JP3725650B2 - Electronic money system - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to an electronic money system using an IC card as a prepaid card, and in particular, can detect various data tampering in a monetary payment process using a card storing monetary value, and ensure security. Related electronic money system.
[0002]
[Prior art]
At present, various systems such as prepaid card systems, credit card systems, and bank POS systems have become widespread as cashless systems that allow customers to purchase products and use various services using cards. Then, an electronic money system that enables transactions using so-called electronic money is being realized. In these cashless systems, there is a possibility that various fraudulent acts are performed in the process from the purchase of the product by the user until the settlement is completed. Thus, many systems have been developed that use IC cards that are safer than media such as magnetic cards as media for recording monetary value data.
[0003]
A prepaid card system using an IC card is disclosed in, for example, Japanese Patent Laid-Open No. 4-313190. This system comprises a prepaid card system consisting of a bank (bank center system), a user (IC card), and a store (transaction terminal). Each time an IC card is purchased, the shopping amount is added. The sales total is calculated, the data is encrypted using the bank key stored in the transaction terminal or IC card, and the sales total data and its ciphertext are stored in the transaction terminal. From the next time, when calculating the sales total, the previous sales total data is encrypted and compared with the ciphertext, or the ciphertext is decrypted and compared with the sales total data to determine whether the data has been tampered with. To do. In the bank center system, the total sales data and the ciphertext are collated with the same logic as the transaction terminal in response to the settlement request sent from the transaction terminal at regular intervals, and if they match, there is no unauthorized tampering. It is determined that the settlement process is performed. However, in this case, since the store side encrypts the data, the store side can tamper with the sales data.
[0004]
On the other hand, an example of a system in which an IC card is used as a prepaid card and an account is settled at an organization different from that of a bank is disclosed in, for example, Japanese Patent Laid-Open No. 5-324998. In this system, a secretariat (host computer) common to member stores is provided, and a reader / writer device capable of exchanging with an IC card distributed to a customer is arranged in each member store, and the reader / writer device and the host computer are arranged. Information is communicated between the two and the settlement of the price is centrally managed. In this system, each customer registers his / her address and name at the secretariat, pays a predetermined prepaid amount and receives an IC card, and the payment is made to the transaction information sent from the member store to the host computer. Based on. Further, in addition to the prepaid balance, the balance of accounts receivable and the balance of service points are recorded on the customer's IC card, making it possible to pay by receivable and to pay from service points. However, this publication has no description regarding the technical contents related to security.
[0005]
Further, as a system that uses an IC card as a prepaid card and can be reused by updating the balance of the prepaid card, for example, a system described in JP-A-3-266095 can be cited. The cashless system described in this embodiment includes a prepaid recording machine connected to a bank host computer, a management company computer connected to the bank host computer, and a dedicated terminal arranged in each store. Is done. Then, using an IC card that can be read and written by entering the PIN, connect to the bank's host computer, enter the PIN, and if it is OK, the transfer amount from your bank account to the management company A certain prepaid amount is written on the IC card. When using a card at a store, the card is inserted into a dedicated terminal, and after entering a password, the amount used is subtracted and the prepaid amount of the card is subtracted. Further, when the card is loaded, the dedicated terminal is connected to the computer of the management company and outputs the usage amount and information indicating the store every predetermined period.
[0006]
[Problems to be solved by the invention]
In the above-described conventional system, some publications disclose that data verification is performed using personal authentication using a general personal identification number or a bank key. However, there is no detailed description of guarantees against data tampering, and no measures have been taken with regard to safety protection at the store side or during data transmission. When it is applied in an area where the place of use is limited such as in a company, it can be said that the security is relatively secured even in the conventional system, but when the usage range is extended to general stores etc. It is important to build and provide a more secure system that can detect the fraud and stop the transaction even if some of the security breaks due to the decryption of the code, etc. It can be said that it is a difficult task.
