201, and S310).
3).

However, in step S3102, the terminal 2-
The data entered by the operator in the remitter entry field of the transfer page with k further includes the remitter's name, the remitter's e-mail address, and the password in addition to the data in the first embodiment.

In step S3201, the processing unit 1A of the server 1 receives and temporarily stores the data transmitted by the terminal 2-k in step S3102, and the received remitter ID and password are associated with each other. The electronic money user database 11 determines whether or not it is stored in the electronic money user database 11, and if not, transmits a predetermined error message to the terminal 2-k. If it is stored, it is determined whether the balance indicated by the balance data associated with the received remitter ID is equal to or greater than the received remittance amount. Then, when determining that it does not correspond, the processing unit 1A transmits a predetermined error message to the terminal 2-k, and when determining that it corresponds, generates data representing a confirmation image and transmits it to the terminal 2-k.

Next, the processing section 1A of the server 1 performs the subtraction of the sender's balance, the addition of the receiver's balance, the generation of invalid amount data,
Generate and transmit the recipient ID (step S320)
2).

However, in step S3202, processing unit 1A
Generates an inquiry ID in addition to the receiver ID, balance data and invalid amount data of the receiver, and generates the five data, the remitter ID and the receiver's e-mail received from the terminal 2-k. Are stored in the electronic money user database 11 in association with each other. Also, recipient ID, terminal 2
In addition to the message to the recipient received from -k, the inquiry ID is transmitted to the recipient's e-mail address received from the terminal 2-k. Step S320
In 2, the activation ID is not generated yet.

In step S3202, the processing section 1A
Is to notify the sender of the generated inquiry ID,
Data representing an image displaying the inquiry ID is generated and transmitted to the terminal 2-k. The terminal 2-k performs step S
At step 3202, the data transmitted by the server 1 is received, and an inquiry ID represented by the data is displayed.

On the other hand, the recipient of the electronic money, etc.
In step 3202, the server 1 receives an e-mail transmitted to itself using an arbitrary device connected to the network N. Then, an operator, such as a recipient, operates a terminal that executes processing of the WWW browser (the terminal is assumed to be a terminal 2-j for easy understanding), and the URL of the transfer page data 14 is changed. Is input, the terminal 2-j receives
The same processing as that of the terminal 2-k in step S101 is performed, the transfer page data 14 is received from the server 1, and the transfer page is displayed (step S3301).

When the terminal 2-j transmits the recipient ID written on the transfer page to the server 1 in the same manner as in step S302 of FIG. 2 according to the operation of the operator (step S3302), the processing unit of the server 1 1A indicates an image (reception confirmation image) including a sender's name, a remittance amount, a confirmation button for notifying acceptance of the receipt, and a cancel button for notifying rejection of the receipt. The data is generated and transmitted to the terminal 2-j (Step S320)
3).

The terminal 2-j receives the data transmitted by the server 1 in step S3203, and displays a reception confirmation image. Then, when the operator operates the terminal 2-j and clicks the confirmation button, the terminal 2-j notifies the server 1 that the receiver has confirmed the amount received with the remitter and accepted the reception ( Step S3302).

[0107] When the processing unit 1A of the server 1 receives the notice of acceptance of the receipt sent by the terminal 2-j in step S3302, the recipient indicates that he / she intends to take over the electronic money corresponding to the remittance amount sent by the remitter. After confirming that the transfer of the electronic money has been completed, data representing an image notifying that the transfer of the electronic money has been completed is generated and transmitted to the terminal 2-j (step S3204). Terminal 2-
j receives the data transmitted by the server 1 in step S3204 and displays an image represented by the data.

Also, in step S3204, processing unit 1A
Generates an activation ID for activating the electronic money for which the receiver has accepted the reception, and associates the electronic money with the receiver ID stored in the electronic money user database 11 in step S3202, in the form of an electronic money. It is stored in the user database 11. Then, in order to notify the remitter of the activation ID, the mail tool 15 is executed in the same manner as in the first embodiment, and the terminal 2-k sends the e-mail address to the e-mail address of the recipient transmitted in step S3102. , Activation I
Send D. The remitter receives the e-mail transmitted by the server 1 to itself in step S3204 using the device connected to the network N.

On the other hand, the remitter notifies the recipient of the received activation ID (step S3104). This notification may be made, for example, by transmitting the notification from a device connected to the network N to the e-mail address of the recipient. The timing of notifying the activation ID is arbitrary.

Then, the terminal executing the processing of the WWW browser (the terminal is assumed to be terminal 2-j for easy understanding) is operated in accordance with the operation of the operator such as the recipient.
The transfer page is displayed in the same manner as in step S3301 (step S3303), and when the operator enters the recipient ID and the activation ID in the entry field for the recipient on this transfer page and clicks the send button, the terminal 2 -J and server 1
Is similar to steps S304 and S207 described above.
Transmission of the activation ID and the like and activation of the balance are performed (steps S3304 and S3205). Then, the terminal 2-j
In step S3205, the data transmitted by the server 1 is received, and an image represented by the data is displayed.

Steps S3101 to S31 described above
04, S3201 to S3205 and S3301 to S33
Also in the process of 04, the transfer of the electronic money from the remitter to the receiver is performed.

(Third Embodiment: Process of Retransmitting ID to Recipient) When an e-mail including a reception ID and an inquiry ID transmitted to the recipient has not arrived, a notification is received. The remitter or the like operates the terminal that executes the processing of the WWW browser (the terminal is assumed to be the terminal 2-j for easy understanding), and proceeds to step S10.
1 and the ID resend page data 16
The ID retransmission page 2 is displayed. Then, the inquiry ID is entered in the entry field of the ID retransmission page displayed by the terminal 2-j, and the transmission button is clicked. Then, the terminal 2-j transmits the entered inquiry ID to the server 1 (FIG. 6, step S3311), and the server 1
Receives this inquiry ID.

The processing section 1A that has received the inquiry ID,
The electronic money user database 11 is accessed, and the receiver ID and the receiver's e-mail address associated with the inquiry ID are read. Then, the read recipient ID and the inquiry ID transmitted by the terminal 2-j in step S3311 are addressed to the e-mail address.
Is transmitted again in the form of an e-mail (step S32).
11).

(Third Embodiment: Processing of Cancellation of Remittance from Recipient) The recipient or the like wants to cancel remittance.
In the state where the above-described reception confirmation image is displayed, the terminal 2-j
, And click the cancel button of the receipt confirmation image. Then, the terminal 2-j notifies the server 1 that the receiver has requested the cancellation of the remittance (FIG. 7, step S332).
1).

When the processing unit 1A of the server 1 receives the notification of the cancellation request sent by the terminal 2-j in step S3321, it confirms that the recipient has indicated the intention to refuse the remittance of the electronic money, and Is generated and transmitted to the terminal 2-j (step S).
3221). The terminal 2-j receives the data transmitted by the server 1 in step S3221, and displays an image represented by the data.

Also, in step S3221, the processing unit 1A
Generates a cancellation ID used by the sender for remittance of the electronic money, and associates the ID with the receiver ID stored in the electronic money user database 11 in step S3202 to the electronic money user database 11 Store. Then, in order to notify the remitter of this cancellation ID, the mail tool 15 is executed, and the terminal 2-k executes step S310.
The cancellation ID is transmitted to the e-mail address of the recipient transmitted in step 2.

On the other hand, when the remitter receives the cancellation ID transmitted by the server 1, the remitter or the like executes a WWW browser processing terminal (for easy understanding, the terminal is a terminal 2-k
Is operated, and a payout page represented by the payout page data 161 is displayed in the same procedure as in step S3301 (step S3121).

