JP4626566B2 - Coupon data data processing system and data processing method - Google Patents

Abstract

A special favor data distributing system, which stores special favor data with encrypted state in a non-secure memory and decodes the encrypted data, so that the special favor data can be refunded, includes a mobile terminal device (21) for transmitting identification data of a secure memory (25) to a distributing device (11). The distributing device encrypts the special favor data of the non-secure memory (14) in an encryption engine (13) by using the identification data, and transmits the encrypted special favor data to the mobile terminal device (21). The terminal device stores the received encrypted special favor data in a non-secure memory (23), and transmits the encrypted special favor data of the non-secure memory and identification data of a secure memory (25) to a refunding device (31). The refunding device decodes the encrypted special favor data in an encryption decoding engine (33) by using the received identification data and displays the decoded special favor data on a display unit (37), so that the special favor data can be visualized.

Description

The present invention stores coupon data encrypted by a distribution device in a terminal device such as a mobile phone , and data processing of coupon data is performed so that the encrypted encrypted coupon data is decrypted and redeemed by the redemption device The present invention relates to a system and a data processing method .

  The non-contact IC card has a secure memory, and the secure memory stores IC card identification data, user identification data, and various types of identification data. The identification data is stored in the secure memory, thereby preventing falsification. However, since this non-contact IC card has a small capacity of the secure memory, it is impossible to store all of the privilege data including various attribute information in the secure memory.

  On the other hand, there is a terminal device such as a mobile phone that incorporates the function of such a non-contact IC card. This terminal device includes a non-secure memory provided in the device itself in addition to a secure memory to which a function of a non-contact IC card is assigned. Therefore, the terminal device can store privilege data that was impossible with a non-contact IC card by using a non-secure memory.

  However, in this type of terminal device, if privilege data that may also have a monetary value such as a discount is stored in the non-secure memory, unauthorized copying or the like may be performed.

JP 2006-23864 A

The present invention has been made in view of the above problems, and its purpose is to store coupon data in an encrypted state in a non-secure memory and to redeem the coupon data by decrypting the encryption when used. An object of the present invention is to provide a data processing system and a data processing method for coupon data that can prevent the coupon data from being illegally used.

The present invention encrypts the coupon data to be distributed using the identification data non tamperability is guaranteed of the portable terminal, when using the coupon data, decrypts the encrypted using identification data of the terminal device, using the coupon data By making it possible, the coupon data is prevented from being illegally copied and used.

That is, a data processing system for coupon data according to the present invention includes a distribution device that distributes encrypted coupon data, a terminal device that stores encrypted coupon data encrypted by the distribution device, and A coupon data processing system comprising a redemption device for redeeming encrypted coupon data.
The distribution device includes a distribution-side non-contact communication I / F that receives identification data transmitted from the terminal device, a distribution-side non-secure memory that stores coupon data to be distributed, and the distribution-side non-secure memory. Coupon encryption means for encrypting the stored coupon data with the identification data received by the distribution side non-contact communication I / F.
In addition, the terminal device stores the terminal side secure memory storing the identification data, the terminal side non-secure memory storing the encrypted coupon data encrypted by the distribution device, and the terminal side secure memory identification data. The terminal-side non-contact communication I / F that transmits the encrypted coupon data of the terminal-side non-secure memory and the identification data of the terminal-side secure memory to the redemption device, and uses the coupon data. And an erasure command encryption / decryption means for decrypting an encrypted erasure command for erasing the encrypted coupon data in the terminal-side non-secure memory using the identification data.
Further, the redemption device includes the redemption side non-contact communication I / F that receives the identification data and the encrypted coupon data transmitted from the terminal device, and the encrypted coupon data received by the redemption side non-contact communication I / F. A redemption-side non-secure memory for storing data, a coupon encryption / decryption means for decrypting the encrypted coupon data of the redemption-side non-secure memory with the identification data received by the redemption-side non-contact communication I / F, Display means for displaying the decrypted coupon data, reading means for optically reading the coupon data displayed on the display means, generating means for generating an erase command for the encrypted coupon data of the terminal device, and Erasure command encryption means for encrypting the erasure command generated by the generation means with the identification data.
Then, the terminal device transmits the identification data of the terminal-side secure memory to the distribution-side non-contact communication I / F of the distribution device via the terminal-side non-contact communication I / F. Using the identification data received by the distribution side non-contact communication I / F, the coupon data of the distribution side non-secure memory is encrypted by the coupon encryption means to generate encrypted coupon data, and the encrypted coupon data is distributed. The terminal side non-contact communication I / F transmits to the terminal side non-contact communication I / F of the terminal device, and the terminal device receives the encrypted coupon data received by the terminal side non-contact communication I / F. When stored in a memory and using the coupon data, the terminal device stores the encrypted coupon data of the terminal-side non-secure memory and the identification data of the terminal-side secure memory. The terminal side non-contact communication I / F transmits the redemption device to the redemption side non-contact communication I / F, and the redemption device receives the encrypted coupon data received by the redemption side non-contact communication I / F on the redemption side. The encrypted coupon data is decrypted by the coupon encryption / decryption means using the identification data received by the non-contact communication I / F on the redemption side, and the decrypted coupon data is displayed on the display means. The coupon data is made visible to the viewer, the coupon data displayed on the display means is read by the reading means, the coupon data is used, and the coupon data is used. The erase command generated in step 1 is encrypted by the erase command encryption means using the identification data to generate an encrypted erase command. Is sent from the redemption-side non-contact communication I / F to the terminal-side non-contact communication I / F of the terminal device, and the terminal device receives the encrypted erasure command received by the terminal-side non-contact communication I / F, The erasure command encryption / decryption means performs decryption using the identification data of the terminal-side secure memory, and erases the encrypted coupon data of the terminal-side non-secure memory based on the decrypted erasure command.

The present invention is also a data processing method of this data processing system .

  A coupon data processing system according to the present invention includes a distribution device that distributes encrypted coupon data, a terminal device that stores encrypted coupon data encrypted by the distribution device, and A coupon data processing system comprising a redemption device for redeeming encrypted coupon data.
  The distribution device includes a distribution-side non-contact communication I / F that receives identification data transmitted from the terminal device, a distribution-side non-secure memory that stores coupon data to be distributed, and the distribution-side non-secure memory. Coupon encryption means for encrypting the stored coupon data with the identification data received by the distribution side non-contact communication I / F.
  In addition, the terminal device stores the terminal side secure memory storing the identification data, the terminal side non-secure memory storing the encrypted coupon data encrypted by the distribution device, and the terminal side secure memory identification data. Using the coupon encryption decrypting means for decrypting the encrypted coupon data of the terminal side non-secure memory, the display means for displaying the coupon data decrypted by the coupon encryption decrypting means, and the identification data of the terminal side secure memory A terminal-side non-contact communication I / F that transmits the identification data of the terminal-side secure memory to the redemption device, and the encrypted coupon of the terminal-side non-secure memory after use of the coupon data. An encryption command for erasing data is decrypted using the above identification data. And means.
  Further, the redemption device includes a redemption side non-contact communication I / F that receives the identification data transmitted from the terminal device, a reading unit that optically reads the coupon data displayed on the display unit of the terminal device, Generating means for generating an erase coupon data command of the terminal device;
  Erasure command encryption means for encrypting the erasure command generated by the generation means with the identification data.
   Then, the terminal device transmits the identification data of the terminal-side secure memory to the distribution-side non-contact communication I / F of the distribution device via the terminal-side non-contact communication I / F. Using the identification data received by the distribution side non-contact communication I / F, the coupon data of the distribution side non-secure memory is encrypted by the coupon encryption means to generate encrypted coupon data, and the encrypted coupon data is distributed. The terminal side non-contact communication I / F transmits to the terminal side non-contact communication I / F of the terminal device, and the terminal device receives the encrypted coupon data received by the terminal side non-contact communication I / F. When the coupon data is stored in the memory and used, the terminal device decrypts the encrypted coupon data using the identification data by the coupon encryption / decryption means, and the display means Display the decrypted coupon data, make this coupon data visible to the viewer, the redemption device reads the coupon data displayed on the display means of the terminal device by the reading means, uses the coupon data, After using the coupon data, the terminal device transmits identification data of the terminal-side secure memory to the redemption-side non-contact communication I / F of the redemption device via the terminal-side non-contact communication I / F, The redemption device encrypts the erasure command generated by the generation means by the erasure command encryption means using the identification data and generates an encrypted erasure command, and the encrypted erasure command is transmitted to the redemption side non-contact communication I / F. To the terminal-side non-contact communication I / F of the terminal device, and the terminal device receives the encrypted erasure command received by the terminal-side non-contact communication I / F, The serial erase command decryption means decrypts using identification data of the terminal-side secure memory, erasing the encrypted coupon data of the terminal-side non-secure memory based on erase command decoded.

