JPH10134121A - Electronic money system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide the electronic money system which effectively prevent money data from being forged and makes it easy to detect an illegal transaction. SOLUTION: The electronic money system which handles electronic money by using an electronic money card 19 stored with the electronic money having monetary value uses an electronic money card 19 equipped with an IC part 20 and an optical storage part 21. In the IC part 20, information specifying the electronic money card 19, balance, information for accessing the optical storage part 21, etc., are recorded and in the optical storage part 21, a history of all transactions of electronic money which are performed by using the electronic money is recorded. The transaction history is registered even in a computer of an electronic money transaction system. An illegal act generation place, the amount of money, etc., can be detected by tracing the transaction history.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an electronic money system for trading electronic money as financial information.

[0002]

2. Description of the Related Art An electronic money system which enables electronic settlement using monetary data having a monetary value is disclosed, for example, in Japanese Patent Publication No. 7-111723.

[0003]

In an electronic money system, it is necessary to effectively prevent use by unauthorized persons, copying of financial data, forgery, and the like. Further, when the use of forged financial data is found, it is desirable that the distribution channel can be traced to find the source of fraud or forgery. However, an electronic money system satisfying such a demand has not yet been proposed.

[0004] The present invention has been made in view of the above situation, and has as its object to provide an electronic money system capable of effectively preventing forgery or the like of money data. Another object of the present invention is to provide an electronic money system that easily detects unauthorized transactions and has excellent traceability.

[0005]

In order to achieve the above object, an electronic money system according to a first aspect of the present invention includes a write-once storage unit and an IC memory unit, and stores information relating to a monetary value. It comprises at least a first and a second electronic money card, at least a first and a second terminal for processing the electronic money card, and a computer connected to the terminal via a communication line and controlling the terminal. In the electronic money system, the write-once storage unit of the electronic money card stores transaction history information, and the IC memory unit of the electronic money card stores a position of the transaction history information stored on the write-once storage unit. Is stored, and the first electronic money card is attached to the first electronic money card.
The terminal of the first electronic money card according to the position information stored in the IC memory unit of the first electronic money card, the input means for inputting an instruction and transaction amount of electronic money including transfer
A first writing unit that writes transaction history information including a transaction amount input by the input unit into the write-once storage unit of the first electronic money card; and a transaction instruction input by the input unit. Transmitting means for transmitting the transfer instruction and the transaction amount to the computer as a transfer request message,
Wherein the computer comprises: means for receiving the transfer request message from the first terminal; and means for transmitting the received transfer request message to the second terminal. Means for receiving the transfer request message from the computer, and the transaction history information based on the received transfer request message according to the position information stored in the IC memory unit of the second electronic money card. And a second writing means for writing into the write-once type storage unit of the second electronic money card.

According to such a configuration, the electronic money stored in the electronic money card can be moved to another electronic money card. As a result, various transactions can be performed. Moreover, since the transaction history is recorded in the write-once type storage unit, when an abnormality occurs, the recorded contents of the write-once type storage unit can be verified and fraudulent acts can be easily detected. Note that the electronic money card only needs to have the function of an electronic money card as an entity, and its shape is
Box, disk, notebook, notebook, etc. are optional.

[0007] The first writing means of the first terminal comprises:
Writing may be performed in response to an instruction from the computer.

In the first terminal, it is determined whether or not the balance held by the first electronic money card is equal to or greater than the transaction amount input by the input means. Means for displaying an error message and requesting to cancel the transaction or re-enter the amount may be provided. A balance storing means for storing a balance of the electronic money card in the computer; and a transfer request from the first terminal, wherein a holding amount of the first electronic money card stored in the balance storing means is stored in the computer. Means for determining whether or not the transaction amount included in the message is equal to or more than the transaction amount, and if the held amount is less than the transaction amount, transmitting an instruction message for instructing to stop the transaction or re-input the amount to the first terminal. It may be arranged. With such a configuration, the security of the transaction can be improved.

The transaction history information includes, for each transaction, a transaction type, a transaction date, information specifying the terminal that has processed the transaction, and a transaction amount, and the first electronic money card. And at least one of the information for specifying the second electronic money card. By tracking such information, it is possible to determine a fraudulent part or the like. In this case, it is desirable that the write-once storage unit store transaction histories of all transactions made with the electronic money card.

[0010] The computer may include transaction history storage means for storing transaction histories of all transactions made with the electronic money card.

[0011] At least one of the write-once storage unit and the IC memory unit of the electronic money card stores a card identification code of the electronic money card, and the transfer request message includes the first and second electronic money cards. An unauthorized card ID storage unit that stores the card identification code of the electronic money card whose use is not authorized as the unauthorized card ID, the computer including the card identification code of the card, and the card identification included in the transfer request message Code and the fraudulent card ID stored in the fraudulent card ID storage means
And a means for canceling the transaction when a matching fraudulent card ID is detected. According to such a configuration, when a registered accident card or the like is used, it can be detected and the transaction can be stopped.

[0012] The terminal stores a terminal identification code, the transfer request message includes the terminal identification code, and the computer stores the terminal identification code of the terminal whose use is not permitted as an unauthorized terminal ID. Terminal ID storage means, and the unauthorized terminal ID stored in the unauthorized terminal ID storage means, the terminal identification code included in the transfer request message
And a means for canceling a transaction when a matching unauthorized terminal ID is detected. According to such a configuration, when a registered accident terminal or the like is used, it can be detected and the transaction can be stopped.

[0013] A personal public key and / or
Alternatively, a certificate authority that gives a card identification code and determines whether the personal public key and / or the card identification code is registered in the system may be arranged.

The IC memory section of the electronic money card includes a pair of a personal public key and a personal secret key, and the transfer request message uses information on a transaction and the personal secret key of the first electronic money card. A first authenticator generated by the first electronic money card, a second authenticator generated by using the information relating to the transaction and the personal secret key of the second electronic money card, and the first and second electronic moneys. The computer using the first and second electronic money cards to store the first and second electronic money cards.
May be executed, and a process for performing transfer according to the result of the authentication may be executed. According to such a configuration, unauthorized use of the electronic money card can be detected more accurately.

[0015] The transaction history information stored in the write-once type storage unit of the electronic money card may not include information for specifying the electronic money card. According to such a configuration, the capacity of the write-once storage unit can be used effectively.

[0016] The first terminal and the second terminal may be the same terminal.

Whether or not the operator has the authority to use the electronic money system may be determined based on the physical characteristics of the operator.

The write-once type storage unit is composed of, for example, an optical storage unit in which data is written and rewritable by physically forming pits by irradiating light energy.

An electronic money system according to a second aspect of the present invention is an electronic money system for trading electronic money, which is electronic information having a monetary value, wherein the electronic money system includes at least a balance. At least first and second electronic money, comprising: first storage means for storing information relating to the electronic money and a card identification code for identifying itself; and second storage means for storing a transaction history of the electronic money. A card and a terminal identification code for identifying itself are attached, the first and second electronic money cards are mounted, and a predetermined amount is transferred from the first electronic money card to the second electronic money card. Transfer request input means for inputting a transfer request instructing to transfer electronic money of
An electronic money transaction device comprising: a transfer request transmitting unit that transmits the input transfer request; a balance storage unit that stores a balance of the electronic money card; and a transfer request from the electronic money transaction device. Means for subtracting a predetermined amount from the balance of the first electronic money card and adding the predetermined amount to the balance of the second electronic money card;
A computer comprising: transaction history storage means for storing a transaction history; and means for transmitting a transaction completion notification indicating the completion of the transaction to the electronic money transaction device.The electronic money transaction device responds to the transaction completion notification. Means for writing the transaction history to the second storage means of the first and second electronic money cards, and the predetermined amount from the balance stored in the first storage means of the first electronic money card. , And adding the predetermined amount to the balance stored in the first storage unit of the second electronic money card.

According to such a configuration, the electronic money stored in the electronic money card can be moved to another electronic money card. As a result, various transactions can be performed. In addition, since the transaction history is recorded in the second storage means, when an abnormality occurs, the recorded contents of the second storage means can be verified and fraudulent acts can be easily detected.

The electronic money transaction device determines whether or not the balance stored in the first storage means of the first electronic money card is equal to or greater than a predetermined amount input by the transfer request input means. If the balance is less than the predetermined amount, means may be provided for displaying an error message and for canceling the transaction or requesting re-input of the amount. Further, the computer determines whether or not the balance of the first electronic money card stored in the balance storage means is equal to or greater than a predetermined amount indicated by the transfer request, and if the balance is less than the predetermined amount. Means for transmitting to the electronic money transaction device an instruction message for instructing to cancel the transaction or re-enter the amount. With such a configuration,
Transaction safety can be improved.

For example, the first of the electronic money card
Is configured by an IC chip having a memory, and the second storage is configured by a non-rewritable storage medium.

The transaction history includes a transaction type, a transaction date, and a transaction amount, and the card identification code of the first electronic money card and the card identification code of the second electronic money card. At least one of the following. The transaction can be tracked using this information. Also,
Information for identifying the electronic money card may be removed from the transaction history recorded on the electronic money card. The transaction history registered on the electronic money card must be
You are using that electronic money card. Therefore, there is no problem even if this data is removed.

[0024] The second storage means of the electronic money card may store transaction histories of all transactions made with the electronic money card. Further, the transaction history storage means of the computer may store transaction histories of all transactions made with the electronic money card. With such a configuration, transactions can be tracked accurately. Also, by matching the transaction history stored on the electronic money card with the transaction history stored on the computer,
It is possible to easily determine the location of the fraud.

An accident card, an accident terminal, or the like, whose use is not permitted, may be registered in the computer, and the transaction may be prohibited when the card or the terminal is used.

A certificate authority for determining whether the electronic money card is registered as usable in the electronic money system may be arranged. The certificate authority determines, for example, whether the personal public key of the electronic money card or the card identification number is registered in advance.

[0027] Whether or not the operator has the authority to use the electronic money system may be determined based on the physical characteristics of the operator.

[0028]

An electronic money system according to an embodiment of the present invention will be described below with reference to the drawings. This electronic money system, as shown in FIG.
Certificate Authority 11 and Electronic Money Server 1
3, an electronic money terminal (transaction device) 15, a bank center 17, and an electronic money card 19.

The center 10 is a computer system that controls (manages) the operation of the entire electronic money system and the distribution of electronic money. The certificate authority 11 of the center 10 generates authentication information for a user or the like in the electronic money system. The certificate authority 11 stores card IDs and public keys of all the electronic money cards 19 used in this system in order to check that the user is registered when performing authentication.

The electronic money server 13 generates a pair of center secret key Ck1 and center public key Ck2, and copies the center secret key Ck1 to the certificate authority 11, thereby sharing the center secret key Ck1 in the center 10. . Further, the electronic money server 13 transmits the center public key Ck2 to each electronic money terminal 15.
Etc. in advance. Further, the electronic money server 13 generates and stores a signature key Sk for generating a signature included in the personal authentication information described later and an inspection key Ek for confirming the signature made using the signature key Sk. Then, the inspection key Ek is distributed to each electronic money terminal 15 in advance.

As shown in FIGS. 2 and 3, the electronic money server 13 includes a balance table indicating the balance of electronic money held by each electronic money card 19 and a list of card IDs of the electronic money cards 19 that have become unusable. (Accident card list), terminal ID of electronic money terminal 15 that has become unusable
(Accident terminal list) and a list of transaction history of electronic money (transaction history table).

The electronic money server 13 uses these stored data to send an authentication request to the certificate authority 11 and the bank center 1
7 and controls and manages the transactions of each electronic money card 19, electronic money terminal 15, and electronic money.

The electronic money terminal 15 is a terminal through which a user inserts or mounts the electronic money card 19 and performs a predetermined operation to make a transaction for electronic money. The electronic money terminal 15 has a charge terminal (AT) for replenishing (charging) electronic money to the electronic money card 19.
M), a terminal that processes the transfer of electronic money between electronic money cards, a POS terminal that is arranged in a store or the like and receives electronic money corresponding to the sales amount of goods or services, a vending machine, and the like. One terminal may have a plurality of functions related to electronic money, for example, an ATM function and a POS function.

Each electronic money terminal 15 has a storage unit 30,
An input unit 31, a display unit 32, and a card processing unit 33 are provided.

The storage unit 30 is supplied from the electronic money server 13 with the terminal ID assigned to the electronic money terminal 15, a pair of terminal secret key Tk1 and terminal public key Tk2 generated by the electronic money terminal. The inspection key Ek and the center public key Ck2 for confirming the personal authentication information and the electronic money transaction history of the center 10 when it is offline are stored.

The input unit 31 inputs an instruction for an electronic money transaction. The display unit 32 displays a processing menu, a message, and the like. The card processing unit 33 is a part of the electronic money card 19
The electronic money card 19 includes an insertion slot, an IC read / write unit for accessing the IC unit 20 of the electronic money card 19, and an optical storage read / write unit for accessing the optical storage unit 21.

FIG. 4A shows an ATM type electronic money terminal 1.
5 is shown. The input unit 31 and the display unit 32 of the electronic money terminal 15 include a touch panel type display unit 34, and the card processing unit 33 includes card insertion ports 35A and 35B into which the electronic money card 19 is inserted. A transfer source card used for normal processing and electronic money transfer is inserted into the card insertion slot 35A. A transfer destination card at the time of transfer of electronic money is inserted into the card insertion slot 35B.