Then, when the operator enters the recipient ID and the cancellation ID in the refund entry field of the refund page and clicks the send button, the terminal 2-k enters each of the entries in the refund entry field. The data is transmitted to the server 1 (step S
3122), the processing unit 1A of the server 1 receives the transmitted data.

The processing section 1A having received the receiver ID and the cancellation ID accesses the electronic money user database 11. Then, the balance data associated with the received recipient ID is updated so as to be reduced by the amount represented by the invalid amount data associated with the balance data, and the invalid amount data is deleted (or invalidated). The ineffective amount data is updated to indicate that the performed amount is 0). On the other hand, the balance data indicating the balance of the user indicated by the remitter ID (that is, the data of (8) described above) associated with the receiver ID is increased by the amount indicated by the invalid amount data. Update. As a result, the electronic money is refunded to the remitter (step S3222).

Also, in step S3222, the processing unit 1A
Generates data representing an image notifying the completion of the electronic money refund, and transmits the data to the terminal 2-k. The terminal 2-k receives the data transmitted by the server 1 in step S3222, and displays an image represented by the data.

(Third Embodiment: Process of Retransmitting ID to Sender) In the case where an e-mail addressed to the remitter including the activation ID and the cancellation ID has not arrived, the remitter and the like use the WWW browser. The terminal that performs the processing (for easy understanding,
The terminal is assumed to be the terminal 2-k), and the same process as in step S3121 is performed to display the ID re-reception page indicated by the ID re-reception page data 163. Then, enter the inquiry ID and the sender's e-mail address in the entry fields on this ID re-receiving page,
Click the submit button. Then, the terminal 2-k transmits the inquiry ID and the e-mail address entered in the entry column to the server 1 (FIG. 8, step S3131), and the processing unit 1A of the server 1 receives the inquiry ID and the e-mail address. I do.

The processing section 1A, having received the inquiry ID and the mail address, accesses the electronic money user database 11 and confirms that the received inquiry ID and the mail address are stored in association with each other. Then, the activation ID (or cancellation ID) associated with the inquiry ID is read, and the read activation ID (or cancellation ID) is transmitted to the e-mail of the remitter transmitted by the terminal 2-h in step S3131. The e-mail is sent again to the address (step S32).
31).

(Third Embodiment: Processing of Cancellation of Remittance from Sender) When the remitter wants to cancel remittance, the remitter or the like executes a WWW browser processing terminal (hereinafter easily understood). In this case, the terminal is assumed to be the terminal 2-k), the process of step S3121 is performed, and the payout page is displayed. Then, the inquiry ID (or the recipient ID and the cancellation ID) is entered in the refund entry field of the refund page displayed by the terminal 2-h, and the transmission button is clicked. Then, the terminal 2-k transmits the data entered in the refund entry column to the server 1 (step S3122), and the processing unit 1A of the server 1 receives the transmitted data.

The processing section 1A having received the inquiry ID,
The electronic money user database 11 is accessed. Then, the balance data associated with the received inquiry ID or the recipient ID is updated so as to be reduced by the amount represented by the invalid amount data associated with the balance data, and the invalid amount data is deleted. (Or updates the invalidation amount data to indicate that the invalidated amount is 0). On the other hand, remitter I associated with this recipient ID
The balance data indicating the remitter's balance indicated by D (that is, the data of (8) described above) is updated so as to be increased by the amount represented by the invalid amount data. As a result, the electronic money is refunded to the sender (step S3241).

Then, the processing section 1A executes the above-described step S
Similarly to the case of 3222, it generates data representing an image notifying that the payout of the electronic money has been completed and transmits the data to the terminal 2-k. The terminal 2-k receives the data and displays an image represented by the data.

Note that the processing section 1A may set the amount by which the balance data representing the remitter's balance is increased to be smaller than the amount represented by the invalid amount data. In this case, the difference between the amount to be increased and the amount represented by the invalid amount data may be, for example, equivalent to a fee collected by the operator of the electronic money using system. Also, in place of the inquiry ID, the recipient ID and the cancellation ID are stored in the server 1 in step S3112.
When the processing unit 1A confirms that the recipient ID and the cancellation ID are associated with each other, the processing unit 1A reduces the balance of the recipient and increases the balance of the remitter. I do.

(Third Embodiment: Inquiry Processing)
When inquiring about a transaction, the remitter or the like (or the recipient or the like) uses a terminal that executes the processing of the WWW browser (hereinafter, referred to as a terminal).
In order to facilitate understanding, the terminal is assumed to be the terminal 2-k), and the same processing as in step S101 is performed to display the inquiry page represented by the inquiry page data 164 (step S101). S315
1).

Then, the inquiry ID and the e-mail address of the remitter (or recipient) are entered in the inquiry column of the inquiry page, and the transmission button is clicked. Then, the terminal 2-k transmits each data entered in the inquiry entry column to the server 1 (step S3).
152), the processing unit 1A of the server 1 receives each transmitted data.

The processing section 1A having received the inquiry ID and the mail address accesses the electronic money user database 11 and confirms that the inquiry ID and the mail address are stored in association with each other. Then, data other than the password is read out of the data associated with the inquiry ID, and data representing an image displaying the read data is generated.
k (step S3251). The terminal 2-k receives the data and displays an image represented by the data (step S3153).

In the electronic money utilizing system of the third embodiment, the receiver can surely receive the electronic money without risk of failing to collect the goods and the like, and the remitter can surely receive the goods and the like. You can receive. Then, in this electronic money utilizing system, the remittance can be canceled from the remitter or the receiver, and the status of the remittance procedure can be inquired. Activation ID
Will be notified to the remitter awaiting acceptance by the recipient.

(Fourth Embodiment) Next, an electronic money utilizing system according to a fourth embodiment of the present invention will be described. FIG. 11 is a diagram showing a configuration of the electronic money utilizing system. As shown in the figure, the configuration of this electronic money utilizing system is substantially the same as the configuration of the first embodiment shown in FIG. 1 except for the points described below.

In the electronic money utilizing system shown in FIG.
As illustrated, the storage unit 1B of the server 1 includes, in addition to the data stored in the storage unit 1B of FIG. 1, a transfer account creation page data 171, a payment confirmation page data 172, a transfer page data 173, and a refund confirmation Page data 174
I remember. The storage unit 1B also stores payout page data 161 and inquiry page data 164 substantially the same as those in the configuration of FIG.

Transfer account creation page data 171, payment confirmation page data 172, transfer page data 173
And the refund confirmation page data 174 include a transfer account creation page, a payment confirmation page, a transfer page, and a refund confirmation page, which are web pages displayed on the terminals 2-1 to 2-n by the server 1 in accordance with processing described later. This is data representing an image of a page for use, and is described in a language such as HTML.

The transfer account creation page stores data used for creating a new account (generating a user ID) in the server 1.
This is a web page used to serve to. The transfer account creation page sends the server 1 the name of the account holder, a password for authenticating the holder, an entry field for entering the e-mail address of the holder, and the entered inquiry ID. And a submit button for instructing to do so.

The payment confirmation page is a web page used by a recipient or the like to confirm receipt of electronic money. The payment confirmation page includes an entry field for entering a recipient ID and a recipient password, and a transmission button for instructing the server 1 to transmit the entered recipient ID and password.

The takeover page is a web page used to confirm that the electronic money deposited on the recipient side has been validated. The takeover page includes an entry column for entering a recipient ID and a recipient password, and a send button for instructing the server 1 to transmit the entered recipient ID and password.

The refund confirmation page is a web page used by the remitter to confirm that the electronic money has been refunded by canceling the remittance by the receiver. The refund confirmation page includes an entry column for entering a remitter ID and a remitter password, and a send button for instructing the remitter ID and password to be transmitted to the server 1.