  The present invention is also a data processing method of this data processing system.

  A coupon data processing system according to the present invention includes a distribution device that distributes encrypted coupon data, a terminal device that stores encrypted coupon data encrypted by the distribution device, and A coupon data processing system comprising a redemption device for redeeming encrypted coupon data and a coupon data management server device.
  The distribution device includes a distribution-side non-contact communication I / F that receives identification data transmitted from the terminal device, a distribution-side non-secure memory that stores coupon data to be distributed, and the distribution-side non-secure memory. Coupon encryption means for encrypting the stored coupon data with the identification data received by the distribution side non-contact communication I / F.
  In addition, the terminal device stores the terminal side secure memory storing the identification data, the terminal side non-secure memory storing the encrypted coupon data encrypted by the distribution device, and the terminal side secure memory identification data. The terminal-side non-contact communication I / F that transmits the encrypted coupon data of the terminal-side non-secure memory and the identification data of the terminal-side secure memory to the redemption device, and uses the coupon data. And an erasure command encryption / decryption means for decrypting an encrypted erasure command for erasing the encrypted coupon data in the terminal-side non-secure memory using the identification data.
  Further, the redemption device includes the redemption side non-contact communication I / F that receives the identification data and the encrypted coupon data transmitted from the terminal device, and the encrypted coupon data received by the redemption side non-contact communication I / F. The non-secure redemption memory for storing the identification data and the encrypted coupon data transmitted from the terminal device to the management server device and the redemption side communication I / O for receiving the redemption data from the management server device F, redemption means for performing redemption processing based on redemption data received by the redemption side communication I / F, generation means for generating a command for deleting encrypted coupon data of the terminal device, and the generation means Erase command encryption means for encrypting the erase command with the identification data.
  Furthermore, the management server device receives the identification data and the encrypted coupon data transmitted from the terminal device via the redemption device, and transmits the redemption data to the redemption side communication I / F of the redemption device. Side communication I / F, coupon encryption / decryption means for decrypting the encrypted coupon data received by the server side communication I / F with the received identification data, and redemption data corresponding to the coupon data decrypted by the coupon encryption / decryption means Generating means for generating.
  Then, the terminal device transmits the identification data of the terminal-side secure memory to the distribution-side non-contact communication I / F of the distribution device via the terminal-side non-contact communication I / F. Using the identification data received by the distribution side non-contact communication I / F, the coupon data of the distribution side non-secure memory is encrypted by the coupon encryption means to generate encrypted coupon data, and the encrypted coupon data is distributed. The terminal side non-contact communication I / F transmits to the terminal side non-contact communication I / F of the terminal device, and the terminal device receives the encrypted coupon data received by the terminal side non-contact communication I / F. When stored in a memory and using the coupon data, the terminal device stores the encrypted coupon data of the terminal-side non-secure memory and the identification data of the terminal-side secure memory. The terminal side non-contact communication I / F transmits the redemption device to the redemption side non-contact communication I / F, and the redemption device receives the encrypted coupon data and the identification data received by the redemption side non-contact communication I / F. The encrypted coupon data transmitted from the redemption side communication I / F to the server side communication I / F of the management server device, and received by the server side communication I / F by the coupon encryption / decryption means. Is decoded with the received identification data, redemption data corresponding to the coupon data decoded by the generating means is generated, and the generated redemption data is transferred from the server side communication I / F to the redemption side communication I / F of the redemption device. And the redemption device performs redemption processing according to the redemption data by the redemption means, and after using the coupon data, the redemption device uses the erasing piece generated by the generating means. The erasure command encryption means encrypts the password using the identification data to generate an encrypted erasure command, and the encrypted erasure command is transmitted from the redemption side non-contact communication I / F to the terminal side non-contact communication I of the terminal device. The terminal device decrypts the encrypted erasure command received by the terminal side non-contact communication I / F using the identification data of the terminal side secure memory by the erasure command encryption / decryption means. The encrypted coupon data of the terminal-side non-secure memory is erased based on the decrypted erase command.

  The present invention is also a data processing method of this data processing system.

  A coupon data processing system according to the present invention includes a distribution device that distributes encrypted coupon data, a terminal device that stores encrypted coupon data encrypted by the distribution device, and A coupon data processing system comprising a redemption device for redeeming encrypted coupon data and a coupon data management server device.
  The distribution device includes a distribution-side non-contact communication I / F that receives identification data transmitted from the terminal device, a distribution-side non-secure memory that stores coupon data to be distributed, and the distribution-side non-secure memory. Coupon encryption means for encrypting the stored coupon data with the identification data received by the distribution side non-contact communication I / F.
  In addition, the terminal device stores the terminal side secure memory storing the identification data, the terminal side non-secure memory storing the encrypted coupon data encrypted by the distribution device, and the terminal side secure memory identification data. The terminal-side non-contact communication I / F that transmits the encrypted coupon data of the terminal-side non-secure memory and the identification data of the terminal-side secure memory to the redemption device, and uses the coupon data. And an erasure command encryption / decryption means for decrypting an encrypted erasure command for erasing the encrypted coupon data in the terminal-side non-secure memory using the identification data.
  Further, the redemption device includes the redemption side non-contact communication I / F that receives the identification data and the encrypted coupon data transmitted from the terminal device, and the encrypted coupon data received by the redemption side non-contact communication I / F. Non-secure memory for storing redemption, coupon encryption decrypting means for decrypting encrypted coupon data received by redemption side non-contact communication I / F with the received identification data, and coupon data decrypted by the coupon encryption decrypting means And redemption means for performing redemption processing based on redemption data received by the redemption side communication I / F and receiving redemption data from the management server device. Generating means for generating an erase command for the encrypted coupon data of the terminal device, and the erase command generated by the generating means with the identification data And a erase command encryption means for No. of.
  Further, the management server device receives the coupon data decrypted by the redemption device, and transmits the redemption data corresponding to the coupon data to the redemption device, and the server side communication I Generating means for generating redemption data corresponding to the coupon data received at / F.
  Then, the terminal device transmits the identification data of the terminal-side secure memory to the distribution-side non-contact communication I / F of the distribution device via the terminal-side non-contact communication I / F. Using the identification data received by the distribution side non-contact communication I / F, the coupon data of the distribution side non-secure memory is encrypted by the coupon encryption means to generate encrypted coupon data, and the encrypted coupon data is distributed. The terminal side non-contact communication I / F transmits to the terminal side non-contact communication I / F of the terminal device, and the terminal device receives the encrypted coupon data received by the terminal side non-contact communication I / F. When stored in a memory and using the coupon data, the terminal device stores the encrypted coupon data of the terminal-side non-secure memory and the identification data of the terminal-side secure memory. The terminal side non-contact communication I / F transmits to the redemption side non-contact communication I / F of the redemption device, and the redemption device receives the cipher received at the redemption side non-contact communication I / F by the coupon encryption decrypting means. The decrypted coupon data is decrypted with the received identification data, and the decrypted coupon data is transmitted from the redemption side communication I / F to the server side communication I / F of the management server device. When the coupon data transmitted from the redemption device is received by the communication I / F, redemption data corresponding to the coupon data is generated by the generating means, and the generated redemption data is sent from the server side communication I / F to the redemption device. The redemption device transmits to the redemption communication I / F, the redemption device performs redemption processing according to the redemption data by the redemption means, and after using the coupon data, the redemption device The erasure command generated by the live means is encrypted by the erasure command encryption means using the identification data to generate an encrypted erasure command, and the encrypted erasure command is transmitted from the non-contact communication I / F on the redemption side to the terminal device. The terminal device transmits an encrypted erasure command received by the terminal side non-contact communication I / F to the terminal-side non-contact communication I / F, and the erasure command encryption / decryption means identifies the terminal-side secure memory. The data is decrypted, and the encrypted coupon data in the terminal-side non-secure memory is erased based on the decrypted erase command.

