JP3449894B2 - Network transaction system, recording medium recording the program, terminal device, and identification method - Google Patents

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a network transaction system, and more particularly to an open network,
It can be applied to cyberspace banking in general where new accounts can be opened, balances can be inquired, transaction details can be inquired, and funds can be transferred (transfers, transfers). Furthermore, it is possible to communicate with each other within a business format such as a credit card. The present invention also relates to a network transaction system that can be similarly applied to a business format having a network.

Conventionally, a home terminal is connected to a computer of a predetermined bank by using a public network so that a customer receives services such as transaction inquiries and fund transfer to an account opened in the bank. It is known that home banking is possible. Such home banking presupposes that you already have an account with the bank, and when you open the account, the bank generally presents some kind of certificate to prove that you are the customer. You have been asked, and the certificate confirms your identity.

[0003]

2. Description of the Related Art A virtual bank branch can be opened on one's own personal computer using an open network such as the Internet, and bank operations can be performed at a virtual bank branch at home without actually going to the bank. Cyber space banking that can be done is considered. In such cyberspace banking as well, it is necessary to confirm the identity as in a normal bank, but since the customer does not go to the bank, how to confirm the identity is an important point. .

The conventionally-identified personal identification method is to install a certification authority on the network and use an electronic certificate issued by the certification authority to verify the identity. Therefore, it is necessary for the certification body to register in advance by the user by mail or by the person himself / herself, and from the user's point of view, obtaining the electronic certificate may be very troublesome. . With this, the user's effort is not much different from opening an account in a real bank. On the other hand, from the bank's point of view, dealing with certification bodies can be troublesome. In other words, there is a question of who will be the operating body of the certification body itself. In reality, nothing has yet to be decided, such as whether the certification body is to be created individually by the bank or whether it will be created collectively by a financial institution. Not. However, the actual experimental cyberspace banking is
Assuming that a certification body is set up, an electronic certificate issued by the certification body is used to confirm the identity. When a virtual bank branch moves to your personal computer,
It enables a wider range of business transactions than the services offered by conventional home banking.

[0005]

However, when attempting to shift cyberspace banking from experimentation to popularization, the user's annoyance of acquiring an electronic certificate and the inconvenience of dealing with a bank certification institution are There was a problem that it became a big obstacle and it was difficult to spread if a new account could not be created easily.

[0006] The present invention has been made in view of the above points, and it is possible to confirm the identity of a user without the need for a certification body, and cyberspace with any bank connected by an interbank network. The purpose is to provide a network trading system that enables banking.

[0007]

FIG. 1 is a principle diagram of the present invention for achieving the above object. In the network transaction system of the present invention, a plurality of banks 1a, 1b, ... Are connected by an inter-bank network 2, and a bank operating cyberspace banking is connected by an open network 3 to a terminal 5 of a customer 4. In the network environment as described above, the customer processing means 6 provided in the terminal 5 and the destination bank processing means 7 provided in, for example, the bank 1a for making new contracts with the account.
And an end-of-service bank processing means 8 provided in, for example, the bank 1b in which an existing account of the customer 4 exists.

[0008] When the customer 4 makes an application for opening a new account, the customer processing means 6 receives from the customer 4 the account opening information necessary to open a new account and the existing account information regarding the customer's existing account. Then, the account opening information and the existing account information are sent to the bank 1a. Upon receiving the account opening information and the existing account information from the terminal 5, the destination bank processing means 7 first sends the existing account information to the bank 1b in which the existing account of the customer 4 exists, and then the destination bank processing means 8 sends it to the destination bank processing means 8. Request confirmation of the identity of customer 4. This request for personal identification is made using the interbank network 2.

The destination bank processing means 8 collates the sent existing account information with the registered account information 8a held by the bank 1b, and based on the existing account information, the existing account of the customer 4 exists and the customer 4 Check if it is an account. The result of the check is returned to the requesting bank 1a through the interbank network 2. The destination bank processing means 7 of the bank 1a receives a response to the identity confirmation request from the destination bank processing means 8 and determines whether or not to permit the account opening based on the result of the check. Here, if it is determined that the account opening is permitted, the destination bank processing means 7 sends the new account reception information to the terminal 5 to notify the customer 4, and the account sent when applying for the new account opening. A new account 7a is opened based on the opening information.

As a result, the bank 1 using the terminal 5
When a customer 4 wants to open a new account in a, if the customer 4 has an existing account in one of the banks 1b connected by the interbank network 2, by using the authentication in that bank 1b. At the bank 1a, it is possible to easily confirm the identity.

Further, according to the present invention, a customer account for opening a new account in any of a plurality of banks having at least one existing account and mutually connected by an interbank network. In a computer-readable recording medium recording an opening application program, a private key / public key generating means for generating a customer private key and a customer public key, and account opening information necessary for newly opening an account, said customer private key. And further encrypts with the destination bank public key, encrypts the customer public key and the bank code of the destination bank with the destination bank public key, and further encrypts the existing account information with the customer private key. Encrypting means for creating an account opening application message to be encrypted with the public bank public key of the destination bank and sent to the destination bank, and the destination bank There is provided a recording medium recording an account opening application program that causes a computer to function as a decryption unit that obtains new account acceptance information by decrypting the response message with the customer private key and further with the destination bank public key. It

Private key / public key generating means for generating a customer private key and a customer public key by causing a computer to execute the account opening application program recorded on this medium, account opening information, and the bank code of the destination bank. Further, each function of an encryption means for encrypting existing account information to create an account opening application message and a decryption means for obtaining new account acceptance information from a response message from a destination bank is realized by a computer.

