JP3825606B2 - Reward card system and user reward card - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a point card system and a user point card for recording points on a user's card based on the purchase amount, and discounting the purchase amount according to the accumulated amount of points on the card. The present invention relates to a point card system and a user point card that can reduce the processing burden.
[0002]
[Prior art]
In general, in the field of commerce, a point card system that records points on a user's card based on the purchase amount and discounts the purchase amount according to the accumulated amount of points on the card is widely known.
[0003]
FIG. 13 is a schematic diagram showing a schematic configuration of such a point card system. This loyalty card system is an n-type loyalty card 1 issued for each store to an unspecified number of users. ₁ ~ 1 _n , N types of store terminals 2 arranged for each store ₁ ~ 2 _n , Each store terminal 2 ₁ ~ 2 _n Is composed of a store host 3 that supervises and a customer point management DB (data base) 4 connected to the store host 3.
[0004]
Here, point card 1 ₁ ~ 1 _n Is a magnetic card in which a user ID (identification number) is recorded. Store terminal 2 ₁ ~ 2 _n The point card 1 ₁ ~ 1 _n The user ID can be read out and each information can be transmitted to and received from the store host 3. Specifically, the cash register and reader (or the user registration information input unit described later) are also used. A card processing apparatus in which a reader / writer is integrated.
[0005]
The store host 3 sends each information to the store terminal 2 ₁ ~ 2 _n Is a host computer that can transmit / receive data to / from the customer point management DB 4 and read / write information. The customer point management DB 4 is a database device that can be read / written from the store host 3 and stores a user ID, user registration information, and point balance information.
[0006]
In such a point card system, at the time of new registration, as shown in FIG. 14, the user goes to the store, for example, the point card 1 ₁ Apply to the store clerk to issue The store clerk receives the user registration information such as the user's first and last name, address, and telephone number from the store terminal 2 ₁ The store terminal 2 transmits the user registration information to the store host 3 (ST1).
[0007]
When the store host 3 receives the user registration information, the store host 3 issues a user ID for identification, registers a set of the user information and the user ID in the customer point management DB 4, and stores the user ID in the store. Terminal 2 ₁ (ST2).
[0008]
Store terminal 2 ₁ Will use this user ID as a reward card 1 ₁ (ST3) to complete the new registration process. However, the present invention is not limited to such a procedure. For example, the point card 1 in which the user ID is recorded in advance. ₁ Use this point card 1 ₁ As a method for transmitting a set of the user ID read from the user and the user registration information obtained from the user to the store host 3 and registering the set of the user ID and the user registration information in the customer point management DB 4 Good. In any case, any method may be used as long as the user ID and the user information are linked and registered in the customer point management DB 4.
[0009]
On the other hand, at the time of payment, the user can carry the point card 1 to be carried as shown in FIG. ₁ To the store clerk. The store clerk is the store terminal 2 ₁ Point card 1 using a reader ₁ The user ID is read out from (ST11). Store terminal 2 ₁ Transmits the read user ID to the store host 3 (ST12).
[0010]
Store host 3 is store terminal 2 ₁ When the user ID is received from, the point balance information (point accumulated amount) in the customer point management DB 4 is searched based on the user ID, and the obtained point balance information is stored in the store terminal 2. ₁ (ST13).
[0011]
The store clerk is the store terminal 2 ₁ Is used to present the payment price before discount to the user (ST14), and the user is asked whether or not to use points. When the user uses points, the store terminal 2 is configured to discount the payment amount up to the value of the point balance information. ₁ To operate the store terminal 2 ₁ To present the final payment.
[0012]
Next, when the store clerk receives the payment from the user (ST15), the store terminal 2 ₁ To enter. Store terminal 2 ₁ Stores the point usage information indicating that the points have been used and the point generation amount corresponding to the payment of the user's price by the store terminal 2 ₁ To the store host 3 (ST16).
[0013]
Upon receiving the point use information, the store host 3 clears the point balance information corresponding to the user ID, and updates the value of the point generated amount to the customer point management DB 4 as new point balance information. Thereafter, the store host 3 sends the new point balance information to the store terminal 2. ₁ (ST17). Store terminal 2 ₁ Prints the payment amount received from the user and the new point balance information on a receipt or the like, and the store clerk gives the receipt to the user (ST18).
[0014]
On the other hand, when the user states that the point is not used at the time of step ST14, the payment price before discount is determined as the final payment price.
[0015]
As shown in FIG. 16, when the store clerk receives payment from the user (ST19), the store terminal 2 ₁ To enter. Store terminal 2 ₁ Stores the point usage information indicating that the user does not use the points, and the amount of points generated according to the payment of the user's price, at the store terminal 2 ₁ To the store host 3 (ST20).
[0016]
The store host 3 adds the value of the point generation amount to the balance point information corresponding to the user ID, and updates the obtained result to the customer point management DB 4 as new balance point information. Similarly, store host 3 sends new point balance information to store terminal 2. ₁ (ST21) and store terminal 2 ₁ Prints out the received payment price and the new point balance information on a receipt or the like, and the store clerk gives the receipt to the user (ST22).
[0017]
[Problems to be solved by the invention]
However, in the point card system as described above, the store host 3 updates the point balance information to the customer point management DB 4, and this update processing places a great burden on the store host 3 as the number of stores increases. This increases the communication cost.
[0018]
In addition, point card 1 where user is different every store ₁ ~ 1 _n It is necessary to possess.
In addition, point card 1 ₁ Since the point balance information in the customer point management DB 4 is obtained by the user ID in the user, the point balance information and user information can be easily read from the other person's point card 1 by an illegal reading act called skinning. The degree of retention is low.
[0019]
The present invention has been made in consideration of the above circumstances, and an object thereof is to provide a point card system and a user point card that can reduce the processing burden on the store side.
