JP2011150581A - Settlement system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a settlement system for a program broadcasted by digital broadcast. <P>SOLUTION: The settlement system includes a broadcast receiving terminal, a member store server and a settlement server. The broadcast receiving terminal includes: a purchase instruction processing part capable of performing secure communication with the member store server and the settlement server and sending purchase instruction information for a commodity selected by a viewer to the member store server; a settlement information processing part for receiving a control instruction for starting application for encrypting settlement information from the member store server and sending the received control instruction to an IC chip to allow the IC chip to generate encrypted settlement information; a settlement server processing part for allowing the settlement server to perform authentication processing of credit card settlement by sending the encrypted settlement information to the settlement server and receiving the authenticated result from the settlement server; and purchase completion processing part for sending a normal authentication result to the member store server and receiving commodity purchase completion information. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

The present invention relates to a payment system. More specifically, the present invention relates to a payment system when purchasing goods, services, etc. in a program broadcasted by digital broadcasting.

  In television broadcasting and radio broadcasting, there are programs that introduce and sell products and services (hereinafter collectively referred to as “products”) to their viewers (listeners). When these viewers (listeners) intend to purchase products introduced in the program, they can purchase the products by calling a predetermined telephone number. At this time, a credit card is generally adopted as a settlement method, and settlement is performed by transmitting a credit card number.

  However, in the case of such a conventional method, since it is necessary to convey the credit card number to the telephone operator, the risk that the credit card number is known to the operator cannot be denied. In addition to the program being viewed, a different work such as making a telephone call is required.

  Therefore, Patent Document 1 below discloses an invention in which an auxiliary device capable of reading information on a magnetic card can perform settlement by communicating with a television receiver.

JP 2002-109441 A

  By using the auxiliary device of Patent Document 1, payment can be made without going through the operator, that is, without knowing the credit card number or the like to the operator, but security is not taken into consideration, so the auxiliary device and the television receiver. There is no denying the possibility that communications between the two will be intercepted by a malicious third party.

  Also, even if you want to purchase a product of a program that is broadcast on a television receiver, you can only purchase it when you are broadcasting it, for example if you have recorded the program I can't.

  Furthermore, since the auxiliary device and the television receiver are associated with each other at a 1: 1 ratio, if the auxiliary device breaks down, payment cannot be made using another device, for example, for repair. You have to call a worker for it, or send it to the manufacturer to repair the auxiliary equipment.

  In view of the above problems, the present invention has invented a payment system that takes security into consideration. Furthermore, in the present invention, it is possible to cope with a case where recording has been performed, and a remote control device equipped with an IC chip reading function that performs communication with a broadcast receiving terminal such as a television receiver or a radio receiver is out of order. Even in such a case, the present inventors have invented a payment system that can make a payment by making it possible to use different remote control devices.

  A first invention is a payment system having a member store server, a payment server, and a broadcast receiving terminal, wherein the broadcast receiving terminal is capable of secure communication with the member store server and the payment server. The receiving terminal uses the purchase instruction processing unit that sends the purchase instruction information about the product selected by the viewer among the product information included in the program information received by the digital broadcast wave to the member store server, and is used for the credit card settlement. A control instruction for starting an application for encrypting payment information is received from the member store server, and the control instruction is sent to the IC chip, whereby the payment information of the purchased product is encrypted and encrypted payment information. A payment information processing unit for generating the IC chip, and sending the encrypted payment information generated by the IC chip to the payment server. A payment server processing unit that performs authentication processing of the credit card payment and receives the authentication result from the payment server; and when a normal authentication result is received from the payment server, sends the authentication result to the member store server A purchase completion processing unit that receives purchase completion information of the product from the member store server, wherein the member store server receives the purchase instruction information received from the broadcast receiving terminal and the authentication result in the payment server. The payment server performs a credit card payment authentication process based on the payment information obtained by decrypting the encrypted payment information generated by the IC chip.

  By configuring as in the present invention, secure communication can be performed for settlement processing for purchase of a product in a program using a digital broadcast wave, thus improving security. Moreover, since it is not necessary to tell the credit card number to the operator, the credit card settlement can be performed safely.

  In the above-described invention, the program information further includes a time stamp indicating a broadcast date, and the purchase instruction processing unit further sends the purchase instruction information including the time stamp to the member store server, The member store server can also be configured as a payment system that verifies the advertising effect on the program by storing purchase instruction information including the time stamp.

  By including the time stamp in this way and sending it to the member store server, the member store server can verify the advertising effect based on the time stamp. That is, since it is possible to confirm when the product is purchased by the broadcasted program, the member store can devise a sales strategy as to what product should be sold on the program.

  In the above invention, the program information further includes advertisement information, a time stamp indicating the expiration date of the advertisement, and a time stamp indicating the broadcast date and time, and the broadcast receiving terminal further browses the advertisement information. Upon receipt of the request, the time stamp indicating the expiration date of the advertisement is confirmed, and if within the expiration date, the advertisement receiving time confirmation processing unit for displaying the advertisement information on the broadcast receiving terminal is provided, and the purchase The instruction processing unit can also be configured as a settlement system that sends the purchase instruction information including a time stamp indicating the broadcast date and time to the member store server.

  Advertising information such as leaflets may be sent as program information. However, advertisements such as flyers are generally time-limited. Therefore, if the expiration date of the advertisement has passed or the program information is recorded and not viewed in real time, it becomes impossible to purchase a product or the like from the advertisement. Therefore, by confirming the expiration date of the advertisement as in the present invention and further including a time stamp indicating the broadcast date and time as purchase instruction information, the above-mentioned problem relating to the time limit can be solved, and the advertising effect of the member store can also be verified. It becomes possible. For example, even if there are few purchases in real time, it is possible to determine that there is a sufficient advertising effect if there is a purchase by recording.

  In the above-described invention, the broadcast receiving terminal is further connected to a recording device that records the program information. In the recording device, as the program information in the digital broadcast wave, at least content information of the program itself, and the content At least information store expiration date, address information of a member store server that sends a viewing key for reproducing the content information, and program identification information for identifying the program of the content information, and the broadcast receiving terminal further includes: And receiving a playback request for the content information stored in the recording device, and a viewing time limit confirmation processing unit for confirming a viewing time limit corresponding to the content information stored in the recording device. Further, if the viewing time limit of the content information for which the reproduction request has been received has elapsed, the content information A request for obtaining a viewing key corresponding to the program identification information is sent to the member store server as purchase instruction information based on the address information, and the broadcast receiving terminal uses the viewing key received from the member store server, It can also be configured like a payment system that reproduces the content information stored in the recording device.

  Programs broadcast on digital broadcast waves can be viewed with the same image quality at any time because the data itself does not deteriorate. However, if the video is recorded for a long time, the need to rent and view the program once broadcasted is reduced, which is economically undesirable. Therefore, it is conceivable to set a viewing time limit on the content information of the program. However, in that case, it becomes impossible to reproduce the content information of the program whose viewing deadline has passed. Alternatively, it is necessary to download program content information. In either case, content information needs to be acquired (downloaded), and a load is generated on the network. Therefore, by adopting a configuration in which the viewing key is sent as in the present invention, both the above-described economic problems and network load problems can be solved.

  In the above-mentioned invention, the broadcast receiving terminal further stores at least program guide information within a predetermined period in the past, program identification information of each program in the program information, and address information of a member store server that sends program content information. The purchase instruction processing unit further sends a request for viewing content information of the program selected from the program guide information to the member store server based on the address information as purchase instruction information together with the program identification information, The broadcast receiving terminal can also be configured as a payment system that reproduces the content information of the selected program by receiving the content information of the program from the member store server.

  With the configuration of the present invention, content information that could not be recorded can be acquired from the member store server and reproduced on the broadcast receiving terminal.

  A second invention is a broadcast receiving terminal in a payment system having a broadcast receiving terminal capable of receiving a digital broadcast wave, a merchant server that sells merchandise, and a payment server that performs payment processing of a credit card. The receiving terminal is capable of secure communication between the member store server and the settlement server, and the purchase instruction information for the product selected by the viewer among the product information included in the program information received by the digital broadcast wave A purchase instruction processing unit for sending the information to the member store server, and a control instruction for starting an application for encrypting payment information used for credit card payment from the member store server, and sending the control instruction to the IC chip. A payment information processing unit that encrypts the payment information of the purchased product and causes the IC chip to generate encrypted payment information; A payment server processing unit that performs authentication processing of credit card payment by sending encrypted payment information generated by the IC chip to the payment server, and receives a result of the authentication from the payment server; When receiving the authentication result, the broadcast receiving terminal in the settlement system includes a purchase completion processing unit that receives the purchase completion information of the product from the member store server by sending the authentication result to the member store server. is there.

  Even with the configuration of the present invention, it is possible to perform secure communication for payment processing for purchase of products in a program using a digital broadcast wave, so that a broadcast receiving terminal with improved security can be realized. Moreover, since it is not necessary to tell the credit card number to the operator, the credit card settlement can be performed safely.

  According to a third aspect of the present invention, there is provided a broadcast receiving terminal in a payment system having a broadcast receiving terminal capable of receiving digital broadcast waves, a merchant server that sells merchandise, and a payment server that performs payment processing for a credit card. The receiving terminal is capable of secure communication between the member store server and the settlement server, and the purchase instruction information for the product selected by the viewer among the product information included in the program information received by the digital broadcast wave To the member store server and a control instruction for starting an application for encrypting payment information used for credit card payment is received from the member store server, and is sent to the remote control device of the broadcast receiving terminal. By sending the control instruction, the IC chip reader provided in the remote control device passes the control instruction to the IC chip. In the IC chip, a payment information processing unit that encrypts payment information of the purchased product to generate encrypted payment information, and receives the encrypted payment information generated by the IC chip from the IC chip reader, When the encrypted payment information is sent to the payment server to perform the credit card payment authentication process, the payment server processing unit that receives the authentication result from the payment server, and the normal authentication result from the payment server Includes a purchase completion processing unit that receives the purchase completion information of the product from the member store server by sending the authentication result to the member store server, and includes the broadcast receiving terminal and the remote control device. It is a broadcast receiving terminal in a payment system in which communication between them is secure communication.

  Most broadcast receiving terminals are provided with remote control devices. An IC chip reader may be provided there. Therefore, by configuring as in the present invention, a broadcast receiving terminal with improved security can be realized as in the above-described invention. Moreover, since it is not necessary to tell the credit card number to the operator, the credit card settlement can be performed safely.