[0007]
The present invention has been made for the above-mentioned circumstances, and the object of the present invention is to counterfeit / modify a card in the course of money payment with a money card storing a monetary value, and sales in a store. An object of the present invention is to provide an electronic money system capable of detecting fraud such as data tampering and data tampering during transmission and ensuring security.
[0008]
[Means for Solving the Problems]
The present invention relates to an electronic money system using an IC card as a prepaid card, and the above object of the present invention is to store a monetary value in an IC card by cash or a postpayment contract, and for use by a purchaser. An electronic money issuing device that accepts a personal identification number and issues an issuance number to the IC card, and an electronic money issuing device that is provided at a merchandise store or service provision location. An electronic money POS terminal for performing payment processing, card issuing server means for storing and managing data of the electronic money issuing device, and sales collection data receiving server means for receiving information from the electronic money POS terminal through a line; Sales data stored in the collected data receiving server means and the card issuing server And of the data after a false check from the data of the electronic money issuing device, it is achieved by providing an aggregate settlement computer by aggregating the payment amount of the corresponding store performs the transmission and payment processing to the bank of the computer.
[0009]
Alternatively, an IC card reader / writer that accepts a user IC card and reads a password stored therein and reads and updates a prepaid amount, a sales amount input means for inputting at least a sales amount, and a user's password When reading the user IC card, the personal identification number input means for inputting the number, the display means for displaying the guidance and the input amount, the storage means for storing the sales data for a predetermined period, When the personal identification number stored in the card and the personal identification number of the user input from the personal identification number input means match, the prepaid amount is updated and the encryption key stored in the card is used. The user's payment data is encrypted, and the same information that is not encrypted is used as the collected data together with the encrypted data. Stored in the storage unit, when read out of the IC card of the store owned recovery data stored in said storage means and encrypted by the IC card encryption program of 該店 owned The encrypted payment data and the encrypted recovery This is achieved by providing an electronic money POS terminal having a control unit for storing data as the sales data in the storage means for a predetermined period and calling the host computer to transfer the sales data.
[0010]
Alternatively, the first authentication means for performing personal authentication of the cardholder by the IC money card PIN entered by the user, and the usage amount by the encryption program and the first encryption key recorded on the IC money card The first encryption means for encrypting the data, the second authentication means for authenticating the person in charge using the PIN code of the store card entered by the store staff, and the encryption recorded on the store card A second encryption unit that encrypts the sales amount for the usage amount with a program and a second encryption key; and a pair of the usage amount and the sales amount encrypted by the first and second encryption units, respectively. An electronic money POS terminal having transmission means for collectively transmitting the encrypted data; and a pair of previously registered encrypted data from the electronic money POS terminal. And using the second release key to confirm the coincidence of both data, and to remit the monetary value data of the IC money card, the deposit amount data from the electronic money deposit machine and the decrypted use amount And a management computer having fraud detection means for comparing the magnitude relationship between the deposit and withdrawal with respect to the IC money card based on the data and confirming the validity of the deposit and withdrawal.
[0011]
DETAILED DESCRIPTION OF THE INVENTION
According to the present invention, a prepaid card that has been used with security ensured in an area where the place of use is limited such as in a company can be used at a partner store in the suburbs. When building a system that collects sales data from affiliated stores and performs payment processing, etc., tampering with sales data at affiliated stores or tampering with communication data through data theft, etc. There is a need to prevent fraud in all areas where prepaid cards can be used and to ensure system security. In the present invention, the IC card is used as a medium for storing electronic money, and first, the customer's payment data is encrypted based on the first encryption key stored in the customer's IC card. Prevent falsification of payment data on the side. Next, the store side creates collection data obtained by encrypting the data of the collection amount equal to the payment amount of the customer based on the second encryption key stored in the store-specific IC card such as the store manager. . These encryptions are performed, for example, by an encryption program recorded in advance on the IC card using the password entered by the card holder as the encryption key. Then, the encrypted collection data and payment data are paired and sent as sales data to a server (sales collection data reception server) of the management company through a communication line such as a public telephone line.