FIG. 4B shows an example of a POS type electronic money terminal. The input unit 31 of the electronic money terminal 15 includes a keyboard 31A and a barcode reader 31 for inputting the amount of sales and the like together with an instruction for electronic money transactions.
B and the like. In addition, the display unit 32 displays a sales amount and the like together with a message or the like for electronic money transactions, and includes a display unit 32A for a customer and a display unit 32B for an operator.
The card processing unit 33 has a card insertion slot 35.
Further, a cash drawer 36 and the like are arranged for POS.

The bank center 17 has an electronic money card 19
A settlement account, which is an account of a user (holder), and a separate account, which is an operation account for electronic money held by a bank, and perform deposit / withdrawal processing of these accounts. For example, bank center 17
Is an electronic money card 1 according to an instruction from the center 10.
The transfer from the settlement account corresponding to 9 to another account and the transfer from another account to the settlement account are performed. To perform this transfer process, the bank center 17 prepares an account table that associates the card ID assigned to each electronic money card 19 with the account number of the settlement account of the user (holder) of each electronic money card 19. Stored as shown in FIG.

The electronic money card 19 is, as shown in FIG. 6, composed of an optical IC hybrid card having an IC section (IC chip) 20 and an optical storage section 21. Note that the electronic money card 19 only needs to include an IC unit (IC chip) 20 and an optical storage unit 21, and the shape thereof is not limited to a card type and is arbitrary.

The IC section 20 contains a control circuit and a memory circuit. As shown in FIG. 6, this memory circuit stores, in addition to the operation program, a card ID, a personal secret key Pk1, a personal public key Pk2, a balance of electronic money, personal authentication information for online transactions described later, and the like. . Also, the IC unit 20
Of the transaction histories stored in the optical storage unit 21 described later, a final transaction pointer indicating the position of the final transaction history and a transmitted pointer indicating the position of the transaction history last transmitted to the electronic money server 13 are stored. .

The optical storage unit 21 is composed of, for example, a non-rewritable write-once storage medium of a type in which pits and the like are formed by irradiating light energy and data is written. The transaction history of the electronic money traded is sequentially stored.

The items constituting the transaction history include usage categories (charge (replenishment of balance), payment, transfer, cashing, etc.) indicating the type of transaction of electronic money, and electronic money with an electronic money card attached for the transaction. Terminal I of money transaction terminal 15
D, In the case of transfer of electronic money between the electronic money cards 19, the card ID of the other party, the date of use, the transaction amount, the authenticator (the transaction authenticator created using the above item and the personal secret key Pk1, the above item And a business partner authenticator created using the secret key Pk1 of the business partner (the electronic money terminal 15 or another electronic money card 19).

The basic processing in the electronic money system having such a configuration includes (1) electronic money charging processing (replenishment of the balance stored in the electronic money card 19), (2) personal authentication information issuing processing, There are (3) electronic money payment processing, (4) matching processing, (5) electronic money transfer processing, (6) electronic money realization processing, and the like. These processes will be described below in order.

(1) Electronic Money Charge Processing The electronic money charge processing will be described with reference to FIG. A
The electronic money terminal 15 having the TM function displays a process selection menu as shown in FIG. The user selects “1) Charge electronic money” from the processing menu displayed on the display unit 32 (the touch panel 34).

In response to this selection, the electronic money terminal 15
Displays a message indicating that the electronic money card 19 should be inserted into the card insertion slot 35A, as shown in FIG. 8B.

When the electronic money card 19 is inserted, the electronic money terminal 15 displays an amount input screen as shown in FIG. 8C, and the user operates the input unit 31 (touch panel 3).
Enter the desired charge amount from 4). When the charge amount is input, the electronic money terminal 15 stores the transaction information including the transaction type (charge), the use date and the transaction amount (charge amount) and the terminal I in the electronic money card 19.
D, and a request signal requesting transmission of the card ID and the personal public key Pk2 (P1).

The IC unit 20 of the electronic money card 19 adds the card ID to the terminal ID and the transaction information, and uses the personal secret key Pk1 to transfer the information to the transaction authenticator @ Pk1 (terminal ID
+ Transaction information + card ID), and the transaction authenticator, card ID and personal public key Pk2 are converted to the electronic money terminal 15.
(P2).

The electronic money terminal 15 receives the card I
D, the transaction information and the terminal ID are added, and the customer authenticator @ Tk1 (terminal ID + transaction information + card I) using the terminal secret key Tk1.
D) Create｝. The electronic money terminal 15 uses the created supplier authenticator @ Tk1 (terminal ID + transaction information + card I
D) Instructs the charge of the requested amount and the charge request message including the terminal public key Tk2, the card ID of the electronic money card 19, the personal public key Pk2, and the transaction authenticator. (P3). The charge request message includes the terminal ID of the electronic money terminal 15 of the transmission source.

The electronic money server 13 stores the received card ID and terminal ID in the accident card list (FIG. 2B) and the accident terminal list (FIG. 2) stored in the storage unit 30.
It is determined whether (C) is registered. If it is determined that the received card ID and terminal ID are not registered in these lists, the electronic money server 13
Using the received personal public key Pk2, the transaction authenticator {Pk1 (terminal ID + transaction information + card ID)} is converted into a terminal ID, transaction information, and a card ID. Further, using the received terminal public key Tk2, the supplier authenticator {Tk1 (terminal ID + transaction information + card ID)} is converted into a terminal ID, transaction information, and a card ID. Furthermore, the terminal ID converted from the transaction authenticator
It is determined whether the transaction ID, the transaction information, the card ID, the terminal ID converted from the supplier authenticator, the transaction information, and the card ID match. If these match completely, the electronic money server 13 determines that the transaction authenticator and the business partner authenticator are correct, and transfers the amount indicated from the settlement account corresponding to the card ID to another account of the bank center 17. A withdrawal message instructing to move (withdraw) is transmitted to the bank center 17 (P4).

If at least one of the received card ID and terminal ID is registered in the accident card list and the accident terminal list, or the terminal ID converted from the transaction authenticator and the business partner authenticator, the transaction information and the card If at least a part of the ID does not match, the electronic money server 13
Transmits a message indicating that charging is not possible to the electronic money terminal 15 and notifies the administrator or the like of the detection of fraud by displaying a message or the like. The electronic money terminal 15 displays a message to the effect that charging cannot be performed on the display unit 32.

The bank center 17 has the electronic money server 13
When the payment message is received, the account number corresponding to the card ID is determined with reference to the account table shown in FIG. Next, the balance of the settlement account of this account number is checked, and it is determined whether or not the balance is equal to or more than the designated amount. If the balance is determined to be greater than or equal to the amount indicated,
It is determined that withdrawal is possible, and the designated amount is moved (transferred) from the settlement account to another account (P5). Next, a withdrawal completion message notifying the completion of the transfer is sent to the electronic money server 13.
(P6).

When the payment cannot be made due to the shortage of the balance of the settlement account, the bank center 17 transmits a message instructing that the charge cannot be made to the electronic money server 13. The electronic money server 13 stops the charging process and transmits a similar message to the electronic money terminal 15. In response to this message, the electronic money terminal 15 displays a message to that effect on the display unit 32 or the like.

When receiving the withdrawal completion message from the bank center 17, the electronic money server 13 sends the card ID of the electronic money card 19 and the personal public key Pk2 stored in the storage unit 30 to the certificate authority 11, and (P7). The certificate authority 11 checks whether the received card ID and personal public key Pk2 are registered in the list of the card ID and personal public key Pk2 stored therein. If they are registered, the certificate authority 11
Using the center secret key Ck1, the received card ID and personal public key Pk2 are authenticated as {Ck1 (card ID + Pk2)}.
And sends it back to the electronic money server 13 together with the authentication completion message (P8).

When the electronic money server 13 receives the authentication completion message and the authentication information {Ck1 (card ID + Pk2)}, the electronic money server 13 checks the balance table shown in FIG. Update the balance data indicating the balance. Furthermore, as shown in FIG. 3, the transaction information (use category (charge), use date, transaction amount), card ID, terminal ID, and authenticator (transaction authenticator and supplier authenticator) Is added to the past transaction history and stored. Next, the electronic money server 1
No. 3 adds the authentication information from the certificate authority 11 to the current transaction history, and transmits it to the electronic money terminal 15 together with a charge completion message indicating the completion of the charge (P9).

When receiving the transaction history and the authentication information, the electronic money terminal 15 converts the authentication information into a card ID and a personal public key Pk2 using the center public key Ck2 and checks it. If the authentication information is confirmed to be correct, the balance recorded in the memory area of the IC unit 20 is updated via the control unit of the IC unit 20 based on the received transaction history.

The electronic money terminal 15 is connected to the IC section 20.
The last transaction pointer is read from the address, and the current transaction history ｛transaction information (use category (charge), date of use, transaction amount), card ID, terminal ID, and authentication are stored at the address following the position indicated by the last transaction pointer. The child (transaction authenticator and supplier authenticator)｝ is added to the past transaction history and stored.
Further, the electronic money terminal 15 updates the final transaction pointer and the transmitted pointer recorded in the memory area of the IC unit 20 via the control unit of the IC unit 20 so as to indicate the position of the transaction history added ( P10). Thereafter, the terminal 15 displays that the charging is completed on the display unit 32 and ejects the electronic money card 19.

This electronic money charging process is performed by the user A
Uses the electronic money terminal 15B (terminal ID “T150”) and uses its own electronic money card 19A (card ID ”).
C99 ") will be described with reference to Fig. 9 as an example, in which electronic money for 10,000 yen is charged.
From the processing menu displayed on the display unit 32, select "1) Charge electronic money", insert the electronic money card 19A into the electronic money terminal 15B, and enter "10,000 yen" as the charge amount.

In response to the input, the electronic money terminal 15B exchanges the transaction information including the transaction category (charge), the date of use, and the transaction amount, the terminal ID “T150”, the card ID and the personal public key. The request is transmitted to the electronic money card 19A together with a request signal requesting Pk2 (L1).

The electronic money card 19A adds the card ID “C99” to the received terminal ID “T150” and the transaction information, and uses the personal secret key Pk1A to make the transaction authenticator {Pk1A.
(T150 + transaction information + C99) is created. The electronic money card 19A generates the transaction authenticator $ Pk1A (T
150 + transaction information + C99)｝ with card ID “C99”
Is transmitted to the electronic money terminal 15B together with the personal public key Pk2A (L2).

The electronic money terminal 15B receives the card ID “C
99 "and the transaction information stored in the storage unit 30 as the terminal ID.
, And using the terminal secret key Tk1B, the supplier authenticator {Tk1
B (T150 + transaction information + C99)} is created. The electronic money terminal 15B uses the created supplier authenticator @ Tk1B
(T150 + transaction information + C99) and requesting the charge of 10,000 yen of electronic money, and the terminal ID “T15
Charge request message including “0” and the terminal public key Tk2B;
The card ID “C99” of the electronic money card 19A, the personal public key Pk2A, and the transaction authenticator {Pk1A (T150 + transaction information + C99)} are transmitted to the electronic money server 13 (L3).

The electronic money server 13 receives the received terminal I
Unauthorized use of the electronic money terminal 15 and the electronic money card 19 is checked by determining whether D "T150" and the card ID "C99" are registered in the accident terminal list and the accident card list.

As a result of the check, the electronic money card 19A
If it is determined that the electronic money terminal 15B is neither an accident card nor an accident terminal, the electronic money server 1
3 uses the personal public key Pk2A to assign the transaction authenticator to the terminal ID.
And transaction information and a card ID. Further, using the terminal public key Tk2B, the supplier authenticator is converted into a terminal ID, transaction information, and a card ID. Next, it is determined whether or not the terminal ID converted from the transaction authenticator, the transaction information, and the card ID completely match the terminal ID converted from the supplier authenticator, the transaction information, and the card ID. If these match completely, the electronic money server 13 determines that the transaction authenticator and the business partner authenticator are correct, and sends to the bank center 17 the one from the settlement account of the card ID “C99” to another account of the bank center 17. A withdrawal message instructing to move 10,000 yen is transmitted (L4).

When both or one of the electronic money card 19A and the electronic money terminal 15B is determined to be an accident card or an accident terminal, and / or a terminal ID converted from the transaction authenticator and the business partner authenticator and the transaction If the information and the card ID do not match each other, the electronic money server 13 transmits a message to the effect that charging cannot be performed to the electronic money terminal 15B, and notifies the administrator of the detection of fraud or abnormality.

When receiving the withdrawal message, the bank center 17 refers to the account table shown in FIG.
Search for the account number "30000001" of the settlement account 99 "and determine whether or not the balance of the corresponding account number is equal to or more than the designated charge amount of 10,000 yen. If the balance is less than 10,000 yen, The bank center 17 transmits to the electronic money server 13 a message indicating that the balance cannot be charged because the balance is insufficient.If the balance is 10,000 yen or more, the bank center 17 moves the settlement account "300000001" to another account of the bank center 17. Is transferred to the electronic money server 13 (L5).

The electronic money server 13 is provided at the bank center 17
Receives a withdrawal completion message from the electronic money card 19
An authentication grant request for authentication of the card ID of A and the personal public key Pk2A is transmitted to the certificate authority 11 together with the card ID "C99" and the personal public key Pk2A (L6).

The certificate authority 11 adds the received card ID “C99” and the personal public key P to the list of the card ID of the electronic money card 19A and the personal public key Pk2 stored therein.
k2A exists (that is, registered in the certificate authority 11)
Check that. When the card ID “C99” and the personal public key Pk2A are registered in the certificate authority 11, the certificate authority 11 uses the center secret key Ck1 to
D “C99” and authentication information ΔC for personal public key Pk2A
k1 (C99 + Pk2A)}, and transmits it to the electronic money server 13 together with an authentication completion message indicating the completion of authentication (L
7).