[0013]

BEST MODE FOR CARRYING OUT THE INVENTION Embodiments of the present invention will be described below with reference to the drawings. First, an outline of the present invention will be described.

FIG. 1 is a diagram showing the basic configuration of a network transaction system. In the network transaction system of the present invention, a plurality of banks 1a, 1b, ... Are connected using an existing interbank network 2, and a bank that operates cyberspace banking uses an open network 3 to connect customers 4 The terminal 5 is constructed in a network environment that is connected to the terminal 5.
Customer processing means 6 provided in the bank, a destination bank processing means 7 provided in, for example, the bank 1a for making new contracts with an account, and a destination bank processing means 8 provided in, for example, the bank 1b in which an existing account of the customer 4 exists. Composed of and.

The customer processing means 6 is realized in the terminal 5 such as a personal computer. Here, when the customer 4 makes an application for opening a new account to the bank 1a that does not have an existing account, the customer processing means 6 causes the customer 4
Account opening information including the name, address, desired secret code of the new contract account, etc. necessary to open a new account from, and existing account information such as the bank code, account number, and secret code of the bank in which the existing account of customer 4 exists. Upon receiving the input, the account opening information and the existing account information are sent to the bank 1a through the open network 3. Destination bank processing means 7 in the bank 1a
Then, when the account opening information and the existing account information sent from the terminal 5 are received, first, the existing account information is sent to the bank 1b in which the existing account of the customer 4 exists, and the customer 4 is sent to the destination bank processing means 8. Make a request to verify your identity. This request for personal identification is made using the interbank network 2.

In the bank processing means 8 for the recipient of the bank 1b,
The sent existing account information is collated with the registered account information 8a held by the bank 1b, and it is checked from the existing account information whether the existing account of the customer 4 exists and is the customer 4's account. The result of the check is returned to the requesting bank 1a through the interbank network 2. Upon receiving a response to the identity confirmation request from the destination bank processing means 8, the destination bank processing means 7 of the bank 1a determines whether or not to open the account of the customer 4 based on the result of the check. Here, when it is determined that the account is to be opened, the destination bank processing means 7 sends new account acceptance information indicating that the application for opening a new account has been accepted to the terminal 5 to notify the customer 4. Also, the destination bank processing means 7
Opens a new account 7a in the bank 1a based on the account opening information sent at the time of application for opening a new account.

As a result, the bank 1 using the terminal 5
When a customer 4 wants to open a new account in a, as long as the customer 4 has an existing account in one of the banks 1b connected by the interbank network 2, the bank 1a that makes the account new contract is the existing customer 1a. By using the authentication at the bank 1b where the account exists, it becomes possible to easily verify the person's identity without requiring a special authentication institution. This means that if you already have an account with a bank, it means that you have already verified yourself when you open that account. Because no confirmation procedure is required. In addition, of course, the bank 1a that makes new account
If the existing account of the customer 4 exists in the customer, the identity of the customer 4 can be confirmed only within the bank 1a. In this case, it is possible to receive only services such as balance inquiry for existing accounts.

Next, a case where the embodiment of the present invention is applied to cyber space banking using an open network such as the Internet will be described as an example.
There are cases where the bank that is going to open an account does not have an existing account of the user himself, but first, the case of opening a new account in a bank that does not have an account will be explained first.

FIG. 2 is a block diagram showing a configuration example of cyber space banking to which the network transaction system of the present invention is applied. The terminal device 10 used by the customer is connected via an open network 20 such as the Internet to a destination bank device 30 of a bank who wants to make a new contract for an account. The destination bank device 30 is connected to the destination bank device 50 of the bank in which the customer's existing account exists by utilizing the existing interbank network 40.

The terminal device 10 includes an input information processing unit 11 for processing various information input from a keyboard, a private key / public key generation unit 12 for generating a private key and a public key of a customer, and an encryption of input information. Encrypting and transmitting a message to the destination bank device 30, and the destination bank device 30
A decryption unit 14 that decrypts the response message from the device, an output / save processing unit 15 that displays the decrypted information on the screen / printer output / save, and a log information storage unit 16 that holds the operation history of the terminal device 10. Composed of and. Destination bank device 3
Reference numeral 0 denotes a private key / public key generation unit 31 for generating a private key and a public key of the destination bank, and a decryption unit 32 for decoding an application message from the terminal device 10 and a response message from the destination bank device 50. , An encryption unit 33 for encrypting the confirmation request message, transmitting the message to the destination bank device 50, and encrypting the response message to the terminal device 10 and transmitting the message, and the account new contract based on the decrypted information. It is composed of an account new contract permission determination unit 34 that determines permission, an account information storage unit 35 that holds account information, and a log information storage unit 36 that holds an operation history of the destination bank device 30. The destination bank device 50 includes a private key / public key generation unit 51 that generates a private key and a public key of the destination bank, a decryption unit 52 that decrypts a confirmation request message from the destination bank device 30, and a destination bank. An encryption unit 53 that encrypts a response message to the device 30.
, An account information check unit 54 for checking the existing account of the customer, and an account information storage unit 55 for holding the account information.
And a log information storage unit 56 that holds the operation history of the bank device 50 for destination.