In the electronic money utilizing system shown in FIG. 11, a remitter's entry column of the transfer page represented by the transfer page data 14 is a column for entering a password in addition to that of the first embodiment. And an activation button for instructing activation. The electronic money user database 11 has substantially the same data structure as that in the third embodiment described above.

(Fourth Embodiment: Operation) Next, FIG.
The operation of the electronic money utilizing system according to the fourth embodiment will be described with reference to FIGS. FIG. 12 and FIG. 13 are flowcharts showing the procedure of the normal processing. FIG. 13 is a flowchart illustrating a procedure of processing for canceling remittance from a recipient. FIG. 14 is a flowchart illustrating a procedure of a process of canceling remittance from a remitter.

(Fourth Embodiment: Normal Processing) First, the processing unit 1A of the server 1 reads out and executes the WWW server program 13 from the storage unit 1B, starts executing the program, and thereafter functions as a WWW server. I do. On the other hand, terminal 2-
j (j is any integer from 1 to n) is assumed to be executing the processing of the WWW browser.

Then, the operator of the terminal 2-j
By operating j, the URL of the transfer account creation page data 16
Is input to the terminal 2-j in the same manner as in step S101 described above.
A transfer account creation page 71 is displayed (FIG. 12,
Step S4301).

Then, the operator operates the terminal 2-j,
It is assumed that the name, password, and e-mail address of the recipient of the electronic money as the account holder are entered in the entry fields on the transfer account creation page, and then the submit button on the transfer account creation page is clicked. . Then, the terminal 2-
j transmits the data entered in the transfer account creation entry field to the server 1 (step S4302).

When the processing unit 1A of the server 1 receives each data transmitted by the terminal 2-j in step S4302, the processing unit 1A sets a user ID (that is, a recipient ID) for identifying a recipient whose name is included in the received data. Generate. Then, the generated receiver ID and the received receiver's name, password, and receiver's e-mail address are stored in the electronic money user database 11 in association with each other (step S4201). Then, execute the mail tool 15,
The recipient ID is transmitted to the recipient's e-mail address received from the terminal 2-j (step S420).
2).

The recipient or the like transmits the e-mail transmitted by the server 1 to itself in step S4202 to the network N.
, And notifies the remitter of the recipient ID included in the received e-mail. The method of notifying the remitter is arbitrary, and may be performed, for example, by transferring this e-mail to the remitter's e-mail address.

On the other hand, the operator of the terminal 2-k (k is any integer from 1 to n) inputs the URL of the transfer page data 14 by operating the terminal 2-k, and However, when the transfer page is displayed in the same manner as in the first to third embodiments (step S4101), the terminal 2-k and the server 1 thereafter perform the above-described step S31 according to the operation of the operator.
02, S3201, and S3103 are sequentially performed (steps S4102 and S420).
3 and S4103). However, it is assumed that the data entered in the remitter entry field in step S4102 includes a recipient ID, a remittance amount, a remitter ID, a password, and a message to the recipient.

Next, the processing unit 1A of the server 1
In step S4102, k is generated as balance data indicating a balance equal to the remittance amount transmitted in step S4102 and invalid amount data indicating that the entire amount of the balance has been invalidated. It is stored in the electronic money user database 11 in association with the recipient ID. Further, the balance of the sender is also subtracted (step S42).
04). Also, in step S4204, if the balance check in step S4203 is passed, the processing unit 1A generates data representing a transfer confirmation image displaying a recipient ID, a remittance amount, and a confirmation button, and transmits the data to the terminal 2-k. I do.

[0147] The terminal 2-k receives the data transmitted by the server 1 in step S4204, and displays a transfer confirmation image. Then, when the operator of the terminal 2-k clicks the transfer confirmation image confirmation button, the server 1 is notified that the remitter has confirmed the remittance destination and the remittance amount (step S4).
104).

When the processing unit 1A of the server 1 receives a notification that the remittance destination and the remittance amount have been confirmed from the terminal 2-k, the processing unit 1A generates data representing an image notifying that the remittance has been accepted, k (step S4205). The terminal 2-k receives the data and displays an image represented by the data.

On the other hand, the remitter notifies the receiver that the remittance has been performed (step S4104). This notification may be performed, for example, by using a device connected to the network N and transmitting the notification to the recipient's e-mail address.

[0150] The operator, such as the recipient, can use WWW.
By operating a terminal that executes the processing of the browser (hereinafter, the terminal is assumed to be a terminal 2-j for easy understanding), the URL of the payment confirmation page data 172 is input, and the terminal 2-j In the same manner as in step S101, the payment confirmation page represented by the payment confirmation page data 172 is displayed (step S4303).

With the terminal 2-j displaying the payment confirmation page, the operator operates the terminal 2-j to enter the recipient ID and the password in the entry fields of the payment confirmation page, and click the send button. Then, the terminal 2-h transmits the recipient ID and the password entered in the entry fields to the server 1 (FIG. 13, step S4304).

When the processing unit 1A of the server 1 receives the receiver ID and the password transmitted by the terminal 2-h in step S4304, the receiver ID and the password are stored in the electronic money user database 11 in association with each other. If it is determined whether or not it is stored,
Assuming that the authentication is successful, data representing an image for confirming payment is generated and transmitted to the terminal 2-j (step S4).
206). This image may be, for example, an image representing the remitter ID or the remittance amount. The terminal 2-j receives the data from the server 1 and displays an image represented by the data. If the authentication is not successful, the processing unit 1A
For example, a predetermined error message is transmitted to the terminal 2-j.

On the other hand, for example, if the electronic money has been remitted as the price of the product, the remitter or the like proceeds to step S101 in order to validate the remitted electronic money at a timing such as after receiving the product. Similarly, a transfer page is displayed on a terminal that executes the processing of the WWW browser (hereinafter, the terminal is assumed to be terminal 2-k for easy understanding) (step S4105).

Then, the operator operates the terminal 2-k,
It is assumed that a remitter ID, a password, and a recipient ID are entered in the remitter's entry fields, and the enable button is clicked. Then, the terminal 2-k sends the data entered in the entry field for the remitter and a notification to validate the electronic money to the server 1.
(Step S4106).

When the processing unit 1A of the server 1 receives the data transmitted by the terminal 2-k in step S4106, if the processing in step S4206 has already been completed, the processing unit 1A accesses the electronic money user database 11 and receives the data. It is determined whether or not the remitter ID and the password are stored in the electronic money user database 11 in association with each other. If it is determined that they are stored, it is determined that the authentication is successful and transmitted in step S4106. By erasing the invalid amount data associated with the received recipient ID (or updating the invalid amount data to indicate that the invalidated amount is 0), the amount indicated by this invalid amount data is activated (Step S4207). Then, data representing an image notifying that the activation of the electronic money has been completed is generated and transmitted to the terminal 2-k (step S420).
8). The terminal 2-h receives the data and displays an image represented by the data.

The processing section 1A determines in step S4206
Is not completed, and step S420
If the authentication in step 5 is not successful, step S420
For example, a predetermined error message is transmitted to the terminal 2-j without performing the processing of 7 to S4208.

[0157] The remitter or the like, which has been notified of the validity of the electronic money, notifies the recipient that the transmitted electronic money has been validated (step S4107). This notification may be sent, for example, to the recipient's e-mail address.

[0158] Then, the operator, such as the recipient who has received the notification, operates the terminal that executes the processing of the WWW browser (the terminal is hereinafter referred to as terminal 2-j for easy understanding). Then, the terminal 2-j performs the same processing as that of the terminal 2-k in step S101, and
The takeover page represented by 73 is displayed (step S43)
05).

With the terminal 2-j displaying the takeover page, the operator operates the terminal 2-j to write the recipient ID and password in the entry fields of the takeover page, and click the send button. The terminal 2-j transmits the recipient ID and the password entered in the entry fields to the server 1 (Step S4306).