  A fourth invention is a broadcast receiving terminal in a payment system having a broadcast receiving terminal capable of receiving digital broadcast waves, a merchant server that sells merchandise, and a payment server that performs payment processing of a credit card, The receiving terminal is capable of secure communication between the member store server and the settlement server, and the purchase instruction information for the product selected by the viewer among the product information included in the program information received by the digital broadcast wave A purchase instruction processing unit for sending a message to the member store server, and a control instruction for starting an application for encrypting payment information used for credit card payment from the member store server, and an IC provided in the broadcast receiving terminal The chip reader passes the control instruction to the IC chip, and the IC chip encrypts the payment information of the purchased product. A payment information processing unit for generating encrypted payment information, and receiving the encrypted payment information generated by the IC chip from the IC chip reader, and sending the encrypted payment information to the payment server by a credit card A payment server processing unit that performs payment authentication processing and receives the authentication result from the payment server; and when a normal authentication result is received from the payment server, sends the authentication result to the member store server. And a purchase completion processing unit that receives purchase completion information of the product from the member store server.

  An IC chip reader may be provided in the broadcast receiving terminal. Therefore, by configuring as in the present invention, a broadcast receiving terminal with improved security can be realized as in the above-described invention. Moreover, since it is not necessary to tell the credit card number to the operator, the credit card settlement can be performed safely.

  A fifth invention is a broadcast receiving terminal in a payment system having a broadcast receiving terminal capable of receiving digital broadcast waves, a merchant server that sells merchandise, and a payment server that performs payment processing of a credit card. The receiving terminal is capable of secure communication between the member store server and the settlement server, and the purchase instruction information for the product selected by the viewer among the product information included in the program information received by the digital broadcast wave And a purchase instruction processing unit for sending a command to the member store server, and a control instruction for starting an application for encrypting payment information used for credit card payment from the member store server. In the IC chip, a payment information processing unit that encrypts payment information of the purchased product to generate encrypted payment information, and the I A payment server processing unit that performs authentication processing of credit card payment by sending the encrypted payment information generated by the chip to the payment server, and receives the authentication result from the payment server; and a normal authentication result from the payment server Is received at the member store server, and the purchase completion processing unit for receiving the purchase completion information of the product from the member store server by sending the authentication result to the member store server.

  In some cases, the IC card is not provided in the IC card, but the IC chip is provided in the broadcast receiving terminal itself. Therefore, by configuring as in the present invention, a broadcast receiving terminal with improved security can be realized as in the above-described invention. Moreover, since it is not necessary to tell the credit card number to the operator, the credit card settlement can be performed safely.

  In each of the above-described inventions, the program information received by the digital broadcast wave includes a time stamp indicating date and time information, and the settlement information processing unit of the broadcast receiving terminal sends the time stamp to the IC chip. The IC chip may be configured as a broadcast receiving terminal in a payment system that generates encrypted payment information using the time stamp as a one-time password.

  In order to perform secure communication, it is necessary to generate encrypted payment information obtained by encrypting the payment information and communicate it. There are various encryption methods, but it is necessary to store the key in advance regardless of whether the common key method or the public key method is used. Therefore, by using a time stamp as in the present invention, processing can be realized without exchanging keys.

  In each of the above-described inventions, the broadcast receiving terminal and the remote control device each store self-certificate information including device identification information and an electronic signature, and the broadcast receiving terminal is registered so that the remote control device can be attached. Further comprising a device, and after the remote control device is mounted on the registration device, the self-certificate information is mutually verified between the remote control device and the broadcast receiving terminal, At least device identification information or self-certificate information of the remote operation device is registered in the broadcast receiving terminal, and the broadcast reception terminal further uses the device identification information of the remote operation device and the device identification information of the broadcast reception terminal. Generating a common key for encrypting communication between the broadcast receiving terminal and the remote control device, and sending the generated common key to the remote control device. The wireless communication between the terminal and the remote control device, the common key performed securely by using a can also be configured as a broadcast receiving terminal in the payments system.

  When the broadcast receiving terminal can be operated using the remote operation device, the broadcast reception terminal and the remote operation device need to be always associated with each other. A correspondence is particularly necessary when communicating information related to settlement rather than operation of the broadcast receiving terminal itself. However, in the case where the association is performed, if the remote operation device breaks down, payment processing via the remote operation device cannot be performed. Therefore, by configuring as in the present invention, any remote control device can be used, and convenience is improved.

  In each of the above-described inventions, a broadcast reception terminal in a settlement system in which a use count or a use time limit is added to the common key, and the common key is disabled when the use count or use deadline is not satisfied. It can also be configured as follows.

  The common key used for communication between the remote control device and the broadcast receiving terminal may be used for a long time, but in that case, a security problem occurs. In some cases, for example, an unintended settlement by a child is performed. Therefore, it is preferable to limit the use of the common key. Therefore, by configuring as in the present invention, it is possible to place a usage restriction on the common key used for communication between the remote control device and the broadcast receiving terminal.

  In each of the above-described inventions, when the broadcast receiving terminal detects that the remote control device is attached to the registration device, the broadcast reception terminal acquires the self certificate obtained by acquiring the self certificate information of the remote control device. By comparing the information or the device identification information with the self-certificate information of the remote operation device registered in the broadcast receiving terminal or the device identification information, it is determined whether or not it is a registered remote operation device. If it is determined that the remote operation device is a remote operation device, a new common key may be generated and sent to the remote operation device.

  When the use restriction is provided for the common key, the common key can be updated by the configuration of the present invention.

  By using the payment system of the present invention, the IC card securely transmits and receives information related to payment with a member store server and a payment server via a remote control device equipped with an IC chip reading function and a broadcast receiving terminal. Therefore, even if an unauthorized communication interception is performed by a third party, the risk of information leakage can be reduced.

  Further, in the conventional payment system, the product cannot be purchased unless the program being broadcast is viewed, but even if the program is recorded by using the payment system of the present invention, the product can be purchased. Can be purchased, and the member store that sells the product can also manage when the program is broadcast. Therefore, since it is possible to specify when and where the program was broadcasted, it can be used as a reference when broadcasting a product sales program.

Furthermore, when an auxiliary device such as that disclosed in Patent Document 1 is used, the remote control device having an IC card reading function is associated with the television receiver in a 1: 1 ratio. In this case, it becomes impossible to make a settlement using the remote control device. However, in the settlement system of the present invention, the correspondence between the remote control device having the IC chip reading function and the broadcast receiving terminal such as a television receiver can be changed, so that payment is performed using different remote control devices. It becomes possible.

It is a conceptual diagram which shows typically the whole concept of the payment system of this invention. It is a conceptual diagram which shows typically the concept of the processing function of the payment system of this invention. It is a conceptual diagram which shows typically an example of the hardware constitutions of a broadcast receiving terminal and a server. It is a flowchart which shows typically the processing process by the payment system of this invention. It is a figure which shows an example of the display state of the television receiver at the time of selecting and purchasing goods. It is a figure which shows an example of the display state of the television receiver at the time of selecting a payment means. It is a figure which shows an example of the display state of the television receiver at the time of prompting to hold an IC card. It is a figure which shows an example of the display state of the television receiver at the time of confirming paying. It is a figure which shows an example of the display state of the television receiver at the time of showing that the purchase was completed. It is a figure which shows an example of the display state of the normal television receiver after completion of purchase. It is a conceptual diagram which shows typically the whole concept of the payment system of Example 2. FIG. It is a conceptual diagram which shows typically the concept of the processing function of the broadcast receiving terminal in the payment system of Example 2. It is a conceptual diagram which shows typically the whole concept of the payment system of Example 3. FIG. It is a conceptual diagram which shows typically the concept of the processing function of the broadcast receiving terminal in the payment system of Example 3. It is a conceptual diagram which shows typically the concept of the processing function of the broadcast receiving terminal in the payment system of Example 4. It is a conceptual diagram which shows typically the concept of the process of the viewing key in the payment system of Example 5. FIG. It is a conceptual diagram which shows typically the concept of the processing function of the broadcast receiving terminal in the payment system of Example 5. It is a conceptual diagram which shows typically the concept of the viewing-and-listening process of the program content in the payment system of Example 6. FIG. It is a conceptual diagram which shows typically the concept of the whole process with the broadcast receiving terminal and remote control apparatus in the payment system of Example 7. FIG. It is a sequence diagram of a process in the case of registering a remote control apparatus in the television receiver in the payment system of Example 7. 14 is a flowchart schematically showing a common key generation process in the payment system of the seventh embodiment.

  An overall conceptual diagram of the settlement system 1 of the present invention is shown in FIG. In the settlement system 1 of the present invention, program information broadcast by digital broadcast waves such as television broadcast and radio broadcast is received by a broadcast receiving terminal 2 such as a television receiver or radio receiver, and introduced in the program. Buy the product you have. The broadcast receiving terminal 2 can transmit and receive information to and from the member store server 5 and the settlement server 6 that sell the product via a communication network (network) such as the Internet. This communication is performed by encrypted secure communication such as SSL. Therefore, even if there is no illustration and explanation, the broadcast receiving terminal 2, the member store server 5, and the settlement server 6 are each provided with an encryption communication means (not shown) for performing communication by SSL or the like. Communication.

  The program information broadcast on the digital broadcast wave includes the content information of the program itself, product information (product name, price, etc.) to be described later, program identification information for identifying the program, addresses of the member store server 5 and the settlement server 6 It is preferable that arbitrary accompanying information such as information, a time stamp indicating a broadcast date and time, a payment means, and the like is included. That is, the entire data broadcast on the digital broadcast wave is program information, and the content information indicates the data of the program itself in the program information, for example, the news program itself. Therefore, when the broadcast receiving terminal 2 is a television receiver, content information (the program itself) is displayed on the screen as shown in FIG. 10 on a normal screen. The accompanying information is information attached to the content information, and includes information other than the content information in the program information. For example, it corresponds to information used in data broadcasting. Moreover, even if it is not displayed on the screen itself, information used for communication via the network is also included.

  The broadcast receiving terminal 2 communicates with an IC chip reader 3 having an IC chip reading function capable of reading information stored in an IC chip 41 of an IC card 4 for settlement such as a credit card or a debit card, by wire or wirelessly. Is possible. The IC chip reader 3 may be a television remote control device (remote controller) when the broadcast receiving terminal 2 is a television receiver. At this time, as the wireless communication between the television receiver and the remote control device, there are short-range wireless communication such as infrared communication (IrDA, etc.), Bluetooth (wireless communication using a 2.4 GHz band radio wave), etc. It is not limited to them. Further, the IC chip reader 3 may be configured integrally with the broadcast receiving terminal 2 or may be separated. Further, each communication device that performs communication between the remote control device and the broadcast receiving terminal 2 performs an operation of the broadcast receiving terminal 2 itself (for example, an operation of selecting a channel of a television receiver, selecting a volume, or the like). The device may be different from the communication device that performs processing of information (for example, encrypted payment information described later) related to the payment system 1 of the present invention, or may be the same device.

