KR19980029426A - How to Ensure Anonymity in Electronic Money Payments - Google Patents

Abstract

1. TECHNICAL FIELD OF THE INVENTION

How to guarantee the anonymity of payments in the electronic money payment system

2. The technical problem to be solved by the invention

In the generation of the unique number, the face and the unique number of the electronic money can be recognized only by the unique number management subsystem.In the issuance of the electronic money, the face and owner of the electronic money can be recognized only by the electronic money issuing subsystem. By removing the ability to identify the issuer and electronic money from the functions of the components of the payment system, it is intended to provide an anonymity guarantee method for electronic money payments that guarantees anonymity to the owners of electronic money.

3. Summary of Solution to Invention

The unique number management subsystem recognizes the face value and the unique number of the electronic money, and the electronic money issuing subsystem is configured to separate the face and owner of the electronic money, but the first step of interworking the two systems using a session key. ; A second step of analyzing a movement type of the electronic money generated by the user; A third step of withdrawing an amount of money from the issuer's bank account and issuing electronic money while ensuring anonymity of the issuer's possession; A fourth step of depositing a predetermined amount of electronic money in the destructor's bank account to extinguish the electronic money; And a fifth step of moving the electronic money corresponding to the predetermined amount from the payer to the receiver.

4. Important uses of the invention

Used to prevent crime in telemarketing.

Description

How to Ensure Anonymity in Electronic Money Payments

The present invention constitutes an electronic money payment system for solving the problem of anonymity and dual currency for the owners of electronic money generated by transferring money commonly used in the real world into a computer network environment, and payer / recipient Anonymity of the electronic money payment guaranteeing the anonymity of the owner when the electronic money is transferred to payment of electronic money between the bank, the issuance of the electronic money due to the withdrawal of the bank account of the issuer, and the destruction of the electronic money due to the deposit of the bank account of the destructor. It is about a guarantee method.

The key terms used in the present invention, session key, public key, and secret key, are described below.

Encryption of a message interworking between two nodes can be divided according to key distribution. There is a session key that only two nodes can encrypt / decrypt a message by assigning a private key to each access code between two nodes.As a pair of public and private keys are distributed to each node, the message is encrypted with the public key. Perform decryption. The public key is open to all nodes so that the node that wants to send a message encrypts the message with the public key of the receiving node, and the receiving node decrypts the received message with a secret key that only the node knows.

Due to the development of information and communication services, researches on telemarketing, which conducts commerce of order / sale / payment of goods in the network, are being actively conducted. However, as the payment function is included in an open communication environment, the contents of commerce are leaked due to cooperation between the elements of the telemarketing system, which may be misused as a cause of crime.

Electronic money represented by unique number and face value, like real world money, is treated as data on a computer network, so double currency should be prevented and anonymity of the owner of electronic money must be guaranteed.

However, in the existing payment system for electronic money, the electronic money is assigned a unique number to prevent double currency, but since the unique number is generated in the same subsystem, the electronic money is issued and delivered to the user who requested it. There is a problem that only the anonymity of electronic money can be provided with limited ability to recognize the owner of the money.

The present invention devised to solve the above problems, the unique number generation and the unique number in the generation of the unique number, so that only the unique number management subsystem can be recognized, and in the issuance of electronic money, the face and owner of the electronic money electronic money Anonymity of electronic money payments ensures anonymity for the owner of electronic money by removing only the issuer and the ability to identify electronic money from the functions of the components of the electronic money payment system. Its purpose is to provide a guarantee method.

1 is a configuration diagram of an electronic money payment system for guaranteeing anonymity to which the present invention is applied;

Figure 2a to 2g is a flow chart for each type of money transfer according to anonymity guarantee of electronic money payment in the present invention.