Here, the terminal device 10 and the destination bank device 3
0 and the destination bank device 50, the overall operation regarding the opening of a new account will be described below with reference to FIG. FIG. 3 is a flowchart showing a processing procedure for opening a new account. First, in the terminal device 10, the input information processing unit 11 acquires information necessary for opening an account such as name and address from the user and information for identity verification such as an account number of an existing account, an account secret code, and the encryption unit. 13 encrypts the information to create a message for application for opening a new account, and transmits the message to the destination bank device 30 (step S1). In the destination bank device 30, when the electronic message for application for opening a new account is received from the terminal device 10, the decryption unit 32 decrypts the electronic message to obtain the information necessary for opening the account and the information for identity verification, and the encryption unit. 33 creates an identity confirmation request message from the information for identity verification, and transmits the message to the bank device 50 for work (step S2). Bank device for work 5
In 0, when the identity confirmation request message is received from the destination bank device 30, the decryption unit 52 decodes the message and acquires the information for identity verification, and the account information check unit 54 performs the information for identity verification and the account information. The information registered in the storage unit 55 is collated to check whether they match, the encryption unit 53 encrypts the result of the check to create a response message, and the response message is sent to the destination bank device 30. (Step S3). In the destination bank device 30, the response message is analyzed by the decryption unit 32, the result of the identity confirmation check by the destination bank device 50 is obtained, and the account new contract permission determination unit 34 determines the account based on the result of the check. Whether or not to permit the new test of (step S
4). Next, it is determined whether or not the result of the determination is permission (step S5), and if it is permission, a new account is created based on the information necessary for opening the account received from the terminal device 10, The account information is held in the account information storage unit 35 (step S6). If the account is opened or if the account opening is not allowed,
In response to the inquiry from the customer, the result is encrypted by the encryption unit 33 to create a response message, and the response message is transmitted to the terminal device 10 as the acceptance result for the new account opening application (step S7). . Then, in the terminal device 10, the response message is decrypted by the decryption unit 14, and the obtained acceptance result is displayed on the screen through the output / hold processing unit 15.

During the series of processing operations, the history processed by the terminal device 10, the destination bank device 30, and the destination bank device 50 is recorded and held in the respective log information storage units 16, 36, 56. .

Next, the terminal device 10 and the destination bank device 30
Information transmitted between the destination bank device 50 and encryption of the information will be described below with reference to FIG.

FIG. 4 is an explanatory diagram showing the flow of encrypted information. In this example, the encryption uses the RSA method, which is an encryption method using a public key. As shown in FIG. 4, in the terminal device 10, the private key of the customer X is p
x and the public key are represented by ox. Destination bank device 3
At 0, the private key of the destination bank Y is represented by py and the public key is represented by oy. In the destination bank device 50, the private key of the destination bank Z is represented by pz and the public key is represented by oz.

First, in the terminal device 10, as information necessary for opening a new account in the destination bank Y, a. Name, address, office, bank code of destination bank Y,
Application information for new application account, application secret code for new application account, etc. b. Customer public key ox, bank code of destination bank Z, etc. c. There is the bank code of the destination bank Z, the account number of the existing account of the customer X, the account secret code of the existing account, etc. These information are provided by the customer X.

Here, the information a is encrypted with the customer private key px and further with the destination bank public key oy. This encryption information is Foy (F
It can be represented by px (a)). Further, the information b is encrypted with the destination bank public key oy, and the encrypted information is Fo.
It is represented by y (b). The information c is encrypted with the customer secret key px and further encrypted with the recipient bank public key oz, and the encrypted information is represented by Foz (Fpx (c)). These pieces of encrypted information are plaintext information d. An account opening application message 21 is configured by adding a code of a message format and the like. Therefore, the account opening application message 21 is “Foy (Fpx (a)), Fo
y (b), Foz (Fpx (c)), d ”is transmitted to the destination bank device 30.

The destination bank device 30 decrypts the encrypted information of the received opening application telegram 21. Here, when Γ is the decoding function and the decoding process is expressed, Γpy (Foy (Fpx (a))) → Fpx (a) Γpy (Foy (b)) → b. Further, Fpx (a) is converted into the decoded information b
By decrypting using the customer public key ox contained in, Γox (Fpx (a)) → a can be obtained. In addition, Foz that encrypted the information c
(Fpx (c)) is finally the public bank key o of the recipient.
Since it is encrypted with z, the bank device 30
It cannot be processed in and is left alone. Although not shown, here, the acceptance of the new account opening application and the receipt number thereof are returned to the terminal device 10.

Next, the confirmation request message 41 transmitted from the destination bank device 30 to the destination bank device 50 includes the encrypted information Foz (Fpx (c)) and e. Foz (Fpy) in which the bank code of the destination bank Y, the customer public key ox, and the request number are encrypted with the destination bank private key py and further encrypted with the destination bank public key oz.
(E)) and f. Of plaintext information. It is composed of, for example, a prescribed code of a message format, and “Foz (Fpx (c)), Foz (Fpy
(E)), f ”.

In the destination bank device 50, the encrypted information of the received confirmation request message 41 is decrypted. That is, Γpz (Foz (Fpx (c))) → Fpx (c) Γpz (Foz (Fpy (e))) → Fpy (e) is obtained by using the recipient bank secret key pz. Here, the obtained Fpy (e) is obtained by using the destination bank public key oy to obtain Γoy (Fpy (e)) → e, and by using the customer public key ox included in this information e, Γox (Fpx (c)) → c can be obtained.

