JP2002230455A - System and method for electronic settlement processing - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a system and a method for electronic settlement processing, which carry out settlements safely, speedily and surely over a computer network, such as the Internet. SOLUTION: This electronic settlement processing system is equipped with user terminals 20a to 20c, which have browser function and input purchase information and password information for electronic information, an EC store server 40 which provides the electronic information to the user terminals 20a to 20c, an electronic bank server 10 which performs settlements corresponding to dealings of the electronic information between the user terminals 20a to 20c and electronic store server 40, and the computer network 30, such as the Internet which connects the user terminals 20a to 20c, electronic bank server 10, and EC store server 40.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

The present invention relates to an electronic payment processing system and an electronic payment processing method for performing payment processing on a computer network such as the Internet. In particular, the present invention relates to an electronic payment processing system and an electronic payment processing method for performing payment processing securely and securely on a computer network.

[0002]

2. Description of the Related Art Conventionally, a computer network (hereinafter simply referred to as a "network") in which a plurality of computers are connected by a communication line or the like to store and exchange data and programs among the plurality of computers and to share data and the like. Say) is built.

[0003] As a method of such a network,
An open network system that allows computers to be freely connected, in principle, as long as it conforms to a predetermined communication protocol, etc., and the network is managed by a host computer, etc. There is a closed network system in which an unmanaged computer node is not connected to the network.

The Internet is a typical example of the above-mentioned open network system. In this Internet, the communication protocol is TCP (Transfer
Control Protocol) / IP (Internet Protocol) is adopted. In principle, any computer that complies with this communication protocol can be connected to a network.

[0005] In recent years, with the background of a free network environment such as the Internet, WWW (World Wide W
eb) and other multimedia environments have been developed. In particular, recently, many Internet businesses (e-businesses) that provide specific services using the Internet have been proposed and operated.

In the Internet business (e-business), there is a service in which a virtual store is provided on the server side and programs, images, music, videos, and the like are provided as electronic information via a Web page. As the settlement method of such electronic commerce, there are a method by cash transfer, a transfer, a method using a prepaid card system, a method using a credit card, a settlement by an electronic bank, and the like.

[0007]

[0005] However, in the case of cash transfer, transfer, and the one adopting a prepaid card system, it takes time to purchase a prepaid card, or to send and pay cash. As a result, there is a problem that convenience on the Internet is lost.

According to the settlement method using a credit card in an electronic transaction, since the store server confirms the credit by the credit card information, the transmitted credit card information remains in the store server. There is a problem that there is a risk that credit card information is leaked.

[0009] Further, in order to prevent the leakage of credit card information, it is costly to construct a server system.
There is a problem that it is difficult to realize low cost, which is an advantage of electronic commerce.

[0010] Further, in the case of settlement on a computer network by an electronic bank or the like, since it is necessary to accurately, safely and promptly identify a user having an account, it is costly to construct and operate a system. was there.

[0011] Further, based on a sales contract concluded between the user and the electronic store on the Internet, only when the user makes a payment with the electronic bank, the electronic store is provided to the user for providing digital contents. When displaying a page, there was a problem that spoofing could not be prevented. That is, there is a problem that an unauthorized person who is not a user who has made a correct sales contract and settled correctly can illegally access the digital content providing page.

Accordingly, it is an object of the present invention to provide a digital content only to a person who has made a correct sales contract and correctly settled in a three-party transaction (user, electronic store, electronic bank) on a computer network such as the Internet. Accordingly, it is an object of the present invention to provide an electronic payment processing system and an electronic payment processing method capable of performing payment safely, quickly and reliably on a computer network such as the Internet.

[0013]

In order to solve the above-mentioned problems, an electronic payment processing system according to the present invention is an electronic payment processing system for processing payment on a computer network such as the Internet. A user terminal that is connected to input purchase information or password information of electronic information, and an electronic store server that is connected to a computer network, receives purchase information of electronic information from the user terminal, and provides the electronic information to the user terminal, An electronic bank server that is connected to the computer network and performs payment according to a transaction of electronic information between the user terminal and the electronic store server, wherein the electronic store server responds to the purchase information of the electronic information from the user terminal. To provide electronic store server account information, amount information, and electronic information URL, and sends the digital signature of the electronic shop server to the user terminal, according to the settlement information from the user terminal, to the user terminal, it allows you to download the electronic information from the URL, the user terminal,
The account information of the electronic store server, the amount information, the URL for providing the electronic information, and the digital signature of the electronic store server from the electronic store server are transmitted to the electronic bank server, and further, the password information, the digital signature of the user, and The user's account information is sent to the electronic bank server, and the electronic bank server sends the electronic store server account information, the amount information, the electronic store server digital signature, the password information, the user digital signature, and the user's account from the user terminal. Based on the information, settlement is performed between the account information of the electronic store server and the account information of the user, and a URL for providing the settlement information and the electronic information is notified to the user terminal.

