JP2022115353A - Electronic information storage medium and settlement processing method - Google Patents

Abstract

To provide electronic information storage media and settlement processing methods capable of increasing convenience and security of a user of a moving body such as a vehicle in a settlement transaction.SOLUTION: When an ECU 2 enters a range of capable of short-range radio communication with a settlement terminal 1, mutual authentication processing for establishing a secure session is executed by using an encryption key unique to a vehicle C and an encryption key unique to the settlement terminal 1 between the settlement terminal 1 and the eSE3 via the ECU2. The settlement terminal 1 issues a settlement command which is encrypted by using a session key generated in the mutual authentication processing to the eSE3 via the ECU2. In response to the eSE3 receiving the settlement command, settlement data is read out from an NVM 33 depending on the settlement command to send a response including the read out settlement data to the settlement terminal 1 via the ECU 2.SELECTED DRAWING: Figure 5

Description

The present invention relates to a technical field such as a payment processing method executed by a payment terminal installed outside a vehicle, a control device mounted on the vehicle, and a secure element mounted on the vehicle.

Conventionally known is the technology of using a vehicle as a means of payment to complete a payment transaction. For example, in Patent Document 1, when a VID (Vehicle Interface Device) installed in a vehicle receives a request for payment account information from a merchant access device, it determines whether the user's mobile communication device is in the vehicle, A system is disclosed for transmitting payment account information read from a payment card (e.g., credit card) inserted in a VID to a merchant access device when the mobile communication device determines that it is in a vehicle. The system provides that, in the presence of a VID, a vehicle equipped with the VID, and a mobile communication device, the user pays for each transaction to achieve three-factor security in addition to simply owning three combined devices. There is no need to re-enter account information.

JP 2020-053066 A

However, in the system disclosed in Patent Document 1, a payment card inserted into a VID provided in the vehicle is used for payment, and the payment for the vehicle cannot be made, which poses a problem of convenience. . In addition, the system disclosed in Patent Literature 1 does not perform authentication processing using a cryptographic key, so there is also the problem of being vulnerable in terms of security.

Accordingly, the present invention has been made in view of the above points and the like, and an electronic information storage medium and a payment processing method capable of improving convenience and security for users of moving bodies such as vehicles in payment transactions. intended to provide

In order to solve the above-mentioned problems, the invention according to claim 1 provides an electronic device mounted on a mobile body on which a user can board and having a memory for storing an encryption key unique to the mobile body and payment data used for payment. An information storage medium comprising an interface unit mounted on the mobile body and connected to a control device having a short-range wireless communication function, and a short-range wireless connection between the control device and a payment terminal installed outside the mobile body. To establish a secure session with the payment terminal using an encryption key specific to the mobile object and an encryption key specific to the payment terminal via the control device when entering a communicable range and a settlement command encrypted with a session key generated in the mutual authentication process and common to the settlement terminal via the control device a transmission means for reading out the payment data from the memory in accordance with the payment command when the payment command is received, and transmitting a response including the read payment data to the payment terminal via the control device; characterized by comprising

According to a second aspect of the present invention, in the electronic information storage medium according to the first aspect, when the command for payment is received via the control device, it is determined whether or not to permit the payment to the control device. Inquiry means for inquiring the user through the control device, wherein the transmission means controls the response including the payment data only when the user gives an instruction to permit the payment in response to the inquiry. It is characterized by transmitting to the settlement terminal via the device.

The invention according to claim 3 comprises a payment terminal installed outside a mobile body on which a user can board and having a short-range wireless communication function, a control device mounted on the mobile body and having a short-range wireless communication function, and A payment processing method executed by an electronic information storage medium mounted on a mobile object and having a memory for storing an encryption key unique to the mobile object and payment data used for payment, wherein the control device is the payment terminal. and a cryptographic key unique to the mobile unit and a cryptographic key unique to the settlement terminal through the control device between the settlement terminal and the electronic information storage medium a step of executing mutual authentication processing for establishing a secure session using the encryption key of the above; and a common session between the payment terminal and the electronic information storage medium using the session key generated in the mutual authentication processing a step of transmitting a payment command encrypted with a key to the electronic information storage medium via the control device; reading data for payment from the memory, and transmitting a response including the read data for payment to the payment terminal via the control device.