* Explanation of symbols for main parts of the drawings

101: user A 102: user B

103: communication processing subsystem 104: unique number management subsystem

105: Electronic money issuance subsystem 106: Bank

In order to achieve the above object, the present invention provides a method for ensuring the anonymity of the electronic money payment system applied to the electronic money payment system, in order to ensure the anonymity to the owner of the electronic money unique number management subsystem is electronic money Recognizing the face value and the unique number of the electronic money issuing subsystem is configured to separate the face and owner of the electronic money, the first step of interworking the two systems using a session key; A second step of analyzing a movement type of electronic money generated by a user connected to the communication processing subsystem; A third step of issuing an electronic money by withdrawing a certain amount from the issuer's bank account while ensuring the anonymity of the ownership of the issuer if the type analysis result of the second step is a request for issuing the electronic money; A fourth step of extinguishing the electronic money by depositing a predetermined amount of electronic money into the destructor's bank account if the result of the type analysis of the second step requires the extinction of the electronic money; And a fifth step of moving the electronic money corresponding to a predetermined amount from the payer to the receiver if the result of the type analysis of the second step is a payment request of the electronic money.

Hereinafter, with reference to the accompanying drawings will be described an embodiment according to the present invention;

1 is a configuration diagram of an electronic money payment system for guaranteeing anonymity to which the present invention is applied. In the drawings, reference numeral 101 is user A, 102 is user B, 103 is a communication processing subsystem, 104 is a unique number management subsystem, 105 denotes an electronic money issuing subsystem and 106 denotes a bank.

The user A 101 and the user B 102 are connected to the communication processing subsystem 103 to cause money transfer of electronic money, the communication processing subsystem 103, the unique number management subsystem 104, and the electronic money. The issuing subsystem 105 is interworked with the network, and the bank 106 is interworked with the electronic money issuing subsystem 105 in a dedicated line to provide a conversion function between electronic money and real world currency.

Only the unique number management subsystem manages electronic money expressed as a decryptable form of unique number and face value with a unique number database, so that illegal creation and forgery of illegal electronic money can be found instantaneously to prevent double currency. . In the electronic money settlement system for guaranteeing anonymity of the present invention, the movement of money is classified into issuance, extinction, and payment of electronic money to perform a function of moving electronic money desired by a user.

2A to 2G are flow charts for each type of money movement according to the anonymity guarantee of the electronic money payment in the present invention, which are generated by the user A 101 and the user B 102 in the electronic money payment system of the present invention. A flow chart showing each type of movement by classifying monetary movements into issuance, extinction, and payment.

The communication processing subsystem 103, the unique number management subsystem 104, the electronic money issuing subsystem 105, and the bank 106, which constitute the electronic money billing system, are transitioned to the execution state by system initialization and settled. Wait for the event to be processed (201). When User A 101 and User B 102 connect 202 to the communication processing subsystem 103 and generate a requirement to move the electronic money (203), the requirements for the movement type of electronic money are analyzed. In step 204, the electronic money issuance request 205, the electronic money extinction request 206, and the electronic money payment request 207 are performed, and then the desired request result is received and output (208).

The flow of electronic money movement of issuance, extinction, and payment of electronic money generated by a user will be described in detail with reference to FIGS. 2B through 2G.

2B and 2C show a process in which user A 101 becomes an issuer, withdraws a certain amount of money from his bank 106 and issues and owns electronic money E. FIG.

The issuer 101 records the bank transaction information such as bank account number, password, and withdrawal amount W1 in the message M1 (209) so that the electronic money issuing subsystem does not know the originator's bank account. Encrypt with a public key of (210). On the other hand, the amount W2 to be issued in the other message M2, the identifier of the bank of the bank and the issuer's own identifier are recorded (211), so that the M2 is encrypted with the public key of the electronic money issuance so that the unique number management subsystem cannot know the issuer and the bank of the transaction. (212). A session key is generated to record the session key and the face value W3 of the electronic money in the message M3 (213). At this time, the session key is used for decryption only between the unique number management subsystem 104 and the issuer 101.

Message M1, M2, and M3 are written to message M4 (214) and M4 is encrypted with a unique number management public key (215), then message M4 and issuance are recorded in message M5 (216) and M5 is communicated to the processing subsystem 103. To the server (217). The communication processing subsystem 103 receives the message M5 (218), stores it in a log file (219), and transmits M4 to the unique number management subsystem 104 (220).

The unique number management subsystem 104 receives the message M4 (221), decrypts it with its own unique number management secret key (222), extracts M1, M2, M3 from the message M4 (223), and uniques the face value W3 of M3. Generate the number S1 (224). After the generated unique number S1 is encrypted with a unique number management public key (225) and again with the issuer's session key (226), the message M1, M2, M3 and the double-encrypted S1 and the face value W3 and the issue are recorded in the message M6 (227). ) M6 is encrypted with the electronic money issuing public key (228) and transmitted to the electronic money issuing subsystem 105 (229).