[0020]
Another object of the present invention is to provide a point card system and a user point card that can realize a point service with a common card even in different stores.
[0021]
Another object of the present invention is to provide a point card system and a user point card system that can improve the degree of confidentiality.
[0022]
[Means for Solving the Problems]
In order to achieve the above object, a first aspect of the present invention includes a store terminal that removably holds a user point card on which an IC chip is mounted, and a store host computer connected to the store terminal. Point card system, “User ID”, “User public key pair specific to each user point card” and “at least user public key value, store host computer, which are provided in the user point card and issued by the store host computer A memory storing a user public key certificate having a name and a signature obtained by digitally signing a set of the store host computer name and the value of the user public key with the store host private key; When the user point card is held in the store terminal and a price is paid by the user, the point generation means for generating point data based on the price paid, and provided in the store host computer, at least the For the point data generated by the point generation means and the user data related to the user who pays the price, Using the store host private key store Host computer Value generating means for generating value data by applying a unique digital signature, value transmitting means for transmitting the value data generated by the value generating means to the store terminal, and value data received from the value transmitting means When the digital signature is verified using the store host public key and the verification result shows validity, the value data A value input means for inputting the value into the user point card; Provided in the store terminal, when the user point card is held in the store terminal, a digital signature of each of the user public key certificate and value data received from the user point card is stored in the store host public key. Means to verify using It is a point card system equipped with.
[0023]
A second aspect of the present invention is a tamper-resistant user point card used in the point card system, wherein the value storage unit stores the value data input from the value input unit, A counter indicating the balance of value data in the value storage means, and when receiving a balance request from the store terminal, based on the balance request, at least the value data in the value storage means and the value of the counter are stored in the store terminal Balance transmission means for transmitting to the counter, counter value reduction means for substantially reducing the value of the counter by an amount corresponding to the point usage amount when the point usage amount is input from the store terminal, and the counter value reduction A reduced value transmitting means for transmitting the value of the counter reduced by the means to the store terminal. The value storage means includes a “user ID” issued by the store host computer, a “user public key pair unique to each user point card”, “at least the value of the user public key, store host Stores "user public key certificate" and "value data" having a computer name and a signature obtained by digitally signing a set of the store host computer name and the value of the user public key with the store host private key. The value data includes at least point data generated by the store host computer and user data related to the user who pays the price using the store host secret key and a digital signature unique to the store host computer Is the data generated by applying It is a user point card.
[0024]
(Function)
Therefore, according to the present invention, since the point balance is recorded on the user point card side by taking the above-described means, the processing burden on the store side can be reduced.
[0025]
Further, for example, by sharing each store host public key in a plurality of stores, the user can realize a point service with a common card even in different stores only by possessing one tamper resistant device.
[0026]
Furthermore, the degree of confidentiality can be improved as compared with a conventional magnetic card by a method using a user point card on which an IC chip is mounted and an encryption technique such as a digital signature or public key encryption.
[0027]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, embodiments of the present invention will be described with reference to the drawings. In each embodiment, the tamper resistant device possessed by the user is an IC card having a digital signature calculation function, and value, user information, and point information are stored in the IC card. Also, a key disclosed in the public key cryptosystem is called a public key, a secret key is called a secret key, and both are called a public key pair. Here, for example, the RSA public key method is used.
[0028]
(First embodiment)
FIG. 1 is a block diagram showing a configuration of a point card system according to the first embodiment of the present invention. In this point card system, a store terminal 20 for executing a point service using a user point card 10 is connected to a store host 30 as a host computer.
[0029]
Here, the user point card 10 is a portable electronic device (for example, an IC card) which has tamper resistance and can be used for signature calculation, which is mounted on the store terminal 20 and holds a point value. , A balance counter 12 for counting the point value balance (hereinafter referred to as a point balance) in the memory 11, a balance management unit 13 for managing the point balance recorded in the balance counter 12, and a balance An I / O interface 14 for transmitting / receiving each information from the management unit 13 to the store terminal 20 is provided. The memory 11, balance counter 12 and balance management unit 13 are realized by an IC chip having tamper resistance.
[0030]
The memory 11 stores a card ID, which is a unique number assigned to each store used and for each user point card 10, and a user public key / user secret key pair (hereinafter referred to as a user) unique to each user point card. Public key pair), user public key certificate, store host public key are stored, and point value according to the payment price can be written, and tamper resistance, copying, etc. depending on the tamper resistance of the IC chip Protected from unauthorized access. In particular, the user secret key is stored in an area that cannot be read by ordinary means.
[0031]
The user public key certificate is generated by the store host 30, and includes at least the value of the user public key, the name of the store host that issued the user public key certificate, and the value of the store host name and the user public key. Is a data having three signatures that are digitally signed with the private key of the store host 30. Note that the user public key pair and the user public key certificate may be issued by a third party called a Trusted Third Party.
[0032]
The point value is data generated by the store host 30 and digital signature of the store host 30 applied to information such as the user ID, the point amount at the time of generating the point value, and the date.
[0033]
The balance management unit 13 executes processing related to the recording and updating of point values in addition to managing the stamp balance. Specifically, the balance management unit 13 receives a balance request input from the store terminal 20 via the I / O interface 14. (In the following description, for the sake of simplicity, the balance request is omitted between the store terminal 20 and the user point card 10 via the I / O interface 14). , A function for sending the user ID, user public key certificate and point value in the memory 11 and the point balance in the balance counter 12 to the store terminal 20, and a verification result and points indicating validity When the usage amount is input from the store terminal 20, the point usage amount is reduced from the value of the balance counter 12, and the obtained point balance is sent to the store terminal 20. The function, the new point value input from the store terminal 20 is overwritten and updated in the memory 11, the value of the balance counter 12 is reset according to the new point value, and the completion notification is sent when the resetting process is completed. And a function of sending to the store terminal 20.
