JP2019125882A - Electronic commerce system, communication terminal, third party organization server, electronic commerce method, and program - Google Patents

Abstract

To achieve complete anonymity of a user and eliminate the need for communication between a service provider and a third party.SOLUTION: A communication terminal 1 generates an encryption identifier and an encryption password, and transmits transaction information, the encryption identifier, an encryption password, and attribute information to a service providing server 2. The service providing server 2 transmits the encryption identifier, the encryption password, and the attribute information to an authorization server 4-n. The authorization server 4-n transmits the encrypted identifier, the encryption password, and the attribute information to a third party organization server 3. The third party organization server 3 decrypts the encryption identifier, obtains a common key associated with a registered identifier that matches the decryption identifier, decrypts the encryption password to obtain the decryption password, and transmits personal information corresponding to the attribute information to the authorization server 4-n when the registered password matches the decryption password. The authorization agency server 4-n executes the transaction by using the personal information.SELECTED DRAWING: Figure 7

Description

  The present invention relates to a technology for using an electronic commerce service provided on the Internet anonymously without revealing information that can identify a user's individual to a service provider.

  When using an electronic commerce service provided on the Internet, such as a shopping site, in many cases, a user is required to disclose his / her personal information to a service provider. Usually, when a user registers a service ID with a service provider, the user provides personal information such as a name, an address, a credit card number, etc., and the service provider associates the service ID with these personal information for storage. Do. When the user receives the service, the product provided by the service provider is purchased along with the service ID, and the service provider who received the payment is settled by the credit card number etc. associated with the user's service ID. Execute procedures and goods delivery procedures by address, name, etc.

  In such a service form, the service provider needs to obtain the personal information of the user for the provision and settlement of the product, so that the security at the ethical and technical high level is high when handling the personal information. Desired. In fact, in recent years, information leakage and fraudulent use from service providers and damage by phishing sites have often occurred. In particular, with regard to information leakage and illegal use, unless the service provider discloses the occurrence situation, there is a possibility that acquisition and use of personal information may be performed without the user knowing.

  To solve such problems, Patent Documents 1 and 2 store the personal information of the user in a reliable third party organization, and when using the service, the identification code of the user from the service provider (for example, service ID etc.) ) And sending information about the transaction to a third party organization, it proposes a method of establishing a commerce without revealing the user's personal information to the service provider.

JP 2002-92373 A Japanese Patent Application Publication No. 2002-524797

  However, in the protocol proposed in the prior art, since the user is identified by some identifier such as a service ID, complete anonymity is not secured. Further, in the purchase procedure, since the service provider and the third party communicate the transaction information, the following two problems occur. (1) A fictitious request is made by a service provider actively making fraud that violates the protocol, generating fictitious transaction information using information obtained from past transactions, and transmitting the information to a third party. May be successful. (2) Since the information on the transaction is transmitted to the third party organization, the service provision history to the user, which is the business knowledge of the service provider, is leaked to the third party organization.

  An object of the present invention is to realize complete anonymity of a user and to eliminate the need for communication between a service provider and a third party organization in an electronic commerce service in view of the above-mentioned points. Is to realize anonymous electronic commerce which is more secure than the prior art.

  In order to solve the above problems, an electronic commerce system according to a first aspect of the present invention is an electronic commerce system including a communication terminal, a service providing server, a third party server, and at least one authority server. The communication terminal uniquely identifies the user using the storage unit that stores the common key shared with the third party organization server and the public key corresponding to the secret key held by the third party organization server, and the public key. An encryption unit that generates an encrypted password in which a password corresponding to an identifier is encrypted using an encrypted identifier in which the identifier is encrypted and a common key, transaction information representing the content of a desired transaction, the encryption identifier, and encryption And a transaction transmitting unit for transmitting, to the service providing server, a password and attribute information representing an attribute for permitting the authorization agency server to refer to the service providing server. The authorization authority server transmits the encrypted identifier, the encrypted password, and the attribute information to the authority server, and the authority authority server receives the encrypted identifier, the encrypted password, and the attribute information received from the service providing server. A third party server including: an authentication information transfer unit that transmits the third party server to a third party server; and a transaction execution unit that executes a desired transaction using the user's personal information received from the third party server. Stores the personal information of the user, the registration identifier uniquely identifying the user, the registration password corresponding to the registration identifier, the common key shared with the communication terminal, and the secret key corresponding to the public key possessed by the communication terminal Storage unit, an identifier decryption unit for obtaining an decrypted identifier by decrypting the encrypted identifier received from the authorizing agency server using a secret key, and registration identification matching the decrypted identifier And a password decryption unit for obtaining a decryption password by decrypting the encrypted password received from the authorizing agency server using the common key, and associating with a registered identifier that matches the decryption identifier And an attribute transmitting unit for transmitting the personal information of the user corresponding to the attribute information to the authorizing agency server when the registered password matches the decryption password.