When the electronic money server 13 receives the authentication completion message, the usage category “charge”, date of use, card ID “C99”, terminal ID “T150”, charge amount “10,000 yen”, transaction authenticator , And a transaction history is generated by a supplier authenticator and stored as shown in FIG. Further, 10,000 yen is added to the balance of the card ID “C99” in the balance table shown in FIG. Further, authentication information from the certificate authority 11 is added to the generated transaction history, and transmitted to the electronic money terminal 15B together with the charge completion message (L8).

When the electronic money terminal 15B receives the transaction history to which the authentication information has been added, the electronic money terminal 15B converts the authentication information {Ck1 (C99 + Pk2A)} to the card I using the center public key Ck2.
D is converted to "C99" and the personal public key Pk2A and checked. If the authentication information is confirmed to be correct, the received transaction history is stored in the IC section 20 of the electronic money card 19A.
(L9). The IC unit 20 adds 10,000 yen to the balance stored by itself based on the received transaction history.

The electronic money terminal 15B is connected to the IC unit 2
The last transaction pointer is read from 0, the transaction history is added to the position next to the position indicated by the last transaction pointer in the optical storage unit 21, and the last transaction pointer and the transmitted pointer are updated to indicate the added transaction history. Then, the terminal 15B
Displays on the display unit 32 that charging has been completed, and ejects the electronic money card 19A. In this way, the user A can charge his / her own electronic money card 19A with electronic money for 10,000 yen.

(2) Personal Authentication Information Issuing Process Next, a process of issuing personal authentication information stored in the IC unit 20 of the electronic money card 19 (personal authentication information issuing process) will be described. In the offline electronic money payment process described below, the electronic money card 19 presents the personal authentication information to the electronic money terminal 15 and receives confirmation of the personal authentication information by the electronic money terminal 15.
It is possible to trade. Since the personal authentication information is created based on the card ID of the electronic money card 19 and the personal public key Pk2, it needs to be obtained every time the personal secret key Pk1 and the personal public key Pk2 are changed.

FIG. 10 is a schematic diagram of the personal authentication information issuing process. First, as shown in FIG. 8A, from the processing menu displayed on the display unit 32, "4) Issuing personal authentication information"
Is selected, and the electronic money card 19 is
5 is inserted. In response to this operation, the electronic money terminal 15 sends the card I to the IC section 20 of the electronic money card 19.
A request signal indicating a request for D and the personal public key Pk2 is transmitted (P11).

In response to the request signal, the IC section 20 of the electronic money card 19 transmits the card ID and the personal public key Pk2 to the electronic money terminal 15 (P12). The electronic money terminal 15 transmits the received card ID and personal public key Pk2 to the electronic money server 13 together with an authentication information issuance request for requesting personal authentication information (P13). Note that the authentication information issuance request includes the terminal ID.

When the electronic money server 13 receives the card ID, the personal public key Pk2, and the authentication information issuance request from the electronic money terminal 15, the received card ID and terminal ID are registered in the accident card ID list and the accident terminal ID list. Check if it is.

As a result of the check, if at least one of the received card ID and the terminal ID is registered in the accident card ID list or the accident terminal ID list, the electronic money server 13 issues the personal authentication information to the electronic money terminal 15. In addition to transmitting a message to the effect that it is not possible, the administrator is notified of the detection of fraud by displaying a message or the like. The electronic money terminal 15 displays this message.

If the received card ID and terminal ID are not registered in the accident card ID list and the accident terminal ID list, the electronic money server 13
D, a request for issuing a personal public key Pk2 and personal authentication information (a request for issuing personal authentication information) is transmitted to the certificate authority 11 (P14).

Upon receiving the card ID, the personal public key Pk2, and the request for issuing personal authentication information from the electronic money server 13, the certificate authority 11 registers the received card ID and the personal public key as being usable in the present system.

After registering the received card ID and personal public key Pk2, the certificate authority 11 assigns a signature Sk (card ID + Pk2) created (encrypted) using the signature key Sk to the card ID and personal public key Pk2. By doing so, the personal authentication information {(card ID + Pk2) + Sk (card ID + Pk2)}
Is generated and transmitted to the electronic money server 13 together with the issuance completion message (P15). Note that (Card ID + Pk2) may be compressed, and data converted using a hash function and encrypted with a signature key Sk may be used as a signature.

The electronic money server 13 transmits the personal authentication information {(card ID + Pk2) + Sk (card ID + Pk2)} and the issuance completion message from the certificate authority 11 to the electronic money terminal 15 (P16). The electronic money terminal 15 receives the personal authentication information ｛(card ID + Pk2) + Sk (card I
D + Pk2)} to the IC section 20 of the electronic money card 19 (P17). The IC unit 20 receives the personal authentication information ｛(card ID + Pk2) + Sk (card ID + Pk
2) Store｝ in the storage circuit. Thereafter, the electronic money terminal 15 displays on the display unit 32 that the acquisition of the personal authentication information has been completed.
And the electronic money card 19 is ejected.

For example, the user A executes the personal authentication information issuance processing by the electronic money card 19A (card ID “C9
An example in which the personal authentication information of 9 ″) is acquired will be described with reference to FIG.

First, the user A selects "4) Issue personal authentication information" from the menu displayed on the display section 32, and inserts the electronic money card 19A into the electronic money terminal 15B. In response to this operation, the electronic money terminal 15B transmits a request signal requesting transmission of the card ID and the personal public key to the electronic money card 19A (L11).

The IC section 20 of the electronic money card 19A
When the request signal is received from the electronic money terminal 15B, the card ID "C99" and the personal public key Pk2A are transmitted to the electronic money terminal 15B (L12). Electronic money terminal 15B
Is the received card ID "C99" and the personal public key Pk2A
Is transmitted to the electronic money server 13 together with the authentication information issuance request (L13).

The electronic money server 13 compares the received card ID “C99” and the personal public key Pk2A with the accident card I
By determining whether the electronic money card 19 and the electronic money terminal 15 are registered in the D list and the accident terminal ID list, unauthorized use of the electronic money card 19 and the electronic money terminal 15 is checked. If it is determined that the unauthorized use has occurred, the electronic money server 13 transmits a message to the effect that the personal authentication information cannot be issued to the electronic money terminal 15B, and notifies the administrator of the fraud detection by displaying a message or the like. The electronic money terminal 15B displays this message.

As a result of the check, the electronic money card 19A
And if the electronic money terminal 15B can be used, the card I
D “C99” and the personal public key Pk2A are transmitted to the certificate authority 11 together with a request for issuing personal authentication information (L14).

The certificate authority 11 registers the card ID “C99” and the personal public key Pk2A received from the electronic money server 13 as being usable in this system. After registering the card ID “C99” and the personal public key Pk2A, the certificate authority 11 generates a digital signature by encrypting them with the signature key Sk, and gives the card ID “C99” and the personal public key Pk2A. By the personal authentication information ｛(C
99 + Pk2A) + Sk (C99 + Pk2A)},
The message is transmitted to the electronic money server 13 together with the issuance completion message (L15).

The electronic money server 13 sends the personal authentication information ｛(C99 + Pk2A) + Sk (C99 +
Pk2A) and the issuance completion message are transmitted to the electronic money terminal 15 (L16). The electronic money terminal 15 receives the personal authentication information {(C99 + Pk2) received from the electronic money server 13.
A) + Sk (C99 + Pk2A)｝ is converted to an electronic money card 1
9A (L17). The IC unit 20 of the electronic money card 19A receives the personal authentication information ｛(C99 + Pk2A) + Sk (C99 + Pk2
A)｝ is stored. After that, the electronic money terminal 15B
The completion of the acquisition of the personal authentication information is displayed on the display unit 32 and the electronic money card 19A is ejected.

The personal authentication information may be automatically obtained through the electronic money terminal 15 when the personal secret key Pk1 and the personal public key Pk2 are changed by the electronic money terminal 15.

(3) Electronic Money Payment Processing Next, electronic money payment processing will be described with reference to FIG. This process is performed, for example, in a store or the like,
This is a process for purchasing a service or the like and paying the fee by electronic money. The electronic money terminal 15 is, for example, as shown in FIG.
It takes the form of a POS terminal, a vending machine, or the like as shown in FIG.

For example, the POS terminal type electronic money terminal 15
After calculating the sales amount, a message indicating that the payment method should be selected is displayed on the display unit 32. Here, when the payment by the electronic money card is selected, FIG.
Is displayed, and the electronic money card 19 is inserted into the electronic money terminal 15 as shown in FIG.

In response to the insertion of the electronic money card 19, the electronic money terminal 15 receives the transaction information including the transaction classification, the date of use, and the transaction amount (payment amount), and the terminal ID.
And a request signal for requesting transmission of the balance, the card ID, the personal public key Pk2, the personal authentication information {(card ID + Pk2) + Sk (card ID + Pk2)}, and transmits the request signal to the electronic money card 19 (P21).

The IC unit 20 of the electronic money card 19 adds the card ID to the received terminal ID and transaction information, and creates a transaction authenticator {Pk1 (terminal ID + transaction information + card ID)} using the personal secret key Pk1. I do. The IC unit 20 creates the transaction authenticator $ Pk1 (terminal ID + transaction information + card I
D) {} is replaced by the card ID, the personal public key Pk2 and the personal authentication information {(card ID + Pk2) + Sk (card ID + Pk2)}.
And the balance are transmitted to the electronic money terminal 15 (P22).

The electronic money terminal 15 sends the card ID, the personal public key Pk2 and the personal authentication information {(card ID + Pk2) + Sk (card ID + Pk2)} from the electronic money card 19.
, The balance and the transaction authenticator {Pk2 (terminal ID + transaction information + card ID)}, first, the personal authentication information {(card ID + Pk2) + Sk (card ID + Pk2)}
The digital signature Sk (card ID + Pk2) given to the card ID and the personal public key Pk2 is decrypted using the inspection key Ek,
It is determined whether or not the signed card ID matches the personal public key Pk2. If they do not match, the electronic money terminal 15 determines that there is some fraud, displays a message indicating that the transaction is not possible, and notifies the electronic money server 13 of the fraud detection.
Notify.

The electronic money terminal 15 converts the card ID decrypted from the signature using the inspection key Ek and the personal public key Pk2 into
When it is determined that the signed card ID matches the personal public key Pk2, it is determined whether the received balance is equal to or more than the payment amount. If the balance is equal to or more than the payment amount, it is determined that payment is possible, and the transaction authenticator @ Tk1 (terminal ID +
(Transaction information + card ID)} is generated. The electronic money terminal 15 obtains a transaction history from the transaction information, card ID, terminal ID, transaction authenticator {Pk2 (terminal ID + transaction information + card ID)} and supplier authenticator {Tk1 (terminal ID + transaction information + card ID)}. Is transmitted to the electronic money card 19 together with the payment completion message (P23), and further stored in its own storage unit 30.

The IC section 20 of the electronic money card 19 updates the balance stored in the storage circuit based on the received transaction history and transfers the value of the final history pointer to the electronic money terminal 15. The electronic money terminal 15 writes a transaction history at the address next to the address indicated by the final history pointer of the optical storage unit 21 of the electronic money card 19 and sends a command to the IC unit 20 to update the final history pointer. In response to this command, the IC unit 20 updates the value of the last transaction pointer stored in the storage circuit. However, the value of the transmitted pointer is not updated. Thereafter, the electronic money terminal 15 displays that the payment has been completed and ejects the electronic money card 19.

As described above, this electronic money payment processing is an offline processing performed between the electronic money card 19 and the electronic money terminal 15. As a result, the processing speed can be improved, the response can be made faster, and the waiting time of the customer can be reduced.

The electronic money terminal 15 communicates with the electronic money server 13 at a predetermined timing and transmits the transaction history stored in the storage unit 30. Electronic money server 13
Stores the received transaction history in the transaction history table as shown in FIG. The timing at which the electronic money terminal 15 transmits the transaction history to the electronic money server 13 is preferably, for example, a timing immediately after the electronic money payment processing is completed. However, the present invention is not limited to this, and may be arbitrary, for example, every fixed period (for example, every 10 minutes), in response to polling from the electronic money server 13, and the like.

After transmitting the transaction history stored in the storage unit 30 to the electronic money server 13, the electronic money terminal 15 may delete the transmitted transaction history or add a transmitted flag or the like. Thus, the transmitted transaction history and the untransmitted transaction history may be managed separately.

In the electronic money payment processing, for example, the user A checks that the electronic money terminal 15B whose terminal ID is “T150”
Is purchased at the store where is installed, and the payment is made to the electronic money card 19A (card ID "C9
9 ") will be described as an example with reference to Fig. 13. First, the amount" 10,000 yen "is displayed as a payment amount on the display unit 32 of the electronic money terminal 15B (for example, a POS terminal), and First, assume that payment by electronic money is selected, first, the user A or a clerk inserts the electronic money card 19A into the electronic money terminal 15B.

In response to the insertion of the electronic money card 19A, the electronic money terminal 15B responds to the insertion of the electronic money card 19A with the transaction information including the transaction category, the transaction date and the transaction amount, and the terminal ID “T15”.
0 ", a card ID" C99 ", a personal public key Pk2, personal authentication information, and a request signal for requesting transmission of the balance are transmitted to the electronic money card 19A (L21).

The electronic money card 19A adds the card ID “C99” to the received terminal ID “T150” and the transaction information, and uses the personal secret key Pk1A to make the transaction authenticator {Pk1A}.
(T150 + transaction information + C99) is created. The electronic money card 19A uses the created transaction authenticator @ Pk2A (T
150 + transaction information + C99) and the card ID “C9
9 ", the personal public key Pk2A, and the personal authentication information $ (C99
+ Pk2) + Sk (C99 + Pk2)} and the balance are transmitted to the electronic money terminal 15 (L22).