[0034]
When the store terminal 20 has a function of holding the user point card 10 in a removable manner, a function of newly registering an unregistered user point card 10, and a registered user point card 10 inserted, It has functions to execute verification of the user point card 10, display of unused balances, exchange of point values, etc. by the operation of the store clerk.
[0035]
Specifically, the store terminal 20 includes a data read / write unit 21, a registration unit 22, a digital signature verification unit 23, and a point balance verification unit 24 in addition to a normal cash register function (such as a cash accounting function and a screen display function). A point update unit 25, a data storage unit 26, and a communication I / F 27.
[0036]
The data reading / writing unit 21 is controlled by each of the processing units 22 to 25 in the store terminal 20 and has a function of executing reading processing and writing processing of data in the user point card 10. In this case, an IC card reader / writer is used. In the following description, the description that the data exchange with the user point card 10 is performed via the data read / write unit 21 is omitted for the sake of brevity as described above.
[0037]
When the user point card 10 is inserted, the registration unit 22 displays a screen for prompting input of user registration information such as name, address, and telephone number, and the input user registration information as data. The function of transmitting to the store host 30 via the storage unit 26 and the communication I / F 27, and the user ID, user public key pair, and user received from the store host 30 via the communication I / F 27 and the data storage unit 26 It has a function of writing a public key certificate and a store host public key to the user point card 10 and displaying a screen indicating the completion of registration. In addition, not only the registration part 22 but the following description omits the description to the effect through the data storage part 26 and communication I / F27 regarding the exchange of data with the store host 30 for the sake of simplification as described above.
[0038]
The digital signature verification unit 23 holds a store host public key for verification, and when the user point card 10 is inserted into the store terminal 20 (the card reading / writing unit 21 thereof), The function of verifying the digital signatures of the received user public key certificate and point value, the function of verifying the digital signature of the new point value received from the store host 30, and the respective verification results are notified to the point update unit 25. It has a function.
[0039]
The point balance verification unit 24 has a function of verifying the validity of the point balance based on a comparison between the point value and the value of the point balance, and a function of notifying the point update unit 25 of the verification result. Specifically, when the value of the point balance is equal to or less than the value of the point value, it is determined to be valid.
[0040]
The point updating unit 25 performs a function of performing a screen display of the current point balance and a screen for prompting the input of the point usage amount after verifying the validity by the digital signature verification unit 23 and the point balance verification unit 24; A function of inputting the input point usage amount into the user point card 10, a function of transmitting the user ID, the point balance and the new point amount received from the user point card 10 to the store host 30, and the store host 30 The function of inputting the new point value received from the user to the user point card 10 after verification by the digital signature verification unit 23 and the function of terminating the processing upon completion notification received from the user point card 10 are provided.
[0041]
The data storage unit 26 has a buffer memory function for temporarily storing data exchanged with the store host 30 in the store terminal 20.
[0042]
The communication I / F 27 has an interface function for executing communication between the data storage unit 26 and the store host 30.
[0043]
On the other hand, the store host 30 includes a communication I / F 31, a user data registration unit 32, a key data generation unit 33, a user information management DB 34, and a point value generation unit 35.
[0044]
The communication I / F 31 is an interface for executing communication with the store terminal 20. In addition, in the following description, for simplification of the description as described above, the description that the communication I / F 31 is used for data exchange with the store terminal 20 is omitted.
[0045]
The user data registration unit 32 has a function for newly registering a user. Specifically, when receiving user registration information from the store terminal 20, the user data registration unit 32 issues a user ID and uses the user ID. A function for registering a pair with the user registration information in the user information management DB 34, a function for starting the key data generation unit 33 and issuing a user public key pair and a user public key certificate, a user ID, and a use A public key pair, a user public key certificate, and a store host public key.
[0046]
When activated by the user registration unit 32, the key data generation unit 33 issues a user public key pair and a user public key certificate based on, for example, a user ID, and the user public key pair and user It has a function of sending a public key certificate to the user registration unit 32.
[0047]
The user information management DB 34 is a DB in which a set of a user ID and user registration information (such as name, address, and telephone number) is recorded by the user data registration unit 32.
[0048]
Upon receiving the user ID, the point balance, and the new point amount from the store terminal 20, the point value generating unit 35 adds the point balance and the new point amount to generate a new point value, and this new point value is stored in the store terminal. Has a function to reply to 20.
[0049]
Next, the operation of the point card system configured as described above will be described with reference to FIGS.
(New registration)
As shown in FIG. 2, the user goes to the store and applies to the store clerk to issue a point card. The store clerk inserts the user point card 10 into the store terminal 20. In the store terminal 20, the registration unit 22 displays a screen for prompting input of user registration information such as a name, an address, and a telephone number by the insertion. In addition, when the store clerk inputs the user registration information heard by the store clerk, the registration unit 22 transmits the input user registration information to the store host 30 via the data storage unit 26 and the communication I / F 27 ( ST31).
[0050]
In the store host 30, when the user data registration unit 32 receives the user registration information, it issues a user ID and registers the set of the user ID and the user registration information in the user information management DB 34. The key data generation unit 33 is activated to issue a user public key pair and a user public key certificate, and the user ID, user public key pair, user public key certificate, and store host public key are stored in the store. It transmits to the terminal 20 (ST32).
[0051]
In store terminal 20, registration unit 22 writes the user ID, user public key pair, user public key certificate, and store host public key received from the store host in the memory of the user point card (ST33). ), The registration completion message is displayed on the screen, and the registration process is terminated.
[0052]
(At the time of payment after registration)
Further, when paying the price, the user presents the user point card 10 to be carried to the store clerk as shown in FIG. The store clerk inserts the user point card 10 into the store terminal 20, and the store terminal 20 inputs a balance request to the user point card 10. Based on the balance request, the user point card 10 stores the user ID, the user public key certificate and the point value (if any) in the memory 11 and the point balance in the balance counter 12 to the store terminal 20. Send out (ST41).