[0012]
Here, the management company is an organization that provides payments to the store side, sells prepaid cards that can be added and refunded to users, and provides various services such as store-specific benefits and advertisements. It is a different organization from banks. The management company searches the decryption key registered in another server (electronic money issuing server) based on the store number of the transmission source, and obtains the recovered data decrypted by decrypting the encryption based on this decryption key. Next, the user's ID code included in the collected data is searched for the encryption key for each user registered in the other server, the payment data is decrypted based on this, and the decrypted collected data and the payment are decoded. The data is stored as billing data. At this point, it is confirmed that the payment data and the collection data match. This prevents data from being tampered with and misused by interception when it is sent to the management company.
[0013]
Furthermore, an electronic money ID is given to record a user card deposit / withdrawal log, and the prepaid card sales amount (amount deposited to the IC card) and the amount paid by the prepaid card based on this log data By checking the magnitude relationship of (user's usage amount), a comprehensive check is made as to whether or not the prepaid card has been tampered with. Furthermore, a confirmation form is sent to the affiliated store, and if the confirmation at the affiliated store side is 0K, the total settlement terminal of the management company indicates the usage amount of the user (that is, the billed amount of the store) to the bank account of the store. I'm trying to make a payment. As described above, the present invention prevents unauthorized use of an electronic money (IC prepaid card) system due to fraud by performing various fraud checks.
[0014]
Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the drawings.
FIG. 1 shows an example of the entire configuration of the electronic money system of the present invention. In FIG. 1, a management company (provider) 2 is a prepaid card (electronic money card) that can be used at a partner store 1 (1a, 1b,...) Such as a convenience store, bookstore, restaurant, etc. ) Is issued, the sales data from the affiliated store 1 is aggregated, various fraud checks are performed, and the payment amount to the store is transferred to the bank account of the store. The users of this system are members (students, employees, etc.) of organizations (schools, offices, etc .: hereinafter referred to as “member organizations”) that are members of the management company 2. The prepaid card 5 may be a dedicated card, and an employee card or a membership card may be used as the prepaid card 5. In this example, an IC card in which an encryption program is recorded is used, and a DES (data encryption standard) type algorithm is used as an encryption algorithm.
[0015]
The electronic money system provided by the management company 2 includes a card issuing machine 21 for issuing a prepaid card (IC money card: hereinafter referred to as “IC card”) 5 and a store IC card 6 possessed by the user, security information (Cardholder's password, IC card 5 and 6 decryption key, etc.) Electronic money issuing server 22 for storing / managing data such as KW, and for depositing IC card 5 (charging electronic money) Electronic money depositing machine 23, electronic money POS terminal 24 having a payment function by IC card 5, deposit data MD deposited to IC card 5 by electronic money depositing machine 23, and sales data stored in electronic money POS terminal 24 Sales collection data reception server 25 that receives and stores SD, security information KW, sales data SD, and input After checking fraud such as falsification of data based on data MD (forgery of cards, falsification of data stored in POS terminals, falsification of transmission data, etc.) A total settlement terminal 26 that transmits the transfer data BD to the computer 3 and performs payment processing is provided.
[0016]
The electronic money POS terminal 24 installed on each partner store 1 (1a, 1b,...) Side is connected to a sales collection data reception server 25 installed on the management company 2 side via a public telephone line 7a, and has a predetermined The electronic money depositing machine 23 installed in the place and other devices (the card issuing machine 21, the electronic money issuing server 22, the sales collection data receiving server 25, and the total settlement terminal 26) are connected to each other via a dedicated line 7b. Yes. If necessary, a computer (such as a personal computer or a center computer of a company) 4 of a member organization that processes payroll deduction data PD is connected via a dedicated line 7b. Data can also be sent to the computer 4 of this member organization using a storage medium such as a flexible disk. Further, the total settlement terminal 26 is connected to the bank host computer 3 via the network 7c using a dedicated line or a public line. The sales data RD of the existing POS cash register in each partner store 1 is manually input to the electronic money POS terminal 24. Hereinafter, configuration examples of main parts of the electronic money system according to the present invention will be described.