  The present invention is also a data processing method of this data processing system.

According to the present invention, the identification data stored in the secure memory of the terminal device and guaranteed non-falsification and the encrypted coupon data using the identification data as an encryption key can be managed as a set. Even if the converted coupon data is copied, it can be prevented from being illegally used.

  First, a coupon data distribution system 10 to which the present invention is applied will be described with reference to FIG. The distribution system 10 is a device that distributes coupon data, which is one of the benefits for users such as consumers, from the distribution device 11 to the mobile terminal devices 21 of users such as consumers.

  The distribution apparatus 11 includes a system OS unit 12 that manages the entire apparatus, an encryption engine 13 that encrypts the coupon data CD to be distributed, and a non-secure memory 14 that also serves as a system memory for storing the coupon data CD to be distributed. ing. Further, the distribution device 11 is an IC card OS unit that manages communication of an IC card as means for performing short-distance or short-distance non-contact communication such as RFID (Radio Frequency Identification System) and NFC (Near Field Communication). 15 and a non-contact communication I / F 16 for performing non-contact communication with the IC card or the I / F of the portable terminal device 21. For example, the distribution device 11 is installed in a place where a large number of people gather such as in a store, a station, a public square, etc., and can distribute coupon data CD to various users as one means of sales promotion.

  The mobile terminal device 21 possessed by the user is, for example, a mobile phone device or PDA (Personal Digital (Data) Assistants), and a system OS unit 22 that manages the entire device as means for realizing the functions of the mobile phone and the like. And a non-secure memory 23 that also serves as a system memory for storing the encrypted encrypted coupon data CD. Furthermore, in order to realize the function as an IC card, the portable terminal device 21 is a means for performing short-distance or short-distance non-contact communication, and an IC card OS unit 24 that manages IC card communication, and an IC card A secure memory 25 for storing value data such as identification data ID and monetary value, and a non-contact communication I / F 26 for performing non-contact communication with the distribution device 11 and a reimbursement device described later.

  Next, a series of procedures for acquiring the coupon data CD from the distribution device 11 by the mobile terminal device 21 will be described. When the non-contact communication I / F 26 of the mobile terminal device 21 is brought close to the non-contact communication I / F 16 of the distribution device 11, the IC card OS unit 24 of the mobile terminal device 21 performs the IC from the secure memory 25 in step S 1. The card identification data ID is read and transmitted to the distribution device 11. When receiving the identification data ID through the non-contact communication I / F 16, the distribution device 11 stores this identification data ID in the encryption engine 13 for use as an encryption key of the coupon data CD to be distributed. In step S <b> 2, the encryption engine 13 of the distribution device 11 encrypts the coupon data CD to be distributed before encryption in the non-secure memory 14 by using the identification data ID read from the mobile terminal device 21 to encrypt the coupon data. Create a CD. In step S <b> 3, the system OS unit 12 of the distribution device 11 reads the encrypted coupon data CD from the non-secure memory 14 and transmits it to the mobile terminal device 21 via the non-contact communication I / F 16. When the portable terminal device 21 receives the encrypted coupon data CD through the non-contact communication I / F 26, the portable terminal device 21 stores the encrypted coupon data CD in the non-secure memory 23.

  Thus, the coupon data CD is distributed to the user. Here, the distributed coupon data CD is stored in the non-secure memory 23 of the portable terminal device 21, but since it is encrypted, it may be illegally copied to another device. It is possible to prevent the illegally copied coupon data CD from being used.

  Next, the redemption system for coupon data CD distributed to the mobile terminal device 21 as described above will be described with reference to FIG. The redemption system 30 includes a redemption device 31 for redeeming the coupon data CD in addition to the mobile terminal device 21 described above. This redemption device 31 is installed near the POS terminal of the store where the user uses the coupon data CD, and allows the coupon to be reflected in the accounting. The redemption device 31 may be integrated with the POS terminal.

  Specifically, the redemption device 31 includes a system OS unit 32 that manages the entire device, an encryption / decryption engine 33 that decrypts the distributed encrypted coupon data CD, and encrypted coupon data sent from the mobile terminal device 21. And a non-secure memory 34 serving as a system memory for storing a CD. Further, the redemption device 31 communicates with the IC card OS unit 35 that manages the communication of the IC card as a means for performing the non-contact communication, and the I / F of the IC card or the portable terminal device 21 with the non-contact communication. For non-contact communication I / F36. Further, the redemption device 31 is provided with a display unit 37 formed of a CRT, LCD, or the like so that the coupon data CD can be visually recognized by a clerk in charge of the POS terminal or a user.

  Next, a procedure for redeeming the encrypted coupon data CD in the mobile terminal device 21 with the redemption device 31 will be described. When the non-contact communication I / F 26 of the mobile terminal device 21 is brought close to the non-contact communication I / F 36 of the redemption device 31, the IC card OS unit 24 of the mobile terminal device 21 performs the IC from the secure memory 25 in step S 11. The card identification data ID is read and transmitted to the redemption device 31 from the non-contact communication I / F 26. At the same time, the portable terminal device 21 reads the encrypted coupon data CD to be used from the non-secure memory 23 by the system OS unit 22 and transmits it to the redemption device 31 from the non-contact communication I / F 26. When the redemption device 31 receives the identification data ID through the non-contact communication I / F 36, the redemption device 31 stores the identification data ID in the encryption / decryption engine 33 for use as an encryption key for encryption / decryption of the encrypted coupon data CD. Further, when the redemption device 31 receives the encrypted coupon data CD received from the mobile terminal device 21 by the non-contact communication I / F 36, the redemption device 31 stores the encrypted coupon data CD in the non-secure memory 34 by the system OS unit 32.