  In order to solve the above problems, an electronic commerce system according to a second aspect of the present invention is an electronic commerce system including a communication terminal, a service providing server, and a third party server, the communication terminal comprising Storage unit for storing a public key corresponding to a common key shared with the third party organization server and a secret key possessed by the third party organization server, and an encrypted identifier that encrypts an identifier uniquely identifying the user using the public key And an encryption unit that generates an encrypted password obtained by encrypting a password corresponding to an identifier using a common key, and transaction information representing the content of a desired transaction, an encrypted identifier, an encrypted password, and reference to an authority server A transaction transmitting unit for transmitting to the service providing server attribute information representing an attribute for permitting the service providing server, the service providing server receiving the encrypted identifier received from the communication terminal, the encrypted path And an authentication information transmission unit that transmits attribute information to a third party organization server, and a transaction execution unit that executes a desired transaction using the user's personal information received from the third party organization server. The third party server corresponds to the personal information of the user, the registered identifier uniquely identifying the user, the registered password corresponding to the registered identifier, the common key shared with the communication terminal, and the public key held by the communication terminal. A storage unit that associates and stores a secret key, an identifier decryption unit that obtains a decryption identifier by decrypting an encrypted identifier received from the service providing server using the secret key, and a common associated with a registration identifier that matches the decryption identifier A key acquisition unit for acquiring a key, a password decryption unit for decrypting an encrypted password received from a service providing server using a common key to obtain a decrypted password, and a decryption identifier When the registration password associated with the registration identifier that matches the decryption password includes an attribute transmitting unit for transmitting the personal information of the user corresponding to the attribute information to the service providing server, a.

  According to the present invention, in the electronic commerce service, complete anonymity of the user is realized, and communication between the service provider and the third party is not necessary. As a result, anonymous electronic commerce having higher security than the prior art is realized.

FIG. 1 is a diagram illustrating the functional configuration of the electronic commerce system of the embodiment. FIG. 2 is a diagram illustrating the functional configuration of the communication terminal of the embodiment. FIG. 3 is a diagram illustrating the functional configuration of the service providing server according to the embodiment. FIG. 4 is a diagram illustrating a functional configuration of a third party organization server according to the embodiment. FIG. 5 is a diagram illustrating the functional configuration of the authorization agency server according to the embodiment. FIG. 6 is a diagram illustrating the processing procedure of the electronic commerce method of the embodiment. FIG. 7 is a diagram illustrating the processing procedure of the electronic commerce method of the embodiment. FIG. 8 is a diagram illustrating the processing procedure of the electronic commerce method of the embodiment. FIG. 9 is a diagram illustrating the functional configuration of the electronic commerce system of the modification. FIG. 10 is a diagram illustrating the functional configuration of the service providing server of the modification. FIG. 11 is a diagram illustrating the processing procedure of the electronic commerce method of the modification. FIG. 12 is a diagram illustrating the processing procedure of the electronic commerce method of the modification.

  This invention comprises a "user" who uses an electronic commerce service on the Internet, a "service provider" who provides an electronic commerce service, a "third party organization" which stores personal information of the user, and a third Is a protocol executed with the “authorization body”, which is a procedural body authorized by the provider organization, and completes the e-commerce procedure without revealing any information that identifies the user's individual to the service provider. It is a method. Here, in some cases, there may be one or more authorization authorities.

  The embodiments described below use prior art common key cryptography, public key cryptography and digital signatures. The outline of these conventional techniques will be described below.

  In common key encryption, (1) the ciphertext c can be created using the plaintext m and the common key k, and (2) in the ciphertext c created by the plaintext m and the common key k, the ciphertext c and the common key It satisfies that the plaintext m can be decrypted using k and (3) the plaintext m can not be calculated uniquely with high probability from the ciphertext c without having the common key k.

Public key encryption is the ciphertext c ^p created a public key pk and that you can create a ciphertext c ^p with, by the public key pk and (2) the plaintext m (1) plaintext m, the ciphertext c ^p And that the plaintext m can be decrypted using the secret key sk paired with the public key pk, and (3) a ciphertext created from any _one of the plaintexts m ₁ and m ₂ without the secret key sk For c ^p _b , it is difficult to accurately determine which plaintext is selected.

The digital signature can create a signature σ using (1) plaintext m and a secret signature key k _sig , (2) a plaintext m and signature σ in a signature σ created by plaintext m and a signature key k _sig And a public verification key k _ver paired with a signature key k _sig can be correctly verified with high probability, (3) a pair of a plaintext m and a signature σ is created without the signature key k _sig At the time of the verification key k _ver , the verification failure with high probability is satisfied.

  Hereinafter, embodiments of the present invention will be described in detail. In the drawings, components having the same functions are denoted by the same reference numerals and redundant description will be omitted.

Embodiment
The present embodiment is an electronic commerce system and method for performing an electronic commerce procedure without revealing information identifying the user's individual to the service provider. For example, as shown in FIG. 1, the electronic commerce system according to the embodiment includes the communication terminal 1, the service providing server 2, the third party organization server 3, and N (≧ 1) authorization agency servers 4-1 to 4. -N is included. The authority server 4 may be single or plural. Below, an example in which there are a plurality of authorization agency servers 4 will be described. The communication terminal 1, the service providing server 2, the third party organization server 3, and the authorization organization server 4-n (n = 1, 2,..., N) are connected to the network 9, respectively. The network 9 is a circuit-switched or packet-switched communication network in which devices connected to each other can communicate with each other. For example, the Internet, LAN (Local Area Network), WAN (Wide Area Network), etc. Can be used.