  Further, the broadcast receiving terminal 2 may be any device other than a television receiver and a radio receiver as long as it is a device capable of receiving a digital broadcast wave. It may be a mobile phone, PHS, PDA, etc.), a game machine, or the like.

  The member store server 5 is a server used by a company that sells merchandise, and upon receiving purchase instruction information from the broadcast receiving terminal 2 via the network, activates corresponding application software for settlement. That is, a command (control instruction) for starting the settlement application software stored in the IC chip 41 is sent. Further, when the authentication result in the settlement server 6 is received from the broadcast receiving terminal 2 via the network, the product sales completion process is performed. Details of the processing will be described later. As described later, since the purchase instruction information includes time stamp information such as the broadcast date and time, the member store server 5 can record when the product is purchased for the broadcasted program. . Therefore, by performing statistical processing based on the recording of the time stamp, it is possible to verify advertisement efficiency and the like.

  The payment server 6 is a server used by a company that provides a payment method using an IC card 4 such as a credit card company, and is payment information encrypted from the broadcast receiving terminal 2 via the network (encrypted payment information). Is received, it is authenticated whether the payment is possible, and the authentication result is returned to the broadcast receiving terminal 2 via the network. Details of the process will be described later.

  The IC card 4 is an IC card 4 for settlement such as a credit card or a debit card, and the IC chip 41 of the IC card 4 stores application software for settlement prescribed by the credit card company. . The IC chip 41 preferably stores identification information such as a credit card number, expiration date, and name. The settlement application software is activated based on the application activation command received from the member store server 5 via the broadcast receiving terminal 2 and the IC chip reader 3, and the identification information stored in the IC chip 41 and Then, information (payment information) used for credit card payment such as payment amount information is encrypted to generate encrypted payment information. This encrypted settlement information is read by the IC chip reader 3.

  There are various encryption methods used in the payment application software, and any method can be used. For example, when a one-time password is used, the above-described IC chip 41 is used by using date / time information at a predetermined timing as a key, such as date / time information when the application software is started, time stamp (broadcast date / time information) included in the digital broadcast wave. The encrypted payment information is generated by encrypting the payment information such as the identification information and the payment amount information stored in the information on the basis of predetermined encryption software in the application software for payment.

  Thus, by generating the encrypted payment information by encrypting the payment information using the date and time information as a key, it is sent from the broadcast receiving terminal 2 to the payment server 6 via the IC chip reader 3. Since the processing time from the IC card 4 to the settlement server 6 is usually short, there is almost no difference in the date and time information, and the key exchange is also performed when the settlement server 6 decrypts the encrypted settlement information. It is possible to perform decoding without performing it. However, a delay may occur depending on the communication status. Therefore, even if it is not decrypted with the same date and time information as the date and time information, a predetermined width, for example, within 1 minute before and after the date and time when processing is performed by the settlement server 6, within 5 minutes, within 60 minutes, etc. The encrypted payment information may be decrypted by sequentially decrypting with the date and time information.

  FIG. 2 schematically shows the concept of processing functions of the broadcast receiving terminal 2 in the payment system 1. The broadcast receiving terminal 2 includes a purchase instruction processing unit 20, a payment information processing unit 21, a payment server processing unit 22, and a purchase completion processing unit 23.

  The purchase instruction processing unit 20 is a means for sending a purchase instruction for a product whose selection has been received by the broadcast receiving terminal 2 to the member store server 5 via the network. Purchase instructions include merchandise information that has been selected, merchandise information such as quantity, payment means (for example, a selected credit card company), a time stamp indicating the date and time when the program was broadcast, program identification information, and the like. In addition, the member store server 5 that has received the purchase instruction from the broadcast receiving terminal 2 stores the purchase instruction information in association with the identification information for identifying the purchase instruction, and the settlement application of the IC chip 41 in the broadcast receiving terminal 2. A software start command will be sent. At this time, purchase instruction identification information may be further sent.

  The settlement information processing unit 21 sends a command for starting the settlement application software received from the member store server 5 via the network to the IC chip reader 3 and also sends information on the settlement amount (and further sends purchase instruction identification information). May be).

  The settlement server processing unit 22 sends the encrypted settlement information received from the IC chip reader 3 to the settlement server 6 via the network and receives the authentication result. Here, the authentication result includes information such as an inquiry result of a credit (authorization) and an indication that payment has been completed. However, only an inquiry result of credit may be information indicating that payment has been completed.

  When the payment server processing unit 22 receives a normal authentication result from the payment server 6, the purchase completion processing unit 23 sends the authentication result to the member store server 5 via the network. At this time, the purchase instruction identification information may be passed to the member store server 5 together with the authentication result. This is because the member store server 5 can identify which purchase instruction the authentication result corresponds to. When the process at the member store server 5 is completed, the completion information is received.

  Each means in the present invention is only logically distinguished in function, and may be physically or practically the same area. In addition, the functions of each server may be realized by one unit or may be realized by a plurality of units.

  FIG. 3A schematically shows an example of a hardware configuration for realizing the above processing functions in the broadcast receiving terminal 2, and FIG. 3B schematically shows an example of a hardware configuration of a server for realizing the member store server 5 and the settlement server 6. . Note that the hardware configuration originally provided in the broadcast receiving terminal 2, for example, in the case of a television receiver, the original hardware configuration of the television receiver is not shown.

  The broadcast receiving terminal 2 includes an arithmetic device 200 such as a CPU that executes arithmetic processing of a program, a storage device 201 such as a RAM and a hard disk that stores information, processing results of the arithmetic device 200 and information stored in the storage device 201. An IC chip communication device 202 that communicates with the IC chip reader 3 by wire or wirelessly, and a server that transmits and receives processing results of the arithmetic device 200 and information stored in the storage device 201 via a network such as the Internet. And at least a communication device 204. Moreover, you may provide the input device 203 which can select and input the information etc. which are displayed with the broadcast receiving terminal 2. FIG. Each device in the broadcast receiving terminal 2 may be a device different from the hardware configuration provided for the broadcast receiving terminal 2 to perform its original function, or the same device may be shared and used.

  The server also includes an arithmetic device 100 such as a CPU for executing arithmetic processing of a program, a storage device 101 such as a RAM and a hard disk for storing information, processing results of the arithmetic device 100 and information stored in the storage device 101 on the Internet. And at least a communication device 102 that transmits and receives via a network. The server or the like may further include a display device 104 such as a display and an input device 103 such as a keyboard, a mouse, or a numeric keypad.

  Each function (each unit) realized on the broadcast receiving terminal 2 and the server is executed when a unit (program, module, etc.) for executing the process is read into the arithmetic devices 100 and 200. When each function uses information stored in the storage devices 101 and 201 in the processing, the corresponding information is read from the storage devices 101 and 201, and the read information is appropriately processed in the arithmetic devices 100 and 200. Use.

  Of course, each process realized on the broadcast receiving terminal 2 and each server is performed by using the above hardware even if not described. For example, when transmitting / receiving some information between the broadcast receiving terminal 2 and the IC chip reader 3, the information is transmitted / received between the IC chip communication device 202 and the IC chip reader 3. Further, in communication between the broadcast receiving terminal 2 and each server, processing related to communication is performed between the server communication device 204 of the broadcast receiving terminal 2 and the communication device 102 of each server. Encrypted secure communication is performed using encrypted communication means (not shown) such as SSL.

  Next, in the settlement system 1 of the present invention, a processing process will be described in the case where the broadcast receiving terminal 2 is a television receiver and the IC chip reader 3 is provided in a remote control device of the television receiver.

  A program by a digital broadcast wave is broadcast from a predetermined broadcasting station, and the program information of the digital broadcast wave includes content information of the program itself, program identification information, product information indicating a product name and price, the product Address information indicating the access destination of the member store server 5 accessed by the television receiver, a time stamp indicating the broadcast date and time, information on payment means that can be used for payment (credit card company name, payment server 6 Associated information such as address information indicating the access destination).

  When these digital broadcast wave program information is received by the television receiver, the television receiver displays the content information of the program itself on its screen as usual, as well as product information, address information, time stamp, payment method information, etc. Is temporarily stored in the storage device 201 (S100). An example of the display state of the television receiver in this state is shown in FIG.

  The viewer selects to purchase the product introduced in the program by performing a predetermined operation on the television receiver. For example, when the viewer performs a predetermined operation on the remote control device, the product and quantity to be purchased are selected, and the operated information is sent from the remote control device to the television receiver by radio (for example, infrared rays) each time. By receiving it with the television receiver, the selection becomes possible (S110).

  When the purchase is selected, the television receiver calculates the settlement amount by multiplying the product and the number based on the information stored in the storage device 201, and stores it in the storage device 201. The settlement amount is preferably calculated by taking into account various expenses such as consumption tax and freight charges.

  When the purchase is selected, the television receiver displays a screen on which payment means can be selected as shown in FIG. 6 based on the information stored in the storage device 201, and the payment means is selected. . As a result, the viewer selects a payment means, for example, cash on delivery, bank transfer, credit card settlement, etc., by the remote control device.

  When the payment method is selected, the purchase instruction processing unit 20 of the television receiver, based on the address information of the member store server 5 stored in the storage device 201, shows information indicating the type of payment method (in the case of credit card payment). (Information identifying the credit card company), time stamp, program identification information, product information such as the product name and quantity of the purchased product, etc., information on the purchase instruction is sent to the member store server 5 via the network. Send (S120).

  Upon receiving the purchase instruction information, the member store server 5 assigns purchase instruction identification information corresponding to the purchase instruction, and stores the purchase instruction identification information in association with the purchase instruction identification information. When the payment means indicates a credit card payment in the purchase instruction, the member store server 5 sends the payment application software stored in the IC chip 41 of the IC card 4 to the television receiver via the network. Send a command to start.

  In the above description, the settlement amount is calculated by the television receiver. However, the merchandise server 5 calculates the settlement amount by sending the merchandise information to the member store server 5, and the command is used together with the command or at a predetermined timing. Thus, the calculated settlement amount may be received by a television receiver.

