JPH10255121A - Electronic money system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To detect dishonesty such as the forgery/alteration of a card in a money payment process or the alteration of sales data in a store, and to ensure security by checking dishonesty from sales data and the data of an electronic money issuing device or the like, totaling a payment sum to the store, and transmitting it to the computer of a bank for a payment processing. SOLUTION: An electronic money issuing server 22 stores/manages data such as security information KW such as the password of a card owner. A sales collection data accepting server 25 receives and stores money data MD paid to a pre-paid card 5 by an electronic money paying machine 23 and sales data SD stored in an electronic money POS terminal. A total settling terminal 26 checks the alternation of data based on the security information KW, sales data SD, and money data MD, totals a payment sum to the store, and transmits transfer data BD to a bank host computer 3 for a payment processing.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an electronic money system using an IC card as a prepaid card, and more particularly, to detecting various kinds of data tampering in the course of money payment by a card storing a monetary value. The present invention relates to an electronic money system capable of ensuring security.

[0002]

2. Description of the Related Art At present, various systems such as a prepaid card system, a credit card system, and a bank POS system have become widespread as cashless systems which enable purchase of goods and use of various services using a card. In recent years, an electronic money system that enables transactions using so-called electronic money has been realized. In these cashless systems, there is a possibility that various fraudulent acts are performed in a process from the time when a user purchases a product to the time when payment is completed.
Therefore, many systems have been developed in which an IC card having higher security than a medium such as a magnetic card is used as a medium for recording monetary value data.

A prepaid card system using an IC card is disclosed in, for example, Japanese Patent Application Laid-Open No. 4-313190. In this system, a bank (bank center system), a user (IC card), and a store (transaction terminal) constitute a prepaid card system,
Each time an IC card is purchased, the sum of the purchases is added to calculate the sum of sales, the data is encrypted using a transaction terminal or a bank key stored in the IC card, and the sum of sales data and its encryption are used. Store the statement in the transaction terminal. From the next time, when calculating the total sales, the previous sales total data is encrypted and compared with the cipher text, or the cipher text is decrypted and compared with the sales total data to determine whether the data has been tampered with. I do. The bank center system checks the total sales data against the cipher text using the same logic as the transaction terminal in response to the settlement request sent from the transaction terminal at regular intervals, and if they match, there is no tampering. And the settlement process is performed. However, in this case, since the store encrypts the data, it is possible for the store to falsify the sales data.

[0004] On the other hand, in an institution other than a bank, IC
As a system in which a payment is made by using a card as a prepaid card, for example, JP-A-5-3
No. 24998 can be mentioned. In this system, a secretariat (host computer) common to member stores is provided, and a reader / writer device capable of communicating with an IC card distributed to a customer is arranged at each member store, and the reader / writer device and the host computer are arranged. It communicates information between them and centrally manages payments. In this system, each customer registers their address and name at the secretariat, receives a prepaid amount and receives an IC card, and the payment is based on the transaction information sent from the affiliated store sent to the host computer. It is performed based on. Further, in addition to the prepaid balance, the balance of accounts receivable and the balance of service points are recorded on the IC card of the customer, so that payment by accounting of accounts receivable and payment from service points can be performed. However, there is no description in this publication regarding the technical contents related to security.

A system in which an IC card is used as a prepaid card so that the prepaid card can be reused by updating the balance of the prepaid card is disclosed, for example, in Japanese Patent Laid-Open No.
-266095. The cashless system described in this embodiment includes a prepaid recorder connected to a bank host computer, a computer of a management company connected to the bank host computer, and a dedicated terminal arranged in each store. Is done. Then, using an IC card that can be read and written by inserting a PIN, connect to the host computer of the bank, enter the PIN, and if OK, transfer from your own bank account to the management company Write a certain prepaid amount to the IC card. When using a card in a store,
After the card is attached to the dedicated terminal and the password is entered, the usage amount is subtracted and the prepaid amount of the card is subtracted.
When the card is loaded, the dedicated terminal is connected to the computer of the management company, and outputs information indicating the usage amount and the store at predetermined intervals.