  For example, as illustrated in FIG. 2, the communication terminal 1 according to the embodiment includes a storage unit 100, a personal information input unit 101, a password input unit 102, a key generation unit 103, an encryption unit 111, a random number generation unit 112, and an attribute signature unit 113. , A transaction signature unit 114, and a transaction transmission unit 115. The service providing server 2 according to the embodiment includes, for example, a storage unit 200 and an authentication information transmission unit 211 as shown in FIG. For example, as shown in FIG. 4, the third party organization server 3 according to the embodiment has a storage unit 300, an identifier generation unit 301, an identifier decryption unit 311, a key acquisition unit 312, a password decryption unit 313, a signature verification unit 314, and attributes. A transmission unit 315 is provided. The authorization agency server 4-n according to the embodiment includes, for example, an authentication information transfer unit 411 and a transaction execution unit 412 as shown in FIG. The electronic commerce method of the embodiment is realized by each device included in the electronic commerce system performing the process of each step shown in FIG.

  For each device included in the electronic commerce system, a special program is read into a known or dedicated computer having, for example, a central processing unit (CPU: Central Processing Unit), a main storage device (RAM: Random Access Memory), etc. It is a special device configured. Each device included in the electronic commerce system executes each process, for example, under the control of a central processing unit. Data input to each device included in the electronic commerce system and data obtained by each process are stored, for example, in the main storage device, and data stored in the main storage device is sent to the central processing unit as necessary. It is read and used for other processing. At least a part of each processing unit included in each device included in the electronic commerce system may be configured by hardware such as an integrated circuit. Each storage unit included in each device included in the electronic commerce system is, for example, an auxiliary configured by a main storage device such as a RAM (Random Access Memory) or a semiconductor memory device such as a hard disk, an optical disk, or a flash memory. It can be configured by a storage device or middleware such as a relational database or key value store.

  In the present embodiment, first, the user entrusts the personal information to the third party organization server 3 using the communication terminal 1. A procedure for the user to entrust personal information will be described with reference to FIG.

  The storage unit 300 of the third party organization server 3 stores a secret key sk of public key encryption. The storage unit 100 of the communication terminal 1 stores a public key pk corresponding to the secret key sk stored in the third party organization server 3. The pair (sk, pk) of the public key pk and the secret key sk is generated in advance by the third party server 3.

  In step S101, the personal information input unit 101 of the communication terminal 1 transmits the personal information input by the user to the third party organization server 3. The personal information is, for example, name, address, telephone number, credit card number, etc., information required to execute electronic commerce. The third party organization server 3 stores the personal information received from the communication terminal 1 in the storage unit 300.

  In step S301, the identifier generation unit 301 of the third party organization server 3 issues, to the user who has stored the personal information, an identifier ID uniquely identifying the user. The identifier generation unit 301 stores the issued identifier ID in association with the personal information stored in the storage unit 300 and transmits the identifier ID to the communication terminal 1. Hereinafter, the identifier ID stored in the storage unit 300 is also referred to as a registration identifier. The communication terminal 1 stores the identifier ID received from the third party organization server 3 in the storage unit 100.

  In step S102, the password input unit 102 of the communication terminal 1 transmits the password PW, which is paired with the identifier ID input by the user, to the third party organization server 3. The third party organization server 3 stores the password PW received from the communication terminal 1 in association with the registered identifier ID stored in the storage unit 300. Hereinafter, the password PW stored in the storage unit 300 is also referred to as a registered password.

In step S103, the key generation unit 103 of the communication terminal 1 generates a set (k _sig , k _ver ) of the common key k of the common key encryption, the signature key k _{sig of the} digital signature, and the verification key k _ver . The key generation unit 103 stores the generated common key k and the signature key k _sig in the storage unit 100. Also, the generated common key k and the verification key k _ver are transmitted to the third party organization server 3. The third party organization server 3 stores the common key k and the verification key k _ver received from the communication terminal 1 in association with the registration identifier ID and the registration password PW stored in the storage unit 300.

  Next, with reference to FIGS. 7-8, the procedure in which the user executes electronic commerce with the service provider will be described. Although the case where a user purchases goods from a service provider is explained to an example below, the contents of dealings are not limited to this. The symbol A surrounded by a circle in FIGS. 7 and 8 indicates that the process is continued from the corresponding portion in FIG. 7 to the corresponding portion in FIG.

In step S111, the encryption unit 111 of the communication terminal 1 encrypts the identifier ID with the public key pk stored in the storage unit 100, generates an encrypted identifier c ^p _ID is a ciphertext identifier ID . Further, the encryption unit 111 encrypts the password PW using the common key k stored in the storage unit 100, and generates an encrypted password c _PW which is a ciphertext of the password _PW . Encryption unit 111 outputs the generated and encrypted identifier c ^p _ID and the encrypted password c _PW to the transaction transmission section 115.

In step S112, the random number generation unit 112 of the communication terminal 1 generates a random number R _n corresponding to the approval agency server 4-n, and transmits it to the third party agency server 3. At this time, when there are a plurality of authorization agency servers 4-n to be used in the purchase procedure, the random number R _n is generated by the same number as the authorization agency server 4-n, and all the random numbers R _n are sent to the third party agency server 3. Send. For example, in the case where the authorization agency server 4-1 responsible for delivering the goods and the authorization agency server 4-2 responsible for settling the payment are used for the purchasing procedure, two random numbers R ₁ and R ₂ are generated, and the third party is Send to the agency server 3 The generation of the random number R _n and the transmission to the third party organization server 3 are performed each time the user uses the service. The third party organization server 3 stores the random number R _n received from the communication terminal 1 in the storage unit 300.