The electronic money terminal 15B receives the card ID “C99” and the personal public key Pk2 from the electronic money card 19A.
A and personal authentication information $ (C99 + Pk2) + Sk (C99 +
Pk2)}, the balance and the transaction authenticator {Pk1A (T150 + transaction information + C99)}, and the signature Sk (C99 + Pk2) of the personal authentication information is stored in the inspection key Ek.
Is decrypted using. Next, the decrypted one is the card ID “C” of the electronic money card 19A to which the signature has been given.
99 "and the personal public key Pk2A.

Next, the electronic money terminal 15B sets the balance of the electronic money card 19A to the payment amount (in this case, 10,000 yen).
It is determined whether or not this is the case. If the balance is 10,000 yen or more, the electronic money terminal 15B uses the terminal secret key Tk1B for the terminal ID “T150”, the transaction information, and the card ID “C99” to authenticate the customer counterpart {Tk1B (T150 + transaction information + C9).
9) Generate｝. Further, the terminal ID “T150”, the transaction information, the card ID “C99”, and the transaction authenticator @ Pk1A
(T150 + transaction information + C99)} and supplier authenticator {T
A transaction history is constructed from k1B (T150 + transaction information + C99) @, and the electronic money card 19A together with the payment completion message.
(L23). The transaction history is also stored in its own storage unit 30. After that, the electronic money terminal 15B
The electronic money card 19A is ejected while displaying that the payment is completed.

The IC section 20 of the electronic money card 19A
Based on the transaction history received from the electronic money terminal 15B, the balance is reduced by 10,000 yen and the value of the final transaction pointer is transmitted to the electronic money transaction terminal 15B. The electronic money transaction terminal 15B stores the transaction history at the address next to the address indicated by the last transaction pointer in the optical storage unit 21. Thereafter, the value of the final read pointer is updated in the IC unit 20 so as to indicate the next address position. However, the value of the transmitted pointer is not updated.

On the other hand, if it is determined that the signature obtained by decrypting the signature with the inspection key Ek does not match the card ID “C99” of the electronic money card 19A and the personal public key Pk2A, the electronic money terminal 15B authenticates the electronic money card 19A. It is determined that the card is a card, and a message to the effect that payment is impossible is displayed on the display unit 32.
And notifies the electronic money server 13 of the fraud detection. If the balance of the electronic money card 19A is less than 10,000 yen, the electronic money terminal 15B displays a message on the display unit 32 that payment is not possible due to insufficient balance.

The electronic money terminal 15B transmits the transaction history stored in the storage unit 30 to the electronic money server 13 after completing the payment processing. When the electronic money server 13 receives the transaction history, as shown in FIG.
Store in transaction history table. Electronic money terminal 15B
After the transmission of the transaction history stored in the transaction history storage unit 30 from the electronic money server 13 is completed, the transmitted transaction history may be deleted, or the transmission may be performed by adding a transmitted flag or the like. The transaction history that has already been transmitted and the transaction history that has not been transmitted may be managed separately.

In the above description, the payment processing is performed offline. However, in order to enhance security, if the transaction amount is a certain amount or more, the processing may be performed online. A limit may be set. The electronic money terminal 15 also has the same “terminal authentication information” as the personal authentication information of the electronic money card 19,
Sends its own terminal authentication information to the electronic money card 19,
Confirmation may be received. In this case, the electronic money card 19 includes a check key for checking (checking) the signature included in the terminal authentication information. In this system, when the personal authentication information and the terminal authentication information between the electronic money card 19 and the electronic money terminal 15 are mutually confirmed to be correct, it is possible to conduct a transaction. Can be.

(4) Matching Process When the payment process or the like is executed, a transaction history not transmitted to the electronic money server 13 is generated in the electronic money card 19. These transaction histories are transmitted to the electronic money server 13 prior to the processing when online processing (for example, electronic money charging processing) is performed. The electronic money server 13 includes an electronic money card 19
When the transaction history is received via the electronic money terminal 15 from the electronic money terminal 15, the validity of the transaction history is checked by comparing the transaction history with the transaction history stored therein. The outline of the matching process will be described with reference to FIG.

Upon receiving the signal from the electronic money terminal 15, the IC unit 20 of the electronic money card 19 determines the content of the process indicated by the received signal, and determines whether or not it indicates an online process. I do. When the received signal indicates the online processing, the IC unit 20 determines whether or not the value of the last transaction pointer matches the value of the transmitted pointer before executing another processing. . If it is determined that they do not match, the IC unit 20 transmits the transaction history and the card ID stored in each address from the position next to the pointer indicated by the transmitted pointer to the position indicated by the final transaction pointer, together with the interrupt signal. Is transmitted to the electronic money terminal 15 (P31).

For example, “1) Charge electronic money” is selected from the processing menu, and the electronic money card 19 is selected.
Is inserted into the electronic money terminal 15 and the amount is input, the electronic money terminal 15 transmits, for example, transaction information and the like to the IC unit 20 of the electronic money card 19 in order to perform a charging process (FIG. 7 P1, L1 in FIG. 9).

The IC unit 20 determines from the transaction information that the designated process is an online process, and determines whether the final transaction pointer of the IC unit 20 matches the transmitted pointer. If it is determined that they do not match, the IC
The electronic money terminal 15 stores the transaction history, the card ID, and the personal public key Pk2 stored at each address from the position next to the pointer indicated by the transmitted pointer to the position indicated by the final transaction pointer, together with the interrupt signal. (P31).

In response to the interrupt signal, the electronic money terminal 15 transmits the received card ID, personal public key Pk2, and transaction history to the electronic money server 13 (P32).

The electronic money server 13 sends the received card ID and personal public key Pk2 together with a confirmation request for confirming that they have been registered in the certificate authority 11 together with the certificate authority 1.
1 (P33).

The certificate authority 11 determines whether or not the received card ID and personal public key Pk2 are registered in the card ID and personal public key list stored therein. When the registration is confirmed, a confirmation completion message indicating the completion of the confirmation is returned to the electronic money server 13 (P34). If the received card ID and the personal public key Pk2 are not registered, the certificate authority 11 detects the fraudulently by the electronic money server 13.
Notify.

When receiving the confirmation completion message from the certificate authority 11, the electronic money server 13 matches the transaction history received from the electronic money card 19 with the transaction history stored therein. When all the received transaction histories and the transaction histories stored therein match and the matching is completed, the electronic money server 13 transmits a matching completion message to the electronic money terminal 15 (P35).

The electronic money terminal 15 transmits the received matching completion message to the electronic money card 19 (P3
6). When receiving the matching completion message, the electronic money card 19 updates the transmitted pointer stored in the IC unit 20 so as to match the last transaction pointer. Subsequently, a process originally required by the electronic money terminal 15 is executed.

When the electronic money server 13 determines that the received transaction history and the transaction history stored therein do not match, the electronic money server 13 notifies the electronic money terminal 15 of the mismatch, and detects the fraud by displaying a message or the like. Notify the administrator, etc.

When the last transaction pointer matches the transmitted pointer, the electronic money card 19 continues the processing according to the request signal because there is no unsent history.

This matching process may be executed only after the electronic money payment process has been performed. In this case, for example, when the electronic money terminal 15 executes the electronic money payment processing, the IC section 20 of the electronic money card 19
To set the unsent history flag. Electronic money terminal 15
When the electronic money card 19 is inserted and the online processing is instructed, it is determined whether or not the unsent history flag is on. If the flag is on, the above-described matching processing is executed.

The matching process will be specifically described with reference to FIGS. Here, user A has previously
It is assumed that the electronic money is paid by the electronic money card 19A of the card ID “C99”, and the unsent transaction history is stored in the optical storage unit 21 of the electronic money card 19A.

The user A, for example, instructs charging of electronic money, and inserts the electronic money card 19A into the electronic money terminal 15B. The electronic money terminal 15B stores the transaction information including the transaction category (charge), the use date and the transaction amount, and the terminal ID into the card ID and the personal public key Pk2.
Of the electronic money card 19A together with the request signal for requesting
It transmits to C section 20.

The IC section 20 determines from the transaction information that online processing has been selected, and determines whether or not the final transaction pointer stored therein matches the transmitted pointer. As shown in FIG. 16, the transmitted pointer points to the address “2”, and the last transaction pointer is the address “2”.
5 ”, the IC unit 20 sets the address“ 2 ”next to the address“ 2 ”indicated by the transmitted pointer.
Address "5" to which the last transaction pointer points from "3"
Signal of transaction history R3 to R5 up to interrupt signal and card I
D "C99" and the personal public key Pk2A are transmitted to the electronic money terminal 15B (L31). Electronic money terminal 15B
Transmits the received transaction histories R3 to R5, the card ID and the personal public key Pk2A to the electronic money server 13 (L3
2).

The electronic money server 13 transmits the received card ID “C99” and the personal public key Pk2A to the certificate authority 11 together with a confirmation request (L33). The certificate authority 11 confirms that the received card ID and personal public key Pk2A are registered in the card ID and personal public key list stored therein, and transmits a confirmation completion message to the electronic money server 13 ( L34).

When receiving the confirmation-completed message, electronic money server 13 compares transaction histories R3 to R5 with the transaction histories stored therein. That is, addresses “3” to “”
The transaction history R3 to R5 of 5 ″ are all stored in the electronic money server 13.
Check that it matches the transaction history stored in. As a result of the check, if the transaction histories R3 to R5 match the transaction histories stored in the electronic money server 13, the electronic money server 13 checks the balance of the card ID “C99” in the balance table shown in FIG. Is updated, and the matching completion message is transmitted to the electronic money terminal 15B (L3
5). The electronic money terminal 15B transmits the received matching completion message to the electronic money card 19A (L3
6). When receiving the matching completion message, the electronic money card 19A updates the transmitted pointer stored in the IC unit 20 from “2” to “5” as shown in FIG.

Thereafter, the electronic money terminal 15 and the electronic money card 19A execute the designated electronic money charging process.

In the matching process described above, the transaction history from the electronic money card 19 and the transaction history from the electronic money terminal 15 stored in the electronic money server 13 are compared. This makes it possible to easily detect a transaction history that has been fraudulently generated (for example, the transaction amount has been falsified). Further, when fraud is detected, by referring to the transaction history stored in the optical storage unit 21 of the fraudulent electronic money card 19, when, where and how much is used
Etc. can be known.

(5) Electronic Money Transfer Processing Next, an outline of electronic money transfer processing will be described with reference to FIG. The side that transfers (transfers) the electronic money is referred to as the electronic money card 19A, and the side that receives the transfer is the electronic money card 19B.

According to the screen display shown in FIG. 8A, “3) Transfer of electronic money” is selected from the processing menu displayed on the display unit 32, and the electronic money card 19A is inserted into the card insertion slot 35A. Are respectively inserted into the card insertion slots 35B, and the transfer amount from the electronic money card 19A to the electronic money card 19B is input.
In response to this input, the electronic money terminal 15 provides the electronic money card 19A and the electronic money card 19B with transaction information including a transaction category (transfer from 19A to 19B), a use date and a transaction amount. A request signal indicating a request for a terminal ID, a card ID, and a personal public key is transmitted (P41).

When receiving the terminal ID, the transaction information, and the request signal, the electronic money card 19A uses the personal secret key Pk1A, and uses the terminal ID, the transaction information, and the transaction authenticator @ Pk1A (terminal ID + transaction information) for the card ID of its own. + 19A card ID) @ is created. Electronic money card 19A
Is the created transaction authenticator, card ID and personal public key Pk2
A is transmitted to the electronic money terminal 15 (P42).

The electronic money card 19B has a terminal ID
Upon receiving the transaction information and the request signal, the personal secret key Pk1
B, the customer ID {Pk1B (terminal ID + transaction information + 1) for the terminal ID, transaction information, and own card ID
9B card ID) @. Electronic money card 1
9B transmits the created supplier authenticator, card ID and personal public key Pk2B to the electronic money terminal 15 (P4
2).

The electronic money terminal 15 receives the transaction authenticator {Pk1A (terminal ID + transaction information + card ID of 19A)} received from the electronic money card 19A, the card ID, the personal public key Pk2A, and the transaction received from the electronic money card 19B. The pre-authenticator {Pk1B (terminal ID + transaction information + card ID of 19B)}, the card ID, the personal public key Pk2B, and an instruction to move the amount (transfer amount) input from the electronic money card 19A to the electronic money card 19B. A transfer request message is transmitted to the electronic money server 13 (P4
3). The transfer request message includes the terminal ID.

The electronic money server 13 stores the card I of the received electronic money card 19A and the received electronic money card 19B.
D and terminal ID are accident card ID list and accident terminal I
It is determined whether or not it is registered in the D list.

If the received card ID and terminal ID are not registered in the accident card ID list and the accident terminal ID list, the electronic money server 13 checks the balance of the electronic money card 19A in the balance table shown in FIG. Check. If the balance is insufficient, a message indicating that the balance is insufficient is transmitted to the electronic money terminal 15. The electronic money terminal 15 displays a message indicating that the designated amount cannot be transferred due to insufficient balance.

If the balance is equal to or more than the designated transfer amount, the electronic money server 13 uses the personal public key Pk2A of the electronic money card 19A to make the transaction authenticator {Pk1A (terminal ID +
Is converted into a terminal ID, transaction information, and a card ID of the electronic money card 19A. Further, using the personal public key Pk2B of the electronic money card 19B, the supplier authenticator @ Pk1B (terminal ID + transaction information + 1)
9B card ID) is converted into a terminal ID, transaction information, and a card ID of the electronic money card 19B. Next, it is determined whether or not the converted contents are correct. That is, the transaction information and the terminal ID decrypted from the transaction authenticator match with the terminal ID, the card ID converted from the transaction authenticator matches the card ID of the electronic money card 19A of the transfer source, and the transaction It is checked that the card ID converted from the former authenticator matches the card ID of the transfer destination electronic money card 19B. If it is determined that all match, the electronic money card 19A and the electronic money card 19 in the balance table are displayed.
The balance of B is updated.