  The payment information processing unit 21 of the television receiver that has received the command (S130) sends the received command and information on the payment amount to the remote control device. At this time, as shown in FIG. 7, the screen of the television receiver preferably displays a display prompting the IC chip reader 3 of the remote control device to read the IC card 4.

  The remote control device that has received the command and the payment amount information from the television receiver sends the command and the payment amount information to the IC card 4 from the IC chip reader 3 provided in the remote control device. . Since the IC card 4 is held over the IC chip reader 3, the command and the payment amount are received from the IC chip reader 3, and the application software for payment stored in the IC chip 41 is activated based on the command. (S140).

  After the payment application software is activated, the payment amount information received, the payment information such as the credit card number, expiration date, and name stored in the IC chip 41 is encrypted based on the payment application software. Generate payment information. As described above, encryption software using a one-time password can be used, and date information such as a time stamp indicating a broadcast date and time can be used as a key as the one-time password. In addition to the one-time password as the encryption software, any encryption software may be used as long as the encrypted payment information generated by the IC chip 41 can be decrypted by the payment server 6. For example, a common key cryptosystem that performs encryption / decryption by storing a common key in the IC chip 41 and the settlement server 6, and encryption / decryption by storing a public key in the IC chip 41 and a secret key in the settlement server 6. An encryption algorithm such as a public key cryptosystem that performs decryption may be used. Here, a case where a one-time password using date / time information as a key is used will be described. Also, as date / time information that is keyed with a one-time password, for example, in addition to date / time information at the time of encryption, a time stamp in digital broadcast wave program information may be used as date / time information, and date / time information at any stage is used. May be.

  As described above, when the encrypted payment information is generated by the IC chip 41, the IC chip reader 3 provided in the remote control device reads it (S150). When the IC chip reader 3 reads the encrypted payment information from the IC chip 41 of the IC card 4, the remote control device sends the encrypted payment information to the television receiver.

  The payment server processing unit 22 of the television receiver that has received the encrypted payment information sends the encrypted payment information to the payment server 6 via the network based on the address information of the payment server 6 stored in the storage device 201 (S160). ). At this time, as shown in FIG. 8, a screen for confirming that payment is to be performed is displayed, and the encrypted payment information is sent to the payment server 6 when a selection for accepting payment is accepted. May be. Although the case where the address information of the settlement server 6 is included in the accompanying information in the program information of the digital broadcast wave has been described above, it may be received from the member store server 5 and stored in the storage device 201.

  Upon receiving the encrypted payment information, the payment server 6 decrypts the encrypted payment information by a predetermined method. At the time of decryption, for example, since it is decrypted with a one-time password, the decryption is performed using date and time information, a time stamp (a time stamp may be separately received from a television receiver, if a time stamp is used) To do. In addition, as described above, the date and time may be different between the IC card 4 and the settlement server 6 due to a network delay or the like, so that the decoding process may be performed with a predetermined width. If encryption is performed using common-key or public-key encryption software, each may be decrypted by a predetermined method.

  As described above, the settlement server 6 generates the settlement information by decrypting the encrypted settlement information with the settlement server 6. Then, the settlement server 6 performs an authentication process necessary for a predetermined credit card settlement based on the settlement information (S160). For example, based on information such as credit card number, expiry date, name, etc. in payment information and payment amount information, an authorization to check whether the viewer's credit line is sufficient or credit card is valid If there is no problem in the authorization process, the credit card settlement process of the settlement amount is performed as it is. This credit card settlement process may be a process used in ordinary credit card settlement.

  After the authentication process is completed as described above, the settlement server 6 sends the result of the authentication process to the television receiver via the network.

  Upon receiving the authentication result from the settlement server 6 via the network, the purchase completion processing unit 23 sends the member store server 5 to the merchant server 5 via the network based on the address information of the member store server 5 stored in the storage device 201. The authentication result and purchase instruction identification information are sent (S170).

  The member store server 5 that has received the authentication result and the purchase instruction identification information corresponds to the purchase instruction identification information if the authentication result is a normal authentication result (information indicating that the credit card payment has been successfully completed). For the purchase instruction, information indicating that the payment is normally completed with a credit card is stored. Then, completion information indicating normal completion is sent to the television receiver via the network. The television receiver that has received the completion information displays a screen indicating that the purchase is completed as shown in FIG. 9 (S170).

  On the other hand, the member store server 5 that has received the authentication result and the purchase instruction identification information receives the credit card settlement for some reason such as an authentication result that the authentication result is not normal (for example, the credit frame is insufficient or the credit card cannot be used). Information indicating that the payment could not be made with a credit card for the purchase instruction corresponding to the purchase instruction identification information, and stored in the television receiver via the network. , Send information (error information) indicating that it did not complete normally. The television receiver that has received the error information may display a screen indicating that the credit card could not be settled due to an error, for example, and may further display a screen for selecting a payment method as shown in FIG. At this time, since the credit card payment could not be made, the credit card payment options may be deleted, and only other payment methods such as bank transfer and cash on delivery options may be displayed.

  As described above, when a series of credit card settlement processes is completed, a normal television receiver screen is displayed as shown in FIG. 10, for example.

  When a product is purchased, it is necessary to input the name of the purchaser (viewer) of the product, the address of the delivery destination, etc., which are input at any stage and sent to the member store server 5 by the television receiver. What is necessary is just to memorize | store. For example, an input may be accepted before sending a purchase instruction and sent together with the purchase instruction, or after receiving the purchase instruction, the television receiver receives information such as name and purchase instruction from the member store server 5. The identification information may be sent and stored in association with the purchase instruction. Further, after receiving the authentication result from the settlement server 6 or after receiving the completion information, the input may be received and sent together with the purchase instruction identification information to the member store server 5 to be stored in association with the purchase instruction. .

  Next, when the IC chip reading device 3 is provided in the broadcast receiving terminal 2 itself, for example, when the broadcast receiving terminal 2 is a mobile phone provided with the IC chip reading device 3 (IC chip reading function) and a network communication function. Will be explained. FIG. 11 shows a conceptual diagram of the entire payment system 1 in this case. The processing functions of the broadcast receiving terminal 2 in the settlement system 1 are shown in FIG.

  In this embodiment, the IC chip reader 3 is built in a mobile phone or the like which is the broadcast receiving terminal 2, and the IC card 4 and the IC built in the mobile phone are held by holding the IC card 4 over a predetermined portion of the mobile phone. Wireless communication is performed with the chip reader 3 to perform read / write processing.

  Next, a processing process in the settlement system 1 of the present embodiment will be described.

  When the digital broadcast wave program information from a predetermined broadcasting station is received by the mobile phone, the mobile phone displays the content information of the program itself on the screen as usual, as well as product information, address information, time stamp, and payment means. Accompanying information such as information is temporarily stored in the storage device 201 (S100).

  The viewer selects to purchase a product introduced in the program by performing a predetermined operation on the mobile phone. For example, when a viewer performs a predetermined operation such as pressing a predetermined button of the mobile phone, the product can be selected by selecting a product and quantity to be purchased (S110).

  When the purchase is selected, the mobile phone calculates the settlement amount by multiplying the product and the number based on the information stored in the storage device 201, and stores it in the storage device 201. Note that, as in the first embodiment, the payment amount may be calculated by the member store server 5 and received by the mobile phone.

  In addition, when the purchase is selected, the mobile phone displays a screen on which payment means can be selected based on the information stored in the storage device 201 and allows the payment means to be selected. As a result, the viewer selects payment means, for example, cash on delivery, bank transfer, credit card settlement, etc., by the viewer using the input device 203 such as a button on the mobile phone.

  When the payment method is selected, the purchase instruction processing unit 20 of the mobile phone uses the address information of the member store server 5 stored in the storage device 201 to indicate information indicating the type of payment method (in the case of credit card payment). Information on the purchase instruction including information on the credit card company), time stamp, program identification information, product information such as the product name and quantity of the purchased product, etc. is sent to the member store server 5 via the network (S120). ).

  Upon receiving the purchase instruction information, the member store server 5 assigns purchase instruction identification information corresponding to the purchase instruction, and stores the purchase instruction identification information in association with the purchase instruction identification information. If the payment means indicates a credit card payment in the purchase instruction, the member store server 5 activates the application software for payment stored in the IC chip 41 of the IC card 4 to the mobile phone via the network. Send a command to

  The payment information processing unit 21 of the mobile phone that has received the command (S130) sends the received command and payment amount information to the IC chip reader 3 built in the mobile phone. At this time, it is preferable that the screen of the mobile phone displays a display prompting that the IC card 4 can be read by the IC chip reader 3 of the mobile phone.

  The IC chip reader 3 built in the mobile phone sends the command and the payment amount information from the IC chip reader 3 to the IC card 4. Since the IC card 4 is held over the IC chip reader 3, the command and the payment amount are received from the IC chip reader 3, and the application software for payment stored in the IC chip 41 is activated based on the command. (S140).

  After the payment application software is activated, the payment amount information received, the payment information such as the credit card number, expiration date, and name stored in the IC chip 41 is encrypted based on the payment application software. Generate payment information. The encrypted payment information generation process is the same as that in the first embodiment.

  As described above, when the encrypted payment information is generated by the IC chip 41, the IC chip reader 3 built in the mobile phone reads it (S150). When the IC chip reader 3 reads the encrypted payment information from the IC chip 41 of the IC card 4, the payment server processing unit 22 of the mobile phone performs the encryption based on the address information of the payment server 6 stored in the storage device 201. The settlement information is sent to the settlement server 6 via the network (S160). At this time, a screen for confirming payment may be displayed, and the encrypted payment information may be sent to the payment server 6 when a selection for accepting payment is accepted. The address information of the settlement server 6 may be received from the member store server 5 and stored in the storage device 201 as in the first embodiment.

  Upon receiving the encrypted payment information, the payment server 6 decrypts the encrypted payment information by a predetermined method. When decrypting, for example, it is decrypted with a one-time password, so that it is decrypted using date and time information, a time stamp (a time stamp may be separately received from a television receiver). . In addition, as described above, the date and time may be different between the IC card 4 and the settlement server 6 due to a network delay or the like, so that the decoding process may be performed with a predetermined width. In the case of encryption using a common key method or public key method encryption software, each may be decrypted by a predetermined method.

  As described above, the settlement server 6 generates the settlement information by decrypting the encrypted settlement information with the settlement server 6. Then, the settlement server 6 performs an authentication process necessary for a predetermined credit card settlement based on the settlement information (S160). For example, based on information such as credit card number, expiry date, name, etc. in payment information and payment amount information, an authorization to check whether the viewer's credit line is sufficient or credit card is valid If there is no problem in the authorization process, the credit card settlement process of the settlement amount is performed as it is. This credit card settlement process may be a process used in ordinary credit card settlement.