When the processing unit 1A of the server 1 receives the receiver ID and the password transmitted by the terminal 2-j in step S4306, the receiver ID and the password are stored in the electronic money user database 11 in association with each other. It is determined whether or not there is. If it is determined that the electronic money has been stored, it is determined that the authentication has succeeded, and data representing an image notifying that the electronic money for the remittance amount remitted by the remitter has been taken over to the receiver is generated, and the terminal 2- j (step S4209). The terminal 2-j receives the data and displays an image represented by the data. If the authentication in step S4209 is not successful, for example, the processing unit 1A sends a predetermined error message to the terminal 2.
-J.

Steps S4101-S41 explained above
07, S4201 to S4209 and S4301 to S43
Also in the process of 06, the transfer of the electronic money from the remitter to the receiver is performed.

(Fourth Embodiment: Inquiry Processing)
The procedure of the inquiry processing of the electronic money utilizing system of FIG. 1 is substantially the same as the procedure in the third embodiment.

(Fourth Embodiment: Processing for Canceling Remittance from Recipient) When the recipient wants to cancel remittance,
The terminal 2-j that executes the processing of the WW browser is operated to perform substantially the same processing as that of the terminal 2-k in step S3121, and a payout page is displayed (FIG. 14, step S4311). Then, the recipient ID and password are entered in the refund entry fields on the refund page, and the transmission button is clicked. Then, the terminal 2-j transmits each data entered in the refund entry column to the server 1 (step S4312), and the processing unit 1A of the server 1 receives the transmitted data.

When the processing unit 1A of the server 1 receives the data sent by the terminal 2-j in step S4312, it confirms that the receiver has refused to receive the electronic money, and temporarily stores the received receiver ID. Also, the terminal 2 generates data representing an image notifying that the remittance of the electronic money is to be cancelled, and
j (step S4211). The terminal 2-j receives the data and displays an image represented by the data.

On the other hand, the receiver or the like can send the remitter, for example, one of the terminals 2-1 to 2-n or the network N
Is notified that the electronic money has been rejected by transmitting the electronic money to the e-mail address of the recipient of the electronic money using any other device connected to the server (step S431).
3). The timing of notification is arbitrary.

[0166] The remitter notified of the refusal of the receipt is referred to the WW
By operating a terminal that executes the process of the W browser (hereinafter, the terminal is assumed to be a terminal 2-k for easy understanding), the refund confirmation page data 174 is executed in the same procedure as in step S3121 described above. Is displayed (step S4111). Then, when the remitter ID and password are entered in the entry fields of the refund confirmation page and the send button is clicked, the terminal 2-k sends the entered data to the server 1 (step S41).
12), the processing unit 1A of the server 1 receives these data.

The processing section 1A that has received the remitter ID and the password accesses the electronic money user database 11. The remitter ID and the password are stored in the electronic money user database 11 in association with each other, and the remitter ID is stored in step S4211.
Then, it is determined whether or not the data is stored as the data of (8) in association with the recipient ID temporarily stored.

If it is determined that the data is stored, it is determined that the authentication has succeeded, and the received remitter ID indicates the balance of the receiver indicated by the receiver ID associated with the above-mentioned data (8). The balance data is updated so as to be reduced by the amount represented by the invalid amount data associated with the balance data, and the invalid amount data is deleted (or invalidated to indicate that the invalidated amount is 0). Update amount data). On the other hand, the balance data associated with the received remitter ID is updated so as to be increased by the amount represented by the invalid amount data. As a result, the electronic money is refunded to the remitter (step S4212).

In step S4212, the processing section 1A
Generates data representing an image notifying that payout of electronic money has been completed, and transmits the data to the terminal 2-k. Terminal 2-k
Receives the data transmitted by the server 1 in step S4212, and displays an image represented by the data. In addition, when the authentication in step S4212 is not successful, the processing unit 1A transmits, for example, a predetermined error message to the terminal 2-k.

(Fourth Embodiment: Processing of Cancellation of Remittance from Sender) If the remitter wants to cancel remittance, the remitter or the like must execute a WWW browser processing terminal (hereinafter, easily understood). In this case, the terminal is assumed to be the terminal 2-k), and substantially the same processing as in step S3121 is performed to display a payout page. Then, the remitter ID and password are entered in the refund entry fields of the refund page displayed by the terminal 2-k, and the transmission button is clicked. The terminal 2-k transmits the remitter ID and the password to the server 1 (FIG. 15, step S
4121), the processing unit 1A of the server 1
And a password.

Upon receiving the remitter ID and the password transmitted in step S4121, the server 1 accesses the electronic money user database 11 and
It is determined whether D and the password are stored in the electronic money user database 11 in association with each other. Then, if it is determined that the data is stored, it is determined that the authentication is successful, and the remittant's balance is increased, the recipient's balance is reduced, and the invalid amount data is deleted in the same manner as in step S4212. As a result, the electronic money is refunded to the remitter (step S4221). The processing unit 1A
Transmits a predetermined error message to the terminal 2-k if the authentication in step S4221 is not successful.

In the electronic money utilizing system according to the fourth embodiment, the generation and delivery of the activation ID is omitted, and the receiver can securely receive the electronic money without risking a failure to collect the price of the goods. The sender can surely receive the goods and the like.

(Fifth Embodiment) Next, an electronic money utilizing system according to a fifth embodiment of the present invention will be described. FIG. 16 is a diagram showing a configuration of the electronic money utilizing system. As shown in the figure, the configuration of this electronic money utilizing system is substantially the same as the configuration of the first embodiment shown in FIG. 1 except for the points described below.

In the electronic money utilizing system of FIG.
As illustrated, the storage unit 1B of the server 1 further stores remitter confirmation page data 181 and confirmation response page data 182 in addition to the data stored in the storage unit 1B in the third embodiment illustrated in FIG. I remember.

The remitter confirmation page data 181 and the confirmation response page data 182 are a remitter confirmation page and a confirmation page, respectively, which are web pages that the server 1 displays on the terminals 2-1 to 2-n in accordance with the processing described later. Data representing an image of a response page, which is described in a language such as HTML.

[0176] The remitter confirmation page is a web page used by a remitter or receiver of electronic money to cause the electronic money utilization system to generate an inquiry ID. The remitter confirmation page is a box for entering the remitter's e-mail address, the recipient's e-mail address, the remitter's (or recipient's) password, and the data entered is sent to the server 1. Transmission button for instructing transmission.

The confirmation response page is a web page used for notifying that the person who generated the inquiry ID has confirmed the generated inquiry ID. The confirmation response page includes an entry field for entering an inquiry ID, a password of the remitter (or recipient), and a transmission button for instructing the server 1 to transmit the entered data. In.

In the electronic money utilizing system shown in FIG. 16, the entry page for the remitter of the transfer page represented by the transfer page data 14 is a column for entering a password in addition to that of the first embodiment. including. The electronic money user database 11 has substantially the same data structure as that in the third embodiment described above.

(Fifth Embodiment: Operation) Next, FIG.
The operation of the electronic money utilizing system according to the fifth embodiment will be described with reference to FIG. FIG. 17 and FIG. 18 are flowcharts showing the procedure of the normal processing.

(Fifth Embodiment: Normal Processing) First, the processing unit 1A of the server 1 reads out and executes the WWW server program 13 from the storage unit 1B, starts executing the program, and thereafter functions as a WWW server. I do. On the other hand, terminal 2-
j (j is any integer from 1 to n) is assumed to be executing the processing of the WWW browser.