  In step S <b> 12, the encryption / decryption engine 33 of the redemption device 31 decrypts the encrypted coupon data CD in the non-secure memory 34 using the identification data ID of the mobile terminal device 21 to generate plaintext coupon data CD. In step S <b> 13, the redemption device 31 displays the decrypted coupon data CD on the display unit 37. Thus, a clerk or user in charge of the POS terminal can visually check the coupon data CD displayed on the display unit 37 and confirm the contents. When this coupon data CD is used, for example, a symbol such as a barcode corresponding to the coupon data CD displayed on the display unit 37 is optically read with a reader of the POS terminal, and reflected in the accounting. be able to.

  Further, the encrypted coupon data CD of the portable terminal device 21 distributed by the distribution device 11 of FIG. 1 can be redeemed by a redemption system 40 as shown in FIG. In the redemption system 40, the redemption system 30 in FIG. 2 decrypts the encrypted coupon data CD by the redemption device 31, whereas the portable terminal device 21 decrypts the encrypted coupon data CD.

  That is, the mobile terminal device 21 in the redemption system 40 includes an encryption / decryption engine 27 controlled by the system OS unit 22 and an LCD or the like for making the coupon data CD visible to a store clerk or user in charge of the POS terminal. A formed display unit 28 is provided. The display unit 28 is a display unit provided as a standard in a conventional portable terminal device.

  In the redemption system 40, when the coupon data CD is used, in step S21, the IC card OS unit 24 of the mobile terminal device 21 reads the identification data ID of the IC card from the secure memory 25, and then the system OS unit 22 The identification data ID is stored in the encryption / decryption engine 27 to be used as an encryption key for encryption / decryption of the encrypted coupon data CD. In step S <b> 22, the encryption / decryption engine 27 of the mobile terminal device 21 decrypts the encrypted coupon data CD in the non-secure memory 34 using the identification data ID read from the secure memory 25 to generate plaintext coupon data CD. In step S <b> 23, the mobile terminal device 21 displays the decrypted coupon data CD on the display unit 28. Thus, a store clerk or user in charge of the POS terminal can visually check the coupon data CD displayed on the display unit 28 and confirm the contents. When this coupon data CD is used, for example, a symbol such as a barcode corresponding to the coupon data CD displayed on the display unit 28 is optically read by a reader of the POS terminal, and reflected in the accounting. be able to.

  Further, the encrypted coupon data CD of the portable terminal device 21 distributed by the distribution device 11 of FIG. 1 can be redeemed by a redemption system 50 as shown in FIG. The redemption system 50 is characterized in that the redemption device 31 and the management server device 51 are connected via a network, and the encrypted coupon data CD is decrypted by the management server device 51.

  That is, the mobile terminal device 21 used in the redemption system 50 is the same as that shown in FIG. The redemption device 31 includes a communication I / F 38 that communicates with the management server device 51, and a redemption processing unit 39 that performs redemption processing according to redemption data RD transmitted from the management server device 51. The redemption device 31 is integrated with, for example, a POS terminal, and a redemption process is performed by the redemption processing unit 39 so that a discount can be reflected in the accounting. The decryption function of the encrypted coupon data CD is not provided in the redemption device 31 but is provided in the management server device 51.

  The management server device 51 includes a communication I / F 52 for communicating with the communication I / F 38 of the redemption device 31, an encryption / decryption engine 53 for decrypting the distributed encrypted coupon data CD, and the decrypted coupon data CD. A redemption data generation unit 54 that generates redemption data including the corresponding discount face value data and the like.

  Next, in the redemption system 50, a procedure for redeeming the encrypted coupon data CD in the mobile terminal device 21 with the redemption device 31 will be described. When the non-contact communication I / F 26 of the mobile terminal device 21 is brought close to the non-contact communication I / F 36 of the redemption device 31, the IC card OS unit 24 of the mobile terminal device 21 performs the IC from the secure memory 25 in step S 31. The card identification data ID is read and transmitted to the redemption device 31 from the non-contact communication I / F 26. At the same time, the portable terminal device 21 reads the encrypted coupon data CD to be used from the non-secure memory 23 by the system OS unit 22 and transmits it to the redemption device 31 from the non-contact communication I / F 26. Then, the redemption device 31 receives the received identification data ID and encrypted coupon data CD from the communication I / F 38 via a network such as WAN (Wide Area Network) or LAN (Local Area Network). / F52 and stored in the encryption / decryption engine 53 for decryption of the encrypted coupon data CD. In step S32, the encryption / decryption engine 53 of the management server device 51 decrypts the encrypted coupon data CD using the identification data ID of the mobile terminal device 21, generates plaintext coupon data CD, and the decrypted coupon data CD is Check if it is legitimate. In step S33, when the management server device 51 determines that the encrypted coupon data CD can be decrypted, the management server device 51 uses the redemption data generation unit 54 to redeem the discount amount corresponding to the decrypted coupon data CD. Data RD is generated. In step S34, the management server device 51 transmits the generated redemption data RD to the communication I / F 38 of the redemption device 31 via the communication I / F 52. The redemption device 31 redeems the redemption data RD received by the communication I / F 38 using the redemption processing unit 39. That is, the discount of redemption data RD is reflected in the accounting.

  In the redemption system 50 as described above, since it does not appear as visible information until the coupon data CD is redeemed, illegal copying can be prevented. Further, since the encrypted coupon data CD is decrypted by the management server device 51 remote from the POS terminal, it is possible to reduce the calculation in the redemption device 31 and to prevent the encryption from being decrypted.

  Further, the encrypted coupon data CD of the portable terminal device 21 distributed by the distribution device 11 of FIG. 1 can be redeemed by a redemption system 60 as shown in FIG. The redemption system 60 is characterized in that the redemption device 31 and the management server device 51 are connected via a network, and the redemption device 31 decrypts the encrypted coupon data CD.

  The mobile terminal device 21 used in the redemption system 60 is the same as that shown in FIG. The redemption device 31 used in the redemption system 60 is provided with a communication I / F 38 for communicating with the management server device 51 in the redemption device 31 shown in FIG. Furthermore, the management server device 51 is obtained by removing the encryption / decryption engine 53 of the management server device 51 of FIG.

  Next, in the redemption system 60, a procedure for redeeming the encrypted coupon data CD in the mobile terminal device 21 by the redemption device 31 will be described. When the non-contact communication I / F 26 of the mobile terminal device 21 is brought close to the non-contact communication I / F 36 of the redemption device 31, the IC card OS unit 24 of the mobile terminal device 21 performs the IC from the secure memory 25 in step S 41. The card identification data ID is read and transmitted to the redemption device 31 from the non-contact communication I / F 26. At the same time, the portable terminal device 21 reads the encrypted coupon data CD to be used from the non-secure memory 23 by the system OS unit 22 and transmits it to the redemption device 31 from the non-contact communication I / F 26. When the redemption device 31 receives the identification data ID through the non-contact communication I / F 36, the redemption device 31 stores the identification data ID in the encryption / decryption engine 33 for use as an encryption key for encryption / decryption of the encrypted coupon data CD. Further, when the redemption device 31 receives the encrypted coupon data CD received from the mobile terminal device 21 by the non-contact communication I / F 36, the redemption device 31 stores the encrypted coupon data CD in the non-secure memory 34 by the system OS unit 32.

