KR20210061650A - Anonymity Guarantee to Prevent Misuse of Electronic Money Payment - Google Patents

Abstract

The present invention relates to a method of guaranteeing the anonymity of money payment in an electronic money payment system. When generating a unique number, the face value and unique number of electronic money can be recognized only by a unique number management sub-system. When issuing electronic money, the face value and owner of the electronic money can be recognized only by an electronic money issuing sub-system. An objective of the present invention is to provide an anonymity guarantee method for preventing the misuse of electronic money which guarantees the anonymity of an owner of electronic money by removing the function for identifying electronic money and an issuer from the functions of components of an electronic money payment system. A unique number management sub-system recognizes the face value and unique number of electronic money. An electronic money issuing sub-system is separately configured to recognize the face value and owner of electronic money. The method comprises: a first step of linking the two systems by using a session key; a second step of analyzing a moving type of electronic money caused by a user; a third step of withdrawing a prescribed amount from a bank account of an issuer while guaranteeing the anonymity of ownership of the issuer to issue electronic money; a fourth step of dissipating electronic money by depositing a prescribed amount of electronic money into a bank account of a dissipater; and a fifth step of moving the electronic money corresponding to the prescribed amount from a payer to a recipient.

Description

Anonymity Guarantee to Prevent Misuse of Electronic Money Payment

The present invention constructs an electronic money payment system to solve the problem of anonymity and double use of electronic money generated by transferring money used in the real world to a computer network environment, and the payer/recipient Prevention of misuse of electronic money payment, which guarantees the anonymity of the owner when the electronic money is transferred for the payment of electronic money between payments, the issuance of electronic money due to the withdrawal of the issuer's bank account, and the disappearance of the electronic money due to the deposit of the destructor's bank account. It is about how to ensure anonymity for

The main terms used in the present invention, a session key, a public key, and a private key, will be described as follows.

Encryption of messages interlocked between two nodes can be divided according to key distribution. There is a session key that allows only two nodes to encrypt/decrypt messages by assigning a dedicated key to each connection call between two nodes, and by distributing a pair of public and private keys to each node, the message is encrypted with the public key and used as the secret key. Decryption is performed. Since the public key is open to all nodes, the node that wants to send the message encrypts the message with the public key of the receiving node and transmits it, and the receiving node decrypts the received message with a private key that only it knows.

With the development of information and communication services, research on telemarketing that conducts commerce of order/sell/payment of goods within the network is actively being conducted. However, as the function of payment is included in an open communication environment, the contents of commercial transactions are leaked due to cooperation between the elements constituting the telemarketing system, which may be misused as a cause of crime.

Like real-world money, electronic money expressed in a unique number and face value is treated as data on a computer network, so double usage must be prevented and anonymity of the owner of the electronic money must be guaranteed.

However, in the existing payment system for electronic money, a unique number is assigned to the electronic money to prevent double use. However, since a unique number is generated in the same subsystem, the electronic money is issued and delivered to the user who requested the issuance. There was a problem in that the anonymity of electronic money was limited only because it was possible to recognize the owner of the currency.

The present invention conceived to solve the above problem is that in the generation of a unique number, only the unique number management subsystem can recognize the face value and the unique number of the electronic money, and in the issuance of the electronic money, the face value and the owner of the electronic money are electronic money. Prevention of misuse of electronic money payments that ensures anonymity to the owner of electronic money by removing the function of identifying the issuer and electronic money from the function of components of the electronic money payment system and making it possible to recognize only the issuing subsystem Its purpose is to provide a method of guaranteeing anonymity for users.

In the present invention as described above, by separating the function of generating/destructing the unique number from the function of managing the generation/destruction of electronic money, the unique number management and the issuance of electronic money are configured as an independent subsystem, so that the issuer is By excluding the identification function of electronic money from the unique number management/electronic money issuance subsystem, anonymity for the owner of the electronic money can be guaranteed. By providing anonymity of money, there is an effect of preventing misuse of crime caused by the tracking of funds, such as commerce made in real-world currency units.

1 is a configuration diagram of an electronic money payment system for guaranteeing anonymity to which the present invention is applied,
2A to 2G are flow charts of processing for each type of money transfer according to the guarantee of anonymity of electronic money payment in the present invention.

