JPS62293469A - Unit for electronic payment terminal - Google Patents

Abstract

PURPOSE:To prevent the alteration of electronic money and attain the payment between a bank and a person who offers goods and a service by providing a security function and the transfer function of the electronic money in an unit for an electronic payment terminal. CONSTITUTION:The electronic payment terminal unit has the security function such as the check for the legality of an IC card, the check or a password number for a personal certification in the IC card for the payment of a charge by the IC card for the electronic money by as user and the function for transmitting using information such as the abatement of the electronic money in the IC card or shopping information. Further at the time of the completion of an operation, the receiver IP of the electronic money has an automatic communication function with an accounting center of the bank or the like for requesting the electronic money paid from the user for the issuer for the electronic money (bank or the like) and a security response function with the issuer for the electronic money.

Description

[Detailed Description of the Invention] 3. Detailed Description of the Invention [Field of Industrial Application] This invention enables an individual who has enjoyed a service such as shopping or eating and drinking to pay the provider of the service using electronic money. In cases where electronic money is received and received between individuals and business providers, and electronic money transaction information is exchanged between business providers and electronic money issuers such as banks, electronic money The present invention relates to an electronic payment terminal unit having a function of storing information and a security function.

[Conventional technology]

Methods for realizing payments using electronic money have existed for a long time. However, this was only possible if the electronic money issuer and the product or service provider were the same.

An example of this is a telephone card.

FIGS. 6(a) and 6(b) are diagrams showing the method.

Figure 6(a) explains the purchase of a card, where card issuer A sends electronic money (usage availability) of .
Write on card B. Card B is a magnetic card, I
C cards etc. are used.

This "electronic money" is money that can be used only to receive the telephone service provided by card issuer A. Individual C who wants to purchase card B (2) pays the card purchase price to card issuer A and obtains card B. Figure 1(b) explains how to pay for a call using a card. When an individual C wants to make a call, he or she inserts card B into the phone fiD provided by card issuer A and makes the call. . Phone aD checks the validity of card B,
If it is a popular card, it will provide a telephone service, and ■ deduct the power from Card B by the amount of power used.

[Problem that the invention seeks to solve]

The second method is possible because the electronic money issuer and the service provider are the same. If the two are separate, the service provider will need to present the acquired electronic money to the issuer and receive the corresponding amount of cash from the issuer. In this case, an electronic payment terminal unit (hereinafter simply referred to as a unit) that can safely store electronic money acquired by the service provider is required. As a medium that can store electronic money, an external memory such as a hard disk or a floppy disk can be considered. However, in the case of these media, if there is a disk device or a floppy disk device, the stored information can be easily tampered with. For example, fraud occurs when a service provider increases the amount of electronic money and presents it to the electronic money storage unit.

This is because the medium itself does not have a function to prevent unauthorized access from outside.

The object of the present invention is to store electronic money information in a unit, to verify the validity of received electronic money, to prevent tampering with stored electronic money, and to transfer electronic money to a bank, etc. We provide a unit for payment terminals, and by using this unit, it is possible to apply it to various businesses, and it is an electronic payment system that has different electronic money issuers (e.g. banks), product/service providers, and electronic money recipients (IP). The aim is to realize this.

[Means for solving problems]

The electronic payment terminal unit according to the present invention includes a unit control section and an IC for activating the unit control section.
Power - When a business IC card is inserted into the reader/writer and this IC card reader/writer, this business IC
A program loader that reads out a unit control program 1 including the security of the electronic payment terminal from the card, a unit control program storage section that stores the unit control program loaded by the program loader, and an rC card reader during work◆ An electronic money storage unit for deducting electronic money commensurate with the business or service from the user's electronic money IC card inserted into the writer and storing the reduced electronic money, and an electronic payment terminal installer or user. and a business control interface for transmitting and receiving information related to business, and communication for transmitting and receiving information related to computers and Y-Money via the public telephone network; an IJI n department, and a security monitoring department;
These are stored in the same body with a sealed structure, and if there is unauthorized activity from outside or a power cut, the unit control program stored in the unit control program storage section will volatize, and only the business IC card can be used. The configuration is such that the unit control section is activated.

[Effect]

In this invention, the IP is connected to the business IC at the start of business.
By inserting the card into the IC card reader/writer of the unit, a program loader within the unit loads a program from the IC card and stores it in the volatile memory.

Next, when a user attempts to pay a fee using an electronic money IC card, the validity of the IC card is checked, and security functions such as checking the personal identification number for personal authentication inside the IC card are performed. , and counters unauthorized use of IC cards.

It also has a function of transmitting usage information such as electronic money reduction and purchase information in the IC card to the IC card and storing it in the electronic money storage section in the unit.