[0006]

It is disclosed in some publications that in the above-mentioned conventional system, data authentication is performed using personal authentication using a general password or a bank key. However, there is no detailed description of the guarantee against data tampering, and no measures have been taken with respect to security at the store or during data transmission. When applied in an area where the place of use is limited, such as in a company, it can be said that the security is relatively secured even with the conventional system, but when the application is extended to general stores etc. It is important to establish and provide a more secure system that can detect fraud and stop transactions even if some security is broken due to decryption of encryption etc. It can be said that it is a challenge.

The present invention has been made in view of the circumstances described above, and an object of the present invention is to provide counterfeiting / falsification of a card in a cash payment process using a money card storing a monetary value. It is an object of the present invention to provide an electronic money system capable of detecting improper operations such as falsification of sales data and data during transmission, and ensuring security.

[0008]

SUMMARY OF THE INVENTION The present invention relates to an electronic money system using an IC card as a prepaid card, and an object of the present invention is to store a monetary value in an IC card by cash or a postpaid contract. An electronic money issuing device that accepts a personal identification number for use by a purchaser, attaches an issued number, stores the issued number in the IC card, and issues the electronic money issuing device; When purchasing the IC
Electronic money POS for payment processing by card
A terminal, card issuing server means for storing and managing data of the electronic money issuing device, sales collection data receiving server means receiving information from the electronic money POS terminal through a line, and storage of the collected data receiving server means After checking the sales data, the data of the card issuing server means, and the data of the electronic money issuing device for fraud, the payment amount of the corresponding store is totaled and transmitted to the computer of the bank to perform the payment processing. This is achieved by providing a payment computer.

Alternatively, an IC card reader / writer that receives a user IC card, reads a password stored therein, and reads and updates a prepaid amount, a sales amount input means for inputting at least a sales amount,
PIN input means for the user to input a PIN, display means for displaying guidance and the amount entered, storage means for storing sales data for a predetermined period,
When the user's IC card is read out, the prepaid amount is updated when the personal identification number stored in the card matches the user's personal identification number input from the personal identification number input means. Encrypting the user's payment data with an encryption key stored in the card, storing the same information, which is not encrypted, as collected data in the storage means together with the encrypted data, When the IC card is read, the collected data stored in the storage means is encrypted by an encryption program of the IC card owned by the store, and two types of encrypted data are stored as the sales data for the predetermined period. Electronic money POS having a control unit for storing the sales data by making a call to a host computer and transferring the sales data.
This is achieved by providing a terminal.

[0010] Alternatively, a first authentication means for performing personal authentication of a card holder based on a personal identification number of an IC money card input by a user, an encryption program and a first encryption key recorded on the IC money card A first encrypting means for encrypting the usage amount, a second authenticating means for authenticating a handling person by using a password of the store card input by the store person, and a second authentication means recorded on the store card. Second encryption means for encrypting the sales amount with respect to the usage amount using the encrypted program and the second encryption key, and the usage amount and sales amount respectively encrypted by the first and second encryption units. Electronic money POS having transmission means for collectively transmitting a pair of encrypted data of money amount
And a terminal; decrypting the pair of encrypted data from the electronic money POS terminal using first and second release keys registered in advance to confirm a match between the two data, and Based on the deposit amount data from the electronic money deposit machine that rewrites the monetary value data and the decrypted usage amount data, compare the magnitude relationship between deposit and withdrawal for the IC money card and determine the validity of deposit and withdrawal. And a management computer having a fraud detecting means for checking.

[0011]

DESCRIPTION OF THE PREFERRED EMBODIMENTS The present invention has been made so that a prepaid card which has been used with security secured in an area where a place of use is limited, such as in a company, can be used at a nearby affiliated store. is there. When constructing a system that collects sales data from partner stores on the center side and performs payment processing, etc., falsification of sales data at partner stores and falsification of communication data due to data theft over communication, etc. It is necessary to prevent fraudulent activities in all areas where the prepaid card can be used and to ensure the security of the system. In the present invention, a store is first used by encrypting payment data of a customer based on a first encryption key stored in the IC card of the customer, using the IC card as a medium for storing electronic money. To prevent payment data from being tampered with. Next, on the store side, a store-specific IC, such as a store manager, is applied to the data of the collection amount equal to the amount paid by the customer.
The collection data encrypted based on the second encryption key stored in the card is created. These encryptions are performed by an encryption program pre-recorded on an IC card using, for example, a personal identification number input by a card holder as the above-mentioned encryption key. Then, the encrypted collected data and payment data are paired and transmitted as sales data to a server of the management company (sales collected data receiving server) through a communication line such as a public telephone line.