Then, the operator of the terminal 2-j
To cause the terminal 2-j to display the remitter confirmation page represented by the remitter confirmation page data 181 (FIG. 17, step S5301). Subsequently, the operator checks the terminal 2
By operating -j, enter the sender's e-mail address, the recipient's e-mail address, and the sender's or recipient's password in the entry fields on the sender's confirmation page. When you click the send button, terminal 2-
j, these data entered in the remitter box,
The data is transmitted to the server 1 (step S5302).

When the processing unit 1A of the server 1 receives the data transmitted by the terminal 2-j in step S5302 and temporarily stores the data in the storage unit 1B, the processing unit 1A transmits the data from the remitter indicated by the received data to the receiver. Generate a unique inquiry ID,
The data is temporarily stored in the storage unit 1B in association with the temporarily stored data. Then, by executing the mail tool 15, the inquiry ID is transmitted to both the e-mail address of the remitter and the e-mail address of the receiver received from the terminal 2-j (step S5201). The remitter and the like, and the recipient and the like are each described in step S520.
In step 1, the server 1 receives an e-mail transmitted to the server 1 by using a device connected to the network N.

Also, in step S5201, processing unit 1A
Generates data representing an image displaying the generated inquiry ID, and transmits the data to the terminal 2-j. The terminal 2-j receives the data and displays the inquiry ID represented by the data.

Next, the operator operates the terminal 2-j to perform the same processing as in step S101 described above, so that the terminal 2-j transmits the confirmation response page data 182 to the terminal 2-j. The confirmation response page to be displayed is displayed (step S5303). Then, when the operator enters the inquiry ID and the password in the entry fields of the confirmation response page and clicks the send button, the terminal 2-j transmits the entered inquiry ID and the password to the server 1 (step). S5304).

When the processing unit 1A of the server 1 receives the inquiry ID and the password transmitted by the terminal 2-j in step S5304, the processing unit 1A checks whether the password associated with the received inquiry ID matches the received password. If it is determined that there is no match,
A predetermined error message is transmitted to the terminal 2-j. On the other hand, if it is determined that they match, a recipient confirmation flag indicating that the confirmation has been completed is set (specifically, a recipient confirmation flag having a value representing that the confirmation has been completed is stored in the inquiry ID stored in step S5201). And stored in the storage unit 1B). Then, the processing unit 1A generates data indicating a confirmation message indicating that the reception of the inquiry ID has been confirmed and transmits the data to the terminal 2-j (step S).
5202). Terminal 2-k receives this data and displays this confirmation message.

Next, an operator such as a remitter operates a terminal for executing the processing of the WWW browser (hereinafter, the terminal is assumed to be a terminal 2-k for easy understanding). , The terminal 2-j and the server 1 sequentially perform substantially the same processing as the above-described processing in steps S101 and S102 (steps S5101 and S510).
2).

However, in step S5102, the data to be entered in the remitter entry column (and the data included in the confirmation image) include an inquiry ID, a remitter ID, and a remitter's ID instead of the recipient's mail address. It is assumed that a password is included.

Next, in step S5203, the processing section 1A of the server 1 receives and temporarily stores the data transmitted by the terminal 2-k in step S5102, and associates the received remitter ID and password with each other. It is determined whether or not the received inquiry ID is stored in the electronic money user database 11 and the received inquiry ID is stored in the storage unit 1B. If not, a predetermined error message is transmitted to the terminal 2-k. Send. If it is stored, it is determined whether the balance indicated by the balance data associated with the received remitter ID is equal to or greater than the received remittance amount. Then, if it is determined that it does not correspond, the processing unit 1A determines that the terminal 2-
Send a predetermined error message to k.

[0189] On the other hand, if it is determined that this is the case, the processing unit 1A of the server 1 determines whether or not the recipient confirmation flag for the remittance indicated by the received inquiry ID is set. A predetermined error message is transmitted to the terminal 2-k. On the other hand, if it is determined that it is set, data representing the confirmation image is generated by performing the same processing as in step S201 described above, and transmitted to the terminal 2-k (step S5204).

The terminal 2-k receives the data transmitted by the server 1 in step S5204, and displays a confirmation image. Then, when the operator operates the terminal 2-k and clicks the confirmation button of the confirmation image, the terminal 2-k and the server 1 execute the above-described steps S103, S202 to S204.
(Steps S5103 and S5103).
5205 to S5207). However, step S5207
The server 1 does not perform the process of transmitting data representing the activation ID to the terminal 2-k.

On the other hand, the recipient of the electronic money sends the electronic mail including the recipient ID transmitted by the server 1 to itself.
The data is received using a device connected to the network N. Then, an operator, such as a recipient, operates a terminal that executes the processing of the WWW browser (hereinafter, for ease of understanding, the terminal is assumed to be a terminal 2-j).
The terminal 2-j and the server 1 execute the above-described step S330.
1 to S3304 and S3203 to S3205 are performed (steps S5305 to S53).
08, S5208 to S5210). However, step S
At 5208, the processing unit 1A of the server 1 newly sets the activation ID.
Is generated, the activation ID already generated in step S5206 is used.

Steps S5101-S51 explained above
03, S5201-S5210 and S5301-S53
In the process 08, the electronic money is transferred from the remitter to the receiver.

(Fifth Embodiment: Other Processing) FIG. 1
The electronic money using system of No. 5 performs a process of retransmitting the ID to the recipient, a process of canceling the remittance from the recipient, a process of retransmitting the ID to the remitter, a process of canceling the remittance from the remitter, and a process of inquiring. Processing in the third embodiment (FIGS. 6, 7,
The processing is performed in substantially the same procedure as the processing shown in FIGS. 8, 9 and 10).

In the electronic money utilizing system of the fifth embodiment, the receiver can surely receive the electronic money without risk of failing to collect the goods and the like, and the remitter can surely receive the goods and the like. You can receive. And in this electronic money utilizing system, the remittance procedure can be started from both the remitter side and the receiver side.

(Sixth Embodiment) Next, an electronic money utilizing system according to a sixth embodiment of the present invention will be described. The configuration of the electronic money utilizing system of the sixth embodiment is substantially the same as the configuration of the fifth embodiment shown in FIG. The procedure of the process performed by the electronic money utilizing system of the sixth embodiment is substantially the same as that of the operation of the electronic money utilizing system of the fifth embodiment described above, in which both the normal process and the other processes are performed. Are identical.

However, the procedure of the operation of the electronic money utilizing system of the sixth embodiment is different from that of the fifth embodiment in the points shown as (a) to (d) below. That is, (a) the remittance sender confirmation entry field on the remittancer confirmation page
Step S53 includes a column for describing the estimated remittance amount.
At 02, the terminal 2-j also transmits the scheduled remittance amount entered in this column to the server 1. Then, the server 1 uses the estimated remittance amount instead of the remittance amount transmitted in step S5102 of the fifth embodiment. (B) In step S5201, the server 1 does not transmit the inquiry ID to the remitter but transmits it only to the recipient.
To the sender, the recipient confirmation flag is set in step S5202, and then the sender is sent. (C) The entry column for the sender in the transfer page represented by the transfer page data 14 does not include a column for entering the sender ID. (D) The confirmation image represented by the data generated by the server 1 in step S5204 includes a column in which the remitter ID is entered. In step S5302, the terminal 2-j transmits the remitter entered in this column. The ID is also transmitted to the server 1. Then, in the processing after step S5302, step S5
The remitter ID transmitted in 302 is used instead of the remitter ID transmitted in step S5102 in the fifth embodiment.

In the electronic money utilizing system according to the sixth embodiment, the receiver can receive the electronic money without risk of failing to collect the goods and the like, and the remitter can surely receive the goods and the like. You can receive. Then, in this electronic money utilizing system, the remittance procedure can be started from both the remitter side and the recipient side by designating the estimated remittance amount.