According to a fourth aspect of the invention, in the payment processing method according to the third aspect, in the transmitting step, the electronic information storage medium inquires of the control device whether or not the payment is permitted, and responds to the inquiry. wherein the electronic information storage medium transmits a response including the payment data to the payment terminal via the control device only when information indicating permission for payment is received from the control device via the control device and

The invention according to claim 5 is the payment processing method according to claim 4, wherein the control device instructs the user whether or not to permit the payment in response to the inquiry from the electronic information storage medium. and requesting the payment data from the electronic information storage medium when the control device receives an instruction to permit the payment from the user.

ADVANTAGE OF THE INVENTION According to this invention, the user's convenience and security of moving bodies, such as a vehicle, can be improved in a settlement transaction.

It is a figure showing an example of outline composition of payment processing system S concerning this embodiment. 1 is a diagram showing a schematic configuration example of a settlement terminal 1; FIG. It is a figure which shows the example of an outline|summary structure of ECU2. It is a figure which shows the outline|summary structure example of eSE3. 4 is a sequence diagram showing an example of a transaction performed before starting a secure session in payment processing system S; FIG. FIG. 2 is a conceptual diagram showing the positional relationship between a wireless communication unit 11 embedded in the ground of a pay-by-the-hour parking lot and a vehicle C; FIG. 10 is a sequence diagram showing an example of a transaction executed after a secure session is started in payment processing system S;

BEST MODE FOR CARRYING OUT THE INVENTION Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. The embodiment described below is an embodiment in which the present invention is applied to a payment processing system capable of paying for a vehicle using an eSE (embedded secure element). The eSE is permanently mounted on the vehicle. Permanently mounted to the vehicle means fixed within the vehicle such that it cannot be easily removed from the vehicle. The method of fixing the eSE in the vehicle is not particularly limited, but one example is soldering it to a base or the like in the vehicle. A vehicle is an example of a mobile object that a user can board, such as a two-wheeled vehicle, a four-wheeled vehicle, or a bicycle.

[1. Outline configuration of payment processing system S]
First, a schematic configuration of a payment processing system S according to the present embodiment will be described with reference to FIG. 1 and the like. FIG. 1 is a diagram showing a schematic configuration example of a payment processing system S according to this embodiment. As shown in FIG. 1, the payment processing system S includes a payment terminal 1, an ECU (Electronic Control Unit) 2, and an eSE3. The payment terminal 1 and the ECU (Electronic Control Unit) 2 can perform short-range wireless communication using, for example, NFC (Near field communication), Bluetooth (registered trademark), or UWB (Ultra Wide Band) technology. It has become. The payment processing system S may be provided with a management server that manages information such as users registered as members who use the system. Here, the user is the user of vehicle C (for example, the owner of vehicle C).

Settlement terminals 1 are installed at locations such as stores with drive-through facilities, parking lots, gas stations, and toll booths on motorways, and are used for payment when users purchase products or receive services. It is a terminal that performs payment processing for Such places are outside the vehicle C and are vehicle-visited places that the vehicle C can travel and visit. Payment methods used in payment processing include electronic money payment, credit card payment, and the like, but are not particularly limited. If the payment method is credit card payment, the payment terminal 1 may access a management server that manages credit card information via a network (not shown) to make a credit inquiry.

FIG. 2 is a diagram showing a schematic configuration example of the payment terminal 1. As shown in FIG. As shown in FIG. 2, the payment terminal 1 includes a wireless communication unit 11, a storage unit 12, a control unit 13, and the like. The wireless communication unit 11 is a wireless communication device (for example, a reader/writer) that has an antenna and performs contactless communication using NFC, Bluetooth, or UWB technology. For example, wireless communication is performed with the ECU 2). In particular, when UWB technology is used, the wireless communication unit 11 periodically checks (position check) whether or not a communication partner exists within a preset distance range, and confirms that the communication partner exists within the distance range. Wireless communication is performed with the confirmed communication partner. Note that the wireless communication device may be embedded in the ground through which the vehicle C passes, outside the housing in which the storage unit 12 and the control unit 13 of the payment terminal 1 are mounted, for example.