Next, the electronic money server 13 stores the card IDs of the electronic money cards 19A and 19B.
And the personal public key is transmitted to the certificate authority 11 together with the authentication grant request (P44).

In response to the authentication grant request, the certificate authority 11 registers the received card IDs of the electronic money cards 19A and 19B and the personal public keys Pk2A and Pk2B in the card ID and personal public key list stored therein. Check if it is. If it is determined that these are registered, the authentication information {Ck1 (19A card ID + Pk2A)} and {Ck1 (1) are used for them using the center secret key Ck1.
9B card ID + Pk2B)}, and transmits it to the electronic money server 13 together with the authentication completion message (P4).
5).

In response to the authentication completion message, the electronic money server 13 generates and stores a transaction history of the transfer source electronic money card 19A and a transaction history of the transfer destination electronic money card 19B. Further, the authentication information from the certificate authority 11 is added to the transaction history and transmitted to the electronic money terminal 15 together with the transfer completion message (P46).

When receiving the transaction history and the authentication information, the electronic money terminal 15 converts the authentication information into a card ID and a personal public key Pk2 using the center public key Ck2 and checks it. When it is confirmed that the authentication information is correct, the received transaction history is transmitted to the electronic money card 19A and the electronic money card 19B in response to the transfer completion message (P47). IC of electronic money cards 19A and 19B
The unit 20 updates the balances stored therein based on the received transaction history. That is, the electronic money card 1
The IC unit 20 of the 9A reduces the stored balance by a predetermined amount based on the received transaction history.
The 9B IC unit 20 increases the stored balance by a predetermined amount based on the received transaction history.

Further, the electronic money cards 19A, 19B
Respectively transmit the value of the final transaction pointer to the electronic money terminal 15. The electronic money terminal 15
The received transaction history is added to the address next to the address indicated by the value of the last transaction pointer in the optical storage unit 21 of the electronic money cards 19A and 19B. Further, the final transaction pointer and the transmitted pointer are updated to indicate the added transaction history. Thereafter, the electronic money terminal 15 displays on the display unit 32 that the transfer of the electronic money has been completed, and discharges the electronic money cards 19A and 19B.

This electronic money transfer processing is performed by the user A from the electronic money card 19A (card ID “C99”) to the electronic money card 19B (card ID “C05”), using the electronic money terminal 15C (terminal ID “T150”). An example in which 30,000 yen of electronic money is transferred via the Internet will be described with reference to FIG.

First, the user A selects “3) transfer of electronic money” from the processing menu according to the screen display shown in FIG. 8A, and inserts the electronic money card 19A into the transfer source card insertion slot 35A. Then, the user inserts the electronic money card 19B into the transfer destination card insertion slot 35B and inputs the transfer amount.

In response to this input, the electronic money terminal 15
C is the electronic money card 19A and the electronic money card 19
B, a transaction ID including a transaction category, a use date and a transaction amount, a terminal ID “T150”, and a card ID
And a request signal indicating a request for a personal public key, respectively (L41).

The electronic money card 19A responds to the request signal by adding its own card ID "C99" to the terminal ID "T150" and the transaction information, and using the personal secret key Pk1A to make the transaction authenticator $ Pk1A (T150 + transaction information + C99)}, and sends the transaction authenticator to the electronic money terminal 15C together with the card ID “C99” and the personal public key Pk2A (L
42).

In response to the request signal, the electronic money card 19B adds its own card ID “C05” to the terminal ID “T150” and the transaction information, and uses the personal secret key Pk1B to authenticate the supplier authenticator {Pk1B ( T150 + Transaction information + C0
5) Create｝ and set the supplier authenticator to card ID “0”.
5 "and the personal public key Pk2B are transmitted to the electronic money terminal 15C (L42).

The electronic money terminal 15C receives the card ID “C99” received from the electronic money card 19A, the personal public key Pk2A, and the transaction authenticator $ Pk1A (T150 + transaction information +
C99), the card ID “C05” received from the electronic money card 19B, the personal public key Pk2B, and the business partner authenticator {Pk1B (T150 + transaction information + C05)}, and 30,000 from the electronic money card 19A to the electronic money card 19B. A transfer request message instructing to move the electronic money in yen is transmitted to the electronic money server 13 (L43). The transfer request message includes the terminal ID “T150”.

The electronic money server 13 stores the received card I of the electronic money card 19A and the received electronic money card 19B.
It is checked whether D "C99", "C05" and terminal ID "T150" are registered in the list of accident card ID and accident terminal ID. Card ID "C99", "
If it is determined that C05 ”and the terminal ID“ T150 ”are not registered as an accident card or an accident terminal, the electronic money server 13 transmits the electronic money card 19 of the transfer source.
The balance of A is checked with reference to the balance table.

If the balance is less than 30,000 yen, electronic money server 13 transmits a message to the effect that the balance is insufficient to electronic money terminal 15. If the balance is 30,000 yen or more, the electronic money server 13 uses the personal public key Pk2A to send the transaction authenticator {Pk1A (T150 + transaction information + C99)} to the terminal ID.
And the transaction information and the card ID of the electronic money card 19A. In addition, the customer ID {Pk1B (T150 + transaction information + C05)} is transmitted to the terminal ID using the personal public key Pk2B.
And transaction information and a card ID.

Subsequently, it is determined whether or not these contents are correct. That is, the terminal ID converted from the transaction authenticator and the transaction authenticator match the transaction information, and the card ID converted from the transaction authenticator is used as the card ID “C99” of the transfer source electronic money card 19A. A check is made to see if the card ID converted from the supplier authenticator matches the card ID “C05” of the transfer destination electronic money card 19B. As a result of the check, if it is determined that the transaction authenticator and the supplier authenticator are correct, the electronic money server 13
Subtracts 30,000 yen from the balance of the card ID “C99” in the balance table and adds 3 to the balance of the card ID “C05”.
Add 10,000 yen. Next, the electronic money server 13 transmits the card I of the electronic money card 19A and the electronic money card 19B.
D “C99”, “C05” and personal public keys Pk2A, Pk2
B together with the authentication grant request to the certificate authority 11 (L4
4).

The certificate authority 11 responds to the authentication grant request and refers to the card ID and the public key stored therein to thereby obtain the card IDs “C99” and “C05” of the received electronic money cards 19A and 19B. And whether the personal public keys Pk2A and Pk2B are registered in this system. When the certificate authority 11 confirms that they have been registered, the card ID “C99”, “
The authentication information {Ck1 (C99 + Pk2A)} of the electronic money card 19A and the electronic money card 19B using the center secret key Ck1 for C05 ″ and the personal public keys Pk2A and Pk2B.
The authentication information {Ck1 (C05 + Pk2B)} is generated and transmitted to the electronic money server 13 together with the authentication completion message (L45).

The electronic money server 13 stores the authentication information {Ck1} of the electronic money card 19A and the electronic money card 19B.
When (C99 + Pk2A)} and {Ck1 (C05 + Pk2B)} are received, the transaction history of the transfer source electronic money card 19A and the transaction history of the transfer destination electronic money card 19B are generated and stored in the transaction history table. Further, the authentication information from the certificate authority 11 is added to the transaction history and transmitted to the electronic money terminal 15C together with the transfer completion message (L4).
6).

When receiving the transaction history and the authentication information, the electronic money terminal 15 converts the authentication information into a card ID and a personal public key Pk2 using the center public key Ck2 and checks it. When the authentication information is confirmed to be correct, the received transaction history is stored in the electronic money cards 19A and 19B.
Each is transmitted to the C section 20 (L47). The IC units 20 of the electronic money cards 19A and 19B update the balance stored in the storage circuit based on the received transaction history. That is, the electronic money card 19A reduces the balance by 30,000 yen, and the electronic money card 19B increases the balance by 30,000 yen. Further, the electronic money terminal 15C has an electronic money card 19A.
The value of the last transaction pointer is read from the IC unit 20 of the electronic money card 19A and the optical storage unit 21 of the electronic money card 19B.
The transaction history is added to the address next to the address indicated by the value of the last transaction pointer.

Further, the electronic money terminal 15C updates the final transaction pointer and the transmitted pointer stored in the IC section 20 of the electronic money cards 19A and 19B so as to indicate the added transaction history. Thereafter, the electronic money terminal 15C displays on the display unit 3 that the transfer of the electronic money has been completed.
2 and the electronic money cards 19A and 19B are ejected.

Note that the balance of the electronic money card 19A of the transfer source may be checked by the electronic money terminal 15 when "3) Transfer of electronic money" is selected from the menu and the transfer amount is input. Good. In this case, the electronic money terminal 15 makes a balance request to the electronic money card 19A.

Further, the electronic money terminal 15C in which the electronic money card 19A is inserted and the electronic money terminal 15D in which the electronic money card 19B is inserted may be configured to transfer electronic money. The transfer process between the two electronic money terminals 15C and 15D will be described below with reference to FIG. In this description, the side that transfers (transfers) the electronic money is referred to as the electronic money terminal 15C, and the side that receives the transfer is the electronic money terminal 15D.

First, the electronic money card 19A is inserted into the electronic money terminal 15C, and the electronic money card 19B is inserted into the electronic money terminal 15D. The electronic money terminal 15C of the transfer source issues an electronic money transfer instruction and the transfer destination electronic money. Information (for example, terminal ID) for specifying the money terminal 15D is input. In response to the input, the electronic money terminal 15C transmits the card ID, the request signal indicating the request for the personal public key, the transaction information, and the terminal ID to the electronic money card 19A (L61). To the electronic money terminal 15D as the transfer destination (S62).

When receiving the specific information from the electronic money terminal 15C, the electronic money server 13 transmits a notification signal notifying that the terminal has been designated as the transfer destination to the electronic money terminal 15D indicated by the specific information (L63). ). In response to the notification signal from the electronic money server 13, the electronic money terminal 15D transmits a card ID, a request signal indicating a request for a personal public key, transaction information, and a terminal ID to the electronic money card 19B. (L64)

When the electronic money card 19A inserted in the electronic money terminal 15C receives the terminal ID, the transaction information, and the request signal, it uses the personal secret key Pk1A to authenticate the transaction with respect to the terminal ID, the transaction information, and its own card ID. Child @ Pk1
A (terminal ID + transaction information + card ID of 19A)} is created. The electronic money card 19A transmits the created transaction authenticator, card ID, and personal public key Pk2A to the electronic money terminal 15C (L65).

When the electronic money card 19B inserted in the electronic money terminal 15D receives the terminal ID, the transaction information, and the request signal, the electronic money card 19B uses the personal secret key Pk1B to execute the terminal I / O.
D, transaction information, and supplier authenticator @ Pk1B (terminal ID + transaction information + card I of 19B) for own card ID
D) Create｝. The electronic money card 19B transmits the created supplier authenticator, card ID, and personal public key Pk2B to the electronic money terminal 15D (L66).

The electronic money terminal 15C receives the transaction authenticator {Pk1A (terminal ID +
The transaction information + 19A card ID), the card ID, the personal public key Pk2A, and the transfer request message are transmitted to the electronic money server 1.
Send to 3. (L67) Also, the electronic money terminal 15D
Is the customer authenticator @ Pk1B (terminal ID + transaction information + card I of the 19B received from the electronic money card 19B).
D) The electronic money server 1 transmits the $, the card ID, the personal public key Pk2B, and the transfer source message indicating that it is the transfer source.
3 (L68). The transfer request message and the transfer source message include the terminal ID.

The electronic money server 13 determines whether or not the received card IDs of the electronic money cards 19A and 19B and the terminal IDs of the electronic money terminals 15C and 15D are registered in the accident card ID list and the accident terminal ID list. .

When the received card ID and terminal ID are not registered in the accident card ID list and the accident terminal ID list, the electronic money server 13 checks the balance of the electronic money card 19A in the balance table shown in FIG. Check. If the balance is insufficient, a message to the effect that the balance is insufficient is transmitted to the electronic money terminal 15C. The electronic money terminal 15C displays a message indicating that the designated amount cannot be transferred due to insufficient balance.

If the balance is equal to or more than the designated transfer amount, the electronic money server 13 uses the personal public key Pk2A of the electronic money card 19A to make the transaction authenticator {Pk1A (terminal ID +
Is converted into a terminal ID, transaction information, and a card ID of the electronic money card 19A. Further, using the personal public key Pk2B of the electronic money card 19B, the supplier authenticator @ Pk1B (terminal ID + transaction information + 1)
9B card ID) is converted into a terminal ID, transaction information, and a card ID of the electronic money card 19B. Next, the converted contents are collated to determine whether they are correct.
When it is determined that the contents are correct, the balances of the electronic money cards 19A and 19B in the balance table are updated.

Next, the electronic money server 13 checks the card IDs of the electronic money cards 19A and 19B.
And the personal public key is transmitted to the certificate authority 11 together with the authentication grant request (L69).

The certificate authority 11 registers the card IDs and the personal public keys Pk2A and Pk2B of the received electronic money cards 19A and 19B in the card ID and personal public key list stored therein in response to the authentication grant request. Check if it is. If it is determined that these are registered, the authentication information {Ck1 (19A card ID + Pk2A)} and {Ck1 (1) are used for them using the center secret key Ck1.
9B card ID + Pk2B)}, and transmits it to the electronic money server 13 together with the authentication completion message (L7).
0).