[0012] Here, the management company acts as a proxy for payment to the store side, sells prepaid cards to which the amount can be added and refunded to users, and provides various services such as store-specific benefits and advertisements. An institution, different from a bank. The management company searches the decryption key registered in another server (electronic money issuing server) based on the number of the store of the transmission source, decrypts the decryption key based on the decryption key, and obtains the decrypted data. Then, from the user ID code included in the collected data, an encryption key for each user registered in the separate server is searched, and payment data is decrypted based on the retrieved encryption key. Is stored as billing data. At this point, confirm that the payment data and the collection data match. This prevents data from being falsified and misused by interception at the time of transmission to the management company.

Further, a log of depositing and withdrawing of the user card is recorded by assigning an electronic money ID, and the sales amount of the prepaid card (the amount deposited into the IC card) and the payment by the prepaid card are recorded based on the log data. By checking the magnitude of the amount of money (the amount of money used by the user), a comprehensive check is made as to whether the prepaid card has been tampered with. Further, the confirmation form is sent to the affiliated store, and the total settlement terminal of the management company, if the confirmation at the affiliated store side is 0K, the user's usage amount (that is, the invoice amount of the store) to the bank account of the store. I try to transfer to. As described above, in the present invention, various fraud checks are performed to prevent fraudulent use of the electronic money (IC prepaid card) system due to fraud.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the drawings. FIG. 1 shows an example of the overall configuration of the electronic money system of the present invention. In FIG. 1, a management company (provider) 2 is an affiliated store 1 (1a, 1b,...) Such as a convenience store, a bookstore, and a restaurant.
Issue a prepaid card (electronic money card) 5 that can be used at the same time and add an amount, collect sales data from the affiliated store 1, check for various frauds, and calculate the amount paid to the store. It is an organization that provides services such as transferring money to the bank account of the store. Users of the system are members (students, employees, etc.) of organizations (schools, workplaces, etc .; hereinafter, referred to as “member organizations”) that are members of the management company 2. The prepaid card 5 may be a dedicated card, or an employee card or a membership card may be used as the prepaid card 5. In this example, an IC card in which an encryption program is recorded is used, and the encryption algorithm is DES (data encryption).
ption standard type algorithm.

The electronic money system provided by the management company 2 includes a prepaid card (IC money card: hereinafter, referred to as “IC card”) 5 and a store IC
A card issuing machine 21 for issuing the card 6; an electronic money issuing server 22 for storing / managing data such as security information (such as a password of a card holder and a decryption key of the IC cards 5 and 6) KW; Money deposit machine 23 for depositing money (charging of electronic money)
And an electronic money POS terminal 24 having a payment function by the IC card 5, and the deposit data MD and the electronic money PO deposited into the IC card 5 by the electronic money depositing machine 23.
A sales collection data receiving server 25 that receives and stores the sales data SD accumulated in the S terminal 24, and fraudulent operations such as data tampering based on the security information KW, the sales data SD and the deposit data MD (forgery of the card, POS terminal Falsification of data stored in the server, falsification of transmission data, etc.)
After the check, the total payment amount to the store is totaled, the transfer data BD is transmitted to the computer 3 of the bank, and the total settlement terminal 26 for processing the payment is provided.

An electronic money POS terminal 24 installed at each affiliated store 1 (1a, 1b,...) Is connected to a sales collection data reception server 25 installed at the management company 2 via a public telephone line 7a. , An electronic money depositing machine 23 installed at a predetermined place and other devices (a card issuing machine 21, an electronic money issuing server 22, a sales collection data receiving server 25).
And the total settlement terminal 26) are connected to each other via the dedicated line 7b. In addition, a computer (a personal computer or a center computer such as a company) 4 of a member organization that processes the payroll deduction data PD is connected via the dedicated line 7b as necessary.
Data can also be sent to the computer 4 of this member organization using a storage medium such as a flexible disk.
Furthermore, the tally settlement terminal 26 is connected to the bank host computer 3 via a network 7c using a dedicated line or a public line. In addition, existing P in each affiliated store 1
The OS cash register sales data RD can be manually entered to the electronic money PO
It is input to the S terminal 24. Hereinafter, configuration examples of main parts of the electronic money system according to the present invention will be described.