In the recipient bank device 50, it is confirmed whether or not the corresponding account number exists in the account information storage unit 55 from the account number and the account secret code of the existing account of the customer X included in the information c and registered. A check will be made to see if it matches the existing account code.

Then, the bank device for destination 50 assembles the response message 42. First, g. As a result of the check, the bank code of the target bank Z and the request number information are encrypted with the target bank secret key pz, and the h. The code of the message format is attached,
A response message 42 of “Fpz (g), h” is created. This response message 42 is transmitted to the destination bank device 30.

Then, the bank device 50 for destination acquires the history log and stores it in the log information storage unit 56. When the account password is checked, if there is a corresponding account, but the account passwords do not match, the password error counter for that account is incremented by +1 to prevent accidents.

Next, the encrypted information of the response message 42 received by the destination bank device 30 is decrypted. That is, by using the recipient bank public key oz, Γoz (Fpz (g)) → g can be obtained. Here, it is checked whether the destination bank is valid. This is the destination bank device 3
0 is the bank code of the destination bank Z in the information g decrypted using the destination bank public key oz held in advance 0 matches the bank code of the destination bank Z held in advance. Is done by checking.

Next, the destination bank device 30 determines the account opening based on the check result. Here, from the information g, the account opening is permitted only when the check result for the request number is OK. When opening an account, the new account information is saved. The new account information includes an address, a name, a customer public key ox, a secret code for a new application account, etc., and is held in the account information storage unit 35. Then, according to the customer's request, the response message 22 is assembled to the terminal device 10 according to the check result. Here, i. Bank code of destination bank Y, receipt result, receipt number, etc. j. Information such as a prescribed code of a message format is prepared. The information i is encrypted with the destination bank private key py and further encrypted with the customer public key ox. Therefore, the response message 22 becomes “Fox (Fpy (i)), j” and is transmitted to the terminal device 10.

After that, the destination bank device 30 acquires the history log, saves it in the log information storage section 36, and opens a new account. In the terminal device 10, the encrypted information of the received response message 22 is decrypted. That is, first, by using the customer secret key px, Γpx (Fox (Fpy (i))) → Fpy (i) is obtained. Next, using the destination bank public key oy, Γoy (Fpy (i)) → i is obtained.

Next, the terminal device 10 checks whether the destination bank is valid. This checks whether the bank code of the destination bank Y in the information i decrypted using the destination bank public key oy held in advance matches the bank code of the destination bank Y held in advance. Is done by doing. Here, if the destination bank is valid, the reception result is displayed on the screen, and if necessary, printed and saved. And the terminal device 10
Acquires a history log and stores it in the log information storage unit 16.

Here, an example of an account application screen when a new account is opened in the terminal device 10 is shown. FIG. 5 is a diagram showing an example of an application screen for opening a new account. In the application screen 60 for opening a new account, "Open New Account" is selected from the service menu displayed first when the terminal device 10 is connected to the destination bank device 30 of the destination bank Y that wants to newly open an account. Then, it is displayed by selecting "new application" from the submenu of opening a new account.

The application screen 60 has an item for inputting information necessary for opening a new account and an item for inputting information on an existing account. Here, as items for inputting information necessary for opening a new account, item 61 for inputting name and date of birth, item 62 for inputting address and telephone number, and item 6 for inputting work place and telephone number.
Item 3 to enter 3 and the desired PIN of the account you are applying for
And have. The information entered in these items is the information to be encrypted by the customer private key and the destination bank public key when it is sent to the destination bank device 30. Further, as an item for inputting the information regarding the existing account, there is an item 65 for inputting the account number of the existing account and an item 66 for inputting the personal identification number of the existing account. The account number is entered including the bank code and branch code. The information entered in these items is the information to be encrypted by the customer private key and the destination bank public key when sending to the destination bank device 30. The application screen 60 further has an application button 67 and a cancel button 68. The application button 67 is used when actually applying for opening a new account after the items 61 to 66 have been entered. 68 is used when canceling the processing of this application for opening a new account.

When an application for opening a new account is made by the application button 67, the information input on the application screen 60 is sent to the destination bank device 30. Then, the destination bank device 30 notifies the terminal device 10 together with the receipt number that the application for opening a new account has been accepted, and requests the destination bank device 50 to confirm the identity of the applicant. When the destination bank device 50 confirms the identity and determines that the destination bank device 30 opens a new account, the destination bank device 30 opens an account based on the information received at the time of application for opening a new account, and the new account information. To save. Here, when the terminal device 10 inquires about the status of opening a new account by the receipt number, the new account information is sent to the terminal device 10. An example of the screen at that time is shown below.

FIG. 6 is a diagram showing an example of a screen for inquiring the status of opening a new account. In addition to "new application", "processing status inquiry" is prepared in the submenu of "open new account" of the service menu displayed on the terminal device 10. By selecting the "processing status inquiry", A processing status inquiry screen (not shown) is displayed. Therefore,
When the reception number notified after the application for opening a new account is input and an inquiry is made, a status inquiry screen 70 is displayed.

This status inquiry screen 70 is displayed on the name display section 7
1 and an account number display unit 72. The account number display unit 72 displays the number of an account newly opened by the application for opening a new account from the destination bank device 30.