Upon receiving the message M6 (230), the electronic money issuing subsystem 105 decrypts it with its own electronic money issuing secret key (231) to extract the message M1, M2, the double-encrypted unique number S1, and the face value W3 (232). Subsequently, issuer A101 verifies the identity of issue amount W2 and face value W3 to be issued (233) and if different, records the difference between issue amount and face value in message M10 (234) and encrypts M10 with issuer public key (242). Send to the issuer (243). If W2 and W3 are the same, the bank transaction information and withdrawal amount are the contents of M1 encrypted with the bank's public key, requesting the bank designated as the bank identifier of M2 to withdraw the amount of W2, and receive the result (235). After verifying the withdrawal contents in the issuer 101's account (236), in case of failure, the cancellation of S1 generated in the unique number management subsystem 104 is transmitted (240) and after the withdrawal history is recorded in M10 (241). M10 is encrypted with the issuer public key (242) and transmitted to the issuer (243). At the time of withdrawal success, S1 generated in the unique number management subsystem 104 and the face value W3 are returned to the unique number management database to perform registration processing (237), and the electronic money E is transferred to the double-encoded unique numbers S1 and W3. It is issued (238) and E is recorded in message M10 (239) and M10 is encrypted with the issuer public key (242) and sent to the issuer (243).

2D and 2E illustrate a process in which user A 101 becomes a destructor of electronic money E and deposits and destroys electronic money E from his bank 106.

The destructor 101 records the electronic money E consisting of the face value W1 and the unique number S1 encrypted with the unique number management public key in the message M11 (244) and encrypts it with the unique number management public key (245). The destructor 101 records the bank transaction information such as its bank account and password and the deposit amount W2 in the message M12 (246) and encrypts it with the public key of the bank (247). In message M13, the face value W3 of the electronic money E to be extinguished, the destructor identifier, and the transaction bank identifier are recorded (248). After writing messages M11, M12, and M13 in message M14 (249), M14 is encrypted with an electronic money issuance public key (250). M14 and extinction are recorded in message M15 (251) and then sent to communication processing subsystem 103 (252). The communication processing subsystem 103 receives the message M15 (253), stores it in a log file (254) and sends M14 to the electronic money issuing subsystem 105 (255).

Upon receipt of M14 (256), the electronic money issuing subsystem 105 decodes it with its own electronic money issuing secret key (257), extracts the messages M11, M12, and M13 (258), and then sends the M11 to the unique number management subsystem 104 (M11). Transmit (259). The unique number management subsystem 104 receives M11 (260), decrypts it with its own unique number management secret key (261), and retrieves the electronic money E from the unique number management database to determine the registered unique number (validity). Verify and record the details in M16 (262) and transmit M16 to electronic money issuing subsystem 105 (263).

The electronic money issuing subsystem 105 receives M16 (264) to determine whether the electronic money E is valid (265) and if it is not valid, writes the invalidity in the message M20 (267) and then replaces M20 with the public key of the destructor 101. Encrypted (276) and sent to the destructor 101 (277). If valid, the face value W1 of the electronic money E is compared with the face value W3 (266), and if they are not the same, the message M20 records the different details of W1 and W3 (269) and then encrypts M20 with the public key of the destructor 101 (276). And transmits it to 101 (277). If the face value is the same, the bank identifier of M13 identifies the trading bank of the destructor 101, requests that the face value W3 be deposited to the user account of M12, and receives the result (268). If the result of the payment processing is determined (270) and the result is impossible to deposit, the details of the deposit processing error are recorded in M20 (272), and M20 is encrypted with the public key of the destructor 101 (276) and transmitted to the destructor 101 (277). ). If the result is payable, the face value W3 and the deposit amount W2 are compared (271), and if different, the different details of W2 and W3 are recorded in M20 (273), and then M20 is encrypted with the public key of the destructor 101 (276). And transmits it to 101 (277). If W2 and W3 are the same, that is, the face value W1, the deposit amount W2, and the face value W3 of the electronic money E are all the same and the deposit processing is completed in the destructor 101's transaction bank, the unique number of the electronic money E in the unique number management subsystem 104 is completed. After deleting S1 (274) and recording the fact that it disappeared by the deposit of the electronic money E (275), M20 is encrypted with the public key of the destructor 101 (276) and transmitted to the destructor 101 (277).