  In step S <b> 42, the encryption / decryption engine 33 of the redemption device 31 decrypts the encrypted coupon data CD in the non-secure memory 34 using the identification data ID of the portable terminal device 21 to generate plaintext coupon data CD. In step S43, the redemption device 31 transmits the generated plaintext coupon data CD from the communication I / F 38 to the communication I / F 52 of the management server device 51 via a network such as WAN or LAN. In step S44, the management server device 51 collates whether or not the decrypted coupon data CD is authentic, and when it is determined that the encrypted coupon data CD can be decrypted, the redemption data generation unit 54 Redemption data RD including a discount amount corresponding to the decrypted coupon data CD is generated. In step S <b> 45, the management server device 51 transmits the generated redemption data RD to the communication I / F 38 of the redemption device 31 via the communication I / F 52. The redemption device 31 redeems the redemption data RD received by the communication I / F 38 using the redemption processing unit 39. That is, the discount of redemption data RD is reflected in the accounting.

  In the redemption system 60 as described above, since it does not appear as visible information until the coupon data CD is redeemed, illegal copying can be prevented.

  In the redemption systems 30, 40, 50, 60 described above, the identification data ID and the encrypted coupon stored in the secure memory 25 of the portable terminal device 21 to which the coupon data CD is distributed are guaranteed. Since the data CD can be managed as a pair, even if the encrypted coupon data CD is illegally copied, it can be prevented from being illegally used.

  By the way, in the redemption systems 30, 40, 50, 60 shown in FIGS. 2 to 5, the encrypted coupon data CD remains in the non-secure memory 23 of the portable terminal device 21 even after the coupon data CD is redeemed. Become. Therefore, in FIG. 6, the encrypted coupon data CD remaining in the non-secure memory 23 of the mobile terminal device 21 is erased. That is, in this erasing system 70, the mobile terminal device 21 includes the encryption / decryption engine 22a. In addition, the redemption device 31 generates a deletion command ED for the encrypted coupon data CD of the mobile terminal device 21 in the system OS unit 32. The redemption device 31 includes an encryption engine 33a that encrypts the erasure command ED.

  The erasing system 70 functions continuously with the redemption process of the redemption systems 30, 40, 50, 60 shown in FIGS. Specifically, when the non-contact communication I / F 26 of the mobile terminal device 21 is brought close to the non-contact communication I / F 36 of the redemption device 31, the redemption device 31 uses the system OS unit 32 to remove the non-contact communication I / F 26. An erasure command for erasing the encrypted coupon data CD remaining in the secure memory 23 is generated. It should be noted that the timing for generating the erasure command may be when the redemption process of the coupon data CD is completed. In step S <b> 51, the IC card OS unit 24 of the mobile terminal device 21 reads the identification data ID of the IC card from the secure memory 25 and transmits it to the redemption device 31 through the non-contact communication I / F 26. Then, the redemption device 31 stores the received identification data ID in the encryption engine 33a for encryption of the erase command ED generated in the system OS unit 32. In step S52, the encryption engine 33a of the redemption apparatus 31 encrypts the erase command ED of the system OS unit 32 using the identification data ID as an encryption key, and generates an encrypted erase command ED. In step S <b> 53, the redemption device 31 transmits the generated encrypted erasure command ED to the mobile terminal device 21 via the non-contact communication I / F 36. Then, the mobile terminal device 21 stores the received encrypted erasure command ED in the system OS unit 22.

  In step S54, the mobile terminal device 21 reads the identification data ID from the secure memory 25 and stores it in the encryption / decryption engine 22a. In step S55, the encryption / decryption engine 22a of the mobile terminal device 21 uses the identification data ID read from the secure memory 25 to decrypt the encryption / deletion command ED in the system OS unit 32. In step S56, the system OS unit 32 of the mobile terminal device 21 erases the used encrypted coupon data CD remaining in the non-secure memory 23 based on the decrypted erase command ED.

  According to the erasing system 70 as described above, since the used encrypted coupon data CD does not remain in the non-secure memory 23 of the terminal device 21, the used encrypted coupon data CD is illegally copied. Furthermore, it is possible to prevent the cipher from being decrypted and illegally used.

  In the above example, the coupon data CD has been described as an example, but in addition to this, a novelty or the like may be used.

It is a figure which shows the distribution system of the coupon data to which this invention is applied. It is a figure which shows the redemption system of the coupon data to which this invention was applied. It is a modification of the coupon data redemption system to which the present invention is applied, and is a diagram illustrating an example in which encrypted coupon data is decrypted by a mobile terminal device. It is a modification of the coupon data redemption system to which the present invention is applied, and is a diagram illustrating an example in which encrypted coupon data is decrypted by a management server device. It is a modification of the coupon data redemption system to which the present invention is applied, and is a diagram illustrating an example in which encrypted coupon data is decrypted by a redemption device. It is a figure which shows the deletion system of encryption coupon data.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 Distribution system, 11 Distribution apparatus, 12 System OS part, 13 Encryption engine, 14 Non-secure memory, 15 IC card OS part, 16 Non-contact communication I / F, 21 Portable terminal device, 22 System OS part, 22a Encryption decryption Engine, 23 Non-secure memory, 24 IC card OS section, 25 Secure memory, 26 Non-contact communication I / F, 27 Encryption / decryption engine, 28 Display section, 30 Redemption system, 31 Redemption device, 32 System OS section, 33 Encryption / decryption Engine, 33a Encryption engine, 34 Non-secure memory, 35 IC card OS unit, 36 Non-contact communication I / F, 37 Display unit, 38 Communication I / F, 39 Redemption processing unit, 40 Redemption system, 50 Redemption system, 51 Management server device, 52 communication I / F, 53 encryption / decryption engine, 54 Redemption data generator, 60 redemption system, 70 erasure system

Claims (8)