FIG. 2 shows an example of the configuration of the electronic money charger 23, and FIG. 3 shows an external view thereof. In FIG. 2, an electronic money depositing machine 23 includes a bill depositing unit 232 for receiving bills to be replaced with electronic money and returning change, and an IC card for reading data of an IC card and rewriting electronic money data and the like. A reader / writer 233, a display device 234 equipped with a touch panel for performing operations such as guidance display and depositing, a printer 235 for journal printing of details such as electronic money balance, and a selected during the store guidance display service It is possible to make a reservation or the like by calling the store free of charge, and a telephone 236 for contacting a person in charge when a failure occurs during operation, and a sales collection data receiving server 25 on the management company 2 side. A communication device 237 for online connection with the device, and a control unit 231 including a personal computer for controlling each device are provided. Further, the electronic money charger 23 includes an uninterruptible power supply 40, and each device is connected to a power supply via the uninterruptible power supply 40.

As shown in FIG. 3, a touch panel type display unit 2 is provided on the upper part of the housing of the electronic money depositing machine 23.
34a is provided at a predetermined inclination angle in consideration of operability, and a panel at the front center formed at a predetermined inclination angle similarly to the display unit 234a includes a telephone. 236, a bill receiving portion 232a, a card insertion slot 233a of an IC card (electronic money card), and a journal output port 235a are provided. The electronic money depositing machine 23 in this example has, as main functions, a deposit function by cash payment to the IC card 5, a deposit function by payroll deduction,
It has a transmission function of transmitting cash deposit data and payroll data to a server (sales collection data reception server 25), and a balance inquiry function. In this example, the IC card 5
Is set for each form of payment (cash payment, salary deduction payment), and the amount of money exceeding the limit cannot be deposited. This limit information is written in the IC card 5 at the time of issuing the card. The payment data MD deposited in the user's IC card 5 is transmitted to the sales collection data receiving server 25 once a day or divided at predetermined time intervals, for example, by a closing process by starting a timer. . It should be noted that the electronic money deposit machine 23 does not store the information, and when the deposit operation is completed, the management company 2
And may be stored in the sales collection data receiving server 25. Alternatively, the payment data MD may be collected according to a command from the sales collection data reception server 25 side.

FIG. 4 shows an example of the configuration of the electronic money POS terminal 24, and FIG. 5 shows an external view thereof. In FIG. 4, an electronic money POS terminal 24 includes an IC card reader / writer 242 for reading data from an IC card and rewriting electronic money data and the like, and reading and writing data from a cashless card such as a bank card and a credit card. Card reader / writer 24 for performing
3, a keypad (optical communication numeric keypad) 245 of a cordless type (optical communication type) for inputting a personal identification number by a card holder, and a keyboard 244 composed of function keys, numeric keys, etc. A display device 246 for displaying guidance on operation procedures, a printer 247 for journal printing of payment details and sales details, sales data (encrypted payment data,
And a disk device 248 for recording collected data
And a communication device 249 for online connection with the sales collection data reception server 25 of the management company 2, and a control unit 241 composed of a personal computer for controlling each device.

Then, as shown in FIG. 5, the electronic money P
The front panel at the top of the housing of the OS terminal 24 is formed at a predetermined inclination angle, and the display unit 246a and the operation unit 24
4a, reading unit 2 for cashless cards such as bank cards
43a and a loading section 248a for a recording medium are provided, and a card insertion slot 242a for an IC card (electronic money card) is provided on a front panel at a lower portion of the housing. The journal output port 24 is located at the upper rear of the housing.
7a is provided, and a keypad 245 for inputting a password is further mounted behind the keypad 7a.