In step S113, the attribute signature unit 113 of the communication terminal 1, the random number R _n and the random number R and the DN P _n Regulatory server 4-n corresponding to the _n, attribute Q _n to allow a reference to the identification name P _n And a value S _n = R _n || P _n || Q _n is generated, and a signature σ _Sn to the value S _n is generated using the signature key k _sig stored in the storage unit 100. Here, || is a combination operator. At this time, if the regulatory servers 4-n utilized there are multiple, by combining the one identification name P _n and attribute Q _n for one random number R _n to generate a plurality of values S _n, the phase Create different signatures σ _Sn as many as the number of authority servers 4-n. For example, if you need two regulatory servers 4-1, 4-2, as described above, permits the reference to the DN P ₁ and DN P ₁ Regulatory servers 41 with respect to the random number R ₁ The value S ₁ = R ₁ || P ₁ || Q ₁ combined with the attribute Q ₁ to be added, the signature σ _{S 1} to Q ₁ , the identifier P ₂ of the authority server 4-2 and the identifier P for the random number R ₂ values combined with the attributes Q ₂ to which permits a reference to the ₂ S ₂ = generates the R ₂ || P ₂ sign a || Q ₂ σ _S2. The attribute signature unit 113 outputs the generated signature σ _Sn to the transaction transmission unit 115.

In step S114, the transaction signature unit 114 of the communication terminal 1 receives the identification number SID of the product which the user desires to purchase and the price p of the product, and _{adds the} signature key k _sig stored in the storage unit 100. Use to generate a signature σ _p on price p. However, the identification number SID and the price p are not limited to the combination of one product and its unit price, and may be any form as long as it is information that can specify the product to be purchased and the price. For example, the SID may be a list of identification numbers of a plurality of products desired to be purchased, and p may be a total of a plurality of products desired to be purchased. The transaction signature unit 114 outputs the generated signature σ _p to the transaction transmission unit 115. For the purpose of enhancing security, the signature σ _p may be a signature for the concatenation of the price p and a random number. In this case, a random number R _{n ′} corresponding to the identification name P _{n ′} of the authorization agency server 4-n ′ performing the finalization procedure is generated, and a signature σ _{p |} on p || R _{n ′} is generated using the signature key k _sig. Generate _{Rn '} . The transaction signature unit 114 outputs the signature σ _p │R _{n '} to the transaction transmission unit 115 as a signature σ _p .

In step S115, the transaction transmitting unit 115 of the communication terminal 1 transmits the transaction information (SID, p, σ _p ) including the product identification number SID, the product price p, and the signature σ _p to the price p, and the encryption identifier c ^p _ID and authentication information consisting of the encrypted password ^{_{c PW (c p ID, c}} PW) and, DN P _n, attribute Q _n, and attribute information consisting of the signature _{σ Sn (P n, Q n} , σ Sn) And (SID, p, σ _p , c ^p _ID , c _PW , (P _n , Q _n , σ _Sn )) are sent to the service providing server 2. However, when multiple _{pieces of} attribute information (P _n , Q _n , σ _Sn ) exist, attribute information (P _n , Q _n , σ _Sn ) is arranged and transmitted as many as the number of the authority server 4-n to use. For example, if the above manner requires two regulatory servers 4-1,4-2, (SID, p, σ p, c p ID, c PW, (P 1, Q 1, σ S1), (P ₂ , Q ₂ , σ _S2 ) is sent to the service providing server 2.

In step S211, the authentication information transmission unit 211 of the service providing server 2 receives (SID, p, σ _p , c ^p _ID , c _PW , (P _n , Q _n , σ _Sn )) received from the communication terminal 1 , set of the authentication information and the attribute information other than the transaction information ^{_{(c p ID, c PW,}} (P n, Q n, σ Sn)) to the transmission to the authorization authority server 4-n indicated by the distinguished name P _n. At this time, if the regulatory servers 4-n to use there are a plurality of pairs (c ^p _ID with the authentication information and attribute information to each authorization organization server 4-n, _{respectively, c PW, (P n,} Q n, σ Send _Sn ))). For example, if you need two regulatory servers 4-1, 4-2, as described above, the authentication information transmitting unit ^{_{211, (c p ID, c PW}} , (P 1, Q 1, σ S1)) sends to the authorization authority server 4-1 transmits ^{_{(c p ID, c PW,}} (P 2, Q 2, σ S2)) to the authorization authority server 4-2.

In step S411, the authorization authority server 4-n authentication information transfer unit 411 of the set of the authentication information and the attribute information received from the service providing server ^{_{2 (c p ID, c PW}} , (P n, Q n, σ Sn )) To the third party server 3).

In step S311, the identifier decoding unit 311 of the third party server 3 decrypts the encrypted identifier c ^p _ID received from the authorization authority server 4-n using the secret key sk in the storage unit 300 are stored, Get identifier ID '. Hereinafter, the decrypted identifier ID 'is also referred to as a decrypted identifier. The identifier decryption unit 311 outputs the decryption identifier ID ′ to the key acquisition unit 312.