[0053]
Next, in the store terminal 20, the digital signature verification unit 23 verifies the digital signatures of the user public key certificate and the point value, and notifies the point update unit 25 of the verification result. Further, the point balance verification unit 24 verifies the validity of the point balance based on the comparison between the point value and the value of the point balance, and notifies the point update unit 25 of the verification result.
[0054]
The point update unit 25 performs screen display of the current point balance and screen display for prompting the input of the point usage amount when each verification result indicates validity.
Subsequently, the user tells the store clerk the point amount to be used (point use amount) out of the current point balance, and the store clerk inputs the point use amount into the store terminal 20 and pays the payment from the user. Receive. If points are not used (stored), the point usage amount is set to “0”.
[0055]
In the store terminal 20, the point update unit 25 inputs the input point usage amount and the verification results of the verification units 23 and 24 to the user point card 10 (ST42).
[0056]
In the user point card 10, when the balance management unit 13 receives the verification result and the point usage amount, the point usage amount is reduced from the value of the balance counter 12, and the obtained point balance is sent to the store terminal 20. (ST43).
[0057]
In the store terminal 20, the point update unit 25 transmits the user ID, the point balance, and the new point amount to the store host 30 (ST44).
[0058]
In the store host 30, when the point value generation unit 35 receives the user ID, the point balance, and the new point amount from the store terminal 20, the user ID and the point amount obtained by adding the point balance and the new point amount are added to the user ID and the point amount. A new point value is generated by applying a digital signature to the information formed by concatenating the date using the store host secret key, and this new point value is returned to the store terminal 20 (ST45).
[0059]
In the store terminal 20, the digital signature verification unit 23 verifies the digital signature of the new point value using the store host public key, and notifies the point update unit 25 of the verification result.
[0060]
When the verification result indicates validity, the point update unit 25 inputs a new point value to the user point card 10 (ST46).
[0061]
In the user point value, the balance management unit 13 overwrites and updates the new point value in the memory 11, resets the value of the balance counter 12 corresponding to the new point value, and then sends a completion notification to the store terminal 20. To send.
Upon receiving this completion notification, the store terminal 20 ends the point update process.
[0062]
As described above, according to this embodiment, since the point balance is recorded on the user point card 10 side, the processing burden on the store side can be reduced.
[0063]
In addition, for example, by sharing each store host public key in a plurality of stores, a user can have a single tamper-resistant device, and a point service can be realized with a common user point card at different stores. it can.
[0064]
Furthermore, the degree of confidentiality can be improved as compared with a conventional magnetic card by a method using a user point card on which an IC chip is mounted and an encryption technique such as a digital signature or public key encryption.
[0065]
(Second Embodiment)
FIG. 4 is a schematic diagram for explaining a point card system according to a second embodiment of the present invention. The same parts as those in the above-mentioned drawings are denoted by the same reference numerals, detailed description thereof is omitted, and different here. The part is mainly described. In the following embodiments, the same description is omitted.
[0066]
That is, the present embodiment is a modification of the first embodiment and is intended to share the types of user point cards 10 in the shopping street. Specifically, the store host 30 described above is connected to each store 28. ₁ ~ 28 _n One of the above-mentioned card ID, user public key pair, user public key certificate, and store host public key, the store host public key and the user public key certificate digital The signature (store host private key) and each store 28 in the shopping street ₁ ~ 28 _n It is the structure made common by.
[0067]
In addition, the store terminal 20 described above includes each store 28. ₁ ~ 28 _n It is arranged for each and is connected to a common store host 30.
According to the above configuration, for example, a plurality of store terminals 20 in one store. ₁ ~ 20 _n Therefore, in addition to the effects of the first embodiment, a common type of user point card 10 (or point card service) can be provided in the shopping street.
[0068]
(Third embodiment)
FIG. 5 is a schematic diagram for explaining a point card system according to a third embodiment of the present invention.
This embodiment is a modification of the second embodiment, in which a single user point card 10 can store point values of a plurality of stores. Specifically, a public key pair and a public key A third party organization (Trusted Third Party) 40 is provided as a computer system for issuing a certificate.
[0069]
Here, the third-party organization 40 corresponds to a so-called certification authority, and one of the store hosts 30 _i (However, the store host 30 that issued the user public key pair and the user public key certificate when requested to issue a key with a user ID attached from 1 ≦ i ≦ n) _i It has a function to send to.
[0070]
Each store terminal 20 ₁ ~ 20 _n 1 is obtained by changing the function of the digital signature verification unit 23 in the functional block of FIG. Specifically, the digital signature verification unit 23 holds a verification third-party public key in addition to the store host public key, and the user point card 10 stores the store terminal 20. _i The function of verifying the user public key certificate received from the user point card 10 with the third party public key and the point value received from the user point card 10 when inserted into the store corresponds to a store identifier described later. The configuration is modified to have a function of verifying with the store host public key.
[0071]
However, own store host 30 _i The function of verifying the digital signature of the new point value received from the store host public key and the function of notifying the point update unit 25 of each verification result are provided as described above.
[0072]
The user public key certificate here is generated by the third party organization 40, and at least the value of the user public key, the name of the third party organization that issued this user public key certificate, and the third This is data having three signatures, each of which is a digital signature of a pair of a person organization name and a user public key value with the private key of the third party organization 40.
[0073]
Meanwhile, store host 30 ₁ ~ 30 _n Each store 28 ₁ ~ 28 _n The key data generation unit 33 relating to the key generation function is omitted (= transferred to the third party organization 40) among the functions described above.
[0074]
Each point value is calculated at each store 28. ₁ ~ 28 _n A store identifier corresponding to the store identifier is assigned to each store. _i The digital signature can be verified by the store host public key.