The electronic money POS terminal 24 in this example is an online terminal that enables the use of advanced customer information processing services by constructing an online network with a shopping mall office and local information VAN. As a function,
A storage function that encrypts the payment data by the IC card and stores it together with the collected data, a log function that writes the usage history (transaction log of deposit and withdrawal) in the recording area of the IC card, and a collected data by the store-specific IC card encryption program Is transmitted to the computer of the management company 2 (the sales collection data receiving server 25 in this example) together with the payment data as sales data (billing data). In addition, it has a setting function to set service information (benefits such as discount rate) and operation information (bill closing date, etc.) of partner stores, and a journal printing function for sales and the like.
Furthermore, prepaid cards, bank cards (bank POS),
It is equipped with a card processing function for credit cards and service cards that can perform point services.

In the journal of the electronic money POS terminal 24, in addition to the payment details passed to the user, daily tally, the number and amount of use of the prepaid card type, the number of sales, the total of sales, the total of bank card sales, etc. are printed. Is done. The sales data transmission function described above can be used only when the store-specific IC card 6 is used. In this example, a removable disk (flexible disk / rewritable magneto-optical disk, etc.) that can be taken in and out is used as a recording medium of the accumulated file (sales data), and the sales data is transmitted to the management company 2 due to some failure. If not, the recording medium can be sent to the store by carrying it. Transmission of sales data is for store I
It is performed once a day or at predetermined intervals from the electronic money POS terminal 24 in accordance with an instruction from the owner of the C card 6 (such as a store manager).

In the above configuration, first, an operation example of the electronic money deposit machine 23 will be described with reference to the flowcharts of FIGS. The electronic money depositing machine 23 displays, for example, a guide screen of a store where electronic money can be used on the display unit 234a as an initial screen in a standby state (step S1), and when the detailed guide menu of the store is selected. A list of stores by genre is displayed, and when an individual store is selected (step S2), a guidance screen (advertisement or the like) for the individual store is displayed. Then, when the telephone symbol portion displayed together with the guidance of the individual store is touched, the telephone of the store is automatically dialed. This automatic dial function is provided as a part of the service for the user, and when the user goes to the store, the user can talk with the store clerk at the store by telephone 236 for free (step S3). .

On the other hand, if the deposit menu is selected (step S4), a guidance prompting the user to insert an IC card is displayed, and the process waits for the IC card to be inserted (step S5). When the IC card is inserted, the data is read out by the IC card reader / writer 233, and whether or not the user card has been issued by the present system is identified by the ID.
After confirming with the data, guidance for prompting the input of a personal identification number is displayed on the display unit 234a (step S6). When the personal identification number is input, the control unit 231 authenticates the individual by comparing the personal identification number included in the data of the IC card with the input personal identification number (step S7). As shown in FIG. 10, the current electronic money balance, the maximum amount that can be paid, a menu for selecting a payment method, and the like are displayed (step S8).

In this example, there are two types of deposit methods, cash deposit and salary deduction, and the user can select one of them. First, processing when the former is selected will be described. In step S8, cash deposit is selected as the deposit method (step S9),
If money (in this example, bills) has been inserted, the inserted amount is counted and displayed, and a display to input the amount to be deposited into the IC card is displayed (step S10). If the amount to be deposited is entered, it is checked whether the amount is within the limit (step S11), and then a confirmation message of the amount (deposit, electronic money balance after deposit, deposit limit after deposit) is displayed. Confirmation with the user (step S12). If a cancellation instruction has been given in step S12, the card is returned and the operation is terminated (step S13). If a confirmation OK instruction has been given, the electronic money ID is numbered. Here, the electronic money ID is an issue number given each time the electronic money data is rewritten. For example, the cash / payroll deduction, the number specifying the issuing machine, and information indicating the issue date (for example, reference year) A serial number with the day as the first day),
It consists of information such as a serial number for each issuing machine. In this example, the electronic money depositing machine 23 corresponds to an electronic money issuing machine, and the electronic money depositing machine 23 updates the above information and assigns an electronic money ID for each deposit (step S1).
4).