The storage unit 12 stores an operating system (OS) and applications. Applications include mutual authentication processing programs and payment processing programs. Furthermore, the storage unit 12 stores a key pair (encryption key) of a public key and a private key unique to the settlement terminal 1 . Here, the public key included in the key pair and the key ID for specifying the public key are shared with the eSE 3 in advance. The public key and key ID may be linked to the terminal information of the settlement terminal 1 and managed by the management server. As a result, the public key and key ID unique to the payment terminal 1 are provided to the eSE 3 via the ECUs 2 mounted on the vehicles C of each of the users registered as members.

The control unit 13 includes a CPU (Central Processing Unit), a RAM (Random Access Memory), a ROM (Read Only Memory), and the like. The control unit 13 executes mutual authentication processing for establishing a secure session with the eSE 3 via the ECU 2 according to a mutual authentication processing program. In this mutual authentication process, a private key unique to the payment terminal 1 and a public key unique to the eSE 3 (in other words, a public key unique to the vehicle C) are used, and ECDH (Elliptic curve Diffie-Hellman key exchange) is used. Mutual authentication is performed by key exchange and signature generation and signature verification by ECDSA (Elliptic Curve Digital Signature Algorithm). In addition, after establishing a secure session with the eSE 3, the control unit 13 encrypts with the session key generated in the mutual authentication process and common with the payment terminal 1 according to the payment processing program. Then, the settlement command is sent to the eSE3 via the ECU2. Then, when a response to the payment command is received from the eSE 3 via the ECU 2, the control unit 13 executes payment processing for payment of charges.

The ECU 2 is a control device that is mounted on the vehicle C and controls the vehicle C. As shown in FIG. The ECU 2 is mounted, for example, inside the center console. FIG. 3 is a diagram showing a schematic configuration example of the ECU 2. As shown in FIG. As shown in FIG. 3, the ECU 2 includes a wireless communication section 21, an interface (I/F) section 22, a storage section 23, a control section 24, and the like. The wireless communication unit 21 is a wireless communication device that has an antenna and performs non-contact communication using NFC, Bluetooth, or UWB technology. Wireless communication is performed between The interface unit 22 serves as an interface with the eSE3 and is electrically connected to the eSE3. Examples of interfaces include SPI (Serial Peripheral Interface), I ² C (Inter-Integrated Circuit), and ISO7816 interface.

The storage unit 23 stores an operating system and applications. Applications include vehicle control programs and data relay programs. The control unit 24 is configured with a CPU, RAM, ROM, and the like. When the console of the vehicle C is equipped with a multimedia terminal such as a display, the multimedia terminal is electrically connected to the control section 24 via an interface section (not shown). The control unit 24 controls an electrical system related to unlocking of the doors of the vehicle C, starting of the engine, etc., according to a vehicle control program. Further, the control unit 24 relays data exchanged between the payment terminal 1 and the eSE 3 according to the data relay program. Protocol conversion of the data may be performed during such relaying.

The eSE 3 is, for example, a secure element such as an eUICC (embedded Universal Integrated Circuit Card) that is unremovably mounted inside the center console or inside the door of the vehicle C by soldering or the like and has high tamper resistance. Note that the eSE is an example of the electronic information storage medium of the present invention. FIG. 4 is a diagram showing a schematic configuration example of the eSE3. As shown in FIG. 4, the eSE 3 includes an interface (I/F) unit 31, RAM 32, NVM (Nonvolatile Memory) 33, CPU 34, and the like. The interface unit 31 functions as an interface with the ECU 2 and is electrically connected to the ECU 2 . The NVM 33 stores an operating system and applications. Applications include mutual authentication processing programs and payment processing programs.

Also, the NVM 33 stores payment data. The settlement data is, for example, a settlement ID (identification information) unique to the vehicle C. FIG. For example, the payment ID may be linked to the user's payment information and managed by the management server. The payment information includes information necessary for payment according to the payment method. For example, if the payment method is credit card payment, the payment information includes data such as the credit card number, the name of the holder, and the expiration date necessary for credit card payment. If the payment method is electronic money payment, the payment information includes data such as an electronic money number and electronic value required for electronic money payment. Note that the NVM 33 may include payment information instead of the payment ID (or together with the payment ID) as the payment data.