In order to achieve the above object, the present invention provides a method for ensuring anonymity for preventing misuse of electronic money payment applied to an electronic money payment system, in order to ensure anonymity for the owner of the electronic money. The system is configured to recognize the face value and the unique number of the electronic money, and the electronic money issuing subsystem is configured to recognize the face value and the owner of the electronic money, the first step of interlocking the two systems using a session key; A second step of analyzing a movement type of electronic money generated by a user connected to the communication processing subsystem; A third step of issuing electronic money by withdrawing a certain amount from the issuer's bank account while ensuring anonymity of the issuer's ownership, if the result of the type analysis in the second step is a request for issuance of electronic money; A fourth step of extinguishing the electronic money by depositing a certain amount of electronic money into a bank account of the extinguisher if the result of the type analysis of the second step is a request for extinguishing the electronic money; And a fifth step of moving the electronic money corresponding to a predetermined amount from the payer to the recipient, if the result of the type analysis of the second step is a payment request for electronic money.

Hereinafter, an embodiment according to the present invention will be described in detail with reference to the accompanying drawings.

1 is a configuration diagram of an electronic money payment system for guaranteeing anonymity to which the present invention is applied. In the drawing, 101 is a user A, 102 is a user B, 103 is a communication processing subsystem, 104 is a unique number management subsystem, Reference numeral 105 denotes an electronic money issuing subsystem, and 106 denotes a bank.

User A (101) and user B (102) are connected to the communication processing subsystem 103 to cause monetary movement of electronic money, and the communication processing subsystem 103, the unique number management subsystem 104, and the electronic money The issuing subsystem 105 is linked through a network, and the bank 106 is linked with the electronic money issuing subsystem 105 through a dedicated line to provide a conversion function between electronic money and real world currency.

By managing the encrypted unique number and the electronic money expressed in the face value in the form that only the unique number management subsystem can decrypt, the creation and forgery of illegal electronic money is discovered instantaneously, preventing double usage. . In the electronic money payment system for guaranteeing anonymity of the present invention, the movement of money is classified into issuance, destruction, and payment of electronic money to perform the function of moving the electronic money desired by the user.

2A to 2G are flow charts of processing for each type of money transfer according to the guarantee of anonymity of electronic money payment in the present invention, which are generated by user A 101 and user B 102 in the electronic money payment system of the present invention. This is a flow chart showing each type of movement by classifying money movement into issuance, extinction, and payment.

The communication processing subsystem 103, the unique number management subsystem 104, the electronic money issuance subsystem 105, and the bank 106 constituting the electronic money payment system are transferred to the execution state by system initialization and settled. Waiting for an event to be processed (201) When user A (101) and user B (102) access the communication processing subsystem 103 (202) and generate a request to move electronic money (203), electronic money After analyzing the requirements for the type of movement of (204), performing the functions according to the electronic money issuance request (205), the electronic money extinction request (206), and the electronic money payment request (207), the desired request result is received. Output (208).

The flow of electronic money movement of issuance, destruction, and payment of electronic money generated by a user through FIGS. 2B to 2G will be described in detail as follows.

2B and 2C show a process in which the user A 101 becomes an issuer and withdraws a certain amount from his/her bank 106 to issue and own the electronic money E.

The issuer 101 records bank transaction information such as his or her passbook account number and password, and the withdrawal amount W1 in the message M1 (209), so that the electronic money issuing subsystem does not know the bank account of the generator, and transfers M1 to the transaction bank 106 Encrypted with the public key of) (210). On the other hand, by recording the amount W2 to be issued, the identifier of the transaction bank, and the issuer's own identifier in another message M2 (211), M2 is encrypted with the public key for issuing electronic money so that the unique number management subsystem does not know the issuer and the transaction bank. (212) A session key is generated and the session key and the face value W3 of the electronic money are recorded in the message M3 (213). At this time, the session key is used for decryption between the unique number management subsystem 104 and the issuer 101 only. do.

After writing the messages M1, M2, and M3 to the message M4 (214), encrypting M4 with the unique number management public key (215), recording the message M4 and issuance in the message M5 (216), and sending M5 to the communication processing subsystem (103). The communication processing subsystem 103 receives the message M5 (218), stores it in a log file (219), and transmits M4 to the unique number management subsystem 104 (220).