2F and 2G illustrate a payment process in which user A 101 becomes a payer and user B 102 becomes a recipient in the process of moving electronic money E1.

The payer 101 records the electronic money E1 consisting of the face value W1 and the unique number S1 encrypted with the unique number management public key and the payment amount W0 in the message M21 (278) and encrypts M21 with the recipient public key (279). The payer 101 records 280 the message M21, the recipient identifier, and the payment in the message M22 and sends it to the communication processing subsystem 103 (281). The communication processing subsystem 103 receives the message M22 (282), stores it in a log file (283), and sends M21 to the recipient 102 (284).

Upon receipt of M21 (285), the recipient 102 decrypts it with its recipient secret key (286), extracts the electronic money E1 and the receipt amount W0 from M21 (287), and sends E1 to the unique number management subsystem 104 ( 288). When the unique number management subsystem 104 receives the electronic money E1 (289) and decrypts it with its own unique number management secret key (290), it extracts the unique number S1 and the face value W1 from the electronic money E1 (291). Then, the unique number management database is searched with S1 and W1 (292), the search history R1 and face value W1 are recorded in message M23 (293), and M23 is encrypted with the recipient's public key (294) and transmitted to the recipient (295). .

Upon receipt of the message M23 (296), the recipient 102 decrypts M23 with its recipient secret key (297), extracts the search history R1 and the face value W1 (298), and determines whether the search history R1 is successful (299). If R1 is a search failure, after recording the search failure details (invalidity) of E1 in M30 (301), M30 is encrypted with the payer public key (315) and transmitted to the payer 101 (316). If the search history R1 is successful, it is determined whether the payment value W0 and the face value W1 of the electronic money E1 are the same (300). If the difference is different, the difference between the payment amount and the face value is recorded in M30 (302), and then M30 is encrypted with the payer public key ( 315. Send to the payer 101 (316). If the payment value W0 and the face value W1 of the E1 are the same, the session key between the electronic money E1 and the change and the unique number management subsystem 104 is recorded in M24 (303) and transmitted to the unique number management subsystem 104 (304). ).

Upon receiving the message M24, the unique number management subsystem 104 decrypts the electronic money E1 with its own unique number management secret key (306) and deletes the electronic money E1 from the unique number management database (307). Subsequently, after generating a new unique number S2 (308) and encrypting S2 with its own unique number management public key (309), S2 is re-encrypted (310) with the recipient key. After generating a new electronic money E2 with the face value W1 and the double-encrypted unique number S2 and inserting it into the unique number management database (311), the E2 is encrypted with the recipient's public key (313) and transmitted to the recipient 102. Further, after recording the E1 payment success in M30 (314), M30 is encrypted with the payer public key (315) and transmitted to the payer 101 (316).

The present invention described above is capable of various substitutions, modifications, and changes without departing from the spirit of the present invention for those skilled in the art to which the present invention pertains, and the above-described embodiments and accompanying It is not limited to the drawing.

The present invention as described above separates the function of generating / deleting a unique number from the management function of generation / destruction of electronic money and configures the unique number management and electronic money issuance as an independent subsystem, and the issuer issues a session key with the unique number server. Anonymity can be guaranteed to the owner of electronic money by excluding the identification function of the electronic money from the unique number management / electronic money issuing subsystem, and thus, from the unique number management subsystem and the electronic money issuing subsystem to the owner, By providing anonymity of money, there is an effect to prevent the misuse of crimes caused by the pursuit of money, such as commerce in real world currency.