In step S312, the key acquisition unit 312 of the third-party server 3 compares the registration identifier ID stored in the storage unit 300 with the decryption identifier ID ', and associates the same with the registration identifier ID that matches the decryption identifier ID'. The common key k and the verification key k _ver are acquired. The key acquisition unit 312 outputs the common key k and the verification key k _ver to the password decryption unit 313.

In step S313, the password decryption unit 313 of the third party organization server 3 decrypts the encrypted password c _PW received from the accreditation organization server 4-n using the common key k acquired from the storage unit 300, and the password PW ′. Get Hereinafter, the decrypted password PW 'is also referred to as a decrypted password. The password decryption unit 313 compares the registered password PW stored in the storage unit 300 in association with the decryption identifier ID ′ with the decryption password PW ′, and if the two do not match, the process is abnormally terminated (step S316). ).

In step S314, the signature verification unit 314 of the third party organization server 3 receives the verification key k _ver acquired from the storage unit 300, the random number R _n stored in the storage unit 300, and the authorization organization server 4-n. The signature σ _Sn received from the authority server 4-n is verified using the distinguished name P _n and the attribute Q _n . If the verification of the signature σ _Sn fails, the signature verification unit 314 determines that the process is abnormally terminated (step S316). On the other hand, if the verification of the signature σ _Sn is successful, it is recognized that the purchase procedure is legitimate, and the process proceeds to step S315.

In step S 315, the attribute transmission unit 315 of the third-party server 3 acquires, from the storage unit 300, the personal information Q _ID of the user corresponding to the attribute Q _n for which reference is permitted to the identification name P _{n. It} transmits to the authority server 4-n which n shows.

In step S412, the transaction execution unit 412 of the authorizing agency server 4-n obtains information necessary for the completion of the transaction, an article or the like from the service providing server 2, and uses the attribute Q _n received from the third party server 3 Complete the transaction using the corresponding personal information Q _ID . For example, in the case where the authorizing agency server 4-1 is an institution that carries out a payment procedure, the attribute is obtained only if the product price p and its signature σ _p are obtained from the service providing server 2 and verification of the signature σ _p is successful. Perform remittance processing using personal information corresponding to Q ₁ (for example, the card number of the user). If the approval authority server 4-2 was the institution to perform the delivery, to get the goods from the service providing server 2, the delivery process using the personal information (for example, a user of the name, address, etc.) corresponding to the attribute Q ₂ Do.

  As described above, electronic commerce can be completed without requiring communication between the service providing server 2 and the third party organization server 3 while completely maintaining the anonymity of the user.

<Modification>
In the electronic commerce system of the embodiment, the service providing server 2 and the authorization agency server 4-n are configured as separate devices. However, since the personal information acquired by the authorizing agency server 4-n from the third party organization server 3 is a part of the service, for example, it is a transaction that does not require a high security level. It is also possible to integrate the engine server 4-n and configure it as the same device.

  For example, as shown in FIG. 9, the electronic commerce system of the modification includes a communication terminal 1, a third party server 3, and a service providing server 5. The communication terminal 1, the third party organization server 3, and the service providing server 5 are connected to the network 9 as in the embodiment.

  For example, as shown in FIG. 10, the service providing server 5 of the modified example includes a storage unit 200, an authentication information transmission unit 221, and a transaction execution unit 222. Each device included in the electronic commerce system performs the process of each step shown in FIG. 11-12 to realize the electronic commerce method of the modification.

  Hereinafter, with reference to FIGS. 11-12, in the electronic commerce system of the modification, a procedure for the user to execute the electronic commerce with the service provider will be described focusing on differences from the embodiment. However, as in the embodiment, it is assumed that the user entrusts personal information to a third party organization. The symbol B surrounded by a circle in FIGS. 11 and 12 indicates that the process continues from the corresponding portion in FIG. 11 to the corresponding portion in FIG.

In step S111, the encryption unit 111 of the communication terminal 1 encrypts the identifier ID with the public key pk stored in the storage unit 100, generates an encrypted identifier c ^p _ID is a ciphertext identifier ID . Further, the encryption unit 111 encrypts the password PW using the common key k stored in the storage unit 100, and generates an encrypted password c _PW which is a ciphertext of the password _PW . Encryption unit 111 outputs the generated and encrypted identifier c ^p _ID and the encrypted password c _PW to the transaction transmission section 115.

  In step S 112, the random number generation unit 112 of the communication terminal 1 generates a random number R corresponding to the service providing server 5 and transmits the random number R to the third party organization server 3. The generation of the random number R and the transmission to the third party organization server 3 are performed each time the user uses the service. The third party organization server 3 stores the random number R received from the communication terminal 1 in the storage unit 300.

In step S113, the attribute signature unit 113 of the communication terminal 1 combines the random number R, the identification name P of the service providing server 5, and the attribute Q for which reference to the identification name P is permitted. S = R || P | | Q is generated, and a signature σ _S to the value _S is generated using the signature key k _sig stored in the storage unit 100. The attribute signature unit 113 outputs the generated signature σ _S to the transaction transmission unit 115.

In step S114, the transaction signature unit 114 of the communication terminal 1 receives the identification number SID of the product which the user desires to purchase and the price p of the product, and _{adds the} signature key k _sig stored in the storage unit 100. Use to generate a signature σ _p on price p. The transaction signature unit 114 outputs the generated signature σ _p to the transaction transmission unit 115.