The unique number management subsystem 104 receives the message M4 (221) and decrypts it with its own unique number management secret key (222), and then extracts M1, M2, and M3 from the message M4 (223), and the face value of M3 is unique to W3. Generate number S1 (224). After encrypting the generated unique number S1 with the unique number management public key (225) and encrypting it again with the issuer's session key (226) and recording the messages M1, M2, M3, double-encrypted S1, face value W3, and issuance in message M6 (227 ) M6 is encrypted with the electronic money issuing public key (228) and transmitted to the electronic money issuing subsystem 105 (229).

When the electronic money issuing subsystem 105 receives the message M6 (230), it decrypts it with its own electronic money issuance secret key (231), and extracts the messages M1 and M2, the double-encrypted unique number S1 and the face value W3 (232). , Issuer A (101) verifies the identity of the issue amount W2 and face value W3 to be issued (233), and if they are different, records the difference between the issue amount and face value in message M10 (234), and encrypts M10 with the issuer's public key (242). To (243). If W2 and W3 are the same, the bank transaction information and the withdrawal amount are the contents of M1 encrypted with the bank public key, and request the withdrawal of the amount of W2 from the bank designated by the bank identifier of M2 and receive the result (235) by the issuer 101. After verifying the withdrawal details from the account (236) and, in the case of failure, transmits the cancellation of the generated S1 to the unique number management subsystem 104 (240) and records the withdrawal failure details in M10 (241), the issuer of M10 is disclosed. It is encrypted with a key (242) and transmitted to the issuer (243). Upon successful withdrawal, after performing the registration process in the unique number management database in response to S1 created in the unique number management subsystem 104 and the face value W3 (237). The electronic money E is issued with the double-encrypted unique numbers S1 and W3 (238), E is recorded in the message M10 (239), and M10 is encrypted with the issuer's public key (242) and transmitted to the issuer (243).

2D and 2E show a process in which the user A 101 becomes the destructor of the electronic money E and deposits and extinguishes the electronic money E from the bank 106 of the user A 101.

In the message M11, the destructor 101 records the electronic money E consisting of the face value W1 and the unique number S1 encrypted with the unique number management public key (244), and encrypts it with the unique number management public key (245). The destructor 101 records bank transaction information such as his bank account and password and the deposit amount W2 in the message M12 (246) and encrypts it with the public key of the transaction bank (247). In the message M13, the par value W3 of the electronic money E to be destroyed, the destructor identifier, and the transaction bank identifier are recorded (248) after recording the messages M11, M12, and M13 in the message M14 (249), the M14 is encrypted with the public key issued by the electronic money. (250) After recording M14 and disappearance in message M15 (251), it is transmitted to the communication processing subsystem 103 (252). The communication processing subsystem 103 receives the message M15 (253), stores it in a log file (254), and transmits M14 to the electronic money issuing subsystem 105 (255).

When the electronic money issuing subsystem 105 receives M14 (256), it decrypts it with its own electronic money issuance secret key (257), extracts the messages M11, M12, and M13 (258), and then sends M11 to the unique number management subsystem 104. When the unique number management subsystem 104 receives M11 (260), it transmits (259), after decrypting it with its own unique number management secret key (261), it retrieves the electronic money E from the unique number management database and registers it. The number (validity) is verified, the details are recorded in M16 (262), and M16 is transmitted to the electronic money issuing subsystem 105 (263).

The electronic money issuing subsystem 105 receives M16 (264), determines whether the electronic money E is valid (265), and if it is not valid, writes an invalidity in the message M20 (267), and then converts M20 as the public key of the destructor 101. It encrypts (276) and transmits it to the destructor 101 (277), if valid, compares the face value W1 and the face value W3 of the electronic money E (266), and if they are not the same, writes different details of W1 and W3 in the message M20 (269). M20 is encrypted with the public key of the destructor 101 (276) and transmitted to the destructor 101 (277), if the par value is the same, the bank identifier of the destructor 101 is identified with the bank identifier of M13, and the par value W3 to the user account of M12. Request to perform the deposit process and receive the result (268).

The result of the deposit processing is determined (270), and if the result is impossible to deposit, the details of the deposit processing error are recorded in M20 (272), and M20 is encrypted with the public key of the destructor 101 (276) and transmitted to the destructor 101 (277). ). If the result is acceptable, compare the face value W3 with the deposit amount W2 (271), and if they are different, record different details of W2 and W3 in M20 (273), and encrypt M20 with the public key of the destructor 101 (276). (277) If W2 and W3 are the same, that is, the face value W1 of the electronic money E, the deposit amount W2, and the face value W3 are all the same, and the deposit processing is completed to the bank of the destructor 101, the unique number management subsystem ( 104), delete the unique number S1 of the electronic money E (274) and record the fact that it has been destroyed by the deposit of the electronic money E in the message M20 (275), and encrypt M20 with the public key of the destructor 101 (276). 101) (277).