Claims (16)

In the method of guaranteeing the anonymity of the electronic money payment system applied to the electronic money payment system, the unique number management subsystem recognizes the face value and the unique number of the electronic money in order to guarantee the anonymity of the owner of the electronic money. The currency issuance subsystem is configured to recognize the owner and the face value of electronic money, the first step of interworking the two systems using a session key; A second step of analyzing a movement type of electronic money generated by a user connected to the communication processing subsystem; A third step of issuing an electronic money by withdrawing a certain amount from the issuer's bank account while ensuring the anonymity of the ownership of the issuer if the type analysis result of the second step is a request for issuing the electronic money; A fourth step of extinguishing the electronic money by depositing a predetermined amount of electronic money into the destructor's bank account if the result of the type analysis of the second step requires the extinction of the electronic money; And a fifth step of moving the electronic money corresponding to a predetermined amount from the payer to the receiver if the result of the type analysis of the second step is a payment request of the electronic money. 2. The method of claim 1, wherein the second step comprises: the communication processing subsystem, the unique number management subsystem, the electronic money issuing subsystem, and a bank transitioning to a running state by system initialization and waiting for an event to be processed for payment. ; Receiving an electronic money movement requirement from the user through the communication processing subsystem; And analyzing the requirements for the movement type of electronic money, and performing the functions in the third to fifth steps according to the request for issuing electronic money, requesting the extinction of electronic money, and requesting payment of electronic money, and then receiving the desired request result. Anonymity guarantee method of electronic money payment, comprising the step of outputting. The method of claim 1, In the third step, the bank transaction information is encrypted with a bank public key so that the electronic money issuing subsystem cannot know the bank account of the generator, and the bank and the issuer are not allowed for the unique number management subsystem to know the issuer and the bank. A sixth step of encrypting the identifier of the digital currency with the electronic money issuance public key and transmitting it to the communication processing subsystem; A seventh step of receiving the contents of the electronic money, the communication processing subsystem storing the data in an encrypted form and then transmitting the encrypted money to the unique number management subsystem; The unique number management subsystem, which has received the contents of the electronic money from the communication processing subsystem, generates a unique number, encrypts it with a unique number management public key, double-encrypts it with the issuer's session key, and transmits it to the electronic money issuing subsystem. 8 steps; And the electronic money issuing subsystem that receives the contents of electronic money from the unique number management subsystem, compares the face value of the electronic money with the issued amount, and if the same is the same, withdraws from the real world bank after verifying the withdrawal history. And an ninth step of issuing the electronic money and notifying the issuer of the error if the face value and the issued amount are not the same or withdrawal fails. The method of claim 3, wherein in the sixth step, the issuer records bank transaction information such as his / her bank account number and password and the withdrawal amount W1 in the message M1 so that the electronic money issuing subsystem can know the generator's bank account. Encrypting the message M1 with the trading bank's public key such that it is not present; Encrypting the message M2 with the electronic money issuance public key so that the amount number W2 to be issued in the message M2, the identifier of the trading bank, and the issuer's own identifier are recorded so that the unique number management subsystem does not know the issuer and the trading bank; Encrypting the message M4 with the unique number management public key by recording the message M1, M2, and M3 into the message M4 after recording the session key and the face value W3 of the electronic money generated by generating the session key in the message M3; And recording the message M4 and the publication in the message M5 and sending the message M5 to the communication processing subsystem. The method of claim 4, wherein the seventh step comprises: receiving and storing a message M5 in a log file in the communication processing subsystem; And sending a message M4 to the unique number management subsystem. The method of claim 5, wherein in the eighth step, the unique number management subsystem receives the message M4, decrypts it with its own unique number management secret key, and then extracts the message M1, M2, M3 from the message M4 to determine the face value of the message M3. Generating a unique number S1 of W3; Encrypting the generated unique number S1 with a unique number management public key and re-encrypting with a session key of the issuer; And encrypting the message M1, M2, M3, the double-encrypted S1, the face value W3, and the issue in the message M6, then encrypting the message M6 with an electronic money issuance public key and transmitting it to the electronic money issuance subsystem. How to ensure the anonymity of electronic money payments. The method of claim 6, wherein in the ninth step, when the electronic money issuing subsystem receives the message M6, the electronic money issuing subsystem decrypts it with its own electronic money issuing secret key to extract the messages M1 and M2, the double-encoded