[0075]
With the configuration as described above, one user point card 10 has a plurality of stores 28. ₁ ~ 28 _n Point value of each store 28 ₁ ~ 28 _n The point card service can be executed every time.
[0076]
(Fourth embodiment)
FIG. 6 is a schematic diagram for explaining a point card system according to the fourth embodiment of the present invention.
[0077]
The present embodiment is a modification of the first embodiment, and is intended to realize a point card system (online shopping) using network communication. As shown in FIG. The user terminal 20a that can communicate with the store host 30a via the network NW is used, and the store host 30a is provided with a communication function of the network NW. The user point card 10a is an IC card having the above-described function, and is obtained by embossing a credit number on a card base in advance.
[0078]
The user terminal 20a is, for example, a client terminal arranged at a user's house, and has the same function as the store terminal 20 described above (however, there is no cash register function, and the signature verification units 23 and 24 are connected to the store host 30a). It is possible to execute network communication with the store host 30a using a protocol for encryption communication. Here, as a protocol for encryption communication, for example, SSL (Secure Socket
Layer: SSL is a trademark of Netscape, USA).
[0079]
Specifically, the user terminal 20a displays, for example, a purchase request check box on the screen by the above-described function of the registration unit 22 and the operation of the operator, and after the check box is checked, the submit (submit) When the icon is clicked, a function for transmitting a purchase request to the store host 30a, and when receiving a charge request from the store host 30a, the amount of the charge request is displayed on the screen, and a message or the like is prompted to input a credit number. When the credit number is input by the screen display function and the user's operation and the approval (OK) icon is clicked, the credit number, the point usage amount (after the second time), the user public key certificate and the usage A function of transmitting a person ID to the store host 30a, and a receipt notification of a price (credit number) and a point generation notification from the store host 30a In addition to displaying the amount of points generated on the screen and displaying a message prompting the user to answer whether or not to receive the points, and the user's operation, the willingness display status (OK) and point balance (second time) Or the like, or a function of transmitting a non-reception intention display status (NG) to the store host 30a and a function of transmitting a receipt notification to the store host 30a when the point value received from the store host 30a is filled.
[0080]
On the other hand, the store host 30a is a computer system comprising, for example, a server device 36 of a content distributor and a user information management DB 34 connected thereto, and in addition to the same functions as the store host 30 described above, a protocol for encryption communication is provided. It can be used to perform network communication with the user terminal 20a.
[0081]
Specifically, in addition to the function of the user data registration unit 32 described above, the store host 30a receives the purchase request from the user terminal 20a and the function of registering a credit number, and pays for the product corresponding to the purchase request. When a function for returning a charge to the user terminal 20a, a credit number, a point usage amount (from the second time), a user public key certificate and a user ID are received from the user terminal 20a, the user public key is the same as described above. After verifying the digital signature of the certificate, a function for transmitting a payment price acceptance notification and a point occurrence notification indicating the point amount generated by this payment to the user terminal 20a, and a willingness display status from the user terminal Is received, the point value is transmitted to the user terminal 20a and the point value identification information (date and point amount or A function for setting the presence of a willingness-to-receive display status in the user information management DB 34a corresponding to the number, etc., and when a point value receipt notification is received from the user terminal, the corresponding point value in the user information management DB 34a And a function of sending a completion notice to the user terminal 20a and ending a series of point card processing.
[0082]
Further, the store host 30a has a function of detecting that there is fraud when a receipt notification is not received even if a predetermined time has elapsed after transmitting the point value, and a predetermined time after transmitting the point occurrence notification. If neither the receipt will display status (OK) nor the non-receipt will display status (NG) is received even after the elapse of time (such as a communication accident), the fact that these statuses have not been received is output, and the store host 30a It has a function to prompt the manager (clerk) to respond.
[0083]
In addition, the user information management DB 34a includes point value identification information (e.g., date and point amount, or a combination of the user ID, user registration information (name, address, telephone number, etc.) and point balance described above. For each issue number, the presence / absence of a willingness-to-receive display status and the presence / absence of a receipt notification are set.
[0084]
Next, the operation of the point card system configured as described above will be described with reference to the sequence diagrams of FIGS.
(New registration)
Steps ST51 to ST53 of the registration process shown in FIG. 7 are executed in the same manner as in FIG. However, in step ST51, the user registration information transmitted from the user terminal 20a to the store host 30a includes a credit number in addition to the name, address and telephone number described above. Further, as network communication, a protocol for cryptographic communication such as SSL is used. Further, the following communication uses the same protocol for encrypted communication.
[0085]
(First time purchase)
In the user terminal 20a, as shown in FIG. 8, for example, a purchase request check box is displayed on the screen by an operation of the operator, and after this check box is checked, a submit icon is clicked. A purchase request is transmitted to the store host 30a (ST61).
[0086]
Upon receiving the purchase request, the store host 30a returns a charge for the product corresponding to the purchase request to the user terminal 20a (ST62).
[0087]
When the user terminal 20a receives the charge request, the user terminal 20a displays the amount of the charge request on the screen and displays a message or the like so as to prompt the input of the credit number.
[0088]
Here, in the user terminal 20a, when the credit number is input by the user's operation and the approval (OK) icon is clicked, the credit number, the user public key certificate, and the user ID are stored in the store host 30a. It is transmitted (ST63).
Upon receipt of these credit numbers and the like, the store host 30a verifies the digital signature of the user public key certificate in the same manner as described above, and then receives a payment fee acceptance notification and a point occurrence notification indicating the point amount generated by the payment. Is transmitted to the user terminal 20a (ST64).
[0089]
When the user terminal 20a receives the reception notification and the point generation notification, the user terminal 20a displays the generated point amount on the screen and displays a message for prompting an answer as to whether or not to receive the point.