[0017]
FIG. 2 shows an example of the configuration of the electronic money depositing machine 23, and FIG. 3 shows an external view thereof. In FIG. 2, an electronic money depositing machine 23 includes a banknote depositing unit 232 that accepts bills to be exchanged for electronic money and returns a change, and an IC card for reading IC card data and rewriting electronic money data and the like. A reader / writer 233, a display device 234 equipped with a touch panel for performing guidance display, depositing, etc., a printer 235 for journal printing of details such as electronic money balance, etc., selected during the store guidance display service A telephone call can be made to the store free of charge to make a reservation or the like, and a telephone 236 for contacting the person in charge when a failure occurs during operation, etc., and a sales collection data reception server 25 on the management company 2 side And a communication device 237 for online connection, and a control unit 231 including a personal computer for controlling each device. The electronic money depositing machine 23 includes an uninterruptible power supply 40, and each device is connected to a power source via the uninterruptible power supply 40.
[0018]
As shown in FIG. 3, a touch panel type display unit 234a is provided on the upper portion of the housing of the electronic money depositing machine 23 with a predetermined inclination angle in consideration of operability. Similar to the display unit 234a, a front central panel formed with a predetermined inclination angle includes a telephone set 236, a banknote depositing unit 232a, a card insertion port 233a of an IC card (electronic money card), and a journal output port. 235a is provided. The electronic money depositing machine 23 in this example has, as main functions, a deposit function by cash payment to the IC card 5, a deposit function by payroll deduction, a cash deposit data and a payroll data server (sales collection data reception server). 25) and a balance inquiry function. In this example, the maximum amount that can be deposited into the IC card 5 is set for each payment mode (cash payment, payroll deduction), and an amount greater than the limit amount cannot be deposited. This limit amount information is written in advance in the IC card 5 when the card is issued. The deposit data MD deposited in the user's IC card 5 is transmitted to the sales collection data reception server 25 once a day or divided every predetermined time, for example, by a tightening process by starting a timer. . Instead of storing on the electronic money depositing machine 23 side, it may be transmitted to the management company 2 side and stored in the sales collection data receiving server 25 when the depositing operation is completed. Alternatively, the deposit data MD may be collected by a command from the sales collection data reception server 25 side.
[0019]
FIG. 4 shows an example of the configuration of the electronic money POS terminal 24, and FIG. 5 shows an external view thereof. In FIG. 4, an electronic money POS terminal 24 reads and writes data on an IC card reader / writer 242 for reading IC card data and rewriting electronic money data, etc., and cashless card data such as a bank card and a credit card. A magnetic card reader / writer 243, a keyboard 244 composed of function keys, numeric keys, etc., and a cordless type (optical communication type) password input keypad (optical communication) for the cardholder to input a password A numeric keypad) 245, a display device 246 for displaying transaction details and guidance for operating procedures, a printer 247 for journaling payment details and sales details, and sales data (encrypted payment data and collection data). ) And a management company 2 Comprises of a sales recovery data reception server 25 and the communication device 249 for online connection, and a control section 241 comprising a computer for controlling each device.
[0020]
As shown in FIG. 5, the front panel on the top of the housing of the electronic money POS terminal 24 is formed with a predetermined inclination angle, and the cashless such as the display unit 246a, the operation unit 244a, the bank card, etc. A card reading unit 243a and a recording medium loading unit 248a are provided, and a card insertion slot 242a for an IC card (electronic money card) is provided on the front panel at the bottom of the housing. A journal output port 247a is provided on the upper rear side of the housing, and a password input keypad 245 is mounted on the rear side.