unique number S1 and the face value W3. Verifying the identity of issue amount W2 and face value W3 to be issued by the issuer; As a result of the verification, if the issue amount and the face value are different from each other, recording the difference between the issue amount and the face value in the message M10, and then encrypting the message M10 with the issuer public key and transmitting the message to the issuer; As a result of the verification, if the issued value and the par value are the same, the bank transaction information and withdrawal amount are the contents of the message M1 encrypted with the bank public key, and the bank designated as the bank identifier of the message M2 is requested to withdraw the amount of the issued amount W2. Determining a withdrawal success in the issuer's account; As a result of the determination, if the withdrawal fails, transmitting the cancellation of the unique number S1 to the unique number management subsystem, recording the withdrawal failure history in the message M10, and encrypting the message M10 with the issuer public key and transmitting it to the issuer; And when the withdrawal is successful, in response to the unique number S1 and the face value W3, the registration process is performed in the unique number management database, and the electronic money E is issued to the unique number S1 and W3. And recording the electronic money E in M10, encrypting the message M10 with the issuer public key, and sending the message to the issuer. [4] The method of claim 1 or 3, wherein the fourth step generates an electronic money with a unique number and a face value, encrypts it with a unique number management public key, encrypts the bank transaction information to be withdrawn with a bank public key, and then destructs the destructor and the bank identifier. A tenth step of encrypting with an electronic money issuance public key and transmitting it to the communication processing subsystem; After receiving the contents of the electronic money, the communication processing subsystem transmits the electronic money issuing subsystem after storing the data in an encrypted form, and the electronic money issuing subsystem receiving the contents of the electronic money transmits an encrypted unique number to the unique number. The unique number management subsystem, which transmits the encrypted unique number to the management subsystem, decrypts the encrypted unique number with the unique number management secret key, and then validates the electronic money and transmits it to the electronic money issuing subsystem. Eleventh step; And the electronic money issuing subsystem receiving the validation result of the electronic money, if the electronic money is valid and the face value and the extinction value are the same, the extinction value is deposited in the destructor's account after the extinction price and the deposit amount are the same. And deleting the unique number from the subsystem to destroy the electronic money, and in other cases, the twelfth step of notifying the destructor of the error. 9. The method of claim 8, wherein the tenth step comprises: the destructor encrypting the electronic money E consisting of the face value W1 and the unique number S1 in a message M11 and encrypting it with a unique number management public key; The destructor records bank transaction information such as bank account and password and deposit amount W2 in message M12 and encrypts it with the public key of the bank. Recording the face value W3 (destructed value), destructor identifier and transaction bank identifier of the electronic money E to be extinguished in the message M13, recording the messages M11, M12 and M13 in the message M14, and encrypting the message M14 with the public key for issuing an electronic money. ; And recording the disappearance of the message M14 and the electronic money in the message M15 and then transmitting the message to the communication processing subsystem. The method of claim 9, wherein the eleventh step comprises: the communication processing subsystem receiving the message M15 and storing the message in a log file; transmitting the message M14 to the electronic money issuing subsystem; Receiving the message M14, decrypting the message with its own electronic money issuing secret key, extracting the messages M11, M12, and M13 and transmitting the message M11 to the unique number management subsystem; And When receiving the message M11, the unique number management subsystem decrypts it with its own unique number management secret key, searches the electronic money E in the unique number management database, verifies the registered unique number (validity), and checks the details of the message M16. And recording the message M16 to the electronic money issuing subsystem. 12. The method of claim 10, wherein in the twelfth step, the electronic money issuing subsystem receives the message M16 to determine whether the electronic money E is valid, and if it is not valid, records the invalidity in the message M20 and then uses the message M20 as the destructor's public key. Encrypting and transmitting to the destructor, if valid, comparing the face value W1 of the electronic money E with the extinction value W3; If the face value W1 and the extinction are not the same, if the value is not the same, then record the different contents of the value W1 and the extinction in W3, encrypt the message M20 with the destructor's public key, and send it to the destructor. Identifying a trading bank and requesting that W3 perform a deposit processing of the user account of message M12 and receiving the result to determine a deposit processing result; As a result of the deposit processing determination, if the deposit is impossible, after recording the deposit processing error history in the message M20, encrypting the message M20 with the destructor's public key and transmitting the encrypted message to the destructor, and if the deposit is possible, comparing the extinction W3 with the deposit amount W2; And when the extinction is different from W3 and the deposit amount W2, if the difference is different, the message M20 is recorded with the public key of the destructor after the deposit amount W2 and the extinction record W3 in the message M20 and transmitted to the destructor. Deleting the unique number S1 of the electronic money E and recording the fact that it disappeared by the deposit of the electronic money E in the message M20 and encrypting the message M20 with the public key of the destructor and transmitting the electronic money to the destructor. How to ensure anonymity of payment. 