Although the embodiments of the present invention have been described above, the electronic settlement apparatus according to the present invention can be realized using a general computer system without using a dedicated system. For example, a medium in which a plurality of computers each including a DSU and a terminal adapter and connected to each other via a communication line store programs for executing the operations of the server 1 and the terminals 2-1 to 2-n. (CD
By installing the program from a ROM, a magnetic tape, or the like, an electronic money utilizing system that executes the above-described processing can be configured.

Also, for example, a bulletin board (BB) of a communication line
These programs may be posted on S) and distributed via a communication line. Alternatively, a carrier wave is modulated by a signal representing these programs, the obtained modulated wave is transmitted, and this modulated wave is transmitted. The receiving device may restore these programs by demodulating the modulated wave. And
By starting this program and executing it under the control of the OS in the same manner as other application programs, the above-described processing can be executed.

When the OS shares part of the processing,
Alternatively, when the OS constitutes a part of one component of the present invention, the recording medium may store a program excluding the part. Also in this case, in the present invention, it is assumed that the recording medium stores a program for executing each function or step executed by the computer.

[0201]

As described above, according to the present invention, an electronic settlement apparatus and an electronic settlement method capable of performing electronic settlement while reducing the risk of both parties to settlement are realized.

[Brief description of the drawings]

FIG. 1 is a block diagram showing a configuration of an electronic money utilizing system according to a first embodiment of the present invention.

FIG. 2 is a flowchart showing processing of the electronic money utilizing system of FIG.

FIG. 3 is a flowchart illustrating processing of an electronic money using system according to a second embodiment of the present invention.

FIG. 4 is a block diagram showing a configuration of an electronic money utilizing system according to a third embodiment of the present invention.

FIG. 5 is a flowchart illustrating a procedure of a normal process according to a third embodiment.

FIG. 6 is a flowchart illustrating a procedure of processing for retransmitting an ID to a recipient according to the third embodiment.

FIG. 7 is a flowchart illustrating a procedure of a process of canceling remittance from a recipient according to the third embodiment.

FIG. 8 is a flowchart illustrating a procedure of processing for retransmitting an ID to a remitter in the third embodiment.

FIG. 9 is a flowchart illustrating a procedure of processing for canceling remittance from a remitter in the third embodiment.

FIG. 10 is a flowchart illustrating a procedure of an inquiry process according to the third embodiment.

FIG. 11 is a block diagram showing a configuration of an electronic money using system according to a fourth embodiment of the present invention.

FIG. 12 is a flowchart illustrating a procedure of a normal process according to the fourth embodiment.

FIG. 13 is a flowchart illustrating the continuation of the normal processing procedure according to the fourth embodiment.

FIG. 14 is a flowchart illustrating a procedure of a process of canceling remittance from a recipient in the fourth embodiment.

FIG. 15 is a flowchart illustrating a procedure of a process of canceling a remittance from a remitter in the fourth embodiment.

FIG. 16 is a block diagram showing a configuration of an electronic money using system according to a fifth embodiment of the present invention.

FIG. 17 is a flowchart illustrating a procedure of a normal process according to the fifth embodiment.

FIG. 18 is a flowchart illustrating the continuation of the normal processing procedure in the fifth embodiment.

[Explanation of symbols]

 1 server 1A processing unit 1B storage unit 2-1 to 2-n terminal 11 electronic money user database 12 electronic money settlement program 13 WWW server program 14 transfer page data 15 mail tool 161 refund page data 162 ID retransmission page data 163 ID re-receiving page data 164 Inquiry page data 171 Transfer account creation page data 172 Payment confirmation page data 173 Transfer page data 174 Refund confirmation page data 181 Sender confirmation page data 182 Confirmation response page data N network

Claims (21)