  After the authentication process is completed as described above, the settlement server 6 sends the result of the authentication process to the mobile phone via the network.

  Upon receiving the authentication result from the settlement server 6 via the network, the purchase completion processing unit 23 sends the member store server 5 to the merchant server 5 via the network based on the address information of the member store server 5 stored in the storage device 201. The authentication result and purchase instruction identification information are sent (S170).

  The member store server 5 that has received the authentication result and the purchase instruction identification information corresponds to the purchase instruction identification information if the authentication result is a normal authentication result (information indicating that the credit card payment has been successfully completed). For the purchase instruction, information indicating that the payment is normally completed with a credit card is stored. Then, completion information indicating normal completion is sent to the mobile phone via the network. The mobile phone that has received the completion information displays a screen indicating that the purchase has been completed (S170).

  On the other hand, the member store server 5 that has received the authentication result and the purchase instruction identification information receives the credit card settlement for some reason such as an authentication result that the authentication result is not normal (for example, the credit frame is insufficient or the credit card cannot be used). Information indicating that the payment could not be made with a credit card for the purchase instruction corresponding to the purchase instruction identification information, and storing the information on the mobile phone via the network, Send information (error information) indicating that it did not complete successfully. The mobile phone that has received this error information may display a screen indicating that the credit card could not be settled due to an error, for example, and may further display a screen for selecting a payment method. At this time, since the credit card payment could not be made, the credit card payment options may be deleted, and only other payment methods such as bank transfer and cash on delivery options may be displayed.

  As described above, when a series of credit card settlement processes is completed, for example, a screen of a normal mobile phone is displayed.

  Note that the input of the name of the purchaser (viewer) of the product and the address of the delivery destination when the product is purchased may be performed at any processing stage as in the first embodiment.

  Next, when the IC card 4 is not used, that is, when the IC chip 41 of the IC card 4 is provided in the broadcast receiving terminal 2 itself, for example, the broadcast receiving terminal 2 has an IC chip 41 having a credit card function and a network function. A case of a mobile phone equipped with FIG. 13 shows a conceptual diagram of the entire payment system 1 in this case. FIG. 14 shows processing functions of the broadcast receiving terminal 2 in the settlement system 1.

  In this embodiment, a credit card IC chip 41 is built in a mobile phone or the like as the broadcast receiving terminal 2. Therefore, in this embodiment, the IC chip reader 3 is unnecessary, and the settlement information processing unit 21 in this embodiment has the following functions.

  The settlement information processing unit 21 in this embodiment activates predetermined settlement application software stored in the IC chip 41 based on a settlement application software activation command received from the member store server 5 via the network. At the same time, the IC chip 41 generates encrypted payment information based on the payment amount information.

  Next, a processing process in the settlement system 1 of the present embodiment will be described.

  When the mobile phone receives digital broadcast wave program information from a predetermined broadcasting station, the mobile phone displays the content information of the program itself on the screen as usual, and also includes product information, address information, time stamp, and payment means. Accompanying information such as information is temporarily stored in the storage device 201 (S100).

  The viewer selects to purchase a product introduced in the program by performing a predetermined operation on the mobile phone. For example, when a viewer performs a predetermined operation such as pressing a predetermined button of the mobile phone, the product can be selected by selecting a product and quantity to be purchased (S110).

  When the purchase is selected, the mobile phone calculates the settlement amount by multiplying the product and the number based on the information stored in the storage device 201, and stores it in the storage device 201. As in the first and second embodiments, the member store server 5 may calculate the payment amount and receive it.

  In addition, when the purchase is selected, the mobile phone displays a screen on which payment means can be selected based on the information stored in the storage device 201 and allows the payment means to be selected. As a result, the viewer selects payment means, for example, cash on delivery, bank transfer, credit card settlement, etc., by the viewer using the input device 203 such as a button on the mobile phone.

  When the payment method is selected, the purchase instruction processing unit 20 of the mobile phone uses the address information of the member store server 5 stored in the storage device 201 to indicate information indicating the type of payment method (in the case of credit card payment). Information on purchase instructions including information such as information on the credit card company), time stamp, program identification information, product name of the purchased product, product information such as quantity, etc. is sent to the member store server 5 via the network. (S120).

  Upon receiving the purchase instruction information, the member store server 5 assigns purchase instruction identification information corresponding to the purchase instruction, and stores the purchase instruction identification information in association with the purchase instruction identification information. If the payment means indicates a credit card payment in the purchase instruction, the member store server 5 sends a command for starting the application software for payment stored in the IC chip 41 of the mobile phone via the network. Send to phone.

  The payment information processing unit 21 of the mobile phone that has received the command (S130) sends the received command and payment amount information to the IC chip 41 having a credit card function built in the mobile phone.

  The IC chip 41 receives the command and the payment amount from the payment information processing unit 21, and activates the payment application software stored in the IC chip 41 based on the command (S140).

  After the payment application software is activated, the payment amount information received, the payment information such as the credit card number, expiration date, and name stored in the IC chip 41 is encrypted based on the payment application software. Generate payment information. The encrypted payment information generation process can be performed in the same manner as in the first and second embodiments.

  When the encrypted payment information is generated by the IC chip 41 as described above, the payment server processing unit 22 of the mobile phone stores the encrypted payment information via the network based on the address information of the payment server 6 stored in the storage device 201. To the settlement server 6 (S160). At this time, a screen for confirming payment may be displayed, and the encrypted payment information may be sent to the payment server 6 when a selection for accepting payment is accepted. The address information of the settlement server 6 may be received from the member store server 5 and stored in the storage device 201 as in the first embodiment.

  Upon receiving the encrypted payment information, the payment server 6 decrypts the encrypted payment information by a predetermined method. When decrypting, for example, it is decrypted with a one-time password, so that it is decrypted using date and time information, a time stamp (a time stamp may be separately received from a television receiver). . In addition, as described above, the date and time may be different between the IC card 4 and the settlement server 6 due to a network delay or the like, so that the decoding process may be performed with a predetermined width. In the case of encryption using a common key method or public key method encryption software, each may be decrypted by a predetermined method.

  As described above, the settlement server 6 generates the settlement information by decrypting the encrypted settlement information with the settlement server 6. Then, the settlement server 6 performs an authentication process necessary for a predetermined credit card settlement based on the settlement information (S160). For example, based on information such as credit card number, expiry date, name, etc. in payment information and payment amount information, an authorization to check whether the viewer's credit line is sufficient or credit card is valid If there is no problem in the authorization process, the credit card settlement process of the settlement amount is performed as it is. This credit card settlement process may be a process used in ordinary credit card settlement.

  After the authentication process is completed as described above, the settlement server 6 sends the result of the authentication process to the mobile phone via the network.

  Upon receiving the authentication result from the settlement server 6 via the network, the purchase completion processing unit 23 sends the member store server 5 to the merchant server 5 via the network based on the address information of the member store server 5 stored in the storage device 201. The authentication result and purchase instruction identification information are sent (S170).

  The member store server 5 that has received the authentication result and the purchase instruction identification information corresponds to the purchase instruction identification information if the authentication result is a normal authentication result (information indicating that the credit card payment has been successfully completed). For the purchase instruction, information indicating that the payment is normally completed with a credit card is stored. Then, completion information indicating normal completion is sent to the mobile phone via the network. The mobile phone that has received the completion information displays a screen indicating that the purchase has been completed (S170).

  On the other hand, the member store server 5 that has received the authentication result and the purchase instruction identification information receives the credit card settlement for some reason such as an authentication result that the authentication result is not normal (for example, the credit frame is insufficient or the credit card cannot be used). Information indicating that the payment could not be made with a credit card for the purchase instruction corresponding to the purchase instruction identification information, and storing the information on the mobile phone via the network, Send information (error information) indicating that it did not complete successfully. The mobile phone that has received this error information may display a screen indicating that the credit card could not be settled due to an error, for example, and may further display a screen for selecting a payment method. At this time, since the credit card payment could not be made, the credit card payment options may be deleted, and only other payment methods such as bank transfer and cash on delivery options may be displayed.

  As described above, when a series of credit card settlement processes is completed, for example, a screen of a normal mobile phone is displayed.

  Note that the input of the name of the purchaser (viewer) of the product and the address of the delivery destination when the product is purchased may be performed at any processing stage as in the first embodiment.

  In each of the above-described embodiments, an example of a system configuration in the case where a product of a program broadcast on a digital broadcast wave is purchased has been described. However, in this embodiment, advertisement information (flyer) is included in the program information of the digital broadcast wave. A case will be described in which a product is purchased by selecting a product to be purchased from the advertisement information including the information of the above. In the present embodiment, the system configuration of the first embodiment will be described. However, the second and third embodiments can be similarly realized.

  FIG. 15 schematically shows processing functions of the broadcast receiving terminal 2 in the present invention. The broadcast receiving terminal 2 of the present embodiment further includes an advertisement time limit confirmation processing unit 24. The program information of the digital broadcast wave received by the broadcast receiving terminal 2 includes program identification information and advertisement information (advertising information (such as the product name and the amount of money written on the flyer in addition to the flyer), in addition to the content information of the program itself. , A time stamp indicating the broadcast date and time, a time stamp indicating the date and time information of the expiration date of the advertisement, address information indicating the access destination of the member store server 5 accessed by the television receiver, and information on payment means that can be used for payment Assume that additional information such as (credit card company name, address information indicating the access destination of the settlement server 6) is further included.

  When the viewer selects the advertisement screen in the advertisement information at the broadcast receiving terminal 2, the advertisement expiration date confirmation processing unit 24 displays the date and time information on the expiration date of the advertisement included in the product information and the current date and time (the broadcast receiving terminal 2. The date and time information managed in (3) is compared, and if it is within the expiration date, the advertisement information is displayed on the broadcast receiving terminal 2.

  Next, the processing process of the present embodiment will be described. In the following description, a case where the broadcast receiving terminal 2 is a television receiver will be described.

  A predetermined broadcast station broadcasts programs using digital broadcast waves. When these digital broadcast wave program information is received by the television receiver, the television receiver displays the content information of the program itself on the screen as usual, as well as advertisement information, address information, time stamp, payment method information, etc. The accompanying information is temporarily stored in the storage device 201 (S100).