In response to the authentication completion message, the electronic money server 13 generates and stores a transaction history of the electronic money card 19A of the transfer source and a transaction history of the electronic money card 19B of the transfer destination. Further, the authentication information from the certificate authority 11 is added to the transaction history, and the transaction history is transmitted to the electronic money terminal 15C and the electronic money terminal 15D together with the transfer completion message (L
71).

Electronic money terminal 15C and electronic money terminal 1
Upon receiving the transaction history and the authentication information, the 5D converts the authentication information into a card ID and a personal public key Pk2 using the center public key Ck2 and checks. When the authentication information is confirmed to be correct, the received transaction history is transmitted to the respective electronic money cards 19A and 19B (L
72). IC section 20 of electronic money cards 19A and 19B
Updates the balance stored in each of them based on the received transaction history. That is, the IC unit 20 of the electronic money card 19A reduces the stored balance by a predetermined amount based on the received transaction history, and the IC unit 20 of the electronic money card 19B reduces the stored balance based on the received transaction history. Increases the balance being paid by a predetermined amount.

Further, the electronic money cards 19A, 19B
Transmits the value of the final transaction pointer to the electronic money terminals 15C and 15D, respectively. The electronic money terminals 15C and 15D are provided with respective electronic money cards 19
The received transaction history is added to the next address of the address indicated by the value of the last transaction pointer in the optical storage unit 21 of A, 19B. Further, the final transaction pointer and the transmitted pointer are updated to indicate the added transaction history. Thereafter, the electronic money terminals 15C and 15D display that the transfer of the electronic money has been completed, and eject the respective electronic money cards 19A and 19B.

In the above description, the electronic money transfer processing is executed by the online processing. However, when the transfer amount is equal to or less than a certain amount, the electronic money transfer processing is performed in the electronic money terminal 15 similarly to the electronic money payment processing. Is also good. Thereby, the response speed can be improved. In the case of off-line processing, a limit on the amount of one transfer may be set in order to enhance security.

(6) Electronic Money Conversion Process Next, the outline of the electronic money conversion process for converting the electronic money stored in the electronic money card 19 and transferring it to the user's settlement account will be described with reference to FIG. . First, as shown in FIG. 8, the user selects “2) redeeming electronic money” from the processing menu displayed on the display unit 32, inserts the electronic money card 19 into the electronic money terminal 15, and sets the cash amount. Enter

In response to this selection, electronic money terminal 15 responds to the selection by selecting transaction information including the transaction type, date of use, and transaction amount, a terminal ID, a card ID and a request signal indicating a request for a personal public key. Is transmitted to the electronic money card 19 (P51).

The electronic money card 19 responds to the request signal, adds its own card ID to the terminal ID and the transaction information, and uses the personal secret key Pk1 to make a transaction authenticator {Pk1 (terminal ID + transaction information + card ID)}. Is created, and the created transaction authenticator is transmitted to the electronic money terminal 15 together with the card ID and the personal public key (P52).

The electronic money terminal 15 receives the card I
D, the transaction information and the terminal ID are added, and the customer authenticator @ Tk1 (terminal ID + transaction information + card I) using the terminal secret key Tk1.
D) Create｝. The electronic money terminal 15 uses the created supplier authenticator @ Tk1 (terminal ID + transaction information + card I
D) $, the entered cash amount and the electronic money card 1
9 instructs transfer to the corresponding settlement account, a cashing request including the terminal public key Tk2, and the electronic money card 19
And the personal public key Pk2 to the electronic money server 13 (P53). The cashing request includes the terminal ID of the electronic money terminal 15 of the transmission source.

The electronic money server 13 checks whether or not the card ID and the terminal ID of the received electronic money card 19 are registered in the accident card ID list and the accident terminal ID list stored therein. When it is determined that the received card ID and terminal ID are not registered in the accident card ID list and the accident terminal ID list, the electronic money server 13 uses the received personal public key Pk2 to make the transaction authenticator {Pk1 ( Terminal ID + transaction information + card I
D)｝ is converted into a terminal ID, transaction information, and a card ID. Further, using the received terminal public key Tk2, the business partner authenticator {Tk1 (terminal ID + transaction information + card ID)} is transmitted to the terminal I.
D, the transaction information, and the card ID are converted, and it is determined whether or not they match. If these match, the electronic money server 13 determines that the transaction authenticator {Pk1 (terminal ID + transaction information + card ID)} and the supplier authenticator {Tk1 (terminal ID +
Transaction information + card ID)｝ is determined to be correct, and card I
D and the personal public key Pk2 together with the certificate grant request
(P54).

The certificate authority 11 responds to the authentication grant request and refers to the list of the card ID and the personal public key stored therein, so that the received card ID and the personal public key Pk2 are registered in the system. Check if it is. If they are registered, the certificate authority 11 generates the authentication information {Ck1 (card ID + Pk2)} for the received card ID and personal public key Pk2 using the center secret key Ck1, and sends it to the electronic money server 13. It is transmitted (P55).
If the received card ID and personal public key Pk2 are not registered in the system, the certificate authority 11 notifies the electronic money server 13 of fraud detection.

When the electronic money server 13 receives the authentication information {Ck1 (card ID + Pk2)} from the certificate authority 11,
The balance of the electronic money card 19A is checked with reference to the balance table, and if transfer is possible, a transfer request message including the card ID and the transfer amount is created and transmitted to the bank center 17 (P56).

If at least one of the received card ID and terminal ID matches one of the list of unusable card IDs and terminal IDs, or if the transaction ID and the terminal ID converted from the supplier Information and Card I
D does not match each other, the electronic money server 13
Transmits a message to the effect that charging is not possible to the electronic money terminal 15 and notifies the administrator of the fraud detection by displaying a message or the like. When the balance of the electronic money card 19 is insufficient, the electronic money server 13
A message indicating that the balance is insufficient is transmitted to the electronic money terminal 15.

Upon receiving the transfer request message, the bank center 17 refers to the account table shown in FIG. 5 and transfers the designated amount from another account to the settlement account corresponding to the card ID (P57). After the transfer is completed, Bank Center 17
Transmits the transfer completion message to the electronic money server 13 (P58).

[0177] Upon receiving the transfer completion message, the electronic money server 13 updates the balance in the balance table of the electronic money card 19, generates a transaction history, and stores the transaction history in the transaction history table. Next, the electronic money server 13 adds the authentication information {Ck1 (card ID + Pk2)} from the certificate authority 11 to the transaction history, and transmits it to the electronic money terminal 15 together with a redemption completion message indicating that the redemption has been completed (P59). .

Upon receiving the transaction history, the authentication information {Ck1 (card ID + Pk2)}, and the transfer completion message, the electronic money terminal 15 uses the center public key Ck2 to authenticate the authentication information {Ck1.
(Card ID + Pk2)｝ is replaced with the card ID and personal public key Pk2
Convert to and check. When the authentication information is confirmed to be correct, the transaction history is transmitted to the electronic money card 19 (P60).

IC card section 20 of electronic money card 19
Updates the balance based on the received transaction history and transmits the value of the final transaction pointer to the electronic money terminal 15. The electronic money terminal 15 adds the received transaction history to the address next to the address indicated by the final transaction pointer in the optical storage unit 21. Subsequently, the last transaction pointer and the transmitted pointer stored in the IC card unit 20 are updated. After that, the electronic money terminal 15 displays on the display unit 32 that the electronic money has been redeemed, and discharges the electronic money card 19.

The electronic money redemption process is performed by the user A by transferring 50,000 yen of the electronic money stored in the electronic money card 19A (card ID “C99”) to the electronic money terminal 1.
5B (terminal ID “T150”) and the bank center 1
The case of transferring to the own settlement account of No. 7 will be described with reference to FIG. 21 as an example. The user A selects “2) redeem electronic money” from the processing menu displayed on the display unit 32,
The electronic money card 19A is attached to the electronic money terminal 15B, and the cash amount “50,000 yen” is input to the input unit 31.

In response to this operation, the electronic money terminal 15
B indicates, on the electronic money card 19A, the transaction information including the transaction category, the date of use, and the transaction amount, and the terminal ID ".
T150 "and a request signal for requesting transmission of the card ID and the personal public key (L51). The electronic money card 19A responds to the request signal and receives the received terminal ID" T.
150 ”and its own card ID“ C99 ”to the transaction information, and the transaction authenticator {Pk1A” using the personal secret key Pk1A.
(T150 + transaction information + C99) is created. The electronic money card 19A generates the transaction authenticator $ Pk1A (T
150 + transaction information + C99) and card ID “C99”
And the personal public key Pk2A to the electronic money terminal 15B (L52).

[0182] The electronic money terminal 15B adds the transaction information and the terminal ID "T150" to the received card ID "C99" and uses the terminal secret key Tk1 to authenticate the customer authenticator @ Tk1B (T
150 "+ transaction information + C99)}. The electronic money terminal 15B creates the supplier authenticator {Tk1B (T1
50 ”+ transaction information + C99)} and the entered cash amount from the electronic money card 19A to the electronic money card 1
9A, instructing the transfer to the settlement account corresponding to 9A, a cashing request including the terminal public key Tk2B, and the electronic money card 1
9A card ID "C99", personal public key Pk2A,
Transaction authenticator @ Pk1A (T150) + transaction information + C9
9) is transmitted to the electronic money server 13 (L5)
3).

The electronic money server 13 stores the card ID “C99” of the electronic money card 19A and the terminal ID “T15”.
Check whether "0" is registered in the accident card ID list and the accident terminal ID list. The received card ID "C99" and terminal ID "T150" are registered in the accident card ID list and the accident terminal ID list. If the electronic money server 13 determines that the transaction authenticator {Pk1A (T1
50 "+ transaction information + C99)｝ is replaced with transaction information and card ID
To the terminal ID. Further, the received terminal public key T
The customer authenticator {Tk1B (T150) + transaction information + C99) is converted into transaction information, a card ID, and a terminal ID using k2B, and it is determined whether or not they match each other. , The electronic money server 13 uses the card I
D “C99” and the personal public key Pk2A are transmitted to the certificate authority 11 together with the authentication grant request (L54).

The certificate authority 11 refers to the card ID and the personal public key stored therein, and receives the received card ID “C”.
99 "and the personal public key Pk2A are registered in the system, and if it is confirmed that the personal public key Pk2A has been registered, the authentication information {Ck1 (C99 + Pk2
A) A is generated and transmitted to the electronic money server 13 together with the authentication completion message (L55). The electronic money server 13
From the certificate authority 11, the authentication completion message and the authentication information @ Ck1 (C99
+ Pk2A)}, the balance table card I
It is determined whether or not the balance of D “C99” is equal to or more than the cash amount of 50,000 yen. If the balance is 50,000 yen or more, the electronic money server 1
3 transmits a transfer request message including the card ID “C99” and the transfer amount “50,000 yen” to the bank center 17 (L5
6).

The bank center 17 has the electronic money server 13
When the transfer request message is received from, the account table is referred to, and 50,000 yen is transferred from another account to the settlement account of user A corresponding to card ID “C99”. When the transfer process is completed, the bank center 17 transmits a transfer completion message to the electronic money server 13 (L57). Electronic money server 13
Receives the transfer completion message, subtracts 50,000 yen from the balance of card ID “C99” in the balance table, generates a transaction history, and stores it in the transaction history table. Next, the electronic money server 13 sends the authentication information {Ck1 (C
99 + Pk2A) @ is added to the transaction history, and transmitted to the electronic money terminal 15B together with the cashing completion message (L58).

The electronic money terminal 15B responds to the cashing completion message and uses the center public key Ck2 to authenticate the authentication information {Ck1.
(C99 + Pk2A) @ is replaced with the card C99 and the personal public key Pk2
Convert to and check. If the authentication information is confirmed to be correct, the transaction history is stored in the electronic money card 19A.
(L59). Electronic money card 19A IC
The unit 20 subtracts 50,000 yen from the balance stored by itself based on the received transaction history. Further, the electronic money terminal 15B adds the received transaction history to the position indicated by the final transaction pointer in the optical storage unit 21, and updates the values of the final transaction pointer and the transmitted pointer. Thereafter, the electronic money terminal 15B displays on the display unit 32 that the electronic money has been redeemed, and discharges the electronic money card 19A.

[0187] In this way, the user can convert the electronic money stored in his own electronic money card 19 and transfer it to his own settlement account.

As described above, with this electronic money system, electronic money can be charged to an electronic money card, redeemed, transferred, and used for payment.
In addition, since the transaction history is recorded in the optical storage unit 21, by verifying (tracking) the recorded contents of the write-once type storage unit, it is possible to easily detect an improper act or the like. Furthermore, by recording the transaction history at the center,
Fraud can be more reliably detected.

Note that the present invention is not limited to the above embodiment, and various modifications and applications are possible. For example, the components of the transaction history are arbitrary, and each transaction has a unique transaction I
D, the balance of the electronic money at that time, the transaction time, minute, second, etc. may be included in the transaction history. Further, authentication information and the like may be deleted from the transaction history.

Information for identifying the card may be omitted from the transaction history recorded in the optical storage unit 21. For example, when an electronic money card 19 is charged with electronic money, the optical storage unit 21 of the electronic money card 19 records, for example, that the transaction is charge, transaction date and time, transaction amount, terminal ID, and the like, There is no need to record information identifying yourself.