Further, the NVM 33 stores a key pair (encryption key) of a public key and a private key (encryption key) unique to the vehicle C in association with the settlement data. Here, the public key included in the key pair and the key ID for specifying the public key are shared with the payment terminal 1 in advance. Such public keys and key IDs are preferably managed by the management server in association with payment IDs and payment information of each of a plurality of users registered as members. Thereby, the public key and key ID unique to the eSE 3 are provided to the settlement terminal 1 . Also, payment information is provided to the payment terminal 1 using the payment ID as a key.

The CPU 34 is an example of authentication processing means, transmission means, and inquiry means in the present invention. The CPU 34 executes mutual authentication processing for establishing a secure session (encrypted communication path) with the settlement terminal 1 via the interface unit 31 and the ECU 2 according to the mutual authentication processing program. In this mutual authentication process, a private key unique to the eSE 3 (in other words, a private key unique to the vehicle C) and a public key unique to the payment terminal 1 are used. Mutual authentication is performed by signature verification.

Further, when a settlement command is received from the settlement terminal 1 via the ECU 2 after establishing a secure session with the settlement terminal 1, the CPU 34 responds to the settlement command according to the settlement processing program. Data is read from the NVM 33 and a response including the read payment data is transmitted to the payment terminal 1 via the interface unit 31 and the ECU 2 . Note that when a payment command is received from the payment terminal 1 via the ECU 2, the CPU 34 may inquire of the user via the ECU 2 whether or not the payment is permitted. In this case, the CPU 34 may transmit a response including payment data to the payment terminal 1 via the interface unit 31 and the ECU 2 only when the user gives an instruction to permit payment in response to the inquiry.

[2. Operation of payment processing system S]
Next, the operation of the payment processing system S will be described with reference to FIGS. 5 to 7. FIG. FIG. 5 is a sequence diagram showing an example of a transaction performed before starting a secure session in payment processing system S. As shown in FIG. FIG. 6 is a conceptual diagram showing the positional relationship between the wireless communication unit 11 embedded in the ground of the hourly parking lot and the vehicle C. As shown in FIG. FIG. 7 is a sequence diagram showing an example of a transaction executed after a secure session is started in payment processing system S. As shown in FIG.

In FIG. 5, the wireless communication unit 11 of the payment terminal 1 actively emits radio waves D as shown in FIG. Check periodically. In the example of FIG. 6A, since the vehicle C on which the ECU 2 is mounted is not within the distance range H, it is not confirmed (detected) that the ECU 2 exists within the distance range H (standby state). On the other hand, in the example of FIG. 6B, when the vehicle C equipped with the ECU 2 enters the distance range H, it is confirmed that the ECU 2 exists within the distance range H (communication is started). That is, when the vehicle C enters the distance range H, it is determined that the user has indicated his/her intention to make a payment. In the example of FIG. 6B, the case where the vehicle C is parked is taken as an example, but even when the vehicle C passes a predetermined position like ETC, it is confirmed that the ECU 2 exists within the distance range H, and as a result , communication may be initiated. The wireless communication unit 21 of the ECU 2 mounted on the vehicle C actively emits radio waves, and confirms at regular intervals whether or not the communication partner (that is, the settlement terminal 1) exists within a preset distance range. may

As shown in FIG. 6B, when the control unit 13 of the payment terminal 1 confirms that the ECU 2 exists within the distance range H (step S1), it starts wireless communication with the ECU 2 (step S2). , a SELECT command for selecting an application (payment processing program) for performing payment processing is transmitted to the ECU 2 via the wireless communication unit 11 (step S3). Next, upon receiving the SELECT command from the settlement terminal 1 via the wireless communication unit 21, the control unit 24 of the ECU 2 converts the protocol, and converts the protocol-converted SELECT command (command APDU (Application Protocol Data Unit)) into It is transmitted to the eSE 3 via the interface unit 22 (step S4).