[0090]
The user terminal 20a transmits, for example, a receipt intention display status (OK) to the store host 30a by the user's operation (ST65).
When the store host 30a receives the receipt intention display status, the store host 30a transmits the point value to the user terminal 20a (ST66), and makes it correspond to the point value identification information (date and point amount, issue number, etc.). In the user information management DB 34a, the presence of the willingness-to-receive display status is set.
[0091]
When filling the point value, the user terminal 20a transmits a receipt notification to the store host 30a (ST67).
When the store host 30a receives this receipt notification, it sets the presence of receipt notification at the corresponding point value in the user information management DB 34a, and sends a completion notification to the user terminal 20a (ST68). The process ends. It should be noted that the store host 30a detects that there is fraud when it does not receive a receipt notification even after a predetermined time has elapsed after transmitting the point value. By detecting this fraud, for example, when a corresponding point value is used, a detectable measure can be taken.
In addition, in step ST65, when the store host 30a does not receive either the receipt intention display status (OK) or the non-receipt intention display status (NG) even after a predetermined time has passed (such as a communication accident), these statuses Is output, and the manager (store clerk) of the store host 30a is urged to respond. With this output, the store clerk notifies the user that he / she has not received the status regarding the intention display by telephone or other offline means, and when the user's answer is a receipt approval, the URL for filling point (uniform resource locator) To be notified. Hereinafter, when the user terminal 20a accesses this URL, the point value is filled.
[0092]
(From the second time on)
As shown in FIG. 9, the user terminal 20a transmits a purchase request to the store host 30a by the operation of the operator as described above (ST71).
[0093]
Upon receipt of the purchase request, the store host returns a charge for the product corresponding to the purchase request to the user terminal 30a (ST72).
[0094]
The steps so far are the same as steps ST61 to ST62 at the first time. In the following, processing relating to the point usage amount is added (at the first time, there was no processing relating to the point usage amount because there was no point value in the user point card 10).
[0095]
Next, when the user terminal 20a receives the charge request, the user terminal 20a displays the amount of the charge request on the screen and displays a screen of a message or the like to prompt the input of the credit number and the point usage amount.
[0096]
In the user terminal 20a, when the credit number and the point usage amount are input by the user's operation and the approval icon is clicked, the credit number, the point usage amount, the user public key certificate and the user ID are stored in the store host. It is transmitted to 30a (ST73). When points are not used, “0” is input as the point usage amount. The point usage amount is stored in the user point card 10a. For example, if there are 1000 points, if 500 points are used, there should be a balance of 500 points, but if there is only 300 points, it is used when the user corrects the points.
[0097]
Upon receiving these credit numbers and the like, the store host 30a verifies the digital signature of the user public key certificate in the same manner as described above, and then receives a payment notification (= credit payment fee + point use amount) and A point occurrence notification indicating the point amount generated by the payment is transmitted to the user terminal 20a (ST74).
[0098]
When the user terminal 20a receives the reception notification and the point generation notification, the user terminal 20a displays the generated point amount on the screen and displays a message prompting an answer as to whether or not to receive the point.
[0099]
For example, when the user terminal 20a receives points by operating the user, the user terminal 20a issues a point balance initialization certificate, and transmits the point balance initialization certificate, the point value, and the receiving intention display status to the store host 30a. (ST75). The point balance initialization certificate is data composed of data obtained by digitally signing the point balance and the point value identification number with the private key of the user terminal 20a, and the point value. This point balance initialization certificate is stored as a log in the user point card 10a. For example, when a user cannot receive a new point value due to a failure during communication, the new point value is retransmitted later. It is used when the user point card 10a is filled with point values. Further, the processing when the store host 30a receives neither the receipt intention display status nor the non-receipt intention display status is as described above.
[0100]
On the other hand, when the store host 30a receives the point balance initialization certificate, the point value, and the willingness-to-receive display status, the store host 30a verifies the point balance initialization certificate based on the point value and the user public key of the user terminal 20a. After that, a new point value is generated by adding the point balance in the certificate and the point generated amount, and the new point value is transmitted to the user terminal 20a as described above (ST76). Corresponding to the point value identification information, the user information management DB 34a is set to have a receipt will display status.
[0101]
The user terminal 20a fills (writes) the new point value and, when setting the point balance, transmits a receipt notification to the store host 30a (ST77).
[0102]
When the store host 30a receives this receipt notification, it fills in the presence of the receipt notification at the corresponding point value in the user information management DB 34a, and sends a completion notification to the user terminal (ST78), and a series of point card processing Exit. In addition, when the store host 30a does not receive the receipt notification, the store host 30a can detect fraud as described above.
[0103]
As described above, according to the present embodiment, it is possible to realize online shopping having the same effects as those of the first embodiment.
[0104]
(Fifth embodiment)
FIG. 10 is a schematic diagram for explaining a point card system according to the fifth embodiment of the present invention.
[0105]
This embodiment is a modification of the fourth embodiment, and is intended to realize a point card system (offline shopping) using network communication. Instead of an operation input by a user as shown in FIG. Thus, the store clerk listens to the user about the use / non-use of points, the presence / absence of point reception, the amount of point use, and the like, and inputs them to the store terminal 20b.
[0106]
The store terminal 20b has a cash register function added to the function of the user terminal 20a described above. Further, the store terminal 20b and the store host 30a are connected by a dedicated line PN instead of the network NW described above.
[0107]
According to the configuration as described above, offline shopping having the same effect as that of the fourth embodiment can be realized.
[0108]
(Sixth embodiment)
FIG. 11 is a schematic diagram showing a configuration of a point card system according to the sixth embodiment of the present invention.