[0021]
The electronic money POS terminal 24 in this example is an online terminal that enables the use of advanced customer information processing services by constructing an online network with a shopping street secretariat, regional information VAN, and the like. IC card payment data is encrypted and stored along with the collected data, IC card recording area is used to log usage history (payment and withdrawal transaction log), and the collection data is collected by the IC card encryption program dedicated to the store. Is transmitted to the computer (sales collection data reception server 25 in this example) on the management company 2 side as payment data together with the payment data. In addition, it has setting functions for setting service information (discount rates, etc.) and operational information (billing deadlines, etc.) for affiliated stores, journal printing functions for sales, etc., and prepaid cards, bank cards (banks) POS), credit card, and service card card processing functions that can provide point services.
[0022]
In the journal of the electronic money POS terminal 24, in addition to the payment details delivered to the user, daily totals, the number and amount of use of prepaid cards, the number of sales, sales totals, bank card sales totals, etc. are printed. The above sales data transmission function can be used only when the store-dedicated IC card 6 is used. The storage file (sales data) is recorded on a removable disk (flexible disk / rewritable magneto-optical disk, etc.) that can be taken in and out in this example, and the sales data is sent to the management company 2 due to some trouble. If it is not possible, it can be sent to the store by carrying the recording medium. The sales data is transmitted from the electronic money POS terminal 24 once a day or every predetermined period according to an instruction of the owner (store manager, etc.) of the store IC card 6.
[0023]
In the above-described configuration, first, an operation example of the electronic money depositing machine 23 will be described with reference to the flowcharts of FIGS. The electronic money depositing machine 23 displays, for example, a guide screen of a store where electronic money can be used as an initial screen in the standby state on the display unit 234a (step S1). A list of stores by genre is displayed, and when an individual store is selected (step S2), a guide screen (such as an advertisement) of the individual store is displayed. And when the telephone symbol part displayed with the guidance of an individual store is touched, the telephone of the said store is automatically dialed. This automatic dial function is provided as part of the service for the user. When the user goes to the store, the user can talk with the store clerk at the store for free using the telephone 236 (step S3). .
[0024]
On the other hand, when the deposit menu is selected (step S4), guidance for prompting the user to insert the IC card is displayed, and the IC card is waited for insertion (step S5). When the IC card is inserted, data is read by the IC card reader / writer 233, and after confirming whether or not the user card is issued by this system by the ID data, guidance for prompting the input of the personal identification number is displayed on the display unit. It is displayed on 234a (step S6). When the personal identification number is input, the control unit 231 performs personal authentication by comparing the personal identification number included in the IC card data with the input personal identification number (step S7). As shown in FIG. 10, a current electronic money balance, a deposit limit, a deposit method selection menu, and the like are displayed (step S8).
[0025]
In this example, the deposit method includes deposit by cash and deposit by payroll deduction, and the user can select one of them. First, processing when the former is selected will be described. If cash deposit is selected as the deposit method in step S8 (step S9), and money (a banknote in this example) is inserted, the inserted amount is counted and displayed, and the amount to be deposited into the IC card is input. A message to the effect is displayed (step S10). If the amount to be deposited has been entered, after confirming whether or not the amount is within the limit (step S11), an amount confirmation message (deposit amount, balance of electronic money after deposit, deposit limit after deposit) is displayed. And confirming with the user (step S12). If cancellation is instructed in step S12, the card is returned to end the operation (step S13), and if confirmation OK is instructed, the electronic money ID is numbered. Here, the electronic money ID is an issuance number given each time the electronic money data is rewritten. For example, information indicating a classification of cash / payroll deduction, a number for identifying an issuing machine, and an issuance date (for example, a base year) (Serial number with month and day as the first day) and serial number for each machine. In this example, the electronic money depositing machine 23 corresponds to an electronic money issuing machine, and the electronic money depositing machine 23 updates each of the above information and assigns an electronic money ID for each deposit (step S14).