2F and 2G show a payment process in which the user A 101 becomes the payer and the user B 102 becomes the recipient in the process of moving the electronic money E1.

The payer 101 records the electronic money E1 composed of the face value W1 and the unique number S1 encrypted with the unique number management public key and the payment amount W0 in the message M21 (278), and encrypts M21 with the recipient public key (279). The payer 101 writes the message M21, the recipient identifier and the payment to the message M22 (280) and transmits it to the communication processing subsystem 103 (281). The communication processing subsystem 103 receives the message M22 (282), stores it in a log file (283), and transmits M21 to the recipient 102 (284).

Upon receiving M21 (285), the recipient 102 decrypts it with the recipient's secret key (286), extracts the electronic money E1 and the receipt amount W0 from M21 (287), and then transmits E1 to the unique number management subsystem 104 ( 288). Upon receiving the electronic money E1 (289), the unique number management subsystem 104 decrypts it with its own unique number management secret key (290) and then extracts the unique number S1 and the face value W1 from the electronic money E1 (291). Thereafter, the unique number management database is searched with S1 and W1 (292), the search details R1 and face value W1 are recorded in the message M23 (293), and M23 is encrypted with the recipient's public key (294) and transmitted to the recipient (295). .

Upon receiving the message M23 (296), the recipient 102 decrypts M23 with the recipient's secret key (297), extracts the search details R1 and the face value W1 (298), and determines whether the search details R1 is the search success (299). If R1 is a search failure, after recording E1's search results (invalidity) in M30 (301), M30 is encrypted with the payer's public key (315) and transmitted to the payer 101 (316) Search details R1 If this search is successful, it is determined whether the payment amount W0 and the par value W1 of the electronic money E1 are the same (300), and if they are different, the difference between the payment amount and the par value is recorded in M30 (302), and then M30 is encrypted with the payer's public key (315) and paid. (316) If the face value W1 of the payment amount W0 and E1 is the same, record the session key with the electronic money E1 and the change and the unique number management subsystem 104 in M24 (303), and manage the unique number. Transfer to subsystem 104 (304).

Upon receiving the message M24 (305), the unique number management subsystem 104 decrypts the electronic money E1 with its own unique number management secret key (306), and deletes the electronic money E1 from the unique number management database (307). After generating a new unique number S2 (308) and encrypting S2 with its own unique number management public key (309), S2 is re-encrypted with a session key with the recipient (310). After generating a new electronic money E2 with the face value W1 and the double-encrypted unique number S2 and inserting it into the unique number management database (311), E2 is encrypted with the recipient's public key (313) and transmitted to the recipient 102. In addition, after the E1 payment success is recorded in M30 (314), M30 is encrypted with the payer public key (315) and transmitted to the payer 101 (316).

The present invention described above is capable of various substitutions, modifications, and changes without departing from the technical spirit of the present invention to those of ordinary skill in the art. It is not limited to the drawings.

101: user A 102: user B
103: communication processing subsystem 104: unique number management subsystem
105: electronic money issuance subsystem 106: bank

Claims (16)