[0109]
That is, this embodiment is a modification of the fourth embodiment, and as shown in FIG. 11, the first use is made via the first and second user terminals 20aA and 20aB connected to the network NW. The point balance of an arbitrary amount among the point balances of the user point card 10aA is transferred to the second user point card 10aB and can be added to the point balance of the user point card 10aB.
[0110]
Here, since the first and second user terminals 20aA and 20aB have the same configuration, the first user terminal 20aA will be described as a representative here. The same applies to the first and second user point cards 10aA and 10aB. Furthermore, suppose that the first user point card 10aA is attached to the first user terminal 20aA, and the second user point card 10aB is attached to the second user terminal 20aB.
[0111]
In addition to the functions described above, the first user terminal 20aA has a function of inputting a point balance transfer instruction designating the amount to be transferred and a transfer destination to the first user point card 10aA attached by a user operation. And, when receiving a point balance from the first user point card 10aA in response to the point balance transfer instruction, a function of transmitting this point balance to the transfer destination (for example, the second user point card 10aB); When receiving two point balances from the first user point card, it has a function of transmitting these point balances to the store host 30a.
[0112]
The first user point card 10aA has a point balance transfer function in addition to the functions described above. For example, when the point balance transfer command specifying the amount to be transferred and the transfer destination is input from the first user terminal 20aA, the point balance transfer function is based on the point balance transfer command. When subtracting and updating, and receiving the function to send the point balance value of the subtraction (transfer) to the transfer destination (for example, the second user point card 10aB) and the transferred point balance value The point balance value and the own point balance value are transmitted as a set to the store host 30a.
[0113]
Next, the operation of the point card system configured as described above will be described with reference to the sequence diagram of FIG.
First, it is assumed that the point balance of the first user point card 10aA is 500 yen and the point balance of the second user point card 10aB is 1000 yen (at the end of ST78 in FIG. 12).
[0114]
Here, it is assumed that 100 yen out of the point balance 1000 yen of the second user point card 10aB is transferred to the first user point card 10aA.
[0115]
When the point balance transfer command specifying 100 yen is input from the second user terminal 20aB, the second user point card 10aB subtracts 100 yen from the point balance 1000 yen and changes the point balance to 900 yen. On the other hand, the subtracted point balance of 100 yen is transmitted to the first user point card 10aA via the second user terminal 20aB (ST81).
[0116]
When receiving the point balance of 100 yen, the first user point card 10aA transmits it to the store host 30a via the first user terminal 20aA together with the existing point balance of 500 yen (ST82).
[0117]
When the store host 30a receives these point balances of 500 yen and 100 yen, the store host 30a adds the two to each other and generates a new point value indicating the added result of 600 yen. Transmission is made to the card 10aA (ST83).
[0118]
Upon receiving the point value 600 yen, the first user point card 10aA stores the point value and sets the point balance to 600 yen. Thereafter, as described above, the first user point card 10aA transmits a receipt notification to the store host 30a via the first user terminal 20aA (ST84). Further, upon receiving this receipt notification, the store host 30a transmits a completion notification to the first user point card 10aA (ST85), and ends the processing.
[0119]
As described above, according to the present embodiment, in addition to the effects of the fourth embodiment, points can be transferred between users.
[0120]
In addition, although each said embodiment demonstrated the case where an IC card was used as user point card 10, 10a, 10aA, 10aB, it is not restricted to an IC card shape, For example, shapes other than a card (for example, rod shape) Even when the outer shape is arbitrarily changed, such as a memory stick) or a card shape outside the IC card standard (eg, memory card shape), it is included in the scope of the present invention.
[0121]
In each of the above embodiments, the case where the user's PIN (Personal Identity Number) is not input at the time of payment is described. However, the present invention is not limited to this. The same effect can be obtained by carrying out the invention in the same manner. However, in consideration of the processing at the store, it is considered that the form in which the input of the PIN is omitted is preferable.
[0122]
In addition, the present invention can be implemented with various modifications without departing from the gist thereof.
[0123]
【The invention's effect】
As described above, according to the present invention, it is possible to provide a point card system and a user point card that can reduce the processing burden on the store side. In addition, it is possible to provide a point card system and a user point card that can realize a point service with different cards at different stores. Furthermore, the point card system and user point card system which can improve the degree of confidentiality can be provided.
[Brief description of the drawings]
FIG. 1 is a block diagram showing a configuration of a point card system according to a first embodiment of the present invention.
FIG. 2 is a sequence diagram for explaining an operation at the time of new registration in the embodiment.
FIG. 3 is a sequence diagram for explaining an operation at the time of payment in the embodiment.
FIG. 4 is a schematic diagram for explaining a point card system according to a second embodiment of the present invention.
FIG. 5 is a schematic diagram for explaining a point card system according to a third embodiment of the present invention.
FIG. 6 is a schematic diagram for explaining a point card system according to a fourth embodiment of the present invention.
FIG. 7 is a sequence diagram for explaining an operation at the time of new registration in the embodiment.
FIG. 8 is a sequence diagram for explaining an operation at the time of first purchase in the embodiment.
FIG. 9 is a sequence diagram for explaining an operation at the time of purchase after the second time in the embodiment;
FIG. 10 is a schematic diagram for explaining a point card system according to a fifth embodiment of the present invention.
FIG. 11 is a schematic diagram for explaining a point card system according to a sixth embodiment of the present invention.
FIG. 12 is a sequence diagram for explaining the operation in the embodiment;
FIG. 13 is a schematic diagram showing a schematic configuration of a conventional point card system.
FIG. 14 is a sequence diagram showing an operation at the time of conventional new registration.
FIG. 15 is a sequence diagram showing an operation at the time of conventional payment.
FIG. 16 is a sequence diagram showing a conventional operation when points are not used.