Next, when the CPU 34 of the eSE 3 receives the SELECT command from the ECU 2 via the interface unit 31, it selects an application (payment processing program) according to the SELECT command (step S5), and responds to the SELECT command (response APDU) is transmitted to the ECU 2 via the interface unit 31 (step S6). Such a response includes, for example, SW (Status Word) “9000” and TLV format FCI (File Control Information). Next, when the control unit 24 of the ECU 2 receives the response from the eSE 3 via the interface unit 22, it converts the protocol, and transmits the protocol-converted response to the payment terminal 1 via the wireless communication unit 21 (step S7).

Next, upon receiving the response from the ECU 2 via the wireless communication unit 11, the control unit 13 of the payment terminal 1 generates a temporary key pair of public key and private key (step S8). Here, the temporary public key is called a temporary public key, and is distinguished from public keys that are shared and managed in advance. Similarly, a temporary private key is called a temporary private key and is distinguished from private keys that are shared and managed in advance. The temporary public key is generated by an ECDH operation based on a previously generated temporary private key (for example, a random number) and points on an elliptic curve according to the ECDH protocol. In the ECDH calculation, for example, a temporary public key is generated from a temporary private key by performing scalar multiplication for calculating k times point kp of point p on the elliptic curve. The parameters of the elliptic curve are known between the payment terminal 1 and the eSE3.

Next, the control unit 13 of the payment terminal 1 transmits the AUTH0 command including the temporary public key generated in step S8 to the ECU 2 via the wireless communication unit 11 (step S9). The AUTH0 command is a command for exchanging a temporary public key for ECDH and generating a session key for cryptographic communication. Next, when the control unit 24 of the ECU 2 receives the AUTH0 command from the payment terminal 1 via the wireless communication unit 21, it converts the protocol and transmits the protocol-converted AUTH0 command to the eSE 3 via the interface unit 22. (Step S10).

Next, when the CPU 34 of the eSE 3 receives the AUTH0 command from the ECU 2 via the interface unit 31, it generates a key pair of a temporary public key and a temporary private key unique to the eSE 3 (step S11). Next, the CPU 34 of the eSE3 generates the temporary public key (temporary public key unique to the payment terminal 1) included in the received AUTH0 command and the temporary secret key generated in step S11 (temporary private key unique to the eSE3). A shared key is generated by ECDH calculation based on (step S12). Next, CPU 34 of eSE3 generates a session key used for a secure session between payment terminal 1 and eSE3 based on the data obtained in the process of ECDH calculation in step S12 (step S13). Note that the session key may be generated using the shared key generated in step S12.

Next, the CPU 34 of the eSE 3 transmits a response to the AUTH0 command to the ECU 2 via the interface section 31 (step S14). This response contains the eSE3-specific temporary public key generated in step S11. Next, when the control unit 24 of the ECU 2 receives the response from the eSE 3 via the interface unit 22, it converts the protocol, and transmits the protocol-converted response to the payment terminal 1 via the wireless communication unit 21 (step S15).

Next, when the control unit 13 of the payment terminal 1 receives the response from the ECU 2 via the wireless communication unit 11, the temporary public key included in the response (temporary public key unique to the eSE 3) and the generated A shared key is generated by ECDH calculation based on the obtained temporary secret key (temporary secret key unique to settlement terminal 1) (step S16). Next, the control unit 13 of the payment terminal 1 generates a terminal certificate by performing signature generation using a secret key unique to the payment terminal 1 according to ECDSA (step S17).

Next, the control unit 13 of the payment terminal 1 transmits the AUTH1 command including the terminal certificate generated in step S17 and the key ID for specifying the public key unique to the payment terminal 1 via the wireless communication unit 11. It is transmitted to the ECU 2 (step S18). The AUTH1 command is a command for exchanging digital signatures for ECDSA and implementing mutual authentication. Next, when the control unit 24 of the ECU 2 receives the AUTH1 command from the payment terminal 1 via the wireless communication unit 21, it converts the protocol and transmits the protocol-converted AUTH1 command to the eSE 3 via the interface unit 22. (Step S19).

Next, when the CPU 34 of the eSE 3 receives the AUTH1 command from the ECU 2 via the interface unit 31, it identifies the public key unique to the payment terminal 1 based on the key ID included in the AUTH1 command, Using the received public key, the signature verification of the terminal certificate included in the AUTH1 command is performed (step S20). When the signature verification succeeds, the CPU 34 of the eSE3 generates an SE certificate by performing signature generation using a private key unique to the eSE3 according to ECDSA (step S21).