The case where a new account is opened in a bank which does not have an account has been described above. Next, a case where a bank transaction is carried out with a bank which has an account will be described. This banking transaction may be performed by opening a new account or by using a service using an existing account. First, the case of opening a new account will be described.

FIG. 7 is a block diagram showing another configuration example of cyber space banking to which the network transaction system of the present invention is applied. The terminal device 10 used by the customer is connected by an open network 20 to a destination bank device 30 of a bank which has an existing account and makes a new contract for the account.

The terminal device 10 includes an input information processing unit 11 and
Private key / public key generation unit 12 for generating a customer's private key and public key, and encryption of input information and destination bank device 3
0, a decryption unit 14 that decrypts the response message from the destination bank device 30, an output / save processing unit that displays the decrypted information on the screen / printer output / save 15 and a log information storage unit 16 that holds the operation history of the terminal device 10. The destination bank device 30 includes a private key / public key generation unit 31 that generates a private key and a public key of the destination bank, a decryption unit 32 that decrypts an application message from the terminal device 10, and a response to the terminal device 10. An encryption unit 33 for encrypting a message and transmitting a message,
Account New Test Permission Judgment Unit 34 for Judging Account New Test Permission
And an account information storage unit 35 that holds account information, and a log information storage unit 3 that holds operation history of the destination bank device 30.
6, an account information check unit 37 that checks the customer's existing account based on the application electronic message, and an account information storage unit 38 that holds the information of the existing account.

First, in the terminal device 10, when a new account is opened in a destination bank having an existing customer account, the input information processing section 11 requests the customer for the following information a1. a1. Name, address, office, bank code of destination bank,
Application information for new application account, application password for new application account, customer's existing account number, account password for existing account, etc.

The information a1 input by the customer is first encrypted by the encryption unit 13 with the customer private key px, and further encrypted with the destination bank public key oy to obtain Fo.
y (Fpx (a1)). In addition, the encryption unit 13 is configured to: b1. The customer public key ox is encrypted with the destination bank public key oy to generate Foy (b1). Then, the encryption unit 13
Is information d1. A message such as the code for the message format is added, and the application message for opening "Foy (Fpx (a1)), Foy (b
1), d1 ”is assembled and transmitted to the destination bank device 30.

In the destination bank device 30, the received opening application message is decrypted by the decryption unit 33. That is, by using the destination bank secret key py for decryption, Γpy (Foy (Fpx (a1))) → Fpx (a1) Γpy (Foy (b1)) → b1 can be obtained. Furthermore, the customer public key o of the information b1
By decoding Fpx (a1) using x, Γox (Fpx (a1)) → a1 can be obtained.

The account number and account code of the customer's existing account in the information a1 obtained by the decryption unit 32 are sent to the account information check unit 37. The account information check unit 37 refers to the account information storage unit 38 from the received account number to check whether the corresponding account number exists, and
If the corresponding account number exists, it is checked whether the account password registered for the account number and the received account password match. The result of the check is notified to the account new contract permission determination unit 34, and it is determined whether or not to open an account. Here, when the account opening is permitted, the new account information is stored in the account information storage unit 35.

When the customer inquires about the processing status, the encryption unit 33 assembles a response message according to the check result by the account information check unit 37. That is, the encryption unit 33 firstly: i1. Information such as the bank code of the destination bank, the reception result, and the receipt number is encrypted with the destination bank secret key py and further encrypted with the customer public key ox, and j1. Information such as the prescribed code of the message format is added, and the response message “Fox (Fpy (i1)), j1” is added.
Is generated and transmitted to the terminal device 10.

In the terminal device 10, the received response message is decrypted by the decryption unit 14. First, using the customer private key px, Γpx (Fox (Fpy (i1))) → Fpy (i1) is obtained, and further, using the destination bank public key oy, Γoy (Fpy (i1)) → i1 is obtained. . The output / save processing unit 15 notifies the customer of the acceptance result for the new account opening application by displaying a screen or the like.

Next, a case where a bank holding an account provides a service using an existing account will be described. The service using the existing account is started by selecting “home banking” from the service menu on the initial screen of the terminal device 10. In this case, the input information processing unit 11 requests the customer for the following information a2. a2. Customer's existing account number, account secret, service request details.

Next, this information a2 is first encrypted by the encryption unit 13 with the customer secret key px, and further encrypted with the destination bank public key oy, and then Foy (Fpx (a2)).
Becomes In addition, the encryption unit 13 b2. The customer public key ox is encrypted with the destination bank public key oy to generate Foy (b2). Then, the encryption unit 13 adds the plaintext information d2. The service application message "Foy (Fpx (a2)), Foy"
(B2), d2 "is assembled and transmitted to the destination bank device 30.

In the destination bank device 30, the received service application message is decrypted by the decryption unit 32. The decryption unit 32 first obtains Γpy (Foy (Fpx (a2))) → Fpx (a2) Γpy (Foy (b2)) → b2 by using the destination bank secret key py, and further, obtains information b2. Using the customer public key ox, we obtain Γox (Fpx (a2)) → a2.