[Explanation of symbols]
10, 10a, 10aA, 10aB ... User reward card
11 ... Memory
12 ... Balance counter
13. Balance management department
14 ... I / O interface
20, 20b ... Store terminal
20a, 20aA, 20aB ... User terminal
21: Data reading / writing unit
22 ... Registration Department
23 ... Digital signature verification unit
24 ... Point balance verification section
25 ... Point update section
26: Data storage unit
27, 31 ... Communication I / F
28 ₁ ~ 28 _n …store
30, 30a ... store host
32 ... User data registration section
33 ... Key data generation unit
34 ... User information management DB
35 ... Point value generator
NW ... Network
PN ... dedicated line

Claims (6)

A point card system comprising a store terminal that detachably holds a user point card mounted with an IC chip, and a store host computer connected to the store terminal,
“User ID”, “User public key pair specific to each user point card” and “at least user public key value, store host computer, which are provided in the user point card and issued by the store host computer A memory storing a user public key certificate having a name and a signature obtained by digitally signing a set of the store host computer name and the value of the user public key with the store host private key;
When the user point card is held in the store terminal and a price is paid by the user, point generation means for generating point data based on the price paid,
The store host computer is provided with a digital signature unique to the store host computer using the store host secret key to at least the point data generated by the point generation means and the user data related to the user who pays the price. Value generating means for generating value data by
Value transmitting means for transmitting the value data generated by the value generating means to the store terminal;
Verifying the digital signature of the value data received from the value transmission means using the store host public key, and when the verification result indicates validity, the value input means for inputting the value data to the user point card ;
Provided in the store terminal, when the user point card is held in the store terminal, a digital signature of each of the user public key certificate and value data received from the user point card is stored in the store host public key. And a means for verifying using the point card system. A tamper-resistant user point card used in the point card system according to claim 1,
Value storage means for storing value data input from the value input means;
A counter indicating the balance of value data in the value storage means;
When receiving a balance request from the store terminal, based on the balance request, at least the value data in the value storage means and the balance transmission means for transmitting the value of the counter to the store terminal;
When a point usage amount is input from the store terminal, counter value reduction means for substantially reducing the value of the counter by an amount corresponding to the point usage amount;
Reduced value transmission means for transmitting the value of the counter reduced by the counter value reduction means to the store terminal ,
The value storage means includes a “user ID” issued by the store host computer, a “user public key pair unique to each user point card”, “at least the value of the user public key, the store host computer name, and Stored is a “user public key certificate” and “value data” having a signature obtained by digitally signing a set of the store host computer name and the value of the user public key with the store host private key,
The value data is generated by applying a digital signature unique to the store host computer using the store host secret key to at least the point data generated by the store host computer and the user data relating to the user who pays the price. User point card, characterized by the fact that it is a data . In the point card system according to claim 1,
When the user does not use the points, the value generating means adds at least the amount of points obtained by adding the balance of the value data in the user point card to the point data generated by the point generating means A point card system, wherein value data is generated by applying a digital signature unique to a store host computer to the data and the user data using the store host secret key . In the point card system according to claim 1,
The store host computer is
When registering the user, when receiving the user registration information from the shop terminal, and issues the user ID, a user registration means for registering a set of the said user registration information with the user ID,
A key data generation means for, based on the issued user ID, and issues the user public key pair and the user public key certificate by the user registration means,
Transmitting issued user ID by the user registration means, issued user public key pair and the user public key certificate by the key data generation unit, and the predetermined said store host public key to the store terminal A key transmission means,
The store terminal
A point comprising key information input means for inputting a user ID, a user public key pair, a user public key certificate, and a store host public key received from the key transmitting means to the user point card. Card system. In the point card system according to claim 4,
A plurality of the store terminals are provided, and each of these store terminals is individually arranged in a plurality of stores,
The point card system characterized in that there is one store host computer, and the store host public key is shared among the user point cards. A plurality of store terminals that removably hold user point cards mounted with IC chips, a plurality of store host computers connected to the store terminals, and a common connected to each store host computer A point card system equipped with a third-party organization device ,
Each shop terminal pieces are separately arranged in a plurality of stores,
Wherein each store host computer pieces are connected separately to each store terminal, and and each have a separate store host public key,
“User ID”, “User public key pair unique to each user point card” and “at least the value of the user public key, which are provided in the user point card and issued by any store host computer, "User public key certificate having three names: a three-party organization name, and a signature obtained by digitally signing a combination of this third-party organization name and the value of the user public key with a third-party private key" Memory and
When the user point card is held in the store terminal and a price is paid by the user, point generation means for generating point data based on the price paid,
A digital signature unique to the store host computer using the store host secret key is provided for at least the point data generated by the point generation means and the user data related to the user who pays the price provided in each store host computer. Value generating means for generating value data and attaching a unique store identifier to each store to the value data;
Value transmitting means for transmitting the value data generated by the value generating means to the store terminal;
The digital signature of the value data received from the value transmission means is verified using the store host public key corresponding to the store identifier, and when the verification result indicates validity, the value data is input to the user point card. Value input means,
The digital signature of the user public key certificate received from the user point card is verified with the third party public key when the user point card is held in the store terminal. And means for verifying the digital signature of the value data received from the user point card with the store host public key corresponding to the store identifier,
Wherein provided in each store host computer, when registering the user, when receiving the user registration information from the shop terminal, and issues the user ID, a set of the user ID and the user registration information User registration means for registering
Provided in front Symbol third party organization device, based on the issued user ID by the user registration means and issuing the user public key pair, using a common third party public key digital a key data generation means for issuing the user public key certificate by signing,
User ID issued by the user registration unit, user public key pair and user public key certificate issued by the key data generation unit, and predetermined store host disclosure provided in each store host computer Key transmitting means for transmitting a key to the store terminal;
Key information input means for inputting the user ID, the user public key pair, the user public key certificate, and the store host public key received from the key transmission means to the user point card provided in each store terminal. A point card system characterized by comprising:

Images