9. The communication method according to claim 8, wherein the fifth step comprises: generating electronic money with a unique number and face value, adding a payment amount, encrypting with a recipient public key, transmitting the electronic money to the communication processing subsystem, and receiving the contents of the electronic money. The processing subsystem stores the data in an encrypted form and transmits it to the recipient, and the recipient receiving the contents of the electronic money transmits the electronic money to the unique number management subsystem; The unique number management subsystem receiving the electronic money decrypts the electronic money with the unique number management secret key, searches the unique number management database with the unique number and face value, and encrypts the search with the recipient's public key to send it to the recipient. step; Recipients who receive the search history, if the search history is successful and the face value and the payment amount are the same, generate a session key and transmit the change of the session key and the electronic money to the unique number management subsystem, and the search history fails or the face value and the payment amount Step 15 of notifying the payer of the error if not identical; And receiving the electronic money change, the unique number management subsystem deletes the electronic money of the preprocessing process from the unique number management database, generates a new unique number, and encrypts the new electronic money in the form of encrypting with the unique number public key and session key. Issuing and inserting into the unique number management database, encrypted with the recipient's public key and sent to the recipient, and the electronic money payment anonymous comprising the sixteenth step of transmitting the payment processing history of the electronic money to the payer How to guarantee gender. 13. The method of claim 12, wherein in the thirteenth step, the payer records the electronic money E1 consisting of the face value W1 and the unique number S1 and the payment amount W0 in the message M21, encrypts the message M21 with the recipient public key, and then sends the message M21 and the recipient identifier and the electronic value. Recording the payment of money in message M22 and sending it to the communication processing subsystem; The communication processing subsystem receiving the message M22, storing it in a log file and sending the message M21 to the recipient; And when the recipient receives the message M21, decrypts it with his recipient secret key, extracts the electronic money E1 and the receipt amount W0 from the message M21, and then sends the electronic money E1 to the unique number management subsystem. How to ensure anonymity in payments. 14. The method of claim 13, wherein the step 14 further comprises: when the unique number management subsystem receives the electronic money E1, decrypting it with its own unique number management secret key and extracting the unique number S1 and the face value W1 from the electronic money E1; Searching the unique number management database with the unique number S1 and the face value W1 and recording the search details R1 and the face value W1 in the message M23; And encrypting the message M23 with the recipient's public key and sending the message to the recipient. 15. The method of claim 14, wherein the receiving step further comprises: when the receiver receives the message M23, decrypting the message M23 with its recipient secret key to determine whether the search history R1 is successful after extracting the search history R1 and the face value W1; If it is determined that the search is successful, in case of a search failure, after recording the search history (invalidity) of the electronic money E1 in the message M30, the message M30 is encrypted with the payer public key and transmitted to the payer, and the search history R1 searches. Comparing the payment value W0 with the face value W1 of the electronic money E1, if successful; And as a result of the comparison between the payment amount W0 and the face value W1, if it is different, the message M30 records the difference between the payment amount and the face value, and then encrypts the message M30 with the payer public key and sends the message to the payer in the same case. And recording the change of the electronic money and the session key with the unique number management subsystem and transmitting it to the unique number management subsystem. 16. The method of claim 15, wherein the sixteenth step, when the unique number management subsystem receives the message M24, decrypting the electronic money E1 with its own unique number management secret key and deleting the electronic money E1 from the unique number management database. ; Generating a new unique number S2, encrypting the unique number S2 with its own unique number management public key, and then re-encrypting S2 with a receiver key with the recipient; Generating a new electronic money E2 with a face value W1 and a double-encrypted unique number S2, inserting it into a unique number management database, and encrypting the electronic money E2 with the recipient public key and transmitting it to the recipient; And after recording the successful payment of the electronic money E1 in the message M30, encrypting the message M30 with the payer public key and transmitting the encrypted message M30 to the payer.