Similarly, for example, the electronic money card 19A
When the electronic money is transferred from the electronic money card 19B to the electronic money card 19B, the optical storage unit 21 of the electronic money card 19A indicates that the transaction category is the transfer of the electronic money, the card ID of the transfer destination electronic money card 19B, and the transfer amount. And so on,
The information for specifying the transfer source (electronic money card 19A) is not recorded, and the optical storage unit 21 of the electronic money card 19B stores
The transfer of the electronic money, the card ID of the transfer source electronic money card 19A, the transfer amount, and the like may be recorded, and the information for specifying the transfer destination (the electronic money card 19B) may not be recorded. Thus, the amount of data recorded in the optical storage unit 21 can be reduced.

In the above embodiment, a list of settlement accounts of the user of the electronic money card is registered in the bank center 17,
Although the card ID is converted to the account number of the settlement account, the account number of the settlement account is registered in the IC unit 20 or the optical storage unit 21 of the electronic money card 19, and the charge of the electronic money,
When performing processing such as cash conversion, the account number may be notified to the bank center 17 from the electronic money card 19.

In the above embodiment, the signature key Sk and the inspection key Ek are used to generate and confirm the signature included in the personal authentication information.
Although the center secret key Ck1 and the center public key Ck2 may be used.

It is also possible to process payment at a store as transfer of electronic money. In this case, a form of processing in which electronic money corresponding to the sales amount is transferred from the electronic money card 19 of the customer to the electronic money card 19 of the store is adopted. For example, the electronic money terminal 15 shown in FIG. 4B has a card insertion slot 35 for inserting the customer's electronic money card 19A and a terminal owner side (store,
Electronic money card 19 (including sales staff, sales manager, etc.)
A card insertion slot for inserting B is provided.
The terminal owner's electronic money card 19B is inserted into the store card insertion slot at the time of opening a store or the like.

When the sales calculation is completed, the electronic money terminal 1
5 (for example, a POS terminal) displays a message inquiring on the display unit 32 about the sales amount and the payment method. In response to this message, payment by electronic money is selected, and the customer's electronic money card 19A is inserted into the insertion slot. Subsequent processing is the same as the above-described transfer processing.

Note that the above-described offline transfer processing may be employed.

In the above description, the IC unit 20 stores the last transaction history position among the transaction histories stored in the optical storage unit 21, but the IC unit 20 stores the last transaction history position. Any position information that is useful when newly writing a transaction history may be used. For example, the IC unit 20
May store the position next to the last transaction history.

In each transaction, if the balance is insufficient, the transaction is not allowed. However, a message indicating the balance is insufficient may be displayed on the electronic money terminal 15 so that the user can re-enter the transaction amount.

When this electronic money system is constructed on a network of a wide area network (for example, the Internet), it is desirable to provide a certificate authority 11 and an electronic money server 13, respectively. However, in a closed loop type local network, , The certificate authority 11 and the electronic money server 13 may be realized as one server.

Further, this electronic money system is shown in FIG.
As shown in (1), the configuration may be such that the certificate authority 11 is omitted.
The outline of each process in this case is shown in FIGS. The processing in this case is, as apparent from FIGS. 23 to 27 and the previous drawings, the center secret key and the center public key,
The operation is the same as that of the embodiment except that the processes related to the personal secret key, the personal public key, and the authentication are eliminated. According to this configuration, the processing speed is improved in the entire system. When the certificate authority 11 is excluded, the electronic money terminal 15 generates a transaction history based on the input transaction instruction, writes the transaction history on the electronic money card, and transmits information on the transaction to the electronic money server 13. Is also good. The electronic money server 13 stores the transaction history of the transaction in the transaction history table based on the received information.

Since the personal public key of the electronic money card 19 has already been registered in the personal authentication information issuance processing, the personal public key is not transmitted when transmitting the transaction authenticator of the electronic money card 19. Is also good. Similarly, if the terminal public key of the electronic money terminal 15 is registered in the center 10, it is not necessary to transmit the terminal public key when transmitting the supplier authenticator of the electronic money terminal 15.

The card ID of the electronic money card 19 and the personal public key Pk2 are transmitted to the certificate authority 11, and the certificate authority 11 issues the electronic money card 19 instead of the authentication information generated by signing them. For example, a personal authenticator stored in a card in advance may be used. Further, as the target of the generation of the authentication information by the certificate authority 11, for example, transaction information such as a cash amount and a date may be used. This makes it possible to more reliably confirm that the transaction has been made.

Note that the certificate authority 11 may generate Ck1 (card ID + personal public key Pk2 + “transaction permission message”) as authentication information in response to the authentication grant request. The "transaction permission message" may be a permission message according to the type of transaction, such as "charge permission message" in the case of charge processing. In addition, Ck1 (“transaction permission message”) as authentication information
May be used. Also, in this "transaction permission message",
The random number generated by the electronic money server 13 may be included. This makes forgery extremely difficult. Further, in order to enhance the security of the system, for example, the legitimacy of the operator of the electronic money terminal 15 may be determined based on the physical characteristics of the operator. For example, the fingerprint data of the holder is stored in the storage circuit of the IC section 20 of the electronic money card 19, and the fingerprint of the operator of the electronic money terminal 15 is scanned. Transaction processing may be performed.

In this case, the electronic money terminal 15
The fingerprint reading device 41 as shown in FIG. The fingerprint reading device 41 has a reading window 41A for scanning a fingerprint.
And a guide 41B for guiding the finger. Also, I
As shown in FIG. 29, the phase information extracted after the Fourier transform of the fingerprint image of the holder is registered in the storage circuit of the C unit 20 in advance.

As shown in FIG. 29, the fingerprint reader 41 scans an image (fingerprint image) in the reading window 41A and acquires image data, and an image acquired by the image acquiring unit 51. Fourier transform unit 52 for performing a Fourier transform on the data (a waveform thereof), a phase information extracting unit 53 for extracting only the phase information of the Fourier series acquired by the Fourier transform unit 52, and phase information and phase information read from the IC unit 20 A phase synthesizing unit 54 for synthesizing the phase information generated by the extracting unit 53, a Fourier transform unit 55 for performing a Fourier transform on the phase information synthesized by the synthesizing unit 54 to obtain a correlation strength, and a Fourier transform unit 55 Compare the correlation strength with the threshold,
The determination unit 56 determines whether the operator is a valid person.

In such a configuration, for example, when a process is selected from the process menu and the electronic money card 19 is inserted, the electronic money terminal 15 puts a finger on the fingerprint reading device 41 as shown in FIG. A message to the effect is displayed on the display unit 32. When the operator places his finger on the fingerprint reader 41 according to the message, the image acquisition unit 51 of the fingerprint reader 41 scans the fingerprint in the reading window 41A and captures the image. The Fourier transform unit 52 performs a Fourier transform on the read image, and the phase information extracting unit 53 captures the phase information.

Subsequently, the phase synthesizing unit 54 reads out the phase information registered in the IC unit 20, and
3, and the Fourier transform unit 55 Fourier-transforms the combined data to obtain a correlation strength.

When the correlation strength is equal to or more than a certain value, the judgment unit 56 determines that the fingerprint registered in the IC unit 20 is similar to the read fingerprint, and the operator is a valid holder of the electronic money card 19. Is determined, and control is performed so as to enable subsequent processing corresponding to the selected processing. If the correlation strength is less than a certain value, it is determined that the fingerprint registered in advance in the IC unit 20 and the read fingerprint are not similar, and the display unit 32 displays that the fingerprint collation does not match, so that subsequent operations cannot be performed. Then, the electronic money card 19 is ejected.

According to such a configuration, it is possible to determine whether or not the operator is a legitimate person based on the physical characteristics of the operator and determine whether or not to permit the electronic money transaction. . Therefore, unauthorized use of electronic money can be effectively prevented.

The technique and circuit for determining the similarity of fingerprints are not limited to the circuit and method shown in FIG. 29, and other techniques may be used. Further, the physical characteristics are not limited to fingerprints, and voice prints, facial patterns, retinal patterns, and the like may be used. When a voiceprint is used, the voiceprint feature data is stored in the IC unit 20, a microphone is arranged in the electronic money terminal 15, voice feature data obtained by the microphone is extracted, and stored in the IC unit 20. The correlation strength with the characteristic data is determined, and when the correlation strength is equal to or more than a certain value, the operator is determined to be a valid person.

When a face pattern, a retinal pattern, or the like is used, feature data of the face and the retinal pattern are stored in an IC.
The electronic money terminal 15 stores a camera, extracts image feature data acquired by the camera,
The correlation strength with the feature data stored in the C unit 20 is determined, and when the correlation strength is equal to or more than a certain value, the operator is determined to be a valid person.

Note that the characteristic data extracted in advance is
It may be stored in the unit 20 or may be stored in the optical storage unit 21. Further, feature data indicating a physical feature used at the time of the transaction may be recorded in the optical storage unit 21 as a part of the transaction history information.

In a system handling electronic money, for example,
Obtain information such as the card ID of the user, and
Fraudulent attempts to gain authentication by impersonating the owner of D can be considered. In order to prevent such misconduct, the security of the communication message or the like can be enhanced by encrypting it using an encryption method such as the RSA method.

In this case, for example, the certificate authority 11 generates and stores a center secret key Ck1 and a center public key Ck2. The certificate authority 11 stores the center secret key Ck1 in the electronic money server 13.
By copying the center secret key Ck1 to the center 1
Share within 0. Further, the certificate authority 11 transmits the center public key Ck2 to each electronic money terminal 15 and the electronic money card 19.
And the like via the electronic money server 13 in advance.

Each electronic money card 19 and the electronic money terminal 15 use the center public key Ck2 to send each information (card ID and personal public key for the electronic money card 19, charge request for the electronic money terminal 15, various kinds of information, etc.). Telegram, etc.)
Is transmitted to the electronic money server 13. The electronic money server 13 decrypts and processes the information using the center secret key Ck1. The electronic money server 13 encrypts the transaction history using the personal public key sent from the electronic money card 19 and transmits the transaction history to the electronic money card 19 via the electronic money terminal 15.

By using such a method, the information from the electronic money card 19 and the electronic money terminal 15 is transmitted to the electronic money server 13 and the certificate authority 1 in the center 10.
1 can be decrypted, and the transaction history from the electronic money server 13 is transmitted to the electronic money card 19 without being referred to by the electronic money terminal 15 and decrypted. Further, security can be further improved by periodically changing the secret key and the public key.

The certificate authority 11 changes the center secret key Ck1 and the public key Ck2 regularly or irregularly, and sends the center public key Ck2 to the electronic money terminal 15, the center secret key Ck1 to the electronic money server 13, and the like. Send each. When the electronic money card 19 is inserted into the electronic money terminal 15 after changing the center secret key Ck1 and the center public key Ck2, the electronic money terminal 15 notifies the electronic money card 19 of the new center public key Ck2.

The encryption method is not limited to the public key method, and a common key method may be used. In this case, it is desirable to enhance the tamper resistance of the electronic money card 19 from the viewpoint of security.

Each time a transaction is performed in this system, a new encryption key (a pair of a secret key and a public key, a common key, etc.) is issued and notified to the electronic money card. May be used for encryption / decryption.

Further, keys may be generated based on random numbers. According to such a system, a key to be issued next cannot be predicted, and leakage of information can be prevented. A key issued in the past and a newly issued key may be combined and used as a key for encryption and decryption. For example, the present key _Kt and the previous key _Kt-1 may be combined, and various information may be encrypted using { _Kt + _Kt-1 } as a key, and further decrypted.

In the electronic money system, a complete copy of the electronic money card 19 itself may be created and illegally used. In order to prevent this kind of illegal use, the electronic money server 13 assigns a unique number to the electronic money card 19 for each transaction, and when the online transaction starts, the electronic money card 19 sends this unique number to the electronic money server. 13 and confirms that it matches the unique number of the electronic money card 19 registered in the electronic money server, and then conducts a transaction. What is necessary is just to comprise so that it may register with the card 19 and the electronic money server 13. According to this configuration, the unique number is updated each time a transaction is made. Therefore, even if a copy of the electronic money card 19 is made, once the transaction is performed, the unique number of the electronic money server except for the one used is changed. 13 and cannot be used. Therefore, unauthorized use by copying the electronic money card 19 can be prevented.

[0222]

As described above, according to the present invention,
Various transactions, such as payment for shopping, can be performed using the electronic money stored in the electronic money card. In addition, since the transaction history is recorded in the write-once type storage unit, it is possible to easily detect an improper act or the like by verifying the recorded contents of the write-once type storage unit. Further, by recording the transaction history even at the center, fraudulent acts can be detected more reliably. In addition, when electronic money is traded, its legitimacy is determined based on the physical characteristics of the operator, so that the reliability of the transaction can be improved.

[Brief description of the drawings]

FIG. 1 is a diagram showing a configuration of an electronic money system according to an embodiment of the present invention.

2A is a diagram showing a structure of a balance table stored in the electronic money server, FIG. 2B is a diagram showing a structure of an accident card list stored in the electronic money server,
(C) is a diagram showing a structure of an accident terminal list stored in the electronic money server.

FIG. 3 is a diagram showing a structure of a transaction history table stored in the electronic money server.

FIGS. 4A and 4B are diagrams illustrating an example of an external configuration of an electronic money terminal.

FIG. 5 is a diagram showing a structure of an account table stored in a bank center.

FIG. 6 is a diagram showing a structure of an electronic money card.

FIG. 7 is a diagram showing an outline of an electronic money charging process.

FIGS. 8A to 8C are diagrams showing display examples of the electronic money terminal.

FIG. 9 is a diagram illustrating a flow of an electronic money charging process.

FIG. 10 is a diagram showing an outline of a personal authentication information issuing process.

FIG. 11 is a diagram illustrating a flow of a personal authentication information issuance process.

FIG. 12 is a diagram showing an outline of electronic money payment processing.