In the method of ensuring anonymity to prevent misuse of electronic money payments applied to the electronic money payment system, the unique number management subsystem provides the face and unique number of the electronic money to ensure the anonymity of the owner of the electronic money. A first step of recognizing, and the electronic money issuing subsystem separately configured to recognize the face value and the owner of the electronic money, and linking the two systems using a session key; A second step of analyzing a movement type of electronic money generated by a user connected to the communication processing subsystem; A third step of issuing electronic money by withdrawing a certain amount from the issuer's bank account while ensuring anonymity of the issuer's ownership, if the result of the type analysis in the second step is a request for issuance of electronic money; A fourth step of extinguishing the electronic money by depositing a certain amount of electronic money into a bank account of the extinguisher if the result of the type analysis of the second step is a request for extinguishing the electronic money; And a fifth step of moving the electronic money corresponding to a certain amount from the payer to the recipient if the result of the type analysis of the second step is a payment request for electronic money. How to guarantee. The method of claim 1, wherein the second step is a step in which the communication processing subsystem, the unique number management subsystem, the electronic money issuing subsystem, and the bank transition to the execution state by system initialization to wait for an event to be processed. ; Receiving an electronic money transfer request from a user through the communication processing subsystem; And by analyzing the requirements for the movement type of electronic money, after performing the function in the 3rd to 5th steps according to the electronic money issuance request, the electronic money extinction request, and the electronic money payment request, the desired request result is received. Anonymity guarantee method for preventing misuse of electronic money payment, comprising the step of outputting. The method of claim 1,
In the third step, bank transaction information is encrypted with a bank public key so that the electronic money issuing subsystem does not know the bank account of the generator, and the bank and the issuer do not know the issuer and the transaction bank by the unique number management subsystem. A sixth step of encrypting the identifier of the electronic money issuance public key and transmitting it to the communication processing subsystem; A seventh step of storing the contents of the electronic money in the communication processing subsystem in an encrypted form and then transmitting it to the unique number management subsystem; The unique number management subsystem, which received the contents of the electronic money from the communication processing subsystem, generates a unique number, encrypts it with a unique number management public key, double-encrypts it with the issuer's session key, and transmits it to the electronic money issuing subsystem. Step 8; And the electronic money issuing subsystem, which has received the contents of the electronic money from the unique number management subsystem, compares the face value of the electronic money and the issued amount, and if they are the same, performs a withdrawal from a real-world bank, verifies the withdrawal details, and if the withdrawal is successful. A method of guaranteeing anonymity for preventing misuse of electronic money payment, comprising the ninth step of issuing electronic money and notifying the issuer of the error details if the face value and the issued amount are not the same or if withdrawal has failed. The method of claim 3, wherein in the sixth step, the issuer records bank transaction information such as his/her passbook account number and password and withdrawal amount W1 in a message M1, so that the electronic money issuing subsystem can know the bank account of the generator. Encrypting the message M1 with the public key of the transaction bank to prevent it; Encrypting the message M2 with an electronic money issuance public key so that the unique number management subsystem cannot know the issuer and the transaction bank by recording the amount W2 to be issued, the identifier of the transaction bank, and the identifier of the issuer themselves in the message M2; Generating a session key and recording the generated session key and the face value W3 of the electronic money in the message M3, and then recording the messages M1, M2, and M3 in the message M4 to encrypt the message M4 with a unique number management public key; And transmitting the message M5 to the communication processing subsystem by recording the message M4 and issuance in the message M5. The method of claim 4, wherein the seventh step comprises: receiving a message M5 in the communication processing subsystem and storing it in a log file; And transmitting the message M4 to the unique number management subsystem. The method of claim 5, wherein in the eighth step, the unique number management subsystem receives the message M4, decrypts it with its own unique number management secret key, and then extracts the messages M1, M2, and M3 from the message M4 to obtain the par value of the message M3. Generating a unique number S1 of W3; Encrypting the generated unique number S1 with a unique number management public key and re-encrypting with the issuer's session key; And recording the message M1, M2, M3, double-encrypted S1, face value W3, and issuance in the message M6, encrypting the message M6 with the electronic money issuing public key, and transmitting the message to the electronic money issuing subsystem. How to guarantee anonymity to prevent misuse of electronic money payment. The method of claim 6, wherein the ninth step, when the electronic money issuing subsystem receives the message M6, decrypts it with its own electronic money issuance secret key and extracts the messages M1 and M2, the double-encrypted unique number S1, and the face value W3. Verifying the identity of the issue amount W2 and the par value W3 to be issued by the issuer; If as a result of the verification, if the issue amount and the face value are different from each other, recording the difference between the issue amount