In the deposit area of the IC card, the number indicating the number of deposits, the electronic money ID, the deposit amount, and the balance of the electronic money are recorded as a transaction history.
The balance in the credit card balance area of the C card (the deduction limit from the January salary, the cash use limit in January) and the maximum depositable amount (the salary limit and the cash limit) in the limit area Update. Here, the use history area includes a deposit area and a pay-out area, each of which can record a plurality of transactions, and is used cyclically (step S15). Then, electronic money deposit log data (for example, date of deposit, user ID, electronic money ID, and deposit amount) MD is created and transmitted to the sales collection data receiving server 25 by the transmission function described above. Here, the case of transmitting at the time of payment processing is taken as an example. The deposit log data MD is stored in the storage unit of the sales collection data receiving server 25, and is used in a fraud check process (transaction validity confirmation process) in the tally settlement terminal described later. After the transmission of the deposit log data is completed (step S16), the input amount is compared with the deposit amount to check whether there is change. If there is a change, the change is thrown out and returned. It is stored in a safe (step S17). Then, the journal of the receipt details is output (step S18), the card is ejected and returned (step S19), and the receipt process is terminated.

Next, the payment processing by payroll deduction will be described. Note that the same processing as cash deposit processing will be described in a simplified manner. If payment by payroll deduction is selected as the payment method in step S9, the payment amount specified by the card holder is input to check whether or not the amount is within the limit (step S2).
0), a confirmation message of the amount is displayed, and if the cancellation is instructed, the card is returned to end the operation,
If the confirmation OK has been instructed (step S2
1), an electronic money ID is assigned (step S22), and I
The C card is updated (step S23). Then, the payment log data MD of the electronic money is created and transmitted to the sales collection data receiving server 25 (step S24), and the process proceeds to step S18 to output a journal of the payment details and return the card (step S19). Then, the deposit processing is completed.

Next, an operation example of the electronic money POS terminal 24 will be described with reference to the flowchart of FIG. The electronic money POS terminal 24 displays an initial screen in a standby state,
A selection screen for each function is displayed. Here, description of the setting function of store information and the like, the printing function of various journals, and the payment processing by a general cashless card such as a credit card is omitted, and the payment processing by the IC card 5 and the transmission processing of the sales data are omitted. The (closing process) will be described. First, the payment process will be described.
If payment processing has been instructed in step 30, guidance for prompting insertion of a user card is displayed, and the process waits for insertion of an IC card (step S31). When the user's IC card is inserted into the card insertion slot 233a, the control unit 241 of the electronic money POS terminal 24 outputs
The data is read out by the C card reader / writer 242 (step S32), and after confirming from the ID data whether or not the user card is issued by the present system, guidance for prompting the input of a personal identification number is displayed on the display unit 246a. The cashier passes the password input keypad 245 to the card holder to input a password.

When the personal identification number is input by the card holder, the control unit 241 authenticates the individual by comparing the personal identification number included in the data of the IC card 5 with the input personal identification number (step S33). If the personal authentication is successful, a guidance prompting the user to input the payment amount is displayed.
When the cashier inputs the payment amount (purchase amount of the product) (step S34), if a discount rate is set, the discount amount is calculated, and the payment amount after the discount is calculated. This discount service is set in advance for each store (step S35). Then, the payment amount is compared with the card balance to ascertain whether or not the balance is insufficient (step S36). If the balance is not insufficient, the payment amount is reduced and the IC card is updated. At this time, the balance of the electronic money in the deposit area is updated, and the usage history (the number of times indicating the number of withdrawals, the electronic money I) is stored in the withdrawal area of the IC card.
D, the use date and time and the place of use (store number, etc.) are recorded.

Then, the collection data (each information of the use history, the user ID, etc.) is registered in the storage file (step S37), and the payment data is sent to the IC card to instruct the data encryption. Here, the above-mentioned collection data and payment data have the same contents, and are composed of each piece of information of the above-mentioned use history, a user ID, and the like. In the encryption program recorded on the IC card, the payment data is encrypted using the DES type algorithm using the personal identification number (step S38). The control unit 241 reads the encrypted payment data (step S39), and stores the encrypted payment data SD2 'together with the collection data SD1 as sales data in a storage file as shown in FIG. 11 (step S40). ), And prepares a payment statement, and outputs the journal to the printer 247 (step S)
41), end the payment processing.