  Coupon data comprising a distribution device for distributing encrypted coupon data, a terminal device for storing encrypted coupon data encrypted by the distribution device, and a redemption device for redeeming the encrypted coupon data of the terminal device In the data processing system of
  The distribution device includes a distribution-side non-contact communication I / F that receives identification data transmitted from the terminal device;
  Distribution side non-secure memory for storing coupon data to be distributed;
  Coupon encryption means for encrypting the coupon data stored in the distribution side non-secure memory with the identification data received by the distribution side non-contact communication I / F,
  The terminal device includes a terminal-side secure memory storing the identification data,
  A terminal-side non-secure memory for storing encrypted coupon data encrypted by the distribution device;
  The terminal-side non-contact communication I which transmits the identification data of the terminal-side secure memory to the distribution device and transmits the encrypted coupon data of the terminal-side non-secure memory and the identification data of the terminal-side secure memory to the redemption device / F,
  An erasure command encryption / decryption means for decrypting, using the identification data, an encryption erasure command for erasing the encrypted coupon data in the terminal-side non-secure memory after use of the coupon data;
  The redemption device includes a redemption-side non-contact communication I / F that receives identification data and encrypted coupon data transmitted from the terminal device,
  A redemption-side non-secure memory for storing the encrypted coupon data received by the redemption-side non-contact communication I / F;
  Coupon encryption / decryption means for decrypting the encrypted coupon data of the redemption side non-secure memory with the identification data received by the redemption side non-contact communication I / F;
  Display means for displaying the coupon data decrypted by the coupon encryption / decryption means;
  Reading means for optically reading the coupon data displayed on the display means;
  Generating means for generating an erase coupon data command of the terminal device;
  Erasing command encryption means for encrypting the erasure command generated by the generating means with the identification data,
  The terminal device transmits the identification data of the terminal-side secure memory to the distribution-side non-contact communication I / F of the distribution device via the terminal-side non-contact communication I / F,
  The distribution device uses the identification data received by the distribution-side non-contact communication I / F to encrypt the coupon data in the distribution-side non-secure memory by the coupon encryption means, and generates encrypted coupon data. To send the converted coupon data from the distribution side non-contact communication I / F to the terminal side non-contact communication I / F of the terminal device,
  The terminal device stores the encrypted coupon data received by the terminal side non-contact communication I / F in the terminal side non-secure memory,
  When using the coupon data, the terminal device receives the encrypted coupon data of the terminal-side non-secure memory and the identification data of the terminal-side secure memory from the terminal-side non-contact communication I / F on the redemption side of the redemption device. Send to contactless communication I / F,
  The redemption device stores the encrypted coupon data received by the redemption side non-contact communication I / F in the redemption side non-secure memory and uses the identification data received by the redemption side non-contact communication I / F. The coupon code decrypting means decrypts the encrypted coupon data, the decrypted coupon data is displayed on the display means, the coupon data is made visible to the viewer, and the coupon data displayed on the display means is read by the reading means. And use the above coupon data,
  After using the coupon data, the redemption device encrypts the erasure command generated by the generation means by the erasure command encryption means using the identification data and generates an encrypted erasure command. Send from the redemption side non-contact communication I / F to the terminal side non-contact communication I / F of the terminal device,
  The terminal device decrypts the encrypted erasure command received by the terminal-side non-contact communication I / F using the identification data of the terminal-side secure memory by the erasure command encryption / decryption means, A data processing system for erasing encrypted coupon data in the terminal-side non-secure memory based on the data.   A system comprising: a distribution device that distributes encrypted coupon data; a terminal device that stores encrypted coupon data encrypted by the distribution device; and a redemption device that redeems the encrypted coupon data of the terminal device. In the data processing method,
  The distribution device includes a distribution-side non-contact communication I / F, a distribution-side non-secure memory, and a coupon encryption unit.
  The terminal device includes a terminal side secure memory, a terminal side non-secure memory, a terminal side non-contact communication I / F, and an erasure command encryption / decryption unit,
  The redemption device generates redemption side non-contact communication I / F, redemption side non-secure memory, coupon encryption / decryption means, display means, reading means for optically reading the coupon data, and an erasure command. Means and an erasure command encryption means,
  The terminal device transmits the identification data of the terminal-side secure memory to the distribution-side non-contact communication I / F of the distribution device via the terminal-side non-contact communication I / F,
  The distribution device uses the identification data received by the distribution-side non-contact communication I / F to encrypt the coupon data in the distribution-side non-secure memory by the coupon encryption means, and generates encrypted coupon data. To send the converted coupon data from the distribution side non-contact communication I / F to the terminal side non-contact communication I / F of the terminal device,
  The terminal device stores the encrypted coupon data received by the terminal side non-contact communication I / F in the terminal side non-secure memory,
  When using the coupon data, the terminal device receives the encrypted coupon data of the terminal-side non-secure memory and the identification data of the terminal-side secure memory from the terminal-side non-contact communication I / F on the redemption side of the redemption device. Send to contactless communication I / F,
  The redemption device stores the encrypted coupon data received by the redemption side non-contact communication I / F in the redemption side non-secure memory and uses the identification data received by the redemption side non-contact communication I / F. The coupon code decrypting means decrypts the encrypted coupon data, the decrypted coupon data is displayed on the display means, the coupon data is made visible to the viewer, and the coupon data displayed on the display means is read by the reading means. And use the above coupon data,
  After using the coupon data, the redemption device encrypts the erasure command generated by the generation means by the erasure command encryption means using the identification data and generates an encrypted erasure command. Send from the redemption side non-contact communication I / F to the terminal side non-contact communication I / F of the terminal device,
  The terminal device decrypts the encrypted erasure command received by the terminal-side non-contact communication I / F using the identification data of the terminal-side secure memory by the erasure command encryption / decryption means, A data processing method for erasing encrypted coupon data in the terminal-side non-secure memory based on the data.   Coupon data comprising a distribution device for distributing encrypted coupon data, a terminal device for storing encrypted coupon data encrypted by the distribution device, and a redemption device for redeeming the encrypted coupon data of the terminal device In the data processing system of
  The distribution device includes a distribution-side non-contact communication I / F that receives identification data transmitted from the terminal device;
  Distribution side non-secure memory for storing coupon data to be distributed;
  Coupon encryption means for encrypting the coupon data stored in the distribution side non-secure memory with the identification data received by the distribution side non-contact communication I / F,
  The terminal device includes a terminal-side secure memory storing the identification data,
  A terminal-side non-secure memory for storing encrypted coupon data encrypted by the distribution device;
  Coupon encryption decrypting means for decrypting the encrypted coupon data of the terminal-side non-secure memory using the identification data of the terminal-side secure memory;
  Display means for displaying the coupon data decrypted by the coupon encryption / decryption means;
  A terminal-side non-contact communication I / F that transmits the identification data of the terminal-side secure memory to the distribution device and transmits the identification data of the terminal-side secure memory to the redemption device;
  An erasure command encryption / decryption means for decrypting, using the identification data, an encryption erasure command for erasing the encrypted coupon data in the terminal-side non-secure memory after use of the coupon data;
  The redemption device includes a redemption-side non-contact communication I / F that receives the identification data transmitted from the terminal device,
  Reading means for optically reading the coupon data displayed on the display means of the terminal device;
  Generating means for generating an erase coupon data command of the terminal device;
  Erasing command encryption means for encrypting the erasure command generated by the generating means with the identification data,
  The terminal device transmits the identification data of the terminal-side secure memory to the distribution-side non-contact communication I / F of the distribution device via the terminal-side non-contact communication I / F,
  The distribution device uses the identification data received by the distribution-side non-contact communication I / F to encrypt the coupon data in the distribution-side non-secure memory by the coupon encryption means, and generates encrypted coupon data. To send the converted coupon data from the distribution side non-contact communication I / F to the terminal side non-contact communication I / F of the terminal device,
  The terminal device stores the encrypted coupon data received by the terminal side non-contact communication I / F in the terminal side non-secure memory,
  When using the coupon data, the terminal device decrypts the encrypted coupon data using the identification data by the coupon encryption / decryption means, displays the decrypted coupon data on the display means, and displays the coupon data. Visible to the viewer,