Next, the CPU 34 of the eSE 3 transmits a response to the AUTH1 command to the ECU 2 via the interface section 31 (step S22). This response includes the SE certificate generated in step S21 and the key ID for specifying the public key unique to eSE3. Next, when the control unit 24 of the ECU 2 receives the response from the eSE 3 via the interface unit 22, it converts the protocol, and transmits the protocol-converted response to the payment terminal 1 via the wireless communication unit 21 (step S23).

Next, when the control unit 13 of the payment terminal 1 receives the response from the ECU 2 via the wireless communication unit 11, it identifies the public key unique to the eSE 3 based on the key ID included in the response, and according to ECDSA, Using the identified public key, signature verification of the SE certificate included in the response is performed (step S24). When the signature verification succeeds, the control unit 13 of the payment terminal 1 generates a session key used for a secure session between the payment terminal 1 and the eSE 3 based on the data obtained in the process of ECDH calculation in step S16. (step S25). Note that the session key may be generated using the shared key generated in step S16. Since the session key generated here is generated by the same generation method as the session key generated in step S13, both match.

In FIG. 7, the control unit 13 of the payment terminal 1 starts a secure session with the eSE 3 using the session key generated in step S25 (step S26). In such a secure session, data (command or response) encrypted with the generated session key is transmitted and received. That is, the control unit 13 of the payment terminal 1 transmits a payment command (EXCHANGE command) indicating a payment data acquisition request encrypted with the session key to the ECU 2 via the wireless communication unit 11. Send (step S27). Next, when the control unit 24 of the ECU 2 receives the payment command from the payment terminal 1 via the wireless communication unit 21, the protocol conversion is performed, and the protocol-converted payment command is sent to the eSE 3 via the interface unit 22. Send (step S28).

Next, when the CPU 34 of the eSE 3 receives the settlement command from the ECU 2 via the interface section 31, it transmits a response including data indicating whether or not to permit the settlement to the ECU 2 via the interface section 31. (step S29). Next, when the control unit 24 of the ECU 2 receives the response from the eSE 3 via the interface unit 22, the control unit 24 displays, for example, a button indicating permission for payment (or a button indicating non-permission for payment) on the multimedia terminal ( step S30). As a result, the user is requested to instruct whether or not to permit the settlement in response to the inquiry from the eSE3.

If there is no multimedia terminal on the console of the vehicle C, the control unit 24 of the ECU 2 indicates permission for payment to the user terminal (for example, smartphone) pre-paired with the ECU 2 via Bluetooth (registered trademark) or the like. By displaying a button (a button indicating disapproval of payment), the user may be asked to instruct whether or not to approve the payment. Alternatively, the control unit 24 of the ECU 2 transmits information requesting an instruction as to whether or not to permit payment to the management server, so that the management server displays a button indicating permission for payment on the user terminal (a button indicating non-permission for payment may be used). ) may be displayed.

Then, when the control unit 24 of the ECU 2 receives an instruction to allow payment from the user by designating a button indicating permission for payment (step S31), a request command (for example, , GET command) to the eSE 3 via the interface unit 22 (step S32). Next, when the CPU 34 of the eSE 3 receives the request command from the ECU 2 via the interface unit 31, the application (payment processing program) selected in step S5 reads the payment data from the NVM 33 (step S33), A response including the issued payment data is transmitted to the ECU 2 via the interface section 31 (step S34).

Next, when the control unit 24 of the ECU 2 receives the response from the eSE 3 via the interface unit 22, it converts the protocol, and transmits the protocol-converted response to the payment terminal 1 via the wireless communication unit 21 (step S35). As a result, according to the example shown in FIG. 5, a response including payment data is transmitted to the payment terminal 1 only when the user gives an instruction to permit payment in response to the inquiry.