and the face value in the message M10, encrypting the message M10 with the issuer public key and transmitting the message to the issuer; As a result of the above verification, if the issued amount and the par value are the same, the bank transaction information and the withdrawal amount are the contents of the message M1 encrypted with the bank public key, and request the withdrawal of the issued amount W2 from the bank designated as the bank identifier in the message M2, and receive the result Determining whether or not the withdrawal has been successful in the issuer's account; If the withdrawal fails as a result of the determination, transmitting the cancellation of the unique number S1 to the unique number management subsystem, recording the withdrawal failure details in the message M10, encrypting the message M10 with the issuer public key and transmitting it to the issuer; And as a result of the determination, upon successful withdrawal, a message is issued by issuing electronic money E with the unique numbers S1 and W3 after performing registration processing in the unique number management database by responding to the unique number management subsystem with a unique number S1 and a face value W3. Anonymity guarantee method for preventing misuse of electronic money payment, comprising the step of recording electronic money E in M10 and encrypting the message M10 with the issuer public key and transmitting it to the issuer. The method of claim 1 or 3, wherein in the fourth step, the destructor and the bank identifier are generated after generating electronic money with a unique number and face value, encrypting it with a unique number management public key, and encrypting the bank transaction information to be withdrawn with the bank public key. A tenth step of encrypting the electronic money issuance public key and transmitting the encryption to the communication processing subsystem; The communication processing subsystem receiving the contents of the electronic money stores the contents in an encrypted form and then transmits them to the electronic money issuing subsystem, and the electronic money issuing subsystem receiving the contents of the electronic money sends the encrypted unique number to the unique number. The unique number management subsystem, which is transmitted to the management subsystem, and receives the encrypted unique number, decrypts the encrypted unique number with the unique number management secret key, verifies the validity of the electronic money, and transmits it to the electronic money issuing subsystem. The eleventh step; And the electronic money issuing subsystem receiving the validation result of the electronic money, if the electronic money is valid and the par value and the expiration price are the same, the expiration price is deposited into the account of the destructor, and if the expiration price and the deposit amount are the same, the unique number is managed. Anonymity guarantee method for preventing misuse of electronic money payment, characterized in that it comprises a twelfth step of destroying the electronic money by deleting the unique number in the subsystem, and notifying the destructor of the error details in other cases. The method of claim 8, wherein the tenth step comprises: the destructor records the electronic money E composed of a face value W1 and a unique number S1 in the message M11 and encrypts it with a unique number management public key; The destructor records bank transaction information such as his/her bank account and password and the deposit amount W2 in the message M12 and encrypts it with the public key of the transaction bank; In the message M13, the par value W3 (destruction price) of the electronic money E to be destroyed, the destructor identifier, and the transaction bank identifier are recorded, the message M11, M12, and M13 are recorded in the message M14, and the message M14 is encrypted with the public key issued by the electronic money. ; And transmitting the message M14 and the disappearance of the electronic money to the communication processing subsystem after recording the disappearance of the electronic money in the message M15. The method of claim 9, wherein the eleventh step comprises: receiving the message M15, storing the message M15 in a log file, and transmitting the message M14 to the electronic money issuing subsystem; Upon receiving the message M14, the electronic money issuing subsystem decrypts it with its own electronic money issuing secret key, extracts the messages M11, M12, and M13, and transmits the message M11 to the unique number management subsystem; And the unique number management subsystem, upon receiving the message M11, decrypts it with its own unique number management secret key, retrieves the electronic money E from the unique number management database, verifies that it is a registered unique number (validity), and displays the details of the message. And transmitting the message M16 to the electronic money issuing subsystem by recording in M16. The method of claim 10, wherein in the twelfth step, the electronic money issuing subsystem determines whether the electronic money E is valid by receiving the message M16, and if it is not valid, records the invalidity in the message M20, and then converts the message M20 as the public key of the destructor. Encrypting and transmitting it to the destructor, and if valid, comparing the face value W1 and the destructive value W3 of the electronic money E; As a result of comparing the par value W1 and the extinction value W3, if they are not the same, the message M20 records the different details of the par value W1 and the extinction value W3, and then encrypts the message M20 with the public key of the destructor and sends it to the destructor. Identifying the transaction bank and requesting the execution of the deposit processing of the extinction W3 to the user account of the message M12, receiving the result, and determining a deposit processing result; If the deposit processing determination result, if the deposit is impossible, after recording the details of the deposit processing error in the message M20, the message M20 is encrypted with the public key of the destructor and transmitted to the destructor, and if deposit is possible, comparing the extinction value W3 with the deposit amount W2; And as a result of comparison between W3 and deposit amount W2, if they