In addition, at the end of the business, the IP has automatic communication* with a billing center such as a bank in order to bill the electronic money issuer (e.g. bank) for the electronic money paid by the user.
In addition, an electronic money issuer such as a bank has its IP registered and has a security response function with the electronic money issuer for mutual authentication to identify whether it is a legitimate electronic payment terminal. After that, clear the data in the electronic money storage section,
When the power is cut off, the unit control program is volatilized.

And it corresponds to methods such as prying the rod body from the outside,
Furthermore, when the electronic payment terminal is stolen, the program in the volatile memory is volatilized by turning off the power, resulting in an inoperable state. This prevents leakage of the internal security mechanism and falsification of electronic money storage information, which will be described later.

〔Example〕

FIG. 1 is a block diagram showing an embodiment of the present invention.

In this figure, 1 is a unit control unit consisting of a CPU, 2 is a program loader consisting of a ROM etc. for loading programs from the outside, and 3 is a volatile memory such as a RAM for storing loaded programs. 4 is an electronic money storage section consisting of a non-volatile memory such as EEFROM which is stored in the device for fee payment; 5 is an IC for loading the program and an IC owned by the user; An IC card reader/writer for deducting electronic money from a card, 6 is a business control interface for exchanging usage fees and purchasing information from the IP when operating the IF, 7 is an electronic money issuer such as a bank When requesting the amount of money commensurate with the electronic money stored in the unit, the communication city control unit 8 is configured to communicate via the public telephone network. 9 is a power supply for the unit, and 10 is a specimen containing these 1 to 9. 100 indicates a unit of this invention.

FIG. 2 shows the relationship between the electronic payment terminal and the unit. In this figure, 200 is an electronic payment terminal, which includes a business execution unit 60 such as PO3, and a unit 100 of the present invention.
has. 70 is a public telephone network.

FIG. 3 is a diagram showing the interaction between the IC card reader/writer 5 and the outside, where 51 indicates the unit control unit 1 at the start of work.
Business IC card for activating (Figure 1), 5
Reference numeral 2 denotes an electronic money IC card owned by the user and storing electronic money for payment of charges.

FIG. 4 is a diagram showing the interface between the business control interface 6 and a terminal such as PO3 for IP to use for business, where 61 is the business control main body (CPU), and 62 is the interface for displaying the usage amount and for business execution. L Helping indicator, 63
Reference numeral 64 indicates a key input unit used to input the amount of money to be spent manually and the user's password, and 64 is a simple printer that prints out so-called receipts.

FIG. 5 is a diagram showing communication means between the communication city control unit 7 and the electronic money issuer according to the present invention, where 7o indicates the aforementioned public telephone network and 71 indicates the electronic money issuer (in the figure, a bank center).

Next, using FIGS. 1 to 5, the operation will be explained in terms of security measures: at the start of the job, during the job, after the job is finished, and security measures.

[At the start of business]

The IP inserts the business IC card 51 into the IC card league writer 5 as a means for activating the unit control section 1. At this time, the program loader 2 has a security check function to check whether the inserted IC card 51 is legitimate.
mutual authentication and the personal ID of the IP are performed via the key human power section 63, and if the validity is confirmed, the unit control program in the business IC card 51 is loaded and stored in the unit control program storage section 3. do. This unit control program storage section 3 is a volatile memory, for example, R
It is composed of an AM, and the contents stored inside immediately volatilize when the power supply from the power supply 9 is stopped. That is, the unit control section 1 functions as the unit 100 only after the unit control program is stored in the unit control program storage section 3, and it is necessary to perform the above operations at the time of starting, thereby preventing unauthorized acts by outsiders.

[During work]

When a user pays a fee using electronic money in return for enjoying a service such as shopping or eating and drinking, the user inserts the electronic money IC card 52 into the IC card reader/writer 5 as shown in FIG. 3, as described above. The program in the unit control program storage section 3 checks the validity of the inserted IC card 52, and starts sending and receiving information to and from the business execution unit 6o via the business control interface 6, as shown in FIG. . Further, it is determined whether the cardholder is the true cardholder based on the PIN number from the key human power section 63, and if it is valid, the process moves on to the next process, and if it is invalid, the IC card 52 is transferred to the IC card reader/writer. 5 is also discharged.

Upon termination of the service, the IP inputs shopping information, dining information, and usage fees from the display key human power section 63, and the business control main body 61 displays guidance to the user and IP on the display 62 and confirms with the key human power section 63. information is sent to the business control interface 6 while

The unit control unit 1 transmits the information sent from the business execution unit 60 to the electronic money IC card 52 inserted in the IC card league writer 5, and
2 confirms that the electronic money equivalent to the usage fee has been subtracted from the electronic money storage area in the card, notifies the user and IP of the end of usage via the business control interface 6, and then sends the electronic money IC card 52 is discharged from the IC card league writer 5, and the electronic money is added to the electronic money storage section 4.