In step S115, the transaction transmitting unit 115 of the communication terminal 1 transmits the transaction information (SID, p, σ _p ) including the product identification number SID, the product price p, and the signature σ _p to the price p, and the encryption identifier c ^p _ID and authentication information (c ^p _ID, c _PW) consisting of the encrypted password c _PW and, DN P, and attributes Q, and signature sigma consisting of _S attribute information (P, Q, sigma _S) and a set Then, (SID, p, σ _p , c ^p _ID , c _PW , (P, Q, σ _S )) is transmitted to the service providing server 5.

In step S221, the authentication information transmission unit 221 of the service providing server 5 performs the transaction among the (SID, p, σ _p , c ^p _ID , c _PW , (P, Q, σ _S )) received from the communication terminal 1 set of the authentication information and the attribute information other than the information ^{_{(c p ID, c PW,}} (P, Q, σ S)) and transmits the to the third party server 3.

In step S311, the identifier decoding unit 311 of the third party server 3 decrypts the encrypted identifier c ^p _ID received from the service providing server 5 by using the secret key sk in the storage unit 300 are stored, decoded identifier Get an ID '. The identifier decryption unit 311 outputs the decryption identifier ID ′ to the key acquisition unit 312.

In step S312, the key acquisition unit 312 of the third-party server 3 compares the registration identifier ID stored in the storage unit 300 with the decryption identifier ID ', and associates the same with the registration identifier ID that matches the decryption identifier ID'. The common key k and the verification key k _ver are acquired. The key acquisition unit 312 outputs the common key k and the verification key k _ver to the password decryption unit 313.

In step S313, the password decryption unit 313 of the third party organization server 3 decrypts the encrypted password c _PW received from the service providing server 5 using the common key k acquired from the storage unit 300, and decrypts the decrypted password PW ′. obtain. The password decryption unit 313 compares the registered password PW stored in the storage unit 300 in association with the decryption identifier ID ′ with the decryption password PW ′, and if the two do not match, the process is abnormally terminated (step S316). ).

In step S 314, the signature verification unit 314 of the third party organization server 3 checks the verification key k _ver acquired from the storage unit 300, the random number R stored in the storage unit 300, and the identification name received from the service providing server 5. The signature σ _S received from the service providing server 5 is verified using P and the attribute Q. If the verification of the signature σ _S fails, the signature verification unit 314 determines that the process is abnormally terminated (step S316). On the other hand, if the verification of the signature σ _S is successful, it is recognized that the purchase procedure is legitimate, and the process proceeds to step S315.

In step S 315, the attribute transmitting unit 315 of the third party organization server 3 acquires the personal information Q _ID of the user corresponding to the attribute Q for which the identification name P is permitted to be referred to from the storage unit 300. Send.

In step S222, the transaction execution unit 222 of the service providing server 5 uses the personal information Q _ID corresponding to the attribute Q received from the third party organization server 3 to complete the transaction. For example, when the service providing server 5 performs a settlement procedure, the signature σ _p is verified using the verification key k _ver received from the communication terminal 1 and the price p of the product, and the verification of the signature σ _p is successful. As long as the personal information (for example, the card number of the user etc.) corresponding to the attribute Q is used, the remittance process is performed. Further, when the service providing server 5 performs delivery, delivery processing is performed using personal information (for example, the name, address, etc. of the user) corresponding to the attribute Q.

  According to the present invention, in the electronic commerce service, by entrusting the personal information of the user to a third party organization, it is possible to provide the service without obtaining the information by which the service provider can identify the individual of the user. At that time, by adding information that guarantees the legitimacy of the user and the legitimacy of the transaction procedure to the communication of the purchase procedure, without registering the user's identifier in the service provider at all, and with the service provider A legitimate transaction was established without communicating with a third party. By this configuration, according to the present invention, the service provider can not disclose any information that can identify the user's individual, and the third party that manages personal information and the service provider Electronic commerce can be established without direct communication between them. In the prior art, information for identifying the user to the service provider (for example, a service ID, an e-mail address, etc.) is leaked, and a third party organization and the service provider directly communicate with each other. It was vulnerable to attacks by unauthorized service providers who did not comply with the above, while the business information of the service provider was leaked to a third party. Therefore, according to the electronic commerce technology of the present invention, it is possible to realize anonymous electronic commerce whose security is improved compared to the prior art.

  As mentioned above, although embodiment of this invention was described, a specific structure is not restricted to these embodiment, Even if there is a change of design suitably etc. in the range which does not deviate from the meaning of this invention, Needless to say, it is included in the present invention. The various processes described in the embodiment are not only executed chronologically according to the order described, but may be executed in parallel or individually depending on the processing capability of the apparatus executing the process or the necessity.

[Program, recording medium]
When various processing functions in each device described in the above embodiments are implemented by a computer, the processing content of the function that each device should have is described by a program. By executing this program on a computer, various processing functions in each of the above-described devices are realized on the computer.

  The program describing the processing content can be recorded in a computer readable recording medium. As the computer readable recording medium, any medium such as a magnetic recording device, an optical disc, a magneto-optical recording medium, a semiconductor memory, etc. may be used.