are different from each other, the message M20 is encrypted with the public key of the destructor and transmitted to the destructor after recording the different details of the deposit amount W2 and the extinction value W3 in the message M20, and if they are the same, the unique number management subsystem E-money payment comprising the step of deleting the unique number S1 of the electronic money E and recording the fact that it has been extinguished by the deposit of the electronic money E in the message M20, encrypting the message M20 with the public key of the destructor and transmitting it to the destructor. How to ensure anonymity to prevent misuse of payments. The communication according to claim 8, wherein the fifth step comprises generating electronic money with a unique number and face value, adding a payment amount, encrypting it with a recipient's public key, and transmitting it to the communication processing subsystem, and receiving the contents of the electronic money. A thirteenth step of storing, by the processing subsystem, in an encrypted form and then transmitting the electronic money to a recipient, and transmitting the electronic money to the unique number management subsystem by the recipient who has received the contents of the electronic money; The 14th unique number management subsystem that received the electronic money decrypts the electronic money with the unique number management secret key, searches the unique number management database with the unique number and face value, encrypts the search details with the recipient's public key, and transmits it to the recipient. step; The recipient who received the search details generates a session key if the search details are successful and the face value and payment amount are the same, and transmits the change of the session key and electronic money to the unique number management subsystem. A fifteenth step of notifying the payer of the error details if they are not the same; And the unique number management subsystem that has received the electronic money change deletes the electronic money in the pre-processing process from the unique number management database, creates a new unique number, and creates a new electronic money in a form encrypted with the unique number public key and session key. Misuse of electronic money payment, comprising the 16th step of issuing and inserting it into the unique number management database, encrypting it with the recipient's public key, transmitting it to the recipient, and transmitting the payment processing details of the electronic money to the payer. How to ensure anonymity to prevent. The method of claim 12, wherein in the thirteenth step, the payer records the electronic money E1 consisting of a face value W1 and a unique number S1 and the payment amount W0 in the message M21, encrypts the message M21 with the recipient public key, and then encrypts the message M21 and the recipient identifier and electronic money. Recording the payment of money in message M22 and transmitting it to the communication processing subsystem; The communication processing subsystem receiving the message M22, storing it in a log file, and transmitting the message M21 to a recipient; And transmitting the electronic money E1 to the unique number management subsystem after the recipient decrypts the message M21 with their own recipient's secret key, extracts the electronic money E1 and the receipt amount W0 from the message M21, and transmits the electronic money E1 to the unique number management subsystem. How to ensure anonymity to prevent misuse of payment. 14. The method of claim 13, wherein the 14th step comprises: upon receiving the electronic money E1, the unique number management subsystem decrypts the electronic money E1 with its own unique number management secret key and then extracts the unique number S1 and the face value W1 from the electronic money E1; Searching the unique number management database with the unique number S1 and the par value W1, and recording the search details R1 and the par value W1 in the message M23; And encrypting the message M23 with the recipient's public key and transmitting it to the recipient.
Anonymity guarantee method for preventing misuse of electronic money payment, characterized in that it includes. 15. The method of claim 14, wherein the fifteenth step comprises: upon receiving the message M23, the recipient decrypts the message M23 with the recipient's secret key, extracts the search details R1 and the face value W1, and determines whether the search details R1 are successful in the search; As a result of the determination of whether the search was successful or not, in the case of a search failure, the search room details (invalidity) of the electronic money E1 are recorded in the message M30, and the message M30 is encrypted with the payer's public key and transmitted to the payer, and the search details R1 are searched. If successful, comparing whether the payment amount W0 and the face value W1 of the electronic money E1 are the same; And as a result of comparing the payment amount W0 and the par value W1, if they are different, after recording the difference between the payment amount and the par value in message M30, the message M30 is encrypted with the payer's public key and transmitted to the payer. And recording the change of the electronic money and the session key with the unique number management subsystem and transmitting it to the unique number management subsystem. The method of claim 15, wherein the 16th step comprises: upon receiving the message M24, the unique number management subsystem decrypts the electronic money E1 with its own unique number management secret key and deletes the electronic money E1 from the unique number management database. ; Generating a new unique number S2, encrypting the unique number S2 with its own unique number management public key, and re-encrypting S2 with a session key with the recipient; Generating a new electronic money E2 with the face value W1 and the double-encrypted unique number S2, inserting it into the unique number management database, encrypting the electronic money E2 with the recipient's public key, and transmitting it to the recipient; And transmitting the message M30 to the payer by encrypting the message M30 with the payer public key after recording the electronic money E1 payment success in the message M30.

Images