[Claims] 1. A first point indicating a score given to a first user.
Point storage means for storing the point data in the storage area of the user, transferer specification data specifying the first user, transferee specification data specifying the second user, and the first user Transfer receiving means for obtaining transfer amount data indicating the number of points to be transferred to the second user from the outside, and the points given to the first user specified by the obtained transferer designation data are obtained. Subtraction means for updating the first score data stored in the score storage means so as to decrease by the amount corresponding to the score indicated by the transfer quantity data; and obtaining the score indicated by the transfer quantity data in the second usage. Second point data indicating that the transfer has been given to the user and invalidation data indicating that the point indicated by the transfer amount data is prohibited from being transferred, and generating the second point data and the invalidation. Data to each other Adding means for associating and storing in the storage area of the point storage means, and enabling data for releasing the prohibition of transfer of the point indicated by the second point data associated with the invalidation data, Activating data generating means for supplying to the source of the assignee designation data, and when the activating data supplied to the outside is supplied to itself, by changing or deleting the invalidating data,
An activation means for canceling the prohibition of the transfer of the points indicated by the invalidation data. 2. The method according to claim 1, wherein the adding means generates and outputs inquiry data, and outputs the inquiry data as the second point data, the invalidation data, the first user, and the second use. Means for storing in the storage area of the score storage means in association with the user, when the inquiry data is supplied to itself, the second score data associated with the inquiry data, the invalidation Means for supplying at least a part of the data, the data representing the first user, and the data representing the second user to a supplier of the inquiry data. The electronic payment device according to claim 1. 3. A first indicating a score given to a first user.
Point storage means for storing point data in its own storage area; and when an instruction requesting generation of inquiry data is supplied from outside, the inquiry data is generated and output in response to the instruction. Storage means for storing the inquiry data; when authentication data and the inquiry data are supplied from outside, the output destination of the inquiry data is set to a second user based on the authentication data. Receiving confirmation means for generating and storing reception confirmation data indicating that the second user is willing to receive a score from the first user when the authentication is successful; and Transferor designation data designating the first user, the inquiry data, and transfer amount data indicating the number of points to be transferred from the first user to the second user are obtained from outside. A transfer reception unit for, the acknowledgment data is judged whether it is stored,
When it is determined that the transfer amount is stored, the score given to the first user specified by the transferor designation data acquired from the outside is reduced by an amount corresponding to the score indicated by the acquired transfer amount data. Subtraction means for updating the first point data stored in the point storage means; and, when it is determined that the reception confirmation data is stored, the point indicated by the transfer amount data acquired from outside is the second point. The second point data indicating that the transfer has been given to the user and the invalidation data indicating that the point indicated by the transfer amount data is prohibited from being transferred are generated, and the second point data and the corresponding point data are generated. Adding means for storing the invalidation data in the storage area of the storage means in association with the inquiry data; prohibiting transfer of the points indicated by the second point data associated with the invalidation data Activation data generating means for generating activation data for canceling and supplying the data to the source of the transferor designation data, and when the externally supplied activation data is supplied to itself, the invalidation By changing or deleting data,
An activation means for canceling the prohibition of the transfer of the points indicated by the invalidation data. 4. A first indicating a score given to a first user.
Point storage means for storing the point data of the first user in the storage area; transfer amount data indicating the transfer amount data indicating the points received by the second user from the first user from outside;
A storage unit that, when supplied with an instruction requesting generation of inquiry data, generates and outputs the inquiry data in response to the instruction, and stores the inquiry data and the transfer amount data in association with each other; When the authentication data and the inquiry data are supplied from the outside, based on the authentication data, the output destination of the inquiry data is authenticated as a second user, and when the authentication is successful, Reception confirmation means for generating and storing reception confirmation data indicating that the second user is willing to receive a score from the first user; transferor designation for designating the first user Transfer receiving means for acquiring data and the inquiry data from outside, and determining whether or not the reception confirmation data is stored,
When it is determined that the data is stored, the score given to the first user specified by the transferor designation data acquired from outside is the transfer amount data associated with the inquiry data acquired from outside. Subtraction means for updating the first score data stored in the score storage means so as to decrease by an amount corresponding to the score indicated by the mark, and externally acquired when it is determined that the reception confirmation data is stored. Second score data indicating that the score indicated by the transfer amount data has been given to the second user, and invalidation data indicating that the score indicated by the transfer amount data is prohibited from being transferred. Adding means for generating and storing the second point data and the invalidation data in the storage area of the storage means in association with the inquiry data; Means for generating activation data for canceling the prohibition of the transfer of the points indicated by the second point data, and supplying the data to the source of the transferor designation data; When the validation data is supplied to itself, by changing or deleting the invalidation data,
An activation means for canceling the prohibition of the transfer of the points indicated by the invalidation data. 5. When the inquiry data and cancellation data indicating cancellation of the transfer of the score indicated by the second score data are supplied to the self, the activating means responds to the cancellation data. The invalidation data is changed or deleted, and the points given to the first user specified by the transferor specification data are increased within a range corresponding to the points indicated by the second point data. 5. The electronic settlement apparatus according to claim 2, further comprising a cancellation unit configured to cancel the transfer of the score by updating the first score data. 6. 6. The assignee designation data represents an e-mail address of the second user, and the adding means sends the second user to an e-mail address represented by the assignee designation data. The electronic settlement apparatus according to any one of claims 1 to 4, further comprising: means for transmitting an e-mail including transfer notice data indicating that the transfer of the points is received. 7. The score storage means stores the second score data in association with second identification data for identifying the second user, wherein the transfer notification data is Until the second identification data is supplied from the outside, the validation unit corresponds to the second identification data regardless of whether the validation data has been supplied to itself. The electronic settlement apparatus according to claim 6, wherein prohibition of transfer of the point indicated by the attached second point data is maintained. 8. When the second identification data and the transferee cancellation data indicating cancellation of transfer of the score indicated by the second score data are supplied to the self, The invalidation data is changed or deleted in response to the cancellation data, and the first data specified by the assignee designation data is changed.
The first point data is updated so that the point given to the user increases within a range corresponding to the point indicated by the second point data, thereby canceling the transfer of the point. The electronic settlement apparatus according to claim 7, further comprising a person cancellation unit. 9. The addition means generates data representing a web page for confirming that the second user has received the score, and specifies U from outside to specify the web page.
When RL (Uniform Resource Locator) is supplied,
Means for outputting data representing the web page to the outside for browsing the web page, wherein the transfer notification data includes a U
RL, and the validation unit associates the validation data with the second identification data until the data representing the web page is output to the outside, regardless of whether the validation data has been supplied to the self. The electronic settlement apparatus according to claim 6, wherein the prohibition of transfer of the points indicated by the obtained second point data is maintained. 10. A score storage means for storing first score data indicating a score given to a first user in its own storage area; transferer designation data for designating the first user; Transfer accepting means for acquiring from outside the transferee designation data designating the second user and transfer amount data indicating the points to be transferred from the first user to the second user; and the acquired transferor The first score data stored in the score storage unit is updated so that the score given to the first user designated by the designated data is reduced by an amount corresponding to the score indicated by the acquired transfer amount data. Subtraction means, second point data indicating that the point indicated by the acquired transfer amount data has been given to the second user, and transfer indicated by the point indicated by the transfer amount data is prohibited. Generate invalidation data indicating And, the second number data and the invalidation data associated with each other and adding means for storing in a storage area of said score storage means, the authentication data for authenticating the first user, and,
When an activation command requesting release of the prohibition of the transfer of the point indicated by the second point data associated with the invalidation data is supplied to itself, the first use is performed based on the authentication data. Authenticating a user and, when the authentication is successful, changing or deleting the invalidation data associated with the second user to whom the authenticated first user transfers points. And an activating means for canceling the prohibition of the transfer of the points indicated by the invalidation data. 11. The adding means, when the inquiry command and the authentication data are supplied to itself, authenticates a user based on the authentication data,
When the authentication is successful, at least a part of the second score data associated with the authenticated user, the invalidation data, and at least a part of the data representing the partner of the exchange of the score with the user, The electronic payment device according to claim 10, further comprising: means for supplying the inquiry data to a supply source. 12. The validating means comprises: authentication data;
When the cancellation data indicating that the transfer of the score indicated by the second score data is canceled is supplied to itself, the first user is authenticated based on the authentication data. The first user changes or deletes the invalidation data associated with the second user to whom the first user transfers the score, and the score given to the first user is By updating the first score data stored by the score storage means so as to increase within a range corresponding to the score indicated by the second score data,
The electronic settlement apparatus according to claim 10, further comprising a transferor canceling unit for canceling the transfer of the score. 13. The authentication means according to claim 13, wherein said validating means comprises: authentication data;
When the cancellation data indicating that the transfer of the score indicated by the second score data is canceled is supplied to itself, the second user is authenticated based on the authentication data, and when the authentication is successful, the user is authenticated. Change or delete the invalidation data associated with the second user, and the score given to the first user as the other party who transfers the score to the second user, A transferee canceling means for canceling the transfer of the score by updating the first score data stored in the score storage means so as to increase the score within a range corresponding to the score indicated by the second score data. The electronic settlement apparatus according to claim 11, comprising: 14. A method for storing first score data indicating a score given to a first user, assignee designation data for designating the first user, and a assignee for designating a second user. Obtaining designated data and transfer amount data indicating the number of points to be transferred from the first user to the second user; and the points given to the first user specified by the obtained transferor specified data Updated the first score data so as to decrease by the amount corresponding to the score indicated by the acquired transfer amount data, and the score indicated by the acquired transfer amount data was given to the second user. And the invalidation data indicating that the point indicated by the transfer amount data indicates that transfer is prohibited, and associates the second point data and the invalidation data with each other. And stores the invalidated data Generated activation data for releasing the prohibition of the transfer of the point indicated by the assigned second point data is supplied to the source of the transferor designation data, and the externally supplied activation data is An electronic payment method, characterized in that when supplied from the outside, the prohibition of transfer of the points indicated by the invalidation data is released by changing or deleting the invalidation data. 15. A first point data indicating a point given to a first user is stored, and when a command requesting generation of inquiry data is supplied from the outside, the first point data is responded to the command. Generating and outputting the inquiry data, storing the inquiry data, and when receiving authentication data and the inquiry data from the outside, outputting the inquiry data based on the authentication data. Authenticates the user as a second user, and when the authentication is successful, generates and stores reception confirmation data indicating that the second user is willing to receive a score from the first user. Externally acquiring transferer designation data designating the first user, the inquiry data, and transfer amount data indicating a score to be transferred from the first user to the second user; Determine whether the receipt confirmation data is stored,