Here, the electronic store server can provide a purchase information input screen of electronic information to the user terminal through a Web page.

[0015] The URL may be displayed so as to be recognizable on the user terminal side after the settlement at the electronic bank server is completed.

[0016] The password information may include a password for confirming payment at the electronic bank.

[0017] The payment information can include a digital signature of the electronic store server, a digital signature of the user, and a digital signature of the electronic bank server.

According to another aspect of the present invention, there is provided an electronic payment processing method for processing payment on a computer network such as the Internet. A purchase information input screen is provided to the user terminal, and (B) a URL for providing account information, amount information, and electronic information of the electronic store server according to the purchase information of the electronic information from the user terminal, and the electronic store server From the electronic store server to the user terminal, and (C) the electronic store server account information, the amount information, the URL for providing the electronic information from the electronic store server, and the digital signature of the electronic store server. The user terminal transmits the password information, the user's digital signature, and the user's account information to the electronic bank server from the user terminal. And sends it to the electronic bank server from,
(D) In the electronic bank server, based on the account information of the electronic store server, the amount information, the digital signature of the electronic store server, the password information, the digital signature of the user, and the user's account information from the user terminal, Making a settlement between the account information and the account information of the user, (E)
The electronic bank server notifies the user terminal of the payment information and the URL for providing the electronic information, (F) transmits the payment information from the user terminal to the electronic store server, and (F) responds to the payment information from the user terminal. The electronic store server permits a user terminal to download electronic information from a URL.

Here, the step (A) can provide an electronic information purchase information input screen to the user terminal by a Web page.

In the step (E), the URL may be notified so that the user terminal can display the URL.

Step (C) comprises: (C1) account information, amount information, and the like of the electronic store server from the electronic store server.
Transmitting the user's digital signature and the user's account information from the user terminal to the electronic bank server together with the URL for providing the electronic information and the digital signature of the electronic store server; (C2) based on the user's account information Transmitting the balance information from the electronic bank server to the user terminal; and (C3) transmitting, from the user terminal, withdrawal password information for accepting the settlement process to the electronic bank server in accordance with the balance information. Step (D) is an electronic banking server, which is an electronic bank server account information, an amount information, an electronic store server digital signature, a user digital signature, a user account information from a user terminal.
The settlement may be performed between the account information of the electronic store server and the account information of the user based on the withdrawal password information.

In the step (E), the electronic bank server provides the user terminal with the digital information of the electronic store server, the digital signature of the user, the settlement information with the digital signature of the electronic bank server, and the electronic information. UR for
L and can be notified.

By performing a digital signature with the electronic store server, the user terminal, and the electronic bank server, payment can be made securely, promptly, and securely on a computer network.

[0024]

BRIEF DESCRIPTION OF THE DRAWINGS FIG. 1 is a block diagram of an electronic payment processing system and an electronic payment processing method according to the present invention. Here, in the electronic payment processing system and the electronic payment processing method of the present invention, the payment processing can be performed based on information from the electronic store side and the user side using a computer network such as the Internet.

FIG. 1 is a diagram showing an embodiment of the electronic payment processing system of the present invention. This electronic payment processing system,
A PC (Pe
rsonal Computer) or a user terminal 20a such as a mobile phone
And a user terminal 20a-2 having a server function.
0c based on the purchase information from the user terminals 20a-2c.
An electronic commerce (EC) store server (hereinafter, also simply referred to as “EC store server”) 40 that provides electronic information such as programs, images, and voices to 0c, a server function, and passwords from the user terminals 20a to 20c. An electronic bank server 10 for performing settlement according to a transaction of electronic information between the user terminals 20a to 20c and the electronic store server 40 based on the information and the purchase confirmation information from the EC store server 40, and each of the user terminals 20a to 20c , Electronic bank server 10 and EC
A computer network (hereinafter, also simply referred to as “network”) 30 such as the Internet for connecting the store server 40.

FIG. 2 is a diagram showing one form of the configuration of the electronic bank server 10. In FIG. 2, the electronic bank server 10
Is an account DB 13 for storing account information such as a user's and an EC store's deposit balance, and account information of an electronic store server, amount information, a digital signature of an electronic store server, password information from a user terminal 20a to 20c, and a user's digital data. Payment processing unit 12 that performs payment between the account information of the electronic store and the account information of the user based on the signature and the account information of the user, and notifies the user terminal of the URL for providing the payment information and the electronic information. Is connected to the network 30,
A web processing unit 11 for communicating information.