[0026]
In the IC card deposit area, the number of times of deposit, the electronic money ID, the deposit amount and the electronic money balance are recorded as a transaction history, and the balance in the limit balance area of the IC card (January) The maximum amount of withdrawal from the salary of the company, the maximum amount of cash used in January), and the maximum allowable deposit amount (salary limit, cash limit) in the limit area are updated. Here, the usage history area includes a deposit area and a withdrawal area, each of which can record a plurality of transactions, and is used cyclically (step S15). Then, electronic money deposit log data (for example, date of deposit, user ID, electronic money ID and deposit amount) MD is created and transmitted to the sales collection data reception server 25 by the transmission function described above. Here, the case where it transmits at the time of a money_receiving | payment process is made into an example. This deposit log data MD is stored in the storage means of the sales collection data reception server 25, and is used in fraud check processing (transaction validity confirmation processing) in an aggregation settlement terminal described later. After sending the deposit log data is completed (step S16), the input amount is compared with the deposit amount to check whether there is any change. If there is change, the change is thrown out and returned. Store in the safe (step S17). Then, the journal of the deposit details is output (step S18), the card is thrown out and returned (step S19), and the deposit process is terminated.
[0027]
Next, the deposit process by payroll deduction will be described. Note that the same processing as the deposit processing with cash will be described in a simplified manner. If deposit by payroll deduction is selected as the deposit method in step S9 above, after confirming whether the deposit amount specified by the cardholder is within the limit (step S20), the amount confirmation If a message is displayed and an instruction to cancel is given, the card is returned to end the operation, and if a confirmation OK instruction is given (step S21), an electronic money ID is assigned (step S21). S22), the IC card is updated (step S23). Then, electronic money deposit log data MD is created and transmitted to the sales collection data reception server 25 (step S24), and the process proceeds to step S18 to output a deposit details journal and return the card (step S19). The payment process is terminated.
[0028]
Next, an operation example of the electronic money POS terminal 24 will be described with reference to the flowchart of FIG. The electronic money POS terminal 24 displays a selection screen for each function as an initial screen in the standby state. Here, description of a setting function for store information and the like, a printing function for various journals, and a payment process using a general cashless card such as a credit card is omitted, and a payment process using an IC card 5 and a sales data transmission process are omitted. (Tightening process) will be described. First, the payment process will be described. If payment processing is instructed in step 30, guidance for prompting insertion of the user card is displayed and the IC card is waited for insertion (step S31). When the user's IC card is inserted into the card insertion slot 233a, the control unit 241 of the electronic money POS terminal 24 reads data by the IC card reader / writer 242 (step S32), and the user card issued by the present system. Is confirmed based on the ID data, guidance for prompting the input of the personal identification number is displayed on the display unit 246a. The cashier person gives the password input keypad 245 to the card holder and inputs the password.
[0029]
When the password is input by the card holder, the control unit 241 performs personal authentication by comparing the security code included in the data of the IC card 5 with the input security code (step S33). If the payment is successful, display a guidance prompting you to enter the payment amount. When a payment amount (a purchase amount of goods) is input by the cashier person in charge (step S34), a discount amount is calculated when a discount rate is set, and a discounted payment amount is calculated. This discount service is preset for each store (step S35). Then, the payment amount is compared with the card balance to make sure that the balance is not insufficient (step S36). If the balance is not insufficient, the payment amount is reduced and the IC card is updated. At that time, the electronic money balance in the deposit area is updated, and the usage history (number of times of withdrawal, electronic money ID, usage date and time, usage location (store number, etc.) in the IC card withdrawal area ).
[0030]
The collected data (usage history information, user ID, etc.) is registered in the storage file (step S37), and payment data is sent to the IC card to instruct data encryption. Here, the collection data and the payment data have the same contents, and are composed of each information of the use history, a user ID, and the like. In the encryption program recorded on the IC card, the payment data is encrypted using a DES type algorithm with a password (step S38). The control unit 241 reads the encrypted payment data (step S39), and stores the encrypted payment data SD2 ′ in the accumulation file as sales data together with the collected data SD1 as shown in FIG. 11 (step S40). ), A payment statement is created and journal output is made by the printer 247 (step S41), and the payment process is terminated.