Next, the sales data transmission process will be described. In step S30, when the closing request is instructed, guidance for prompting insertion of the store IC card 6 is displayed on the display unit 246a (step S51).
When the store IC card 6 is inserted, the control unit 241 confirms from the ID data whether or not the card is for the store issued by the present system, and then provides guidance for inputting a password (step S52). . Then, the input personal identification number is compared with the personal identification number included in the data of the IC card 6 to authenticate the person in charge of handling (the store person in charge) (step S53). Collected data in ICs in units of one or blocks
Sent to the card 6 to instruct encryption (step S5).
4). In the encryption program of the IC card, the collected data is encrypted using a DES type algorithm using a personal identification number. The control unit 241 reads the encrypted collected data (step S55) and rewrites the collected data in the storage file (step S56). Then, the communication device 249
And online connection with the sales collection data reception server 25 via the server (step S57), and transmits the encrypted collection data SD1 ′ and payment data SD2 ′ as sales data SD as shown in FIG. It is stored in the D / B of the server 25 (step S58). Then, the processing flag of the sales data SD is set to be charged (step S59), and the transmission processing of the sales data is ended.

Next, an operation example of the total settlement terminal 26 is shown in FIG.
With reference to FIG. 14 and FIG. 14, a description will be given along the flowchart of FIG. 14A and 14B show an example of a file configuration of the sales data SD and the deposit data MD stored in the sales collection data receiving server 25, respectively.

The tally settlement terminal 26 performs a process for transferring money to the store for a predetermined period, for example, every month. First, the sales collection data SD1 'and SD2' are read from the sales collection data reception server 25 (step S60). At this point, both data are encrypted. Then, a decryption key (release key) KW1 for each store number is taken out from the electronic money issuing server 22 (step S61), and the recovered data SD1 is decrypted by the recovery key KW1 (step S61).
62). Then, the corresponding user I in the collected data SD1
From the electronic money issuing server 22 based on the password D
Is read (step S63), and the payment data is decrypted using this password KW2 as a key (step S64). Then, the collection data SD1 and the payment data SD2 decrypted by the respective keys are collated to confirm whether or not they match (step S65). If they do not match, the data is operated by the electronic money card or the store side operation. It is determined that the data has been falsified due to falsification or the like, or that an abnormality has occurred in the data due to some other cause. In this case, the problem is investigated based on the detailed output indicating the unmatched part and the like (step S66).

In step S65, if the collected data SD1 and the payment data SD2 match,
Based on the user ID and the electronic money ID, the payment data MD stored in the sales collection data receiving server 25 is read (step S67), and the payment amount and the payment amount are compared with each other with the same electronic money ID to execute the transaction. The validity is confirmed (step S68). If the payment is smaller than the payment with the same electronic money ID, it is determined that there is an abnormality, and step S66
And outputs an error message. On the other hand, step S
If the payment is more than the payment at 68, it is determined that the transaction is normal (step S69), the bank transfer data BD is created (step S70), a confirmation form is sent to the store, and the process is terminated (step S71). It should be noted that the transfer of the transfer data BD to the bank is performed after the confirmation of the store by the confirmation form. If the operation is to transmit the salary deduction data to the affiliated organization, the salary deduction data PD is transmitted to the affiliated organization P.
Send to C4.

In the above-described embodiment, the card issuing machine 21 and the electronic money depositing machine 22 have been described as separate devices, but they may be the same device. The communication line between the affiliated store 1 and the management company 2 is not limited to a public telephone line, but may be a dedicated line.

[0036]

As described above, according to the present invention, the electronic money POS terminal allows the user to use the prepaid I
When the C card is used, the usage amount is encrypted by a user's IC card encryption program, the sales data is further encrypted by using a store card, and a pair of data encrypted by both parties is collectively managed. The card is sent to the company, and the management company decrypts each data using the release key registered first to match the two data and checks the magnitude relationship between deposit and withdrawal, so the card Can provide a safe prepaid system against fraudulent acts such as counterfeiting / alteration, falsification of sales data in a store, and falsification of data during transmission.

[Brief description of the drawings]

FIG. 1 is a block diagram showing an example of the overall configuration of an electronic money system according to the present invention.