When it is determined that the transfer amount is stored, the score given to the first user specified by the transferor designation data acquired from the outside is reduced by an amount corresponding to the score indicated by the acquired transfer amount data. The stored first score data is updated, and when it is determined that the receipt confirmation data is stored, the score indicated by the transfer amount data acquired from outside is given to the second user. The second point data indicating that the transfer is prohibited, and the invalidation data indicating that the point indicated by the transfer amount data is prohibited from being transferred, are generated. And generating activation data for canceling the prohibition of the transfer of the score indicated by the second score data associated with the invalidation data, and storing the validator data in association with the inquiry data. Is supplied to the sources, when the valid data supplied to the outside is supplied to the self, by changing or erasing the invalidation data,
An electronic settlement method, wherein the prohibition of transfer of the points indicated by the invalidation data is lifted. 16. A method for storing first score data indicating a score given to a first user, and transferring transfer amount data indicating a score received by a second user from the first user from outside. Transfer amount data to indicate; and
When an instruction for requesting the generation of inquiry data is supplied, the inquiry data is generated and output in response to the instruction, and the inquiry data and the transfer amount data are stored in association with each other. Thus, when the authentication data and the inquiry data are supplied, the output destination of the inquiry data is authenticated as a second user based on the authentication data, and when the authentication is successful, the second Generates and stores receipt confirmation data indicating that the user is willing to receive points from the first user, and stores the transferor designation data designating the first user and the inquiry data Acquired from outside, and determines whether or not the receipt confirmation data is stored,
When it is determined that the data is stored, the score given to the first user specified by the transferor designation data acquired from outside is the transfer amount data associated with the inquiry data acquired from outside. The first score data stored is updated so as to be reduced by an amount corresponding to the score indicated by. When it is determined that the reception confirmation data is stored, the transfer amount data acquired from the outside indicates Second point data indicating that the point has been given to the second user, and invalidation data indicating that the point indicated by the transfer amount data is prohibited from being transferred are generated, and the second point data is generated. The score data and the invalidation data are stored in association with the inquiry data, and the prohibition of the transfer of the score indicated by the second score data associated with the invalidation data is released. To generate valid data for, and supplied to the supply source of the transferor specification data when said enabling data supplied to the outside is supplied to the self, by changing or erasing the invalidation data,
An electronic settlement method, wherein the prohibition of transfer of the points indicated by the invalidation data is lifted. 17. A method for storing first score data indicating a score given to a first user, a assignee designating data designating the first user, and a assignee designating a second user. Designated data and transfer amount data indicating the number of points to be transferred from the first user to the second user are obtained from the outside, and the obtained transferer specification data is given to the specified first user. The stored first score data is updated such that the score obtained is reduced by an amount corresponding to the score indicated by the acquired transfer amount data, and the score indicated by the acquired transfer amount data is determined by the second usage. Second point data indicating that the transfer has been given to the user and invalidation data indicating that the point indicated by the transfer amount data is prohibited from being transferred, and generating the second point data and the invalidation. Storing the data in association with each other, Authentication data for authenticating the first user; and
When an activation command requesting release of the prohibition of the transfer of the point indicated by the second point data associated with the invalidation data is supplied to itself, the first use is performed based on the authentication data. Authenticating a user and, when the authentication is successful, changing or deleting the invalidation data associated with the second user to whom the authenticated first user transfers points. (C) canceling the prohibition of the transfer of the points indicated by the invalidation data. 18. A computer, comprising: a score storage means for storing first score data indicating a score given to a first user in its own storage area; and a transferor designation designating the first user. Transfer receiving means for externally obtaining data, transferee designation data designating a second user, and transfer amount data indicating points to be transferred from the first user to the second user; The first score data stored by the score storage means such that the score given to the first user specified by the transferor designation data is reduced by an amount corresponding to the score indicated by the acquired transfer amount data. A second point data indicating that the point indicated by the acquired transfer amount data has been given to the second user, and a point indicated by the transfer amount data being prohibited from being transferred. Show that Adding means for generating invalidation data, storing the second point data and the invalidation data in a storage area of the point storage means in association with each other, and a second point associated with the invalidation data Activation data generating means for generating activation data for canceling the prohibition of the transfer of the points indicated by the data, and supplying the activation data to a source of the transferor designation data; and When supplied, by changing or deleting the invalidation data,
A validating means for releasing the prohibition of the transfer of the points indicated by the invalidation data; 19. A computer, comprising: a point storage means for storing first point data indicating a point given to a first user in its own storage area; and an instruction requesting externally to generate inquiry data. Is supplied, the inquiry data is generated and output in response to the command, and storage means for storing the inquiry data, and authentication data and the inquiry data are supplied from outside. At this time, based on the authentication data, the output destination of the inquiry data is authenticated as a second user, and when the authentication is successful, the second user receives a score from the first user. Reception confirmation means for generating and storing receipt confirmation data indicating that there is intention; transferer designation data designating the first user; the inquiry data; and the first Transfer accepting means for acquiring transfer amount data indicating the number of points to be transferred from the user to the second user from the outside; and determining whether or not the receipt confirmation data is stored,
When it is determined that the transfer amount is stored, the score given to the first user specified by the transferor designation data acquired from the outside is reduced by an amount corresponding to the score indicated by the acquired transfer amount data, Subtraction means for updating the first point data stored in the point storage means; and when the reception confirmation data is determined to be stored, the point indicated by the transfer amount data obtained from outside is the second point. Second point data indicating that the transfer has been given to the user, and invalidation data indicating that the point indicated by the transfer amount data is prohibited from being transferred, and generating the second point data and the second point data. Adding means for storing the invalidation data in the storage area of the storage means in association with the inquiry data; prohibiting transfer of the points indicated by the second point data associated with the invalidation data Activation data generating means for generating activation data for canceling and supplying the data to the source of the transferor designation data; and when the externally supplied activation data is supplied to itself, the invalidation By changing or deleting data,
A validating means for canceling the prohibition of the transfer of the points indicated by the invalidation data; and a program for functioning as the validating means. 20. A computer, comprising: a point storage means for storing first point data indicating a point given to a first user in its own storage area; Transfer amount data indicating the transfer amount data indicating the points received by the user, and
A storage unit that, when supplied with an instruction requesting generation of inquiry data, generates and outputs the inquiry data in response to the instruction, and stores the inquiry data and the transfer amount data in association with each other; When the authentication data and the inquiry data are supplied from the outside, based on the authentication data, the output destination of the inquiry data is authenticated as a second user, and when the authentication is successful, Reception confirmation means for generating and storing reception confirmation data indicating that the second user is willing to receive a score from the first user; transferor designation for designating the first user Transfer receiving means for acquiring data and the inquiry data from outside, and determining whether or not the reception confirmation data is stored,
When it is determined that the data is stored, the score given to the first user specified by the transferor designation data acquired from outside is the transfer amount data associated with the inquiry data acquired from outside. Subtraction means for updating the first score data stored in the score storage means so as to decrease by an amount corresponding to the score indicated by the mark, and externally acquired when it is determined that the reception confirmation data is stored. Second score data indicating that the score indicated by the transfer amount data has been given to the second user, and invalidation data indicating that the score indicated by the transfer amount data is prohibited from being transferred. Adding means for generating and storing the second point data and the invalidation data in the storage area of the storage means in association with the inquiry data; Means for generating activation data for canceling the prohibition of the transfer of the points indicated by the second point data, and supplying the data to the source of the transferor designation data; When the validation data is supplied to itself, by changing or deleting the invalidation data,
A validating means for releasing the prohibition of the transfer of the points indicated by the invalidation data; 21. A computer, comprising: a score storage means for storing first score data indicating a score given to a first user in its own storage area; and a transferor designation for designating the first user. Transfer receiving means for externally obtaining data, transferee designation data designating a second user, and transfer amount data indicating points to be transferred from the first user to the second user; The first score data stored by the score storage means such that the score given to the first user specified by the transferor designation data is reduced by an amount corresponding to the score indicated by the acquired transfer amount data. A second point data indicating that the point indicated by the acquired transfer amount data has been given to the second user, and a point indicated by the transfer amount data being prohibited from being transferred. Show that Adding means for generating invalidation data, storing the second point data and the invalidation data in a storage area of the point storage means in association with each other, and authentication data for authenticating the first user ,as well as,
When an activation command requesting release of the prohibition of the transfer of the point indicated by the second point data associated with the invalidation data is supplied to itself, the first use is performed based on the authentication data. Authenticating a user and, when the authentication is successful, changing or deleting the invalidation data associated with the second user to whom the authenticated first user transfers points. And a validating means for releasing the prohibition of the transfer of the points indicated by the invalidation data.