The account number and account password of the customer's existing account in the information a2 obtained by the decryption unit 32 are sent to the account information check unit 37. The account information check unit 37 refers to the account information storage unit 38 from the received account number to check whether the corresponding account number exists, and
If the corresponding account number exists, it is checked whether the account password registered for the account number and the received account password match. The result of the check is notified to a service processing unit (not shown) in the destination bank device 30. If the check result is “OK”, the service processing unit receives the service request content in the information a2 and performs a process according to the request content. The contents of the requested service include balance inquiry, transaction statement inquiry, and fund transfer.

The service result corresponding to the service request is sent to the encryption unit 33, and a response message is created. When the customer inquires about the processing status, the account information check unit 3
The encryption unit 33 assembles a response message according to the check result of 7. That is, the encryption unit 33
First, i2. Information such as the bank code, service result, and receipt number of the destination bank is encrypted with the destination bank secret key py and further encrypted with the customer public key ox, and j2. Information such as the prescribed code of the message format is added, and the response message “Fox (Fpy (i2)), j2” is added.
Is generated and transmitted to the terminal device 10.

In the terminal device 10, the decryption unit 14 decrypts the received response message using the customer secret key px to obtain Γpx (Fox (Fpy (i2))) → Fpy (i2), Further, by decrypting using the destination bank public key oy, Γoy (Fpy (i2)) → i2 is obtained. The output / save processing unit 15 notifies the customer of the decrypted service result by displaying a screen or the like.

[0057]

As described above, according to the present invention, in cyberspace banking using an open network, the identity of a customer who wants to open a new account is confirmed by a bank that already has an account. . Therefore, if there is only one account in any bank connected to each other by the interbank network, it means that the identity verification has already been completed at that bank. By using the network, identity verification at other banks can be made easier, and cyberspace banking with any bank becomes possible. Moreover, the initial registration of the user to the certification body to confirm the identity and the maintenance and management of the certification body by the bank are not required, and the trouble of dealing with the certification body of the bank and the procedure of confirming the user's identity are troublesome. Can be resolved respectively.

[Brief description of drawings]

FIG. 1 is a diagram showing a principle configuration of a network transaction system.

FIG. 2 is a block diagram showing a configuration example of cyber space banking to which the network transaction system of the present invention is applied.

FIG. 3 is a flowchart showing a processing procedure for opening a new account.

FIG. 4 is an explanatory diagram showing a flow of encrypted information.

FIG. 5 is a diagram showing an example of an application screen for opening a new account.

FIG. 6 is a diagram showing an example of a status inquiry screen for opening a new account.

FIG. 7 is a block diagram showing another configuration example of cyber space banking to which the network transaction system of the present invention is applied.

[Explanation of symbols]

1a, 1b, ... Bank 2 Interbank network 3 open network 4 customers 5 terminals 6 Customer processing means 7 Destination bank processing means 8 Bank processing means for recipients 10 terminal devices 20 open network 30 destination banking equipment 40 Inter-bank network 50 Bank Equipment for Work 11 Input information processing unit 12 Private / public key generator 13 Encryption part 14 Decoding section 15 Output / save processing unit 16 Log information storage section 31 Private Key / Public Key Generation Unit 32 Decoding unit 33 Encryption part 34 Account New Test Permission Judgment Department 35 Account Information Storage 36 Log information storage unit 51 Private Key / Public Key Generation Unit 52 Decoding unit 53 Encryption unit 54 Account Information Check Section 55 Account Information Storage 56 Log information storage unit

─────────────────────────────────────────────────── ─── Continuation of the front page (58) Fields surveyed (Int.Cl. ⁷ , DB name) G06F 17/60 G06F 19/00 G09C 1/00 H04L 9/00

Claims (12)