  The redemption device reads the coupon data displayed on the display means of the terminal device by the reading means, uses the coupon data,
  After using the coupon data, the terminal device transmits identification data of the terminal side secure memory to the redemption side non-contact communication I / F of the redemption device via the terminal side non-contact communication I / F,
  The reimbursement device encrypts the erase command generated by the generating means by the erase command encryption means using the identification data, generates an encrypted erase command, and transmits the encrypted erase command to the redemption side non-contact communication I / F to the terminal side contactless communication I / F of the terminal device,
  The terminal device decrypts the encrypted erasure command received by the terminal-side non-contact communication I / F using the identification data of the terminal-side secure memory by the erasure command encryption / decryption means, A data processing system for erasing encrypted coupon data in the terminal-side non-secure memory based on the data.   A system comprising: a distribution device that distributes encrypted coupon data; a terminal device that stores encrypted coupon data encrypted by the distribution device; and a redemption device that redeems the encrypted coupon data of the terminal device. In the data processing method,
  The distribution device includes a distribution-side non-contact communication I / F, a distribution-side non-secure memory, and a coupon encryption unit.
  The terminal device includes a terminal-side secure memory, a terminal-side non-secure memory, a coupon encryption / decryption unit, a display unit, a terminal-side non-contact communication I / F, and an erasure command encryption / decryption unit,
  The redemption apparatus includes a redemption-side non-contact communication I / F, a reading means for optically reading the coupon data, a generation means for generating an erasure command, and an erasure command encryption means,
  The terminal device transmits the identification data of the terminal-side secure memory to the distribution-side non-contact communication I / F of the distribution device via the terminal-side non-contact communication I / F,
  The distribution device uses the identification data received by the distribution-side non-contact communication I / F to encrypt the coupon data in the distribution-side non-secure memory by the coupon encryption means, and generates encrypted coupon data. To send the converted coupon data from the distribution side non-contact communication I / F to the terminal side non-contact communication I / F of the terminal device,
  The terminal device stores the encrypted coupon data received by the terminal side non-contact communication I / F in the terminal side non-secure memory,
  When using the coupon data, the terminal device decrypts the encrypted coupon data using the identification data by the coupon encryption / decryption means, displays the decrypted coupon data on the display means, and displays the coupon data. Visible to the viewer,
  The redemption device reads the coupon data displayed on the display means of the terminal device by the reading means, uses the coupon data,
  After using the coupon data, the terminal device transmits identification data of the terminal side secure memory to the redemption side non-contact communication I / F of the redemption device via the terminal side non-contact communication I / F,
  The reimbursement device encrypts the erase command generated by the generating means by the erase command encryption means using the identification data, generates an encrypted erase command, and transmits the encrypted erase command to the redemption side non-contact communication I / F to the terminal side contactless communication I / F of the terminal device,
  The terminal device decrypts the encrypted erasure command received by the terminal-side non-contact communication I / F using the identification data of the terminal-side secure memory by the erasure command encryption / decryption means, A data processing method for erasing encrypted coupon data in the terminal-side non-secure memory based on the data.   A distribution device for distributing encrypted coupon data; a terminal device for storing encrypted coupon data encrypted by the distribution device; a redemption device for redeeming the encrypted coupon data of the terminal device; In a data processing system for coupon data comprising a management server device,
  The distribution device includes a distribution-side non-contact communication I / F that receives identification data transmitted from the terminal device;
  Distribution side non-secure memory for storing coupon data to be distributed;
  Coupon encryption means for encrypting the coupon data stored in the distribution side non-secure memory with the identification data received by the distribution side non-contact communication I / F,
  The terminal device includes a terminal-side secure memory storing the identification data,
  A terminal-side non-secure memory for storing encrypted coupon data encrypted by the distribution device;
  The terminal-side non-contact communication I which transmits the identification data of the terminal-side secure memory to the distribution device and transmits the encrypted coupon data of the terminal-side non-secure memory and the identification data of the terminal-side secure memory to the redemption device / F,
  An erasure command encryption / decryption means for decrypting, using the identification data, an encryption erasure command for erasing the encrypted coupon data in the terminal-side non-secure memory after use of the coupon data;
  The redemption device includes a redemption-side non-contact communication I / F that receives identification data and encrypted coupon data transmitted from the terminal device,
  A redemption-side non-secure memory for storing the encrypted coupon data received by the redemption-side non-contact communication I / F;
  A redemption-side communication I / F that transmits the identification data and encrypted coupon data transmitted from the terminal device to the management server device and receives redemption data from the management server device;
  Redemption means for performing redemption processing based on redemption data received by the redemption side communication I / F;
  Generating means for generating an erase coupon data command of the terminal device;
  Erasing command encryption means for encrypting the erasure command generated by the generating means with the identification data,
  The management server device receives the identification data and the encrypted coupon data transmitted from the terminal device via the redemption device, and transmits the redemption data to the redemption side communication I / F of the redemption device. I / F,
  Coupon encryption / decryption means for decrypting the encrypted coupon data received by the server side communication I / F with the received identification data;
  Generating means for generating redemption data corresponding to the coupon data decrypted by the coupon encryption decrypting means,
  The terminal device transmits the identification data of the terminal-side secure memory to the distribution-side non-contact communication I / F of the distribution device via the terminal-side non-contact communication I / F,
  The distribution device uses the identification data received by the distribution-side non-contact communication I / F to encrypt the coupon data in the distribution-side non-secure memory by the coupon encryption means, and generates encrypted coupon data. To send the converted coupon data from the distribution side non-contact communication I / F to the terminal side non-contact communication I / F of the terminal device,
  The terminal device stores the encrypted coupon data received by the terminal side non-contact communication I / F in the terminal side non-secure memory,
  When using the coupon data, the terminal device receives the encrypted coupon data of the terminal-side non-secure memory and the identification data of the terminal-side secure memory from the terminal-side non-contact communication I / F on the redemption side of the redemption device. Send to contactless communication I / F,
  The redemption device transmits the encrypted coupon data and identification data received by the redemption side non-contact communication I / F from the redemption side communication I / F to the server side communication I / F of the management server device,
  The management server device decrypts the encrypted coupon data received by the server-side communication I / F by the coupon encryption / decryption unit using the received identification data, and redeems data corresponding to the coupon data decrypted by the generation unit. The generated redemption data is transmitted from the server side communication I / F to the redemption side communication I / F of the redemption device,
  The redemption device performs redemption processing according to the redemption data by the redemption means,
  After using the coupon data, the redemption device encrypts the erasure command generated by the generation means by the erasure command encryption means using the identification data and generates an encrypted erasure command. Send from the redemption side non-contact communication I / F to the terminal side non-contact communication I / F of the terminal device,
  The terminal device decrypts the encrypted erasure command received by the terminal-side non-contact communication I / F using the identification data of the terminal-side secure memory by the erasure command encryption / decryption means, A data processing system for erasing encrypted coupon data in the terminal-side non-secure memory based on the data.   A distribution device for distributing encrypted coupon data; a terminal device for storing encrypted coupon data encrypted by the distribution device; a redemption device for redeeming the encrypted coupon data of the terminal device; In a data processing method of a system comprising a management server device,
  The distribution device includes a distribution-side non-contact communication I / F, a distribution-side non-secure memory, and a coupon encryption unit.
  The terminal device includes a terminal side secure memory, a terminal side non-secure memory, a terminal side non-contact communication I / F, and an erasure command encryption / decryption unit,
  The redemption device includes a redemption side non-contact communication I / F, a redemption side non-secure memory, a redemption side communication I / F, a redemption means, a generation means for generating an erase command, and an erase command encryption means. Prepared,
  The management server device includes a server-side communication I / F, a coupon encryption / decryption unit, and a generation unit that generates redemption data.
  The terminal device transmits the identification data of the terminal-side secure memory to the distribution-side non-contact communication I / F of the distribution device via the terminal-side non-contact communication I / F,
  The distribution device uses the identification data received by the distribution-side non-contact communication I / F to encrypt the coupon data in the distribution-side non-secure memory by the coupon encryption means, and generates encrypted coupon data. To send the converted coupon data from the distribution side non-contact communication I / F to the terminal side non-contact communication I / F of the terminal device,