  The viewer selects to browse advertisement information by performing a predetermined operation on the television receiver. For example, the viewer selects to display advertisement information (flyer) browsing on the remote operation device by performing a predetermined operation on the remote operation device. At the time of this display, the advertisement expiration date confirmation processing unit 24 compares the expiration date stamp of the advertisement contained in the advertisement information with the current date and time. If it is not within the expiration date, an indication that “the advertisement has expired” may be displayed on the screen of the television receiver. Alternatively, the time stamp comparison process may be performed before the selection operation so that the selection of the advertisement information browsing itself cannot be performed. In this case, the advertisement information may be further deleted from the storage device 201.

  If the result of comparison between the time stamp of the advertisement expiration date and the current date and time is within the expiration date, the television receiver displays the advertisement information. Then, the viewer selects to purchase a product listed in the advertisement information by performing a predetermined operation. For example, when the viewer performs a predetermined operation on the remote control device, the product and quantity to be purchased are selected, and the operated information is sent from the remote control device to the television receiver by radio (for example, infrared rays) each time. When it is received by a television receiver, selection becomes possible.

  When the purchase is selected, the television receiver calculates the settlement amount by multiplying the product and the number based on the information stored in the storage device 201, and stores it in the storage device 201. The settlement amount is preferably calculated by taking into account various expenses such as consumption tax and freight charges. Further, as in the above-described embodiments, the payment amount may be calculated by the member store server 5 and received.

  When the purchase of the product is selected, the television receiver displays a screen on which payment means can be selected based on the information stored in the storage device 201, and allows the payment means to be selected. As a result, the viewer selects a payment means, for example, cash on delivery, bank transfer, credit card settlement, etc., by the remote control device.

  When the payment method is selected, the purchase instruction processing unit 20 of the television receiver, based on the address information of the member store server 5 stored in the storage device 201, shows information indicating the type of payment method (in the case of credit card payment). (Information identifying the credit card company), time stamp of broadcast date, program identification information, merchandise information such as merchandise name, quantity, etc., is passed to the merchant server 5 via the network. .

  In this manner, in addition to the first embodiment, by sending the time stamp information of the broadcast date and time from the television receiver to the member store server 5, the member store server 5 can determine when the product is purchased from the advertisement information in the broadcast program. I can grasp it. Moreover, if not only content information in digital broadcast wave program information but also accompanying information such as advertisement information is recorded by the recording device, the product can be purchased even when the recorded program is reproduced. It will be possible.

  In other words, since the member store server 5 can manage the time stamp of the broadcast date and time, it is possible to know an indication of when to advertise on which program. Therefore, even if the advertisement is a program, it is possible to grasp the substantial advertising effect without depending on the audience rating that is ambiguous. In the case where program information is stored in the recording device, the above-mentioned accompanying information is also stored in addition to the content information of the program itself in the program information. The program information stored in the recording device may be appropriately extracted by the television receiver and each process may be performed.

  Since the processing relating to the following settlement is the same as that in the first embodiment, the description thereof is omitted.

  Next, another embodiment using the settlement system 1 of the present invention will be shown. In this embodiment, the settlement system 1 is used for managing the viewing time limit when a program by digital broadcast waves is recorded. In the present embodiment, the system configuration of the first embodiment will be described. However, the second and third embodiments can be similarly realized.

  FIG. 16 schematically shows a conceptual diagram of viewing key processing in the present embodiment. It should be noted that configurations that are not used for viewing key management of the fifth embodiment such as the settlement server 6 and the IC chip reader 3 are not shown.

  FIG. 17 schematically shows processing functions of the broadcast receiving terminal 2 in the present invention. The broadcast receiving terminal 2 of this embodiment includes a viewing time limit confirmation processing unit 25 for viewing a program. Further, in the recording apparatus connected to the broadcast receiving terminal 2, in addition to the program content information in the received digital broadcast wave, at least program identification information, a time stamp indicating the viewing deadline, address information of the member store server 5, and address of the settlement server 6 Accompanying information such as information, information on payment means that can be used for payment (credit card company name, address information indicating access destination of payment server 6), and the like are stored.

  The recording device may be a device separated from the broadcast receiving terminal 2 or may be configured integrally. In addition to the recording device, a set-top box or the like may be used, and any device that can receive digital broadcast waves may be used.

  When the viewer selects to play back the program recorded by the recording device, the viewing time limit confirmation processing unit 25 includes a time stamp indicating the viewing time limit included in the recorded digital broadcast wave (recording information) and the current date and time ( The date and time information managed by the television receiver) is compared, and if it is within the viewing time limit, the program is reproduced as it is by the television receiver. If not, an instruction for acquiring the viewing key (the key for reproducing the program) of the program is sent to the purchase instruction processing unit 20.

  Therefore, the recording information is controlled by the recording device so that it cannot be reproduced without the viewing key after the viewing expiration date. For example, the content information of the recorded program may be scrambled.

  Next, the processing process of the present embodiment will be described. In the following description, a case where the broadcast receiving terminal 2 is a television receiver will be described.

  A program by a digital broadcast wave is broadcast from a predetermined broadcast station. The program information of the digital broadcast wave includes content information information of the program itself, program identification information, a time stamp indicating a viewing deadline, a member store Additional information such as address information of the server 5 and the settlement server 6 and information on a payment means that can be used for payment (credit card company name, address information indicating an access destination of the settlement server 6) is included.

  When these digital broadcast wave program information is received by the television receiver or recording device, the television receiver records the accompanying information such as content information of the program itself, program identification information, address information, time stamp, payment means information, etc. (S100).

  The viewer selects browsing of the program recorded by the recording device by performing a predetermined operation on the television receiver. For example, the viewer selects to display the reproduction of the content information of a certain program on the television receiver by performing a predetermined operation with the remote control device.

  Then, the viewing time limit confirmation processing unit 25 of the television receiver extracts a time stamp indicating the viewing time limit of the recorded information (recorded program information) of the recorded program and compares it with the current date and time. If it is within the viewing time limit, the content information in the recorded information is reproduced as it is on the television receiver.

  On the other hand, if it is not within the viewing deadline, the viewing deadline has already passed, and it is necessary to purchase for viewing. Accordingly, the viewer performs a predetermined operation on the television receiver, thereby performing viewing key acquisition processing for reproducing the content information of the program. In other words, by selecting a viewer to perform a predetermined operation on the remote operation device and viewing the program, the operated information is transmitted from the remote operation device to the television receiver by radio (for example, infrared), It is received by the television receiver (S110).

  Then, when the purchase of the viewing key is selected, the television receiver calculates the settlement amount by calculating the cost for viewing the program based on the information stored in the recording device, and stores it in the storage device 201. Remember me. The settlement amount is preferably calculated by taking into account various expenses of consumption tax. Further, as in the above-described embodiments, the payment amount may be calculated by the member store server 5 and received.

  When the purchase is selected, the television receiver displays a screen on which payment means can be selected based on the information stored in the recording device, and allows the payment means to be selected. As a result, the viewer selects a payment means, for example, cash on delivery, bank transfer, credit card settlement, etc., by the remote control device.

  When the payment method is selected, the purchase instruction processing unit 20 of the television receiver indicates information indicating the type of payment method (in the case of credit card payment) based on the address information of the member store server 5 stored in the recording device. Information on the credit card company), product information such as a time stamp, program identification information, etc., and information on the request for viewing the program content information are sent to the member store server 5 via the network. Send (S120).

  Upon receiving the purchase instruction information, the member store server 5 assigns purchase instruction identification information corresponding to the purchase instruction, and stores the purchase instruction identification information in association with the purchase instruction identification information. Further, when the payment means indicates a credit card payment in the purchase instruction, the member store server 5 causes the television receiver to activate the application stored in the IC chip 41 of the IC card 4 via the network. Send the command. Also, the viewing key corresponding to the program identification information is sent from the member store server 5 to the television receiver via the network. The viewing key at this time may be different for each program based on the program identification information, or may be date / time information such as a new viewing time limit.

  By receiving the viewing key from the member store server 5 via the network by the television receiver, the content information in the recording information recorded by the recording device using the viewing key is reproduced. This makes it possible to broadcast a program broadcast on a digital broadcast wave with a viewing deadline.

  The viewing key is a key for reproducing the content information of the recorded program, and is preferably information for updating the viewing time limit. For example, the new viewing time limit information is the viewing key. As a result, it is possible to control the viewing time limit of the program only by managing the viewing key. The viewing key may be information for releasing the scramble of the program content information.

  As described above, the viewing key is acquired from the member store server 5 and the settlement process is performed. Since the subsequent processes are the same as those in the first embodiment, the description thereof is omitted. In the above description, the viewing key is obtained from the member store server 5 immediately. However, the member key server 5 may send the viewing key together with the purchase completion information or after the purchase completion information is sent. good. In this case, since the viewing key is acquired after the credit card settlement is completed, the abuse of the viewing key acquisition can be avoided. The viewing key may be distributed first, but the viewing key is invalidated (invalid flag is provided) until the purchase completion information is received, and after the purchase completion information is received, the purchase completion processing unit 23 receives the viewing key. The key may be valid. In order to validate the viewing key, for example, the purchase completion processing unit 23 sets a valid flag, or after receiving the purchase completion information, the viewing deadline information by the new viewing key is written in the viewing deadline of the recording device. is there.

  Next, another embodiment using the settlement system 1 of the present invention will be shown. In the present embodiment, program guide information of a program by digital broadcast waves is stored in a television receiver, a program desired by a viewer is selected from the stored information, and content information of the program is acquired from the member store server 5. In some cases, the settlement system 1 is used. In the present embodiment, the system configuration of the first embodiment will be described. However, the second and third embodiments can be similarly realized.

  FIG. 18 schematically shows a conceptual diagram of a viewing process of program content information in the present embodiment. It should be noted that configurations that are not used in the viewing process of the sixth embodiment such as the settlement server 6 and the IC chip reader 3 are not shown.

  In the broadcast receiving terminal 2 in the present embodiment, information on the program guide (program guide information) broadcast on the digital broadcast wave is stored in the storage device 201.

  Programs from digital broadcast waves are broadcast from predetermined broadcast stations, and the program information of the digital broadcast waves includes the content information of the program itself, product identification information such as program identification information and its viewing fee, Information, address information indicating the access destination of a member store server 5 (preferably a company that distributes program content information) accessed by the television receiver when purchasing the content information of the program, time stamp (date information), payment Includes additional information such as information on payment means (credit card company name, address information indicating the access destination of the settlement server 6) that can be used for the payment method.

  When these digital broadcast waves are received by the television receiver, the television receiver temporarily stores accompanying information such as program guide information, program identification information, address information, time stamp, and payment means information in the storage device 201 (S100). .