Next, when the control unit 13 of the payment terminal 1 receives the response from the ECU 2 via the wireless communication unit 11, it executes payment processing for payment based on the payment data included in the response ( step S36). For example, the control unit 13 of the payment terminal 1 acquires payment information based on the payment data, and executes a process of charging (for example, withdrawing) the parking fee to the user according to the payment method indicated in the payment information. . If the payment data is a payment ID, the control unit 13 of the payment terminal 1 may acquire the user's payment information from the management server using the payment ID as a key.

As described above, according to the above-described embodiment, when the ECU 2 enters the range in which short-range wireless communication with the payment terminal 1 is possible, the vehicle C Execute mutual authentication processing for establishing a secure session using an encryption key specific to the payment terminal 1 and an encryption key specific to the payment terminal 1, and the payment command encrypted by the session key generated in the mutual authentication processing by the payment terminal 1 is sent to the eSE 3 via the ECU 2, and when the eSE 3 receives the settlement command, the settlement data is read from the NVM 33 in response to the settlement command, and a response including the read settlement data is transmitted via the ECU 2. Since it is configured to transmit to the terminal 1, convenience and security for the user of the vehicle C can be improved in payment transactions. For example, conventionally, a user prepares an ETC card or the like prepared in his/her own name and inserts it into a dedicated terminal of the vehicle to use it for settlement. By using eSE3, it is possible to make a payment for vehicle C, and furthermore, by using an encryption key unique to eSE3 (in other words, an encryption key unique to vehicle C), it is possible to improve security. became.

1 payment terminal 2 ECU
3 eSE
11 wireless communication unit 12 storage unit 13 control unit 21 wireless communication unit 22 interface unit 23 storage unit 24 control unit 31 interface unit 32 RAM
33 NVM
34 CPUs
S payment processing system

Claims (5)

An electronic information storage medium that is mounted on a mobile body on which a user can board and has a memory that stores an encryption key unique to the mobile body and payment data used for payment,
an interface unit mounted on the mobile body and connected to a control device having a short-range wireless communication function;
When the control device enters a range capable of short-range wireless communication with a settlement terminal installed outside the mobile body, an encryption key unique to the mobile body and the settlement terminal are transmitted via the control device. authentication processing means for executing mutual authentication processing for establishing a secure session with the payment terminal using an encryption key unique to
When a payment command encrypted with the session key generated in the mutual authentication process and encrypted with the session key common to the payment terminal is received via the control device, the payment command a transmitting means for reading the payment data from the memory in response to the payment, and sending a response including the read payment data to the payment terminal via the control device;
An electronic information storage medium comprising: further comprising inquiry means for inquiring of the user through the control device whether or not to permit payment to the control device when the command for payment is received via the control device;
The transmission means transmits a response including the payment data to the payment terminal via the control device only when the user instructs to permit the payment in response to the inquiry. The electronic information storage medium according to claim 1. A payment terminal installed outside a mobile body on which a user can board and having a short-range wireless communication function, a control device mounted on the mobile body and having a short-range wireless communication function, and a mobile body mounted on the mobile body A payment processing method executed by an electronic information storage medium having a memory for storing a unique encryption key and payment data used for payment,
encryption unique to the mobile body via the control device between the payment terminal and the electronic information storage medium when the control device enters a range capable of short-range wireless communication with the payment terminal; a step of performing mutual authentication processing for establishing a secure session using a key and an encryption key unique to the payment terminal;
The settlement terminal transmits a settlement command encrypted with a session key generated in the mutual authentication process and shared with the electronic information storage medium via the control device to the electronic information storage medium. sending to
When the electronic information storage medium receives the payment command, the payment data is read from the memory according to the payment command, and a response including the read payment data is transmitted to the transmitting to a payment terminal;
A settlement processing method, comprising: In the transmitting step, only when the electronic information storage medium inquires of the control device whether or not to permit payment, and information indicating permission for payment is received from the control device in response to the inquiry, 4. The payment processing method according to claim 3, wherein said electronic information storage medium transmits a response including said payment data to said payment terminal via said control device. a step in which the control device asks the user for an instruction as to whether or not to permit the settlement in response to the inquiry from the electronic information storage medium;
a step of requesting the payment data from the electronic information storage medium when the control device receives an instruction to permit the payment from the user;
5. The payment processing method of claim 4, further comprising:

Images