  The terminal device stores the encrypted coupon data received by the terminal side non-contact communication I / F in the terminal side non-secure memory,
  When using the coupon data, the terminal device receives the encrypted coupon data of the terminal-side non-secure memory and the identification data of the terminal-side secure memory from the terminal-side non-contact communication I / F on the redemption side of the redemption device. Send to contactless communication I / F,
  The redemption device transmits the encrypted coupon data and identification data received by the redemption side non-contact communication I / F from the redemption side communication I / F to the server side communication I / F of the management server device,
  The management server device decrypts the encrypted coupon data received by the server-side communication I / F by the coupon encryption / decryption unit using the received identification data, and redeems data corresponding to the coupon data decrypted by the generation unit. The generated redemption data is transmitted from the server side communication I / F to the redemption side communication I / F of the redemption device,
  The redemption device performs redemption processing according to the redemption data by the redemption means,
  After using the coupon data, the redemption device encrypts the erasure command generated by the generation means by the erasure command encryption means using the identification data and generates an encrypted erasure command. Send from the redemption side non-contact communication I / F to the terminal side non-contact communication I / F of the terminal device,
  The terminal device decrypts the encrypted erasure command received by the terminal-side non-contact communication I / F using the identification data of the terminal-side secure memory by the erasure command encryption / decryption means, A data processing method for erasing encrypted coupon data in the terminal-side non-secure memory based on the data.   A distribution device for distributing encrypted coupon data; a terminal device for storing encrypted coupon data encrypted by the distribution device; a redemption device for redeeming the encrypted coupon data of the terminal device; In a data processing system for coupon data comprising a management server device,
  The distribution device includes a distribution-side non-contact communication I / F that receives identification data transmitted from the terminal device;
  Distribution side non-secure memory for storing coupon data to be distributed;
  Coupon encryption means for encrypting the coupon data stored in the distribution side non-secure memory with the identification data received by the distribution side non-contact communication I / F,
  The terminal device includes a terminal-side secure memory storing the identification data,
  A terminal-side non-secure memory for storing encrypted coupon data encrypted by the distribution device;
  The terminal-side non-contact communication I which transmits the identification data of the terminal-side secure memory to the distribution device and transmits the encrypted coupon data of the terminal-side non-secure memory and the identification data of the terminal-side secure memory to the redemption device / F,
  An erasure command encryption / decryption means for decrypting, using the identification data, an encryption erasure command for erasing the encrypted coupon data in the terminal-side non-secure memory after use of the coupon data;
  The redemption device includes a redemption-side non-contact communication I / F that receives identification data and encrypted coupon data transmitted from the terminal device,
  A redemption-side non-secure memory for storing the encrypted coupon data received by the redemption-side non-contact communication I / F;
  A coupon encryption decrypting means for decrypting the encrypted coupon data received by the non-contact communication I / F on the redemption side with the received identification data;
  The coupon data decrypted by the coupon encryption / decryption means is transmitted to the management server device, and redemption side communication I / F for receiving redemption data from the management server device,
  Redemption means for performing redemption processing based on redemption data received by the redemption side communication I / F;
  Generating means for generating an erase coupon data command of the terminal device;
  Erasing command encryption means for encrypting the erasure command generated by the generating means with the identification data,
  The management server device receives the coupon data decrypted by the redemption device and transmits the redemption data corresponding to the coupon data to the redemption device;
  Generating means for generating redemption data corresponding to the coupon data received by the server-side communication I / F,
  The terminal device transmits the identification data of the terminal-side secure memory to the distribution-side non-contact communication I / F of the distribution device via the terminal-side non-contact communication I / F,
  The distribution device uses the identification data received by the distribution-side non-contact communication I / F to encrypt the coupon data in the distribution-side non-secure memory by the coupon encryption means, and generates encrypted coupon data. To send the converted coupon data from the distribution side non-contact communication I / F to the terminal side non-contact communication I / F of the terminal device,
  The terminal device stores the encrypted coupon data received by the terminal side non-contact communication I / F in the terminal side non-secure memory,
  When using the coupon data, the terminal device receives the encrypted coupon data of the terminal-side non-secure memory and the identification data of the terminal-side secure memory from the terminal-side non-contact communication I / F on the redemption side of the redemption device. Send to contactless communication I / F,
  The reimbursement device decrypts the encrypted coupon data received by the non-contact communication I / F on the reimbursement side with the identification data received by the coupon encryption / decryption means, To the server side communication I / F of the management server device,
  When the management server device receives the coupon data transmitted from the redemption device through the server side communication I / F, the generation unit generates redemption data corresponding to the coupon data, and the generated redemption data is sent to the server side. Send to the redemption side communication I / F of the redemption device from the communication I / F,
  The redemption device performs redemption processing according to the redemption data by the redemption means,
  After using the coupon data, the redemption device encrypts the erasure command generated by the generation means by the erasure command encryption means using the identification data and generates an encrypted erasure command. Send from the redemption side non-contact communication I / F to the terminal side non-contact communication I / F of the terminal device,
  The terminal device decrypts the encrypted erasure command received by the terminal-side non-contact communication I / F using the identification data of the terminal-side secure memory by the erasure command encryption / decryption means, A data processing system for erasing encrypted coupon data in the terminal-side non-secure memory based on the data.   A distribution device for distributing encrypted coupon data; a terminal device for storing encrypted coupon data encrypted by the distribution device; a redemption device for redeeming the encrypted coupon data of the terminal device; In a data processing method of a system comprising a management server device,
  The distribution device includes a distribution-side non-contact communication I / F, a distribution-side non-secure memory, and a coupon encryption unit.
  The terminal device includes a terminal side secure memory, a terminal side non-secure memory, a terminal side non-contact communication I / F, and an erasure command encryption / decryption unit,
  The redemption device includes a redemption side non-contact communication I / F, a redemption side non-secure memory, a coupon encryption / decryption means, a redemption side communication I / F, a redemption means, a generation means for generating an erasure command, and an erasure Command encryption means,
  The management server device includes a server-side communication I / F and generation means for generating redemption data,
  The terminal device transmits the identification data of the terminal-side secure memory to the distribution-side non-contact communication I / F of the distribution device via the terminal-side non-contact communication I / F,
  The distribution device uses the identification data received by the distribution-side non-contact communication I / F to encrypt the coupon data in the distribution-side non-secure memory by the coupon encryption means, and generates encrypted coupon data. To send the converted coupon data from the distribution side non-contact communication I / F to the terminal side non-contact communication I / F of the terminal device,
  The terminal device stores the encrypted coupon data received by the terminal side non-contact communication I / F in the terminal side non-secure memory,
  When using the coupon data, the terminal device receives the encrypted coupon data of the terminal-side non-secure memory and the identification data of the terminal-side secure memory from the terminal-side non-contact communication I / F on the redemption side of the redemption device. Send to contactless communication I / F,
  The reimbursement device decrypts the encrypted coupon data received by the non-contact communication I / F on the reimbursement side with the identification data received by the coupon encryption / decryption means, To the server side communication I / F of the management server device,
  When the management server device receives the coupon data transmitted from the redemption device through the server side communication I / F, the generation unit generates redemption data corresponding to the coupon data, and the generated redemption data is sent to the server side. Send to the redemption side communication I / F of the redemption device from the communication I / F,
  The redemption device performs redemption processing according to the redemption data by the redemption means,
  After using the coupon data, the redemption device encrypts the erasure command generated by the generation means by the erasure command encryption means using the identification data and generates an encrypted erasure command. Send from the redemption side non-contact communication I / F to the terminal side non-contact communication I / F of the terminal device,
  The terminal device decrypts the encrypted erasure command received by the terminal-side non-contact communication I / F using the identification data of the terminal-side secure memory by the erasure command encryption / decryption means, A data processing method for erasing encrypted coupon data in the terminal-side non-secure memory based on the data.

Images