  The viewer selects a program to view by performing a predetermined operation on the television receiver. Preferably, a program that matches a keyword is searched for from programs in the past program guide by selecting a program that the user wants to watch from the past program guide stored in the storage device 201 or inputting a keyword. You may choose.

  Search for the program you want to watch as described above. For example, when a viewer performs a predetermined operation on the remote control device and selects a program to be purchased, the operated information is transmitted from the remote control device to the television receiver by radio (for example, infrared rays), and the information is transmitted to the television. Selection is possible by receiving the image at the receiver. Note that the storage device 201 stores program identification information for identifying the selected program.

  When viewing / purchasing is selected, the television receiver calculates a settlement amount corresponding to the viewing fee of the program based on the information stored in the storage device 201, and stores it in the storage device 201. The settlement amount is preferably calculated taking into account various expenses such as consumption tax. As in the above-described embodiments, the payment amount may be calculated by the member store server 5 and received.

  When viewing / purchasing a program is selected, the television receiver displays a screen on which payment means can be selected based on information stored in the storage device 201, and allows the payment means to be selected. As a result, the viewer selects a payment means, for example, cash on delivery, bank transfer, credit card settlement, etc., by the remote control device.

  When the payment method is selected, the purchase instruction processing unit 20 of the television receiver, based on the address information of the member store server 5 stored in the storage device 201, shows information indicating the type of payment method (in the case of credit card payment). Includes information such as information identifying the credit card company), time stamp, and program identification information identifying the program selected by the viewer (in this case, the program identification information is product information). The purchase instruction information is transferred to the member store server 5 via the network (S120).

  Upon receiving the purchase instruction information, the member store server 5 assigns purchase instruction identification information corresponding to the purchase instruction, and stores the purchase instruction identification information in association with the purchase instruction identification information. If the payment means indicates a credit card payment in the purchase instruction, the member store server 5 activates the application software for payment stored in the IC chip 41 of the IC card 4 to the mobile phone via the network. Send a command to

  In addition, the member store server 5 sends program content information to the television receiver via the network. The television receiver that has received the information stores it and reproduces the content information after receiving the purchase completion information.

  Further, the television receiver that has received the command performs the subsequent settlement processing, but the contents thereof are the same as those in the first embodiment, and the description thereof is omitted.

  In the above description, the member store server 5 is configured to send the content information of the program to the television receiver after receiving the purchase instruction information, but after sending the purchase completion information together with the purchase completion information. The content information of the program may be sent to the television receiver.

  Next, a case will be described in which the broadcast receiving terminal 2 (for example, a television receiver) and its remote control device (for example, a remote controller) are arbitrarily associated in the first to sixth embodiments.

  Since the remote control device that can operate the broadcast receiving terminal 2 from a remote location is highly convenient, the broadcast receiving terminal 2 such as most television receivers currently on the market is provided with a remote control device. Operation is possible. When the remote operation device includes the IC chip reader 3 and the like as in the first embodiment, the remote operation device and the broadcast receiving terminal 2 can It is necessary for the broadcast receiving terminal 2 to be associated with 1: 1.

  However, the remote control device may break down, and in this case, the IC chip reader 3 provided in the remote control device cannot be used, that is, the payment cannot be performed using the payment system 1 of the present invention. The inconvenience will occur. In addition, in order to repair the failure, it is necessary to request a repair from the manufacturer, and it cannot be used for several weeks.

  Therefore, it is required that a remote control device that can be used is not fixed. Therefore, there is a general-purpose remote control device that can be used without specifying a manufacturer. However, this is only realized by making the frequency of infrared rays sent from the remote control device to the broadcast receiving terminal 2 such as a television receiver correspond to the manufacturer's standard of the broadcast receiving terminal 2 such as the television receiver, As in the payment system 1 of the present invention, it is not possible to deal with the case where secure communication is performed on information related to payment between the broadcast receiving terminal 2 and the remote control device.

  Therefore, in the present embodiment, a case where the remote operation device including the IC chip reader 3 can perform secure communication with an arbitrary broadcast receiving terminal 2 will be described below. FIG. 19 shows an overall conceptual diagram of the broadcast receiving terminal 2 and the remote control device in the present embodiment. In the following description, the case of a television receiver will be described as the broadcast receiving terminal 2, but the broadcast receiving terminal 2 may be any other device such as a radio or a computer terminal.

  The television receiver in this embodiment includes a registration device (pocket) capable of transmitting / receiving information to / from a remote control device via a connection terminal. That is, when a remote control device is inserted into a pocket provided in the television receiver, information can be transmitted and received between the television receiver and the remote control device via the connection terminal of the pocket. Note that the pocket may be provided integrally with the television receiver or may be provided separately. The communication process between the pocket and the television receiver may be performed by wire or wirelessly. Since information is transmitted and received through the connection terminal, a connection terminal corresponding to the remote control device is also provided.

  FIG. 20 shows a sequence diagram of processing when a remote control device is registered in the television receiver according to the present embodiment.

  The remote control device and the television receiver each store self-certificate information for certifying its own device. The self-certificate information includes a device number that identifies each device (note that not only numbers but also various information such as letters, symbols, and figures can be used for the device number) and the manufacturer's manufacturer An electronic signature (private key) is included.

  When the remote control device is inserted into the pocket of the television receiver, self-certificate information of the remote control device is sent from the remote control device to the television receiver via the connection terminal of the pocket (S200). This is received by the television receiver, and the electronic signature of the manufacturer of the remote control device is verified (S210). The electronic signature of the manufacturer of the remote control device may store the electronic signature of the main manufacturer in advance, or the self-certificate includes identification information such as the manufacturer name, address information for obtaining the electronic signature, etc. If there is, the electronic signature of the manufacturer may be obtained by accessing a predetermined server based on the address information.

  If the signature cannot be verified normally, an error is notified. For example, an error can be displayed on the pocket or remote control device by verifying the signature on the screen of the television receiver or by abnormal sound, or notifying the pocket or remote control device of an error signal. There are methods such as smoothing out abnormal sounds.

  If the signature can be verified normally, the television receiver sends the self-certificate information of the television receiver to the remote control device via the connection terminal of the pocket (S220). This is received by the remote control device, and the electronic signature of the manufacturer of the television receiver is verified (S230). The electronic signature of the manufacturer of the television receiver may store in advance the electronic signature of the main manufacturer.

  The verification process of the manufacturer's electronic signature on the television receiver or the remote control device preferably means that the manufacturer's electronic signature (private key) in the received self-certificate is stored or acquired in advance. However, the present invention is not limited to this process, and any method may be used as long as the validity of each device can be verified.

  As a result of verifying the electronic signature of the television receiver even in the remote control device, if the signature cannot be verified normally, an error notification is made in the same manner as in the case of the television receiver. If the electronic signature can be verified normally, the remote control device and the broadcast receiving terminal 2 can be associated with each other, and therefore a verification OK signal is sent to the television receiver (S240). The device registration process is completed (S250). Then, the television receiver that has received the verification OK signal from the remote control device completes the registration processing of the remote control device on the television receiver side (S260).

  Since each device has completed registration with the other device through the processing as described above, the television receiver generates a common key for transmitting and receiving information between the television receiver and the remote control device (S270). ). This common key generation process is shown in the flowchart of FIG.

  The television receiver receives the device number of the remote operation device in the self-certificate information of the remote operation device and the device of the television receiver in the self-certificate information of the television receiver received from the remote operation device via the connection terminal of the pocket. Each number is acquired (S400). The television receiver generates a random number (S410).

  The television receiver generates a hash value by performing a predetermined hash function process using the random number generated in S410 on the acquired device number of the television receiver and the device number of the remote control device (S420). This is used as a common key (S430).

  The common key generated by the television receiver as described above is stored in the television receiver (S270) and sent to the remote control device via the pocket connection terminal (S280). Note that the common key transmission / reception processing between the television receiver and the remote control device is preferably performed via the connection terminal of the pocket, but may be performed by wireless communication.

  The remote control device receives the common key from the television receiver and stores it (S290). Then, the reception OK signal is sent from the remote control device to the television receiver via the connection terminal of the pocket (S300), and the common key sending process is terminated (S310).

  By executing the processing as described above, a common key for communication between the television receiver and the remote control device can be shared.

  The common key itself may or may not be restricted in use.

  There are two types of restrictions on the use of the common key: a time limit and a time limit. As the number of times limit, for example, the number of communication between the television receiver and the remote control device is provided as a counter, respectively, or any device, and the counter is subtracted every time communication is completed (or the counter This is a process for disabling the common key when it becomes 0 (or when it reaches a predetermined value).

  In addition, as a time limit, there is a case where an expiration date of the common key is provided. That is, when the common key is generated in S270 described above, arbitrary date / time information such as an expiration date, for example, within 1 hour, within 24 hours, within 48 hours, etc. is set, and the date / time information is also included. Sent to a remote control device (may be stored in a television receiver).

  And when information is transmitted and received between the remote control device and the television receiver, the above date and time information is compared with the current date and time (date and time information managed by the remote control device or the television receiver) and used. If it is within the time limit, the communication using the common key is performed as it is.

  When the use restriction is provided as described above, it is necessary to remove the use restriction. Therefore, when the remote control device is inserted into the pocket, the common key may be updated by performing the processing after S270.

  For example, when the remote control device is inserted into a pocket, the self-certificate information of the remote control device is sent to the television receiver. Therefore, the device number (or self-certificate) in the self-certificate and the television receiver are registered. Compare the remote control device's device number (or self-certificate). If they do not match, it is determined that a new remote control device has been inserted, and the processing from S210 is executed.

  If they match, it is determined that the registered remote control device has been inserted, and the processes after S270 are executed. Note that the processing may be executed after confirming whether it is within the range of use restriction before executing the processing after S270. That is, if it is within the common key use restriction, the common key update process is not performed, and if it is not within the common key use restriction, the process after S270 is executed to perform the common key update process.

In this embodiment, the case where the process is started when the remote control device is inserted into the pocket of the television receiver has been described. However, the process may be performed at an arbitrary timing.

  As described above, by using the settlement system 1 of the present invention, the IC card 4 can communicate with the member store server 5 and the settlement server 6 via the remote operation device having the IC chip reading function and the broadcast receiving terminal 2. Since it is possible to securely transmit and receive information related to payments, the risk of information leakage can be reduced even if an unauthorized communication interception is performed by a third party.