[0031]
Next, sales data transmission processing will be described. In the above-described step S30, when a tightening request is issued, guidance for prompting insertion of the store IC card 6 is displayed on the display unit 246a (step S51). When the store IC card 6 is inserted, the control unit 241 confirms whether or not the store card issued by the system is based on the ID data, and then gives a guidance for prompting the input of a personal identification number (step S52). . Then, the entered personal identification number is compared with the personal identification number included in the data on the IC card 6 to authenticate the person in charge (store person in charge) (step S53). The collected data is sent to the IC card 6 on a case-by-case or block basis, and encryption is instructed (step S54). In the encryption program for the IC card, the collected data is encrypted using a DES type algorithm with a password. The control unit 241 reads the encrypted collection data (step S55) and rewrites the collection data of the stored file (step S56). Then, the sales collection data receiving server 25 is connected online via the communication device 249 (step S57), and the encrypted collection data SD1 ′ and payment data SD2 ′ are transmitted as sales data SD as shown in FIG. Then, it is stored in the D / B of the sales collection data receiving server 25 (step S58). Then, the processing flag of the sales data SD has been charged (step S59), and the sales data transmission processing ends.
[0032]
Next, an operation example of the total settlement terminal 26 will be described with reference to FIG. 13 and FIG. 14 along the flowchart of FIG. 14A and 14B show an example of the file structure of sales data SD and deposit data MD stored in the sales collection data reception server 25, respectively.
[0033]
The total settlement terminal 26 performs a process for transferring money to the store every predetermined period, for example, every month. First, the sales collection data SD1 ′ and SD2 ′ are read from the sales collection data receiving server 25 (step S60). At this point, both data are encrypted. Then, the decryption key (release key) KW1 for each store number is taken out from the electronic money issuing server 22 (step S61), and the collected data SD1 is decrypted with the decryption key KW1 (step S62). Then, the personal identification number KW2 is read from the electronic money issuing server 22 based on the corresponding user ID in the collection data SD1 (step S63), and the payment data is decrypted using the personal identification number KW2 as a key (step S64). Then, the collected data SD1 decrypted by the respective keys and the payment data SD2 are collated to confirm whether or not they match (step S65), and if they do not match, the electronic money card or the store side operates the data It is determined that an illegal operation due to falsification or the like has occurred, or that an abnormality has occurred in the data due to some other cause, and an error is output. In this case, the problem is investigated based on the detailed output indicating the mismatched portion or the like (step S66).
[0034]
If the collection data SD1 and the payment data SD2 match in step S65, the deposit data MD stored in the sales collection data reception server 25 is read based on the user ID and the electronic money ID (step S65). In step S67, the validity of the transaction is confirmed by comparing the deposit amount and the withdrawal amount with the same electronic money ID (step S68). If the deposit is equal to the withdrawal in the same electronic money ID, it is determined that there is an abnormality, and the process proceeds to step S66 to output an abnormality. On the other hand, if the deposit is equal to or greater than the deposit in step S68, it is determined that the deposit is normal (step S69), bank transfer data BD is created (step S70), a check form for the store is presented, and the process is terminated (step S71). ). The transfer data BD to the bank is transmitted after confirmation on the store side by the confirmation form. In the case of the operation of transmitting the payroll deduction data to the member organization, the payroll deduction data PD is transmitted to the member organization PC4.
[0035]
In the above-described embodiment, the card issuing machine 21 and the electronic money depositing machine 22 have been described as separate devices, but may be the same device. The communication line between the partner store 1 and the management company 2 is not limited to a public telephone line, and may be a dedicated line.