  Further, the distribution of this program is carried out, for example, by selling, transferring, lending, etc. a portable recording medium such as a DVD, a CD-ROM, etc. in which the program is recorded. Furthermore, this program may be stored in a storage device of a server computer, and the program may be distributed by transferring the program from the server computer to another computer via a network.

  For example, a computer that executes such a program first temporarily stores a program recorded on a portable recording medium or a program transferred from a server computer in its own storage device. Then, at the time of execution of the process, this computer reads the program stored in its own storage device and executes the process according to the read program. Further, as another execution form of this program, the computer may read the program directly from the portable recording medium and execute processing according to the program, and further, the program is transferred from the server computer to this computer Each time, processing according to the received program may be executed sequentially. In addition, a configuration in which the above-described processing is executed by a so-called ASP (Application Service Provider) type service that realizes processing functions only by executing instructions and acquiring results from the server computer without transferring the program to the computer It may be Note that the program in the present embodiment includes information provided for processing by a computer that conforms to the program (such as data that is not a direct command to the computer but has a property that defines the processing of the computer).

  Further, in this embodiment, although the present apparatus is configured by executing a predetermined program on a computer, at least a part of the processing contents may be realized as hardware.

1 communication terminal 2 service providing server 3 third party organization server 4 authorizing organization server 9 network

Claims (8)