(57) [Claims] [Claim 1] via the network, the customer operates
Customer terminal device, for the purpose of becoming a new account application destination of the customer
A bank processing device for a bank and an existing account of the customer
In the network transaction system to which the destination bank processing device of the destination bank having the above is connected, the customer terminal device is a private key / public key for generating a customer private key and a customer public key.
The generation means and the account opening information necessary to open a new account are provided to the customer.
Encrypt with private key and further with destination public key
The customer public key and the bank code of the recipient bank.
Encrypted with the destination bank public key, and
The destination bank is the one encrypted with the customer private key.
To encrypt with the public key and send it to the destination bank processor
The encryption means for creating the account opening application message and the response message from the destination bank processor are the customer secret
Decrypt with a key and then decrypt with a destination bank public key
Decryption means for acquiring account acceptance result information and transmission of the account opening application message to the destination bank processing device
And also receives a response message from the destination bank processor.
The destination bank processing device has a transmitting / receiving unit for generating a destination bank private key and a destination bank public key.
Secret key / public key generation means and encryption of account opening application message received from the customer terminal device
Account opening information and the encrypted customer public key, and
Restore the bank code of the destination bank with the destination bank private key.
Encrypted to open encrypted account opening information, the customer public key and
Acquire the bank code of the destination bank and
Decrypt the encrypted account opening information with the customer public key
To obtain the account opening information, and also to the recipient bank
Decrypt the response message from the processing device using the public key for the recipient bank
To obtain the result of checking the existing account information
And the stage, sending bank bank code, the customer public key and request number
The request information including the issue is encrypted with the private bank key for the destination.
The customer terminal device is encrypted with the public key for the recipient
Along with the encrypted existing account information received from
Create an identity verification request message to the bank processing equipment for, or
In addition, new account acceptance based on the check result of the existing account information
The additional result information is encrypted with the private bank private key for the above
Encryption means for encrypting with a customer public key to create a response message, the account opening application message from the customer terminal device, the
When the response message from the destination bank processor is received,
In addition, the reception of the new account acceptance result information to the customer terminal device.
Answer message, confirmation of the identity of the bank processor for the recipient
And a transmission / reception means for transmitting a request message, wherein the destination bank processing device generates a destination bank private key and a destination bank public key.
Private key / public key generating means and the personal identification request message from the destination bank processor.
The encrypted request information and encrypted existing account information are sent to the
Decryption with private bank private key
The bank code of the destination bank by decrypting with,
Acquiring the customer public key and the request number
, Before acquiring the decrypted encrypted existing account information
Decryption using the customer public key to obtain the existing account information
Means a, the existence confirmation of the account by the existing account information and PIN match
As a result of the check, the bank code of the destination bank and the previous
The request number is encrypted with the recipient bank private key
Encryption means to create response message to destination bank processor
And the personal identification request message from the destination bank processor.
And send the response message to the destination bank processor.
A network transaction system comprising: a transmitting / receiving means for transmitting . 2. The destination bank processing device, when the existing account information exists in the destination bank and is an account of the customer, makes a determination to permit opening of an account. 1. The network trading system according to 1. [Claim 3] before Symbol mouth seat opening information is, at least the customer's name, address, place of employment, the destination bank bank code, application information for the new subscription account, claims characterized in that it comprises a desired password for the new application account Item 1. The network trading system according to Item 1. 4. The method of claim 1, wherein the existing account information, customer account number,
The network transaction system according to claim 1, further comprising a customer's personal identification code. 5. A customer creates a new account via the network.
Connected to the destination bank processor of the destination bank to which you are applying.
In the customer terminal device, private key / public key generation means for generating a customer private key and a customer public key, and account opening information necessary to open a new account are encrypted with the customer private key and further directed. encrypted with the bank's public key, also, the customer public key and the customer's existing account
It has encrypted with the bank's public key destination bank code of the destination bank, further for sending its encryption existing account information in the customer's private key to the bank processing apparatus directed said encrypted by the receiving bank public key Encryption means for creating an account opening application message, and decryption for obtaining new account acceptance information by decrypting the response message from the destination bank processing device with the customer private key and further with the destination bank public key transmission means, the account opening application message to the destination bank processing equipment
And also receives a response message from the destination bank processor.
Customer terminal device characterized by having a receiving means for
Place 6. A customer terminal device via a network,
And the destination of the destination bank that has the customer's existing account
Application for a new account of the customer connected to the bank processing unit
In the destination bank processing device of the destination bank that accepts, a private key / public key generation unit that generates a destination bank private key and a destination bank public key, and encrypted account opening information and encryption of the account opening application message received from the customer terminal device. turned into customer public key and the encrypted account opening information is decoded by the destination bank secret key of the bank code of the destination bank, to acquire the bank code of the customer public key and the receiving bank, was acquired <br / > to get the account opening information to decrypt the encrypted account opening information in the customer public key, also, the receiving bank processing instrumentation
Request information including a decoding unit for obtaining the check result of the existing account information response message from the location and decoded at the receiving bank's public key, before Symbol destination bank bank code, the customer's public key and request number Is encrypted with the private bank key for the above
Then , the customer's bank public key is used to encrypt the
With the encrypted existing account information received from the terminal device ,
Create a message to confirm the identity of the bank processor for the recipient
In addition, based on the result of checking the existing account information, new
The account acceptance result information is encrypted with the above-mentioned private bank private key.
And encryption means for creating an encrypted response message with the customer public key in La, the account opening application message from the customer terminal equipment, the specifications
Receives the response message from the bank processing device for
Response message of the new account acceptance result information to the customer terminal device
Sentence, the request to confirm the identity to the bank processor for the recipient
Specification and having a transceiver means for transmitting the text
Bank processing equipment for . 7. A new account for a customer via a network
With the destination bank processor of the destination bank that accepts the application
Of the destination bank with the customer's existing account that is connected
In the destination bank processing device, a private key / public key generation means for generating a destination bank private key and a destination bank public key, and encryption request information and encryption existing for the identity confirmation request message from the destination bank processing device. bank bank code destination by decoding the account information in addition destination bank public key and decrypted by the receiving bank secret key, the rewritable acquires顧<br/> customer public key and request number of the customer, decoding means you get the existing account information is decrypted by the customer public key acquired the encrypted existing account information decoded, the existing account existence confirmation and check result PIN matching account by the information , encryption means for creating a response message to the bank processing apparatus directed the encrypt the bank code and the request number of the receiving bank by the receiving bank secret key, before Receives the above-mentioned personal identification request message from the bank processing device for writing