[0036]
【The invention's effect】
As described above, according to the present invention, when the user uses the prepaid IC card with the electronic money POS terminal, the usage amount is encrypted by the IC card encryption program for the user, and the store card is used. The sales data is encrypted, and a pair of data encrypted by both parties is sent to the management company. The management company decrypts each data using the release key that was registered first, and both data And checking the size relationship between deposits and withdrawals, so it is safe against fraud such as counterfeiting / modification of cards, alteration of sales data in stores, alteration of data during transmission, etc. A prepaid system can be provided.
[Brief description of the drawings]
FIG. 1 is a block diagram showing an example of the overall configuration of an electronic money system of the present invention.
FIG. 2 is a block diagram showing an example of the configuration of an electronic money deposit machine.
FIG. 3 is a perspective view showing an example of an external configuration of an electronic money deposit machine.
FIG. 4 is a block diagram showing an example of the configuration of an electronic money POS terminal.
FIG. 5 is a perspective view showing an example of an external configuration of an electronic money POS terminal.
FIG. 6 is a flowchart for explaining an operation example of the electronic money deposit machine.
7 is a partial view of FIG. 6. FIG.
FIG. 8 is a flowchart for explaining an operation example of the electronic money POS terminal.
FIG. 9 is a flowchart for explaining an operation example of a total settlement terminal.
FIG. 10 is an example of a display screen of the electronic money deposit machine.
FIG. 11 is a first diagram for explaining a fraud check method according to the present invention;
FIG. 12 is a second diagram for explaining a fraud check method according to the present invention.
FIG. 13 is a third diagram for explaining a fraud check method according to the present invention.
FIG. 14 is a diagram illustrating an example of a file configuration of sales data and payment data stored in a sales collection data reception server.
[Explanation of symbols]
1 partner stores
2 management company
3 Bank host computer
4 member organizations PC
5 Prepaid card (IC money card)
6 IC cards for stores
7a, 7b, 7c Communication line
21 Card issuing machine 21
22 Electronic money issuing server
23 Electronic money deposit machine
24 Electronic money POS terminal
25 Sales collection data reception server
26 Total settlement terminal 26

Claims (2)

An IC card reader / writer that accepts the user IC card and reads the password stored therein and reads and updates the prepaid amount, a sales amount input means for inputting at least the sales amount, and the user enters the password A password input means for inputting, a display means for displaying the guidance and the input amount, a storage means for storing sales data for a predetermined period, and when the user IC card is read, the card When the personal identification number stored inside matches the personal identification number of the user entered from the personal identification number input means, the prepaid amount is updated, and the user is used by the encryption key stored in the card. The payment data is encrypted, and the same information that is not encrypted is collected as the collected data together with the encrypted data. Stored in unit, when read out of the IC card of the store owner, said recovery data stored in the storage means is encrypted by the IC card encryption program of該店owned and payment data and the encrypted An electronic money POS terminal having a control unit for storing the encrypted collection data as the sales data in the storage means for a predetermined period and calling the host computer to transfer the sales data is provided. Electronic money system. The first authentication means for performing personal authentication of the card holder by the IC money card PIN entered by the user, the encryption program recorded on the IC money card and the first encryption key are used to encrypt the usage amount. First encryption means to be converted, second authentication means for authenticating the person in charge of handling with the PIN of the store card inputted by the store person, an encryption program recorded on the store card, and A second encryption unit that encrypts the sales amount with respect to the usage amount with a second encryption key; and a pair of encryptions of the usage amount and the sales amount respectively encrypted by the first and second encryption units. An electronic money POS terminal having transmission means for collectively transmitting the encrypted data; a first and a first registered in advance with the pair of encrypted data from the electronic money POS terminal; Each of the data is decrypted by using the release key to confirm the coincidence of the two data, and based on the deposit amount data from the electronic money deposit machine for rewriting the monetary value data of the IC money card and the decrypted use amount data And a management computer having fraud detection means for comparing the magnitude relationship between the deposit and withdrawal of the IC money card and confirming the validity of the deposit and withdrawal.

Images