An electronic commerce system comprising a communication terminal, a service providing server, a third party server, and at least one authorization server.
The above communication terminal is
A storage unit for storing a public key corresponding to the common key shared with the third party organization server and a secret key held by the third party organization server;
An encryption unit that generates an encrypted password in which a password corresponding to the identifier is encrypted using the encrypted identifier obtained by encrypting an identifier that uniquely identifies the user using the public key and the common key;
A transaction transmitting unit for transmitting, to the service providing server, transaction information representing the content of a desired transaction, the encrypted identifier, the encrypted password, and attribute information representing an attribute for permitting the authorization server to refer to;
Including
The above service providing server is
An authentication information transmission unit that transmits the encrypted identifier, the encrypted password, and the attribute information received from the communication terminal to the authorizing agency server;
Including
The above authority server is
An authentication information transfer unit that transmits the encrypted identifier, the encrypted password, and the attribute information received from the service providing server to the third party server;
A transaction execution unit that executes the desired transaction using personal information of the user received from the third party organization server;
Including
The above third party server is
Personal information of the user, a registered identifier uniquely identifying the user, a registered password corresponding to the registered identifier, a common key shared with the communication terminal, and a secret key corresponding to a public key held by the communication terminal A storage unit that associates and stores,
An identifier decryption unit that decrypts the encrypted identifier received from the authorization server using the secret key to obtain a decrypted identifier;
A key acquisition unit for acquiring the common key associated with the registration identifier that matches the decryption identifier;
A password decryption unit that decrypts the encrypted password received from the authorization server using the common key to obtain a decrypted password;
An attribute transmitting unit for transmitting personal information of the user corresponding to the attribute information to the authorizing agency server when the registered password associated with the registered identifier matching the decryption identifier matches the decryption password;
including,
E-commerce system. The electronic commerce system according to claim 1, wherein
The storage unit of the communication terminal further stores a signature key corresponding to the verification key held by the third party server.
The storage unit of the third party organization server further stores a verification key corresponding to the signature key held by the communication terminal,
The above communication terminal is
A random number generation unit for transmitting a random number corresponding to the authorization agency server to the third party agency server;
An attribute signature unit that generates a signature on a value obtained by combining at least the random number and the attribute information using the signature key;
Further include
The above third party server is
When the registered password associated with the registered identifier matching the decryption identifier matches the decryption password, the verification key, the random number received from the communication terminal, and the attribute information received from the authorizing organization server A signature verification unit that verifies the signature using
Further include
The attribute transmitting unit of the third party organization server transmits personal information of the user corresponding to the attribute information received from the authorization organization server to the authorization organization server when the verification of the signature is successful. ,
E-commerce system. An electronic commerce system including a communication terminal, a service providing server, and a third party organization server,
The above communication terminal is
A storage unit for storing a public key corresponding to the common key shared with the third party organization server and a secret key held by the third party organization server;
An encryption unit that generates an encrypted password in which a password corresponding to the identifier is encrypted using the encrypted identifier obtained by encrypting an identifier that uniquely identifies the user using the public key and the common key;
A transaction transmitting unit for transmitting, to the service providing server, transaction information representing the content of a desired transaction, the encrypted identifier, the encrypted password, and attribute information representing an attribute for permitting the authorization server to refer to;
Including
The above service providing server is
An authentication information transmission unit that transmits the encrypted identifier, the encrypted password, and the attribute information received from the communication terminal to the third party organization server;
A transaction execution unit that executes the desired transaction using personal information of the user received from the third party organization server;
Including
The above third party server is
Personal information of the user, a registered identifier uniquely identifying the user, a registered password corresponding to the registered identifier, a common key shared with the communication terminal, and a secret key corresponding to a public key held by the communication terminal A storage unit that associates and stores,
An identifier decryption unit for decrypting the encrypted identifier received from the service providing server using the secret key to obtain a decrypted identifier;
A key acquisition unit for acquiring the common key associated with the registration identifier that matches the decryption identifier;
A password decryption unit that decrypts the encrypted password received from the service providing server using the common key to obtain a decrypted password;
An attribute transmitting unit for transmitting personal information of the user corresponding to the attribute information to the service providing server when the registration password associated with the registration identifier matching the decryption identifier matches the decryption password;
including,
E-commerce system. A storage unit for storing a common key shared with a third party organization server and a public key corresponding to a secret key held by the third party organization server;
An encryption unit that generates an encrypted password in which a password corresponding to the identifier is encrypted using the encrypted identifier obtained by encrypting an identifier that uniquely identifies the user using the public key and the common key;
A transaction transmitting unit that transmits, to the service providing server, transaction information representing the content of a desired transaction, the encrypted identifier, the encrypted password, and attribute information representing an attribute that permits an authorization server to refer to the content;
Communication terminal including Associate the personal information of the user, the registered identifier uniquely identifying the user, the registered password corresponding to the registered identifier, the common key shared with the communication terminal, and the secret key corresponding to the public key held by the communication terminal A storage unit to store;
An identifier decryption unit that decrypts the encrypted identifier received from the authorization server using the secret key to obtain a decrypted identifier;
A key acquisition unit for acquiring the common key associated with the registration identifier that matches the decryption identifier;
A password decryption unit that decrypts the encrypted password received from the authorization server using the common key to obtain a decrypted password;
When the registered password associated with the registered identifier matching the decryption identifier matches the decryption password, the personal information of the user corresponding to the attribute information representing an attribute that permits the authorization server to refer is the information An attribute sender that sends to the authorizing agency server;
Including
The encrypted identifier is obtained by encrypting an identifier that uniquely identifies the user using the public key,
The encrypted password is obtained by encrypting the password corresponding to the identifier using the common key,
Third party server. An electronic commerce method executed by an electronic commerce system including a communication terminal, a service providing server, a third party server, and at least one authorization server.
The storage unit of the communication terminal stores a common key shared with the third party organization server and a public key corresponding to a secret key of the third party organization server,
In the storage unit of the third party organization server, personal information of the user, a registered identifier uniquely identifying the user, a registered password corresponding to the registered identifier, a common key shared with the communication terminal, and the communication terminal The secret key corresponding to the public key possessed by is associated and stored,
An encryption identifier obtained by encrypting an identifier for uniquely identifying the user using the public key, and an encryption identifier obtained by encrypting a password corresponding to the identifier using the common key. Generate a password,
The service transmitting server of the communication terminal transmits to the service providing server the transaction information indicating the content of the desired transaction, the encrypted identifier, the encrypted password, and the attribute information indicating the attribute for permitting the authorization server to refer Send
The authentication information transmission unit of the service providing server transmits the encrypted identifier, the encrypted password, and the attribute information received from the communication terminal to the authorization server.
The authentication information transfer unit of the authorization organization server transmits the encrypted identifier, the encrypted password, and the attribute information received from the service providing server to the third party organization server,
The identifier decryption unit of the third party organization server decrypts the encrypted identifier received from the authorization agency server using the secret key to obtain a decryption identifier,
The key acquisition unit of the third party organization server acquires the common key associated with the registration identifier that matches the decryption identifier,
The password decryption unit of the third party organization server decrypts the encrypted password received from the authorization agency server using the common key to obtain a decryption password.
When the attribute transmission unit of the third party organization server matches the registered password associated with the registered identifier matching the decrypted identifier with the decrypted password, the personal information of the user corresponding to the attribute information is Send to the above authority server,
The transaction execution unit of the authorization agency server executes the desired transaction using the user's personal information received from the third party agency server.
E-commerce method. An electronic commerce method executed by an electronic commerce system including a communication terminal, a service providing server, and a third party server.
The storage unit of the communication terminal stores a common key shared with the third party organization server and a public key corresponding to a secret key of the third party organization server,
In the storage unit of the third party organization server, personal information of the user, a registered identifier uniquely identifying the user, a registered password corresponding to the registered identifier, a common key shared with the communication terminal, and the communication terminal The secret key corresponding to the public key possessed by is associated and stored,
An encryption identifier in which an encryption unit of the communication terminal encrypts an identifier that uniquely identifies a user using the public key, and an encrypted password in which a password corresponding to the identifier is encrypted using the common key Generate
The service transmitting server of the communication terminal transmits to the service providing server the transaction information indicating the content of the desired transaction, the encrypted identifier, the encrypted password, and the attribute information indicating the attribute for permitting the authorization server to refer Send
The authentication information transmission unit of the service providing server transmits the encrypted identifier received from the communication terminal, the encrypted password, and the attribute information to the third party server.
The identifier decryption unit of the third party server decrypts the encrypted identifier received from the service providing server using the secret key to obtain a decrypted identifier.
The key acquisition unit of the third party organization server acquires the common key associated with the registration identifier that matches the decryption identifier,
The password decryption unit of the third party organization server decrypts the encrypted password received from the service providing server using the common key to obtain a decrypted password.
When the attribute transmission unit of the third party organization server matches the registered password associated with the registered identifier matching the decrypted identifier with the decrypted password, the personal information of the user corresponding to the attribute information is Send to the above service provider server,
The transaction execution unit of the service providing server executes the desired transaction using the personal information of the user received from the third party server.
E-commerce method.   A program for causing a computer to function as the communication terminal according to claim 4 or a third party server according to claim 5.

Images