And send the response message to the destination bank processor.
A destination characterized by having a transmitting / receiving means for transmitting
Bank processing equipment . 8. A customer terminal device via a network,
And the destination of the destination bank that has the customer's existing account
Application for a new account of the customer connected to the bank processing unit
Using the destination bank processor of the destination bank that accepts
In the identity verification method, the destination bank processor is required to open a new account.
Further encrypt the account opening information encrypted with the customer private key.
Information encrypted with the public bank public key for customers and customer public key
And the bank code of the destination bank where the customer's account resides
The second information that was encrypted with the destination bank public key and the customer's
Encrypt existing account information about existing account with customer private key
The third one, which was encrypted with the recipient's bank public key
Information from the customer terminal device , and decrypting the second information with the destination bank secret key to obtain the customer information.
Open the key and obtain the bank code of the destination bank,
Decrypt the first information with the destination bank private key,
Decrypt with customer public key to obtain customer account opening information
Step, the third information, the bank code of the destination bank, and the customer
Encrypt the open key and request information with the private key of the destination bank.
The fourth information encrypted with the public bank key for the recipient
Sent to the bank processing device for
A confirmation request based on existing account information
The step of requesting a bank, and using the private bank key for the recipient from the recipient bank processor
Receive the encrypted response message and restore it with the recipient's public key.
To obtain the result of checking the existing account information,
Determine permission to open an account based on the result of identity verification
A method for identifying an individual, comprising the steps of : 9. A customer terminal device is connected via a network.
The account holding bank with the customer's existing account
Necessary to open a new account from the customer terminal device in the personal identification method using a computer
Existing account opening information and existing customer accounts
Deliver the account information encrypted with the customer private key
The first information encrypted with the bank public key and the customer public key are specified.
For receiving the second information encrypted with the bank public key for
And decrypt the second information with the destination bank private key
The customer's public key is acquired, and the first information is set as the destination bank secret.
Decrypt with a secret key, then decrypt with the customer public key and
Obtain the customer's account opening information and the existing account information
And the identity verification based on the existing account information
And the step of determining the account opening permission based on the result of
A method of verifying the identity of an account holding bank, characterized by having. 10. A customer makes a new account via a network.
Connect to the destination bank processor of the destination bank to apply for
To open a customer account for running a computer
Computer-readable record of the program
In the medium, the computer generates a customer private key and a customer public key
Private key / public key generation means, the account opening information necessary to open a new account
Encrypted with customer private key and further encrypted with destination bank public key
In addition, the customer public key and the existing account of the customer
The bank code of the destination bank you have with the destination bank public key
Encrypt the existing account information with the customer private key.
Encrypted with the recipient's bank public key,
Create an account opening application message to send to the destination bank processor
Encryption means to be generated, the response message from the destination bank processor is the customer secret
Decrypt with the key and then with the above-mentioned destination bank public key
Decryption means for obtaining new account acceptance result information by transmitting the account opening application message to the destination bank processing device
In addition, the response message from the destination bank processor is received.
Recorded the account opening application program to function as a transmitting and receiving means to be trusted .
Computer-readable recording medium. 11. The customer inputs an application for opening a new account.
Interact with customer terminals and banks and networks
An existing account connected to at least one of the banks
For opening new accounts for customers who have
On a computer-readable recording medium that records the ram
The private key of your bank and the private key that generates the bank public key
/ Public key generation means, encryption of the account opening application message received from the customer terminal device
Account opening information and encrypted customer public key and customer
Decrypt the bank code of the existing account holding bank with your own private key
Encrypted account opening information, the customer public key and
Before getting the bank code of the existing bank
Before decrypting the encrypted account opening information with the customer public key
The account opening information is obtained, and
The response message is decrypted with the existing account holding bank public key and the
The result of checking existing account information is obtained, and
Encryption request information and encryption of identity verification request message from storage
Decrypt existing account information with own bank private key
Bank code of your bank by decrypting with the public key
Decrypted with customer public key and request number
Restore the encrypted existing account information with the customer public key.
Decoding means for obtaining the existing account information by encoding, the bank code of the own bank, the customer public key and the request number
Request information including is encrypted with own bank private key
The password received from the customer after being encrypted with the public key of the bank holding the account.
With the existing account information,
Create a message to confirm the identity of the customer or create an existing account
The new account acceptance result information based on the check result is confidential to your bank
What was encrypted with the secret key is encrypted with the customer public key, and
Create an answer message and receive it from another bank processor and decrypt it.
Existence confirmation of the account based on the converted existing account information and
As a result of the matching check, the bank code of the own bank
And encrypt the request number with your bank private key
Encrypting means for creating a response message to the bank processor , the existing account holding bank process via the network
Identity confirmation request message to the device, existing account to another bank processing device
Response check result message or customer terminal device
Send the response message of the new account acceptance result information, and
Response message from existing bank processing device, other bank processing device
Identity confirmation request message from the device or from the customer terminal device
Receiving means for receiving the account opening application telegram competent as,
It records the account opening processing program that allows the computer to function.
Computer readable recording medium. 12. A new account of a customer via a network
Destination bank processing device of destination bank that accepts application
A destination bank holding an existing customer account, connected to
Existing account verification program that runs the computer
The recorded computer-readable recording medium
Te, a computer, to generate a receiving bank secret key and the receiving bank public key
Private key / public key generating means and encryption of the personal identification request message from the destination bank processor
Information about the request for encryption and encrypted existing account information
Decrypt with the private key and then with the destination bank public key
The bank code of the destination bank, the customer's
Obtained the open key and request number, and decrypted
Restore the encrypted existing account information with the customer public key.
Decryption means for encrypting and obtaining the existing account information, and confirmation of the existence of the account based on the existing account information and password coincidence
As a result of the check, the bank code of the destination bank and the previous
The request number is encrypted with the recipient bank private key
Encryption means to create response message to destination bank processor
And the personal identification request message from the destination bank processor
It also receives the response message to the destination bank processor.
Check existing accounts to function as a sending and receiving means for sending
Computer readable recording processing program
recoding media.