FIG. 13 is a diagram for explaining the flow of electronic money payment processing.

FIG. 14 is a diagram showing an outline of a matching process.

FIG. 15 is a diagram illustrating a flow of a matching process.

FIG. 16 is a diagram illustrating states of an IC unit, an optical storage unit, and a balance table before and after transmission of a non-transmission history in a matching process.

FIG. 17 is a diagram showing an outline of electronic money transfer processing.

FIG. 18 is a diagram for explaining the flow of electronic money transfer processing.

FIG. 19 is a diagram illustrating a flow of electronic money transfer processing between two electronic money terminals.

FIG. 20 is a diagram illustrating an outline of an electronic money cashing process.

FIG. 21 is a diagram for explaining the flow of electronic money redemption processing.

FIG. 22 is a diagram illustrating an example of a configuration of an electronic money system when a certificate authority is not included.

FIG. 23 is a diagram showing a flow of an electronic money charging process when a certificate authority is not included.

FIG. 24 is a diagram showing a flow of electronic money payment processing when a certificate authority is not included.

FIG. 25 is a diagram showing a flow of a matching process when a certificate authority is not included.

FIG. 26 is a diagram showing a flow of electronic money transfer processing when a certificate authority is not included.

FIG. 27 is a diagram showing a flow of electronic money realization processing when a certificate authority is not included.

FIG. 28 is a diagram illustrating an example of a fingerprint reading device.

FIG. 29 is a diagram illustrating a configuration example of a fingerprint matching circuit;

FIG. 30 is a diagram showing a display example of the electronic money terminal at the time of fingerprint collation.

[Explanation of symbols]

 Reference Signs List 10 Center 11 Certificate Authority 13 Electronic Money Server 15 Electronic Money Terminal 19 Electronic Money Card 20 IC Unit 21 Optical Storage Unit 30 Storage Unit 31 Input Unit 32 Display Unit 33 Card Processing Unit 34 Touch Panel 35, 35A, 35B Card Slot 36 Cash Drawer

──────────────────────────────────────────────────続 き Continued on the front page (51) Int.Cl. ⁶ Identification code FI G07D 9/00 456 G07D 9/00 456E 461 461Z (72) Inventor Ichiro Shinkai 3-3-3 Toyosu, Koto-ku, Tokyo (72) Inventor: Toyohiro Kitada, 3-3-3 Toyosu, Koto-ku, Tokyo NTT Data Communication Corporation

Claims (28)

[Claims] At least a first and a second memory for storing information relating to a monetary value, comprising a write-once type storage unit and an IC memory unit.
An electronic money system comprising: an electronic money card, at least first and second terminals that process the electronic money card, and a computer that is connected to the terminal via a communication line and controls the terminal. The write-once type storage unit of the electronic money card stores transaction history information, and the IC memory unit of the electronic money card stores position information indicating the position of the transaction history information stored on the write-once type storage unit. The first terminal into which the first electronic money card is inserted, input means for inputting an electronic money transaction instruction including transfer and a transaction amount; and the IC of the first electronic money card. According to the position information stored in the memory unit, transaction history information including the transaction amount input by the input unit is written in the write-once type storage unit of the first electronic money card. A first writing unit; and a transmission unit configured to transmit a transfer instruction and a transaction amount among the transaction instructions input by the input unit to the computer as a transfer request message, the computer comprising: Means for receiving the transfer request message from the first terminal, and means for transmitting the received transfer request message to the second terminal, wherein the second terminal transmits the transfer request message from the computer. Means for receiving a telegram, and, according to the position information stored in the IC memory unit of the second electronic money card, adding the transaction history information based on the received transfer request telegram to the second electronic money card. An electronic money system, comprising: a second writing unit that writes data in a type storage unit. 2. The first writing means of the first terminal,
2. The electronic money system according to claim 1, wherein writing is performed in response to an instruction from the computer. 3. The first terminal determines whether or not the balance held by the first electronic money card is equal to or greater than the transaction amount input by the input means, and if the balance is less than the transaction amount. 3. The electronic money system according to claim 1, further comprising means for displaying an error message and requesting to cancel the transaction or re-enter the amount. 4. The computer according to claim 1, further comprising: a balance storage unit configured to store a balance of each of the electronic money cards; and a storage amount of the first electronic money card stored in the balance storage unit, from the first terminal. It is determined whether or not the transaction amount included in the transfer request message is equal to or greater than the transaction amount. If the retained amount is less than the transaction amount, an instruction message for instructing to stop the transaction or re-enter the amount is transmitted to the first terminal. The electronic money system according to any one of claims 1 to 3, further comprising: means. 5. The transaction history information includes, for each transaction, a transaction type, a transaction date, information for identifying the terminal that has processed the transaction, and a transaction amount. The electronic money system according to claim 1, further comprising at least one of information for specifying a money card and information for specifying the second electronic money card. 6. The write-once storage unit of the electronic money card stores transaction histories of all transactions made with the electronic money card. An electronic money system according to item 1. 7. The computer according to claim 1, wherein said computer comprises transaction history storage means for storing transaction histories of all transactions made with said electronic money card.
An electronic money system according to any one of the preceding claims. 8. At least one of the write-once type storage unit and the IC memory unit of the electronic money card stores a card identification code of the electronic money card, and the transfer request message includes the first and second transfer messages. The computer including the card identification code of the electronic money card, wherein the computer is configured to store the card identification code of the electronic money card whose use is not permitted as an unauthorized card ID; 4. The apparatus according to claim 1, further comprising means for comparing a card identification code with the fraudulent card ID stored in the fraudulent card ID storage means, and stopping a transaction when a matching fraudulent card ID is detected. 8. The electronic money system according to claim 7. 9. The terminal stores a terminal identification code, the transfer request message includes the terminal identification code, and the computer stores the terminal identification code of the terminal whose use is not permitted as an unauthorized terminal ID. Unauthorized terminal ID
Storage means, and means for comparing the terminal identification code included in the transfer request message with the unauthorized terminal ID stored in the unauthorized terminal ID storage means, and stopping a transaction when a matching unauthorized terminal ID is detected. The electronic money system according to any one of claims 1 to 8, wherein: 10. The electronic money card further includes a certificate authority having a personal information storage unit for storing a personal public key, wherein the IC memory unit of the electronic money card stores the personal public key, and the transfer request The electronic message includes the personal public keys of the first and second electronic money cards, and the computer includes, among the received transfer request electronic messages, the personal public keys of the first and second electronic money cards. And a personal key transmitting means for transmitting the personal public key of the received first and second electronic money cards stored in the personal information storage means. And determining whether or not the transaction matches any one of the following. If not, transmitting a message indicating that the transaction is not possible to the terminal and stopping the transaction, further comprising means for stopping the transaction. Electronic money system according to any one of. 11. The electronic money card further includes a certificate authority having personal information storage means for storing a card identification code, wherein the IC memory unit of the electronic money card stores the card identification code, and the transfer request The electronic message includes the card identification code of the electronic money card, and the computer includes a card identification code transmitting unit that transmits the card identification code to the certificate authority in the received transfer request message. Determines whether the received card identification code matches any of the card identification codes stored in the personal information storage means, and if they do not match, sends a message indicating that the transaction is not possible to the terminal. The electronic money system according to any one of claims 1 to 10, further comprising: means for canceling the transaction. 12. The IC memory section of the electronic money card includes a pair of a personal public key and a personal secret key. The transfer request message includes information on a transaction and the personal secret key of the first electronic money card. , A second authenticator generated using the information relating to the transaction and the personal secret key of the second electronic money card.
And the personal public key of the first and second electronic money cards, and the computer uses the personal public keys of the first and second electronic money cards to generate the first and second electronic money cards. The electronic money system according to any one of claims 1 to 11, wherein a process for collating the second authenticator and performing transfer according to a result of the collation is performed. 13. The transaction history information stored in the write-once storage unit of the electronic money card does not include information for specifying the electronic money card.
3. The electronic money system according to any one of 2. 14. The electronic money system according to claim 1, wherein the first terminal and the second terminal are the same terminal. 15. One of the IC memory unit and the write-once type storage unit of the electronic money card stores characteristic data indicating a physical characteristic of a user, and the terminal includes a physical characteristic of an operator. Acquiring means for acquiring characteristic data indicating the characteristic data, reading means for reading the characteristic data from the electronic money card, and comparing the characteristic data acquired by the acquiring means with the characteristic data read by the reading means. Determining means for determining whether or not they substantially match each other, and enabling the electronic money transaction via the terminal when the determining means determines that they substantially match, and determining that the determining means does not substantially match. The electronic money system according to any one of claims 1 to 14, further comprising: transaction control means for prohibiting electronic money transactions via the terminal when the electronic money is determined. Beam. 16. The write-once type storage section of the electronic money card is constituted by an optical storage section in which pits are physically formed by irradiating light energy to which data is written and which cannot be rewritten. The electronic money system according to any one of claims 1 to 15, wherein: 17. An electronic money system for trading electronic money, which is electronic information having a monetary value, comprising: information relating to the electronic money including at least a balance; and a card identification code for identifying itself. A first storage unit for storing, and a second storage unit for storing a transaction history of the electronic money.
At least a first and a second electronic money card provided with a terminal identification code for identifying itself, the first and the second electronic money cards are attached, 1
Transfer request input means for inputting a transfer request for instructing transfer of a predetermined amount of electronic money from the electronic money card to the second electronic money card, and transfer request transmitting means for transmitting the input transfer request. An electronic money transaction device comprising: a balance storage means for storing the balance of the electronic money card; and a transfer request from the electronic money transaction device,
Means for subtracting a predetermined amount from the balance of the first electronic money card and adding the predetermined amount to the balance of the second electronic money card; transaction history storage means for storing transaction history; Means for transmitting a transaction completion notification to the electronic money transaction device, the electronic money transaction device responding to the transaction completion notification, and store the transaction history in the first and second electronic money cards. Means for writing to said second storage means, and subtracting said predetermined amount from the balance stored in said first storage means of said first electronic money card, Means for adding the predetermined amount to the balance stored in the storage means. 18. The electronic money transaction device determines whether the balance stored in the first storage means of the first electronic money card is equal to or greater than a predetermined amount input by the transfer request input means. And if the balance is less than the predetermined amount,
18. The electronic money system according to claim 17, further comprising means for displaying an error message and requesting to cancel the transaction or re-enter the amount. 19. The computer determines whether the balance of the first electronic money card stored in the balance storage means is equal to or greater than a predetermined amount specified by the transfer request, and determines whether the balance is equal to or smaller than the predetermined amount. 18. The electronic money system according to claim 17, further comprising means for transmitting, to the electronic money transaction apparatus, an instruction message instructing to stop the transaction or to re-enter the amount if the value is less than the following. 20. The electronic money card, wherein the first storage means comprises an IC chip having a memory, and the second storage means comprises a non-rewritable storage medium. The electronic money system according to any one of claims 17 to 19, wherein: 21. The transaction history includes a transaction type, a transaction date, a transaction amount, and the card identification code of the first electronic money card and the card of the second electronic money card. The electronic money system according to any one of claims 17 to 20, further comprising at least one of an identification code. 22. The electronic money card according to claim 17, wherein the transaction history recorded on the electronic money card does not include information for identifying the electronic money card itself.
An electronic money system according to any one of the preceding claims. 23. The electronic money card according to claim 17, wherein said second storage means stores transaction histories of all transactions made with said electronic money card. Electronic money system according to the item. 24. The computer according to claim 17, wherein said transaction history storage means of said computer stores transaction histories of all transactions made with said electronic money card. Electronic money system. 25. The transfer request transmitted by the transfer request transmitting means of the electronic money transaction device includes the card identification codes of the first and second electronic money cards, and the computer authorizes use. A fraudulent card ID storing means for storing the card identification code of the electronic money card as a fraudulent card ID; and a fraudulent card ID storing the card identification code included in the transfer request in the fraudulent card ID storage means. The electronic money system according to any one of claims 17 to 24, wherein the electronic money system can detect an unauthorized electronic money card by comprising: . 26. The transfer request transmitted by the transfer request transmitting means of the electronic money transaction device includes the terminal identification code of the electronic money transaction device, and the computer does not permit use of the electronic money transaction. Comparing the terminal identification code included in the transfer request with the unauthorized terminal ID stored in the unauthorized terminal ID storage unit, wherein the unauthorized terminal ID storage unit that stores the terminal identification code of the device as an unauthorized terminal ID; 18. A means for judging whether or not to perform the transaction, whereby an unauthorized electronic money transaction device can be detected.
26. The electronic money system according to any one of items 25 to 25. 27. A certificate authority for storing a registration list of electronic money cards registered in the electronic money system, wherein the transfer request is a first specification for specifying the first electronic money card. The certificate authority includes data and second specific data for specifying the second electronic money card, wherein the certificate authority registers the first and second specific data included in the transfer request in a registration list. The electronic money system according to any one of claims 17 to 26, further comprising: means for judging whether or not the transaction has been performed, and canceling the transaction if the transaction has not been registered. 28. One of the first storage means and the second storage means of the electronic money card stores characteristic data indicating a physical characteristic of a user. Acquiring means for acquiring characteristic data indicating a physical characteristic of an operator; reading means for reading the characteristic data from the electronic money card; characteristic data acquired by the acquiring means; and characteristic data read by the reading means. And a discriminating means for discriminating whether or not substantially coincide with each other, and when the discriminating means determines that they substantially coincide with each other, enabling the electronic money transaction through the electronic money transaction device, And a transaction control unit for prohibiting electronic money transactions via the electronic money transaction device when the determination unit determines that the two do not substantially match. 7 to 27 electronic money system according to any one of.