  Further, in the conventional payment system 1, the product cannot be purchased unless the broadcasted program is viewed, but even if the program is recorded by using the payment system 1 of the present invention. The product can be purchased, and the member store that sells the product can manage when the program broadcasts the product. Therefore, since it is possible to specify when and where the program was broadcasted, it can be used as a reference when broadcasting a product sales program.

Furthermore, when an auxiliary device such as that disclosed in Patent Document 1 is used, the remote control device having the IC card 4 reading function is associated with the television receiver in a 1: 1 ratio. In the case of a failure, it becomes impossible to make a settlement using the remote control device. However, in the settlement system 1 of the present invention, the correspondence between the remote operation device having the reading function of the IC chip 41 and the broadcast receiving terminal 2 such as a television receiver can be changed, so that different remote operation devices are used. Settlement.

1: payment system 2: broadcast receiving terminal 3: IC chip reader 4: IC card 5: member store server 6: payment server 20: purchase instruction processing unit 21: payment information processing unit 22: payment server processing unit 23: purchase completed Processing unit 24: Advertisement deadline confirmation processing unit 25: Viewing deadline confirmation processing unit 41: IC chip 100, 200: arithmetic device 101, 201: storage device 102: communication device 103, 203: input device 104: display device 202: card communication Device 204: Server communication device

Claims (13)

A payment system having a member store server, a payment server, and a broadcast receiving terminal,
The broadcast receiving terminal is capable of secure communication with the member store server and the payment server,
The broadcast receiving terminal is
Of the product information included in the program information received by the digital broadcast wave, a purchase instruction processing unit that sends purchase instruction information about the product selected by the viewer to the member store server;
A control instruction for starting an application for encrypting payment information used for credit card payment is received from the member store server, and the control instruction is sent to the IC chip to encrypt the payment information of the purchased product. A payment information processing unit for causing the IC chip to generate encrypted payment information;
A payment server processing unit that performs authentication processing of credit card payment by sending encrypted payment information generated by the IC chip to the payment server, and receives an authentication result from the payment server;
A purchase completion processing unit for receiving purchase completion information of the product from the member store server by sending the authentication result to the member store server when a normal authentication result is received from the payment server. And
The member store server is
Based on the purchase instruction information received from the broadcast receiving terminal and the authentication result in the payment server, the product is purchased.
The payment server
The credit card payment authentication process is performed based on the payment information obtained by decrypting the encrypted payment information generated by the IC chip.
A payment system characterized by that. The program information further includes a time stamp indicating the broadcast date and time,
The purchase instruction processing unit further includes:
Send the merchandise store server including the time stamp as the purchase instruction information,
The member store server is
Storing the purchase instruction information including the time stamp to verify the advertising effect on the program;
The payment system according to claim 1. The program information further includes advertisement information, a time stamp indicating the expiration date of the advertisement, and a time stamp indicating the broadcast date and time,
The broadcast receiving terminal further includes:
Upon receipt of the advertisement information browsing request, a time stamp indicating an expiration date of the advertisement is confirmed, and if within the expiration date, an advertisement expiration date confirmation processing unit that displays the advertisement information at the broadcast receiving terminal is provided. And
The purchase instruction processing unit further includes:
Sending to the member store server including a time stamp indicating the broadcast date as the purchase instruction information,
The payment system according to claim 1. The broadcast receiving terminal is further connected to a recording device for recording the program information,
In the recording apparatus, as program information in the digital broadcast wave, at least content information of the program itself, a viewing time limit of the content information, address information of a member store server that sends a viewing key for reproducing the content information, and the content At least program identification information for identifying a program of information,
The broadcast receiving terminal further includes:
Upon receipt of a request for reproduction of content information stored in the recording device, a viewing time limit confirmation processing unit that confirms a viewing time limit corresponding to the content information stored in the recording device,
The purchase instruction processing unit further includes:
If the viewing time limit of the content information for which the reproduction request has been received has passed, a request for obtaining a viewing key corresponding to the program identification information of the content information is sent to the member store server as purchase instruction information based on the address information,
The broadcast receiving terminal is
Using the viewing key received from the member store server, the content information stored in the recording device is reproduced.
The payment system according to any one of claims 1 to 3, wherein: The broadcast receiving terminal further stores at least program guide information within a predetermined period in the past, program identification information of each program in the program information, and address information of a member store server that sends program content information,
The purchase instruction processing unit further includes:
Sending a request for viewing content information of a program selected from the program guide information to the member store server based on the address information as purchase instruction information together with the program identification information,
The broadcast receiving terminal further includes:
Receiving the content information of the program from the member store server to reproduce the content information of the selected program;
The settlement system according to any one of claims 1 to 4, wherein the settlement system is characterized in that A broadcast receiving terminal in a payment system having a broadcast receiving terminal capable of receiving a digital broadcast wave, a merchant server that sells products, and a payment server that performs payment processing of a credit card,
The broadcast receiving terminal is capable of secure communication between a member store server and a settlement server,
Of the product information included in the program information received by the digital broadcast wave, a purchase instruction processing unit that sends purchase instruction information about the product selected by the viewer to the member store server;
A control instruction for starting an application for encrypting payment information used for credit card payment is received from the member store server, and the control instruction is sent to the IC chip to encrypt the payment information of the purchased product. A payment information processing unit for causing the IC chip to generate encrypted payment information;
A payment server processing unit that performs authentication processing of credit card payment by sending encrypted payment information generated by the IC chip to the payment server, and receives an authentication result from the payment server;
When a normal authentication result is received from the payment server, a purchase completion processing unit that receives purchase completion information of the product from the member store server by sending the authentication result to the member store server;
A broadcast receiving terminal in a payment system, comprising: A broadcast receiving terminal in a payment system having a broadcast receiving terminal capable of receiving a digital broadcast wave, a merchant server that sells products, and a payment server that performs payment processing of a credit card,
The broadcast receiving terminal is capable of secure communication between a member store server and a settlement server,
Of the product information included in the program information received by the digital broadcast wave, a purchase instruction processing unit that sends purchase instruction information about the product selected by the viewer to the member store server;
A control instruction for starting an application for encrypting payment information used for credit card payment is received from the member store server, and the control instruction is sent to the remote operation device of the broadcast receiving terminal, whereby the remote operation device is transmitted to the remote operation device. A payment information processing unit that passes the control instruction to the IC chip and that generates encrypted payment information by encrypting the payment information of the purchased product in the IC chip;
The encrypted payment information generated by the IC chip is received from the IC chip reader, and the encrypted payment information is sent to the payment server to perform the credit card payment authentication process, and the authentication result is sent to the payment server. The payment server processing unit received from
When a normal authentication result is received from the payment server, a purchase completion processing unit that receives purchase completion information of the product from the member store server by sending the authentication result to the member store server;
With
Communication between the broadcast receiving terminal and the remote control device is secure communication.
The broadcast receiving terminal in the payment system characterized by the above-mentioned. A broadcast receiving terminal in a payment system having a broadcast receiving terminal capable of receiving a digital broadcast wave, a merchant server that sells products, and a payment server that performs payment processing of a credit card,
The broadcast receiving terminal is capable of secure communication between a member store server and a settlement server,
Of the product information included in the program information received by the digital broadcast wave, a purchase instruction processing unit that sends purchase instruction information about the product selected by the viewer to the member store server;
A control instruction for starting an application for encrypting payment information used for credit card payment is received from the member store server, and an IC chip reader provided in the broadcast receiving terminal passes the control instruction to the IC chip. A payment information processing unit that encrypts payment information of the purchased product and generates encrypted payment information in the IC chip;
The encrypted payment information generated by the IC chip is received from the IC chip reader, and the encrypted payment information is sent to the payment server to perform the credit card payment authentication process, and the authentication result is sent to the payment server. The payment server processing unit received from
When a normal authentication result is received from the payment server, a purchase completion processing unit that receives purchase completion information of the product from the member store server by sending the authentication result to the member store server;
A broadcast receiving terminal in a payment system, comprising: A broadcast receiving terminal in a payment system having a broadcast receiving terminal capable of receiving a digital broadcast wave, a merchant server that sells products, and a payment server that performs payment processing of a credit card,
The broadcast receiving terminal is capable of secure communication between a member store server and a settlement server,
Of the product information included in the program information received by the digital broadcast wave, a purchase instruction processing unit that sends purchase instruction information about the product selected by the viewer to the member store server;
A control instruction for starting an application for encrypting payment information used for credit card payment is received from the member store server, and the payment information of the purchased product is encrypted in the IC chip provided in the broadcast receiving terminal. A payment information processing unit that generates encrypted payment information,
A payment server processing unit that performs authentication processing of credit card payment by sending encrypted payment information generated by the IC chip to the payment server, and receives an authentication result from the payment server;
When a normal authentication result is received from the payment server, a purchase completion processing unit that receives purchase completion information of the product from the member store server by sending the authentication result to the member store server;
A broadcast receiving terminal in a payment system, comprising: The program information received by the digital broadcast wave includes a time stamp indicating date and time information,
The settlement information processing unit of the broadcast receiving terminal is
By sending the time stamp to the IC chip, the IC chip generates encrypted settlement information using the time stamp as a one-time password.
The broadcast receiving terminal in the settlement system according to any one of claims 6 to 9. The broadcast receiving terminal and the remote control device each store self-certificate information including device identification information and an electronic signature,
The broadcast receiving terminal further includes a registration device to which the remote control device can be attached,
After the remote control device is attached to the registration device, the remote control device and the broadcast receiving terminal mutually perform verification processing of the self-certificate information, so that at least the remote control device can receive the remote control device. Register the device identification information or self-certificate information of the operating device,
The broadcast receiving terminal further includes:
Using the device identification information of the remote operation device and the device identification information of the broadcast receiving terminal, generate a common key for encrypting communication between the broadcast receiving terminal and the remote operation device,
Wireless communication between the broadcast receiving terminal and the remote control device is performed securely using the common key by sending the generated common key to the remote control device.
The broadcast receiving terminal in the settlement system according to claim 7. The common key is added with the number of uses or the expiration date, and the common key is disabled when the use number or the expiration date is not satisfied.
The broadcast receiving terminal in the settlement system according to claim 11. The broadcast receiving terminal is
When it is detected that the remote control device is attached to the registration device, the self certificate information of the remote control device or its device identification information and the broadcast receiving terminal are acquired by acquiring the self certificate information of the remote control device. By comparing with the self-certificate information of the remote operation device registered in the device or its device identification information, it is determined whether it is a registered remote operation device,
If it is determined as a registered remote control device, a new common key is generated and sent to the remote control device.
The broadcast receiving terminal in the payment system according to claim 11 or 12.

Images