[After work]

When the IF finishes its work, the unit control section 1 activates the communication city control section 7 and transfers the electronic money stored in the electronic money storage section 4 to the public telephone network 70 as shown in FIG.
, the bank center 71 performs mutual authentication with the unit control unit 1, the unit control unit 1 is registered with the bank center 71, and the IP is used for electronic payment. After determining whether the user owns the terminal, the electronic money is received. These programs are stored in the unit control program storage section 3 described above.

On the other hand, the unit control section 1 transfers the electronic money to the bank center 72.
After sending it to , clear the contents of the electronic money storage section 4,
After the power is turned off, the internal program in the unit control program storage section 3 is automatically volatilized.

[Security measures]

In order to prevent electronic money from being improperly charged to electronic money issuers such as banks, or to prevent electronic money from being stolen or
A security monitoring section 8 is installed in the casing 1o of the unit 100 so that software algorithms related to internal security are not viewed and communication means and information encryption methods are not leaked. The security monitoring section 8 monitors the housing 10 and other parts of the unit 100 for abnormalities using various sensors. For example, if the interior of the casing 10 is structured to prevent light from entering, by arranging a light sensor, the security unit 8 will be able to detect an abnormality if the unit 100 is illegally opened. , instructs the power supply 9 to forcibly realize a power-off state in the unit 100, and automatically volatilizes the contents of the memory of the unit control program storage section 3 and the inside of the electronic money storage section 4. , can achieve the desired purpose.

〔Effect of the invention〕

The electronic payment terminal unit of this invention includes: ■ an IP that operates the unit in the unit, an electronic money user (user), an electronic money requester (an electronic money issuer, such as a bank or credit card company); applicable), and a function to confirm the authenticity of the electronic money itself, ■Electronic money storage function, (ΦSecurity execution function to prevent electronic money tampering, ■Automatic communication function to the public telephone network and electronic money issuer e-money information and communication functions, ■ business execution units necessary for IP to carry out business (e.g.
It has the following advantages:

(1) The electronic money recipient (IP) can safely store the electronic money received from the user in connection with the provision of services.

(2) Electronic money issuers can prevent electronic money recipients from tampering with electronic money.

(3) Anyone who owns an electronic money IC card can enjoy the service by transferring electronic money between the IC card and the unit.

(4) Since the unit is configured separately from the units related to business, the IP can be set to zero for the parts related to business by simply matching the interface and protocol with the unit.

(5) Since the unit has various security functions, mutual authentication of IC cards, e-money, users, IFs, e-money issuers, etc., and encryption of communication are provided to prevent theft and IP and user fraud. It is possible to guard security algorithms related to

(6) The electronic money storage unit is composed of non-volatile memory,
Information will not be lost even in unexpected situations such as power outages.

[Brief explanation of the drawing]

FIG. 1 is a block diagram showing an example of the configuration of a unit of the present invention, FIG. 2 is a schematic configuration diagram showing the relationship between the electronic payment terminal and the unit, and FIG. 3 is a diagram showing interaction between the IC card reader/writer and the outside. , Figure 4 shows the business control interface and I
A diagram showing an interface with an electronic payment terminal that P uses for business, Figure 5 is a diagram showing the communication f stage between the communication city control department and the electronic money issuer according to this invention, and Figure 6 is a diagram showing the electronic money It is a diagram showing a payment method when the issuer and recipient are the same. In the figure, 1 is a unit control unit, 2 is a program loader, and 3
is the unit control program storage section, 4 is the electronic money storage section, 5 is the IC card league writer, 6 is the business control interface, 7 is the communication city control section, 8 is the security monitoring section, 9 is the power supply, and 1o is the rod. 51 is a business IC card, 52 is an electronic money IC card, 60 is a business execution unit, 70 is a public telephone network, 100 is a unit, 200
is an electronic payment terminal. Figure 1 Figure 2 Figure 3 Figure 5

Claims (1)

[Claims] An electronic payment terminal that performs offline payment using electronic money stored in a card includes a unit control section, an IC card reader/writer for activating this unit control section, and a business-use IC card reader/writer for this IC card reader/writer. a program loader that reads a unit control program including security for the electronic payment terminal from the business IC card when an IC card is inserted; a unit control program storage section that stores the unit control program loaded by the program loader; , an electronic money storage unit for deducting electronic money commensurate with the business or service from the user's electronic money IC card inserted into the IC card reader/writer during business, and storing the reduced electronic money; A business control interface for transmitting business-related information to and from the electronic payment terminal installer or user, a communication city control unit for transmitting and receiving information regarding electronic money to and from the computer via the public telephone network, and security monitoring. The unit control program stored in the unit control program storage section is stored in the same case with a sealed structure, and the unit control program stored in the unit control program storage section is stored in the unit control program storage section due to unauthorized acts from the outside or power cutoff. . A unit for an electronic payment terminal, characterized in that the unit control section is activated only by the business IC card.