FIG. 3 is a diagram showing one form of the configuration of the EC store server 40. In FIG. 3, the EC store server 40
Is provided information D that stores, as electronic information, programs, images, sounds, and the like provided to the user terminals 20a to 20c.
B43, an information providing processing unit 42 that prepares electronic information stored in the provided information DB 43 and provides the electronic information to the user terminals 20a to 20c, and provides information based on payment information from the user terminals 20a to 20c. A payment information processing unit 44 that permits the provision of predetermined electronic information from the processing unit 42 to the user terminals 20a to 20c, a Web processing unit 41 that performs communication with the network 30, and a Web that is provided by the Web processing unit 41. A WebDB 45 for storing pages and the like;
It has.

In the above, the network 30 can be constructed using the Internet or an intranet. In this case, since an existing application or system conforming to the Internet communication protocol can be used, the electronic payment processing system of the present invention can be realized at low cost.

Next, a network payment service using the electronic payment processing system of the present invention shown in FIGS. 1 to 3 will be described. In the following description, as a specific example, the user terminal 20b is described as a PC having a client function and a browser function, and the computer network 30 is described as the Internet.

FIGS. 4 and 5 are flow charts showing a network payment service using the electronic payment processing system of the present invention. In FIG. 1 to FIG. 5, first, a user is a user terminal on the user side (hereinafter, also referred to as “PC”).
At 20b, a browser is started, and via a computer network (hereinafter, also referred to as "Internet") 30,
The user accesses a shopping Web page (a purchase application information input screen for electronic information (digital contents) such as programs, videos, and sounds) provided by the web processing unit 41 of the EC store server 40 (step 401).

From the user terminal 20b, the shopping We
When the purchase application information of the electronic information is input to page b and transmitted to the EC store server 40, the W
The eb processing unit 41 passes the purchase application information to the information provision processing unit 42 (Step 402).

The information providing processing unit 42 searches the provided information DB 43 for a URL (Uniform Resource Locator) indicating the download destination of the electronic information to be purchased based on the purchase application information, and provides the URL and the electronic information. Pass the charge (amount information) to the settlement information processing unit 44 (step 4)
03).

The settlement information processing section 44 generates basic information (purchase information) including account information of the EC store, amount information, a reception number, and a URL for providing electronic information, and the like. With a digital signature of the EC store server 40, and the Web processing unit 41
Is transmitted as a payment confirmation screen (Web page) (step 404).

The user confirms the purchase details on the payment confirmation screen (Web page), and presses a payment agreement button on the payment confirmation screen (Web page) if the contents are correct. As a result, a connection request is issued from the user terminal 20b to the electronic bank server 10 (step 405). Here, the URL indicating the download destination of the electronic information is not displayed on the payment confirmation screen (Web page).

Web processing unit 11 of electronic bank server 10
Requests the user terminal 20b for a password for an electronic certificate for identifying and specifying the user. In response to this request, the browser of the user terminal 20b displays a screen requesting the user for the password for the electronic certificate (step 406).

When the password for the electronic certificate is input from the user terminal 20b, the password is checked by the browser of the user terminal 20b (step 407).
Here, if the password is not correct, connection error processing such as displaying a password re-input screen or displaying connection rejection is performed (step 408).

On the other hand, if the password is correct, communication of an electronic certificate is performed between the user terminal 20b and the electronic bank server 10, and a session between the user terminal 20b and the electronic bank server 10 is established with mutual approval. (Step 4
09).

When a session with the electronic bank server 10 is established, the user terminal 20b transmits basic information (purchase information: E
A digital signature of the EC store server is attached to the account information, amount information, and URL for providing the electronic information of the EC store server from the C store server, and a digital signature of the user is attached to the user's account information and the like. The thing is transmitted to the electronic bank server 10 (step 410).

The settlement processing unit 12 of the electronic bank server 10
Based on the user's account information, the user's balance information is retrieved from the account DB 13 and transmitted to the user terminal 20b as a payment approval screen (Web page) (step 411).

The user confirms the balance on this payment approval screen (Web page) and presses a payment approval button for deciding payment. Thereby, the payment approval information is sent from the user terminal 20b to the electronic bank server 10 (step 41).
2).

The settlement processing unit 12 of the electronic bank server 10
Upon receiving the payment approval information from the user terminal 20b, the user terminal 20b is requested for a withdrawal password for withdrawing from the account on the withdrawal password request screen (Web page) (step 413).

When a withdrawal password is input from the user terminal 20b, the withdrawal password is transmitted to the electronic bank server 10, and the settlement processing unit 12 checks the withdrawal password (step 414). If the payment password is not correct, error processing such as display of a payment password re-input screen and display of approval rejection is performed (step 415).

On the other hand, if the withdrawal password is correct,
The payment processing unit 12 is configured to execute the EC store server 40 based on the account information and the amount information of the EC store server 40 included in the basic information from the user terminal 20b and the user's account information.
Settlement (transfer processing) is performed between the account information of the user and the account information of the user (step 416).

When the transfer process is completed, the settlement processing unit 12
Generates a transfer confirmation screen that specifies a URL indicating the download destination of the electronic information, attaches a digital signature of the EC store server 40 to the purchase information (basic information) of the electronic information, and attaches a digital signature of the user thereto, Furthermore, electronic bank server 1
A POST parameter is transmitted to the user terminal 20b with the digital signature of 0 as the POST parameter, and the user's account information and transfer information of the basic information as the settlement information (step 417).

On the user terminal 20b, the UR of the transfer confirmation screen
When L is pressed, this causes E from the user terminal 20b.
A connection request for downloading electronic information is issued to the C store server 40 (step 418).

Web processing section 41 of EC store server 40
Requests the user terminal 20b for a password for an electronic certificate for identifying and specifying the user and the account information of the user. In response to this request, the browser of the user terminal 20b displays a screen requesting the user for the password for the electronic certificate (step 419).

When the password for the electronic certificate is input from the user terminal 20b, the password is checked by the browser of the user terminal 20b (step 420).
Here, if the password is incorrect, connection error processing such as displaying a password re-input screen or displaying connection rejection is performed (step 421).

On the other hand, when the password is correct, communication of the electronic certificate is performed between the user terminal 20b and the EC store server 40.
The session of the C store server 40 is established, and the POST parameter is transmitted from the user terminal 20b to the EC store server 40 together with the settlement information (step 422).

Settlement information processing section 44 of EC store server 40
Confirms the contents of the digital signature of the electronic bank server 10 based on the POST parameter and the payment information, and acquires the user's account information (step 423).

The settlement information processing section 44 compares the account information of the user obtained based on the POST parameter and the settlement information with the account information of the user included in the electronic certificate transmitted from the user terminal 20b (step 424). ). If they match, a download permission notification is sent from the user terminal 20b to the information provision processing unit 42. Thereby, the information provision processing unit 42 transmits a download request screen to the user terminal 20b via the Web processing unit 41 (Step 4).
25).

The user terminal 20b can download desired electronic information from the EC store server 40 via the download request screen.

On the other hand, if the account information of the user acquired based on the POST parameter and the settlement information does not match the account information of the user included in the electronic certificate transmitted from the user terminal 20b (step 424), The provision processing unit 42 performs an error process such as a display indicating that download is not permitted (step 427).

The electronic payment processing system and the electronic payment processing method of the present invention have been described above.
In the process of confirming the content of the digital certificate,
Account information (branch number, account number, I
D), an electronic certificate included in the digital signature of the user among the digital signatures (user, electronic store, and electronic bank) for the purchase information (transaction number, amount information, download URL); By comparing the user's digital certificate presented when accessing the digital content providing page and confirming the identity of the two, the digital content providing page can be correctly provided only to those who have made a correct sales contract and settled correctly. To access Here, as a specific method of identifying the electronic certificate, an electronic certificate is extracted from the digital signature of the purchase information of the user, and further, the account information of the user is extracted therefrom. It is also preferable to extract the user's account information from the user's electronic certificate presented at the time of access authentication and compare the two.

As described above, according to the electronic payment processing system and the electronic payment processing method of the present invention, the digital signature between the EC store server 40, the user, and the electronic bank server 10, the user and the electronic bank By comparing the account information from the server 10, the payment can be made securely, promptly and reliably on the computer network.

[0055]

As described above, according to the electronic payment processing system and the electronic payment processing method of the present invention, a digital signature is created between the EC store server, the user, and the electronic bank server on the computer network. Payments can now be made securely, quickly and reliably.

[Brief description of the drawings]

FIG. 1 is a diagram showing an example of an electronic payment processing system of the present invention.

FIG. 2 is a diagram showing an example of an electronic bank server of the present invention.

FIG. 3 is a diagram showing an example of an EC store server of the present invention.

FIG. 4 is a flowchart illustrating an example of an electronic payment processing service according to the present invention.

FIG. 5 is a flowchart illustrating an example of an electronic payment processing service according to the present invention.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 10 Electronic bank server 11, 41 Web processing part 12 Payment processing part 13 Account DB 20a, 20b, 20c User terminal 30 Computer network 40 EC store server 42 Information provision processing part 43 Provision information DB 44 Payment information processing part 45 WebDB

Claims (10)

[Claims] 1. An electronic payment processing system for processing payment on a computer network such as the Internet, comprising: a user terminal connected to a computer network such as the Internet for inputting electronic information purchase information and password information; An electronic store server connected to a computer network, receiving purchase information of the electronic information from the user terminal, and providing the electronic information to the user terminal; and the user terminal and the electronic store server connected to the computer network An electronic bank server that performs settlement according to a transaction of the electronic information between the electronic store server, the electronic store server according to the purchase information of the electronic information from the user terminal, the account information of the electronic store server , Amount information, URL for providing the electronic information
(Uniform Resource Locator) and a digital signature of the electronic store server are transmitted to the user terminal, and in response to the payment information from the user terminal,
Permitting downloading of the electronic information from the URL, the user terminal is configured to provide account information of the electronic store server from the electronic store server, the amount information, a URL for providing the electronic information, and the electronic device. Transmitting a digital signature of a store server to the electronic bank server, and further transmitting the password information, the digital signature of the user, and the account information of the user to the electronic bank server; The account information of the electronic store server and the user based on the account information of the electronic store server, the amount information, the digital signature of the electronic store server, the password information, the digital signature of the user, and the account information of the user. Settlement between the account information of the user and providing the settlement information and the electronic information to the user terminal Notifying the URL of the order, electronic payment processing system, characterized in that. 2. The electronic settlement processing system according to claim 1, wherein the electronic store server provides a purchase information input screen of the electronic information to the user terminal by a Web page. 3. The electronic settlement processing system according to claim 1, wherein the URL is displayed so as to be recognizable on the user terminal side after completion of settlement in the electronic bank server. 4. The electronic payment processing system according to claim 1, wherein the password information includes a password for confirming payment at the electronic bank. 5. The electronic payment according to claim 1, wherein the payment information includes a digital signature of the electronic store server, a digital signature of the user, and a digital signature of an electronic bank server. Processing system. 6. An electronic payment processing method for processing payment on a computer network such as the Internet, comprising: (A) providing an electronic information purchase information input screen from an electronic store server to a user terminal; U for providing the account information, the amount information, and the electronic information of the electronic store server according to the purchase information of the electronic information from the terminal.
(C) transmitting the RL and the digital signature of the electronic store server from the electronic store server to the user terminal, and (C) providing the account information, the amount information, and the electronic information of the electronic store server from the electronic store server. Transmitting a URL and a digital signature of the electronic store server from the user terminal to the electronic bank server;
The digital signature of the user and the account information of the user are transmitted from the user terminal to the electronic bank server. (D) The electronic bank server sends the account information of the electronic store server from the user terminal, the amount information, Based on the digital signature of the electronic store server, the password information, the digital signature of the user, and the account information of the user,
Making a payment between the account information of the electronic store server and the account information of the user, and (E) notifying the user terminal of the URL for providing the payment information and the electronic information to the user terminal, (F) transmitting the payment information from the user terminal to the electronic store server; and (F) responding to the payment information from the user terminal, the electronic store server sends the user information to the user terminal from the URL. An electronic payment processing method, which permits downloading of electronic information. 7. The electronic settlement processing method according to claim 5, wherein the step (A) provides the purchase information input screen of the electronic information to the user terminal through a Web page. 8. The electronic settlement processing method according to claim 6, wherein in the step (E), the URL is notified so that the URL is displayed so as to be recognizable on the user terminal side. 9. The step (C) includes: (C1) account information of the electronic store server from the electronic store server, the amount information, a URL for providing the electronic information, and a digital value of the electronic store server. Transmitting, along with the signature, the user's digital signature and the user's account information from the user terminal to the electronic bank server; (C
2) transmitting balance information from the electronic bank server to the user terminal based on the user's account information; and (C3) dispensing withdrawal password information for accepting a payment process in accordance with the balance information. Transmitting from the user terminal to the electronic bank server, the step (D) being performed by the electronic bank server, wherein the account information of the electronic store server from the user terminal, the amount information, the electronic store Based on the server's digital signature, the user's digital signature, the user's account information, and the withdrawal password information, performing settlement between the electronic store server's account information and the user's account information. 9. The electronic payment processing method according to claim 6, wherein 10. The method according to claim 1, wherein the step (E) includes: providing the digital signature of the electronic store server, the digital signature of the user, and the digital signature of the electronic bank server from the electronic bank server to the user terminal; 10. The electronic settlement processing method according to claim 6, further comprising notifying the URL for providing the electronic information.