FIG. 2 is a block diagram illustrating an example of a configuration of an electronic money deposit machine.

FIG. 3 is a perspective view showing an example of an external configuration of the electronic money depositing machine.

FIG. 4 is a block diagram illustrating an example of a configuration of an electronic money POS terminal.

FIG. 5 is a perspective view showing an example of an external configuration of the electronic money POS terminal.

FIG. 6 is a flowchart for explaining an operation example of the electronic money deposit machine.

FIG. 7 is a partial view of FIG. 6;

FIG. 8 is a flowchart illustrating an operation example of the electronic money POS terminal.

FIG. 9 is a flowchart for explaining an operation example of the tally settlement terminal.

FIG. 10 is an example of a display screen of the electronic money deposit machine.

FIG. 11 is a first diagram illustrating a fraud check method according to the present invention.

FIG. 12 is a second diagram illustrating a fraud check method according to the present invention.

FIG. 13 is a third diagram illustrating a fraud check method according to the present invention.

FIG. 14 is a diagram illustrating an example of a file configuration of sales data and payment data stored in a sales collection data reception server.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 Affiliated store 2 Management company 3 Bank host computer 4 Member organization PC 5 Prepaid card (IC money card) 6 Store IC card 7a, 7b, 7c Communication line 21 Card issuing machine 21 22 Electronic money issuing server 23 Electronic money depositing machine 24 Electronic money POS terminal 25 Sales collection data reception server 26 Total payment terminal 26

Claims (3)

[Claims] 1. An electronic card which stores a monetary value in an IC card by cash or a postpaid contract, receives a personal identification number for use by a purchaser, attaches an issued number, and stores the issued number in the IC card to be issued. A money issuing device, an electronic money POS terminal which is provided at a store or a service providing place of a product and performs payment processing by the IC card when purchasing a product, and stores data of the electronic money issuing device. Card issuing server means for managing, sales collection data receiving server means receiving information from the electronic money POS terminal through a line, sales data stored in the collecting data receiving server means, and data of the card issuing server means After checking for fraud from the data of the electronic money issuing device and the data of the electronic money issuing device, the payment amount of the corresponding store is totaled. An electronic money system comprising: a settlement and settlement computer for transmitting the payment to a computer of a bank for payment processing. 2. An IC card reader / writer for receiving a user IC card, reading a password stored therein, and reading and updating a prepaid amount, a sales amount input means for inputting at least a sales amount, and use. PIN input means for the user to enter a PIN, display means for displaying guidance and the amount entered,
A storage unit for storing sales data for a predetermined period; and when reading out the user IC card, the password stored in the card and the user's password input from the password input unit. When the match is made, the prepaid amount is updated, and the user's payment data is encrypted with the encryption key stored inside the card,
The same information, which is not encrypted, is stored as collected data in the storage unit together with the encrypted data, and when the IC card owned by the store is read, the collected data stored in the storage unit is stored in the store. A control unit that encrypts the data by an encryption program of the IC card owned by the user, stores the two types of encrypted data as the sales data in the storage unit for a predetermined period, and makes a telephone call to a host computer to transfer the sales data. An electronic money system comprising an electronic money POS terminal. 3. A first method for personal authentication of a card holder based on a personal identification number of an IC money card input by a user.
Authentication means, an encryption program recorded on the IC money card, first encryption means for encrypting the amount of use by a first encryption key, and a personal identification number of the store card input by the store clerk A second authentication unit for authenticating the person in charge of the transaction, and a second encryption unit for encrypting the sales amount for the usage amount with an encryption program and a second encryption key recorded on the store card. An electronic money POS terminal having transmission means for transmitting a pair of encrypted data of the usage amount and the sales amount respectively encrypted by the first and second encryption units; and And decrypting the pair of encrypted data using the first and second decryption keys registered in advance to confirm the coincidence of the two data,
Based on the deposit amount data from the electronic money depositing machine that rewrites the monetary value data of the IC money card and the decrypted usage amount data, the size of deposit and withdrawal for the IC money card is compared and received and withdrawn. A management computer having fraud detection means for checking the validity of the money;
An electronic money system comprising: