RU2146836C1 - Device for deal arrangement - Google Patents

Abstract

FIELD: electronic money transactions, in particular, electronic cash payments for trading goods, for example, using Internet. SUBSTANCE: device has bank control unit, customer control unit, shop control unit, gateway communication unit. EFFECT: increased reliability and efficiency of system. 3 dwg

Description

 The invention relates to electronic money systems and can be used in financial systems of non-cash electronic payments to control the execution of sales transactions, for example, on the Internet.

 Currently, the Internet has a huge number of virtual stores with all kinds of offers for sale. This allows the consumer to quickly select the necessary goods. However, the terms of payment and receipt of goods significantly complicate and extend the process of sale.

 Existing financial systems of non-cash electronic payments provide a high speed of service through the use of electronic communications and high reliability through the use of the achievements of cryptographic science and appropriate special tools.

 In the present invention, an attempt is made to combine the advantages of the two systems and provide quick and reliable support for sales transactions on the open Internet.

 Known electronic monetary system containing a money generator, cash registers, transmission units (see US patent 5455407, publ. 02.15.97 g).

 The known system solves the problem of quick analysis of consumer requests and the issuance of money.

 Known electronic monetary system containing the system of issuing banks, correspondent banks, settlement bank, certification authority. The issuing bank system contains a money generator, a cash module, an operating module, a cash register receipt with digital signatures of a money generator and a digital signature of a transfer module (US Pat. No. 5,453,601, published January 12, 1997).

 A well-known system solves the problem of reliable movement of money between customers of the system.

 A well-known purchase and sale management system in virtual stores, comprising a customer device, a store control device, a bank control device (patent EP 0798657, class G 06 F 17/60, publ. 01.10.97 g). This system addresses the issues of information security during the exchange between various parties to the transaction using special coded cards. This system is selected as a prototype and has insufficient speed.

 The present invention is the development of transaction management tools with high reliability, allowing them to be implemented in real time.

 The technical result consists in increasing the reliability and efficiency of the system for managing transactions.

 The result is achieved in that in a system for managing transactions, comprising a bank control device, a store control device, a customer control device interconnected via an intersystem communication unit, and each of the control devices contains a control and processing unit, a memory unit, an input unit - output connected through the communication bus with the intersystem unit, the input-output unit of each control device is connected by two-way communication with the control and processing unit of the corresponding device I, the bank control device additionally contains a block for fixing the request of the buyer and the store, a control unit for electronic digital signature of the buyer and the store, a control unit for controlling the characteristics of the buyer and store, a bank response generation unit, an electronic digital signature generation unit for the bank, a timer connected by two-way communication with a memory unit, a control and processing unit and a bank response generating unit, the output of the input / output unit is connected to the input of the customer request and store request fixing unit, the output it is connected to the input of the electronic digital signature control unit of the buyer and the store, the memory unit is connected by two-way communication with the customer and store request fixing unit, the buyer and store characteristics monitoring and control unit, the bank response generation unit, the bank electronic digital signature generation unit and the electronic control unit digital signature of the buyer and the store, the outputs of which are directly and through the control unit and the characteristics of the buyer and the store connected to the input by the bank response generation unit connected through the bank's electronic digital signature generation unit to the input / output unit input, the control and processing unit is connected by two-way communication with the customer and store request fixing unit, the customer and store electronic digital signature control unit, the performance monitoring and control unit of the buyer and the store, the bank response generation unit and the bank electronic digital signature generation unit, the customer control device further comprises a unit f the package and store and bank sending packages, the list of goods forming unit, the bank's electronic digital signature control unit, the customer’s electronic digital signature generating unit and the bank request generating unit, connected by two-way communications to the control and processing unit and the memory unit, connected by two-way communication, output the input / output unit through the store and bank package fixing unit is connected to the inputs of the bank electronic digital signature control unit and the customer electronic digital signature generation unit For, through which the output of the request forming unit to the bank is connected to the input of the input-output unit, the other input of which is connected to the output of the product list forming unit, the store control unit further comprises a customer and bank sending unit, a request unit to the bank, and a generating unit accounts, bank electronic digital signature control unit, store electronic digital signature generation unit, sending signal generation unit, connected by two-way communications with the control unit and the processing unit ki and a memory unit connected by a two-way communication with each other, the input-output unit is connected by a two-way communication with the unit for fixing the sending of the buyer and the bank connected to the inputs of the unit for generating a request to the bank, the unit for generating an account, the electronic digital signature control unit of the bank, the output of which is the output the electronic digital signature generation unit of the store through the sending signal generating unit is connected to the input of the input-output unit, the outputs of the bank request generating unit and the account generating unit are connected to the inputs and a unit for generating an electronic digital signature of the store.

 A block diagram of a specific but non-limiting embodiment of the system for managing transactions is shown in FIG. 1-3.

 The system comprises a bank control device 1, a customer control device 2, a store control device 3, an intersystem communication unit 4. The device 1 comprises a timer 5, a control and processing unit 6, an input / output unit 7, a customer and store request fixing unit 8, a customer and store electronic digital signature control unit 9, a customer and store characteristics monitoring and control unit 10, a response generating unit 11 bank, block 12 forming an electronic digital signature of the bank, block 13 memory. The buyer’s control device 2 comprises an input / output block 14, a store and bank sending block 15, a list of goods generating unit 16, a bank electronic digital signature control unit 17, a customer electronic digital signature generating unit 18, a bank request generating unit 19, block 20 control and processing unit 21 memory. The store control device 3 comprises a memory unit 22, a customer and bank sending block 23, a bank request generating unit 24, a bank electronic digital signature control unit 25, a store electronic digital signature generating unit 26, a send signal generating unit 27, an account generating unit 28 store, block 29 control and processing unit 30 I / o.

 A device for managing transactions is as follows.

The device 2 in block 16 with the participation of blocks 4, 14, 20 and 21 forms a list of goods for purchase and passes through blocks 14, 4 and 30 to block 23 of device 3. Block 23 fixes it, recognizes the type of request:
- Buyer's request for an invoice;
- a response from the bank based on the results of a payment with an electronic digital signature (EDS) of the bank;
- bank statement on the compiled account of the store with a digital signature of the bank;
- a check with the electronic signature of the store and the electronic signature of the buyer,
and transfers it to storage in block 22, as well as in block 28 for the formation of the account. Block 28 using blocks 22, 29 forms an invoice, which indicates the name of the product (service), its cost, store code, time and date of invoice. The generated account is transferred to storage in block 22 and in block 26 for the formation of the store's digital signature on the account. Block 29 is involved in the formation of the digital signature using the information from block 22. In block 26, the generated account and the store’s private key are used to generate the digital signature. To do this, the account (text) is converted to the so-called. Hash function. Then, the cryptographic transformation of the resulting Hash function with the store’s private key is performed to obtain the store’s digital signature, and finally, the source text (in this case, the account) is combined with the received store’s digital signature. This generated invoice with the digital signature is transferred to storage in block 22 and through blocks 27, 30 and 4 to device 2. In device 2, the signed invoice through block 14 goes to block 15 and from there to storage in block 21. Block 15 analyzes the type of received parcel:
- account from the store;
- payment result;
- statement from the bank.

 If the buyer makes a purchase decision, the account is transferred to block 18, where using block 20, using the customer’s private key from block 21, the customer’s digital signature is generated on the account with the electronic digital signature of the store. To do this, the account is converted to a Hash function. Then, the cryptographic transformation of the resulting Hash function is performed using the buyer's private key to obtain the buyer's digital signature. And, finally, the source text (in this case, the store’s EDS account) and the buyer’s received EDS are combined. This account is hereinafter referred to as a check. This signed check is written to block 21 and transmitted through blocks 14 and 4 to device 3. In this device, the check goes through block 30 to block 23, where the type of parcel is recognized, fixed in block 22, and transmitted through blocks 30 and 4 to device 1. This request is transmitted through block 30 and 4 to device 1. This information is transmitted through blocks 7 and 8 to block 9, where using the block 6 and using the public keys of the buyer and the store from block 13, the digital signature of the store and the buyer is checked on the check. To do this, the check is divided into text and digital signature. When checking the buyer's digital signature, the text is the account with the store's digital signature, and the digital signature is the buyer's digital signature. A Hash function is formed from the text, and the buyer's digital signature is cryptographically converted by the buyer's public key. Then these two values are compared and, if they coincide, determine that the signature is correct, if it does not match, it is not true. If the verification result is negative, a command is sent to block 11 to prepare a bank response, which contains the following information: the reason for the refusal of the payment (incorrect signature of the store or the buyer), the system date and time. This information is transferred to storage in block 13 and in block 12 for the formation of the digital signature of the bank. This is done in the manner described above: converting the text into a Hash function, cryptographic conversion with the bank’s private key to the bank’s digital signature and merging. The result of the passage of payment from the digital signature of the bank is transmitted through block 7 and block 4 to device 3.

 If the result of checking the digital signature of the buyer and the store is positive, then a command is generated to block 10 to execute the order (payment of the buyer to the store). Block 10 using blocks 6, 13 checks the characteristics (state of the bank account and restrictions on changes in its state). If the test result is positive, then the characteristics are adjusted (mainly the state of the bank account of the buyer and the store) and the adjusted characteristics are transferred to storage in block 13. In addition, a command is generated to block 11 to prepare a response to device 3. Block 11 generates a response in which the result of the payment being passed on this check is indicated, the system date and time and transmits it to block 12 for generating the digital signature of the bank on the answer, where cryptographic conversion is performed using blocks 5, 6, 13 ie check the bank is closed and the key response to the formation of the bank's electronic signature. This information is transferred to storage in block 13 and through blocks 7 and 4 to device 3.

 In device 3, information through block 30 enters block 23, where it is decrypted — determining the type of sending. The result of the payment from the electronic digital signature of the bank is recorded in block 22 and a command is generated to block 25 to check the electronic digital signature of the bank. In this block, using the blocks 22, 29, the bank’s digital signature is checked, for which a response from the bank’s electronic signature and the bank’s public key are used. Verification is carried out as described above. Information is divided into text and signature. The text is converted into a Hash function, and the digital signature is cryptographically converted by the public key of the bank. The conversion results are compared. If the results match, the signature is correct, if they do not match, the signature is incorrect. In case of a positive result of checking the electronic digital signature of the bank, the response of the bank is recorded together with the result of the verification in block 22 and a command is generated in block 27 to generate a signal for sending the goods (if the payment is received positively at the bank) to device 2, which is transmitted through blocks 30 and 4 or for transmission Reasons for refusal (with a negative result of the payment being made to the bank). If the result of the electronic digital signature check is negative, then the message contains the failure and the reasons for the failure.

 Thus, in the system, settlements are made between the three main participants - the bank, the registered buyer and the registered store - over open communication channels on the Internet with the speed of forwarding to the Internet. But, despite the openness of the network, high reliability of bill payment and provision of goods is ensured through the use of cryptographic methods with the formation of electronic digital signatures of all participants in transactions. All this provides real-time transactions.

For the implementation of memory blocks, standard memory blocks of personal computers (PCs) can be used; for the implementation of control and processing units, processor blocks of a PC; for the implementation of I / O blocks and an interconnection block, standard interface blocks of a PC and the Internet can be used. Blocks 8-12 of the device 1, blocks 15-19 of the device 2 and blocks 23-28 of the device 3 can be implemented using software and hardware on personal computers. Block 8 performs the following functions:
- decryption of request type:
request for extract from the EDS of the store or from the EDS of the buyer;
a check from the EDS of the store and the buyer;
- identification of a specific client;
- transfer of information into memory 22.

 Thus, two decryption operations and a switching operation are used. A possible hardware implementation may include a register, two decoders, a switch. Block 9 carries out the separation of text and signatures, converting text into a Hash function and cryptographic converting it with a public key, comparing and, depending on the results of the comparison, corresponding transfers. A block may include a register, two switches of pieces of information, two code converters, a public key switch, a switch of conversion coefficients, a comparison unit, two output switches. Block 10 carries out the reception of the investigated check, the accounts of the store and the buyer, comparing the amounts, checking the financial restrictions on the account. If restrictions on the amount and additional restrictions are permissible, a balance is formed and a positive response is issued. If one of the restrictions is not feasible, then a negative response is formed indicating the reasons. The results are sent to block 13.

 Thus, block 10 may include a register, two input switches, three adders, a decoder, a register, two output switches.

 Block 11 receives information from block 13 and block 10 and, based on a signal from block 10, generates a response to the subscriber. Block 11 may include a register, input and output switches.

 Block 12 performs the generation of the Hash function from the text, converting it with the bank’s private key to EDS and combining the source text with the received EDS. Block 12 may include an input register, a conversion coefficient switch, a private key switch, two switches, an output register.

 Blocks 15, 23 may have a structure similar to block 8 with minor changes in accordance with functional conditions.

 Blocks 17, 25 may have a structure similar to block 9.

 Blocks 18, 26 may have a structure similar to block 12.

 Blocks 16, 19, 24, 28 may include input and output switches and registers.

Claims (1)

 A system for managing transactions, comprising a bank control device, a store control device, a customer control device interconnected via an intersystem communication unit, and each of the control devices comprises a control and processing unit, a memory unit, an input-output unit connected via a communication bus with the intersystem unit, the input-output unit of each control device is connected by two-way communication with the control and processing unit of the corresponding control device, characterized in that the bank’s management additionally contains a block for fixing the request of the buyer and the store, a block for monitoring the electronic digital signature of the buyer and the store, a block for monitoring and controlling the characteristics of the buyer and the store, a block for generating a bank response, a block for generating the electronic digital signature of the bank, a timer connected by two-way communications with the memory block , a control and processing unit and a bank response generating unit, the output of the input-output unit is connected to the input of the unit for fixing the request of the buyer and the store, the output of which is it is single with the input of the electronic digital signature control unit of the buyer and the store, the memory unit is connected by two-way communication with the customer and store request fixation unit, the buyer and store characteristics monitoring and control unit, the bank response generation unit, the bank electronic digital signature generation unit and the electronic digital control unit signatures of the buyer and the store, the outputs of which are directly and through the control unit and characteristics of the buyer and store connected to the inputs of the block the response response of the bank connected through the bank's electronic digital signature generation unit to the input / output unit input, the control and processing unit is connected by two-way communication with the customer and store request fixing unit, the customer and store electronic digital signature control unit, the customer performance monitoring and control unit, and store, the unit for forming the response of the bank and the unit for generating the electronic digital signature of the bank, the buyer’s control device further comprises Store and bank links, a goods list generation unit, a bank electronic digital signature control unit, a customer electronic digital signature generation unit, and a bank request generation unit connected by two-way communications to a control and processing unit and a memory unit interconnected by two-way communication, the output of the unit I / O through the block of fixing the parcel of the store and the bank is connected to the inputs of the control unit of the electronic digital signature of the bank and the unit for generating the electronic digital signature of the buyer, through the output of the unit for generating a request to the bank is connected to the input of the input-output unit, the other input of which is connected to the output of the unit for forming the list of goods, the store control unit further comprises a unit for fixing the buyer and the bank, a unit for generating a request for the bank, an account unit, a control electronic digital signature of the bank, the unit for generating the electronic digital signature of the store, the sending signal generating unit, connected by two-way communications with the control and processing unit and the memory unit connected by a two-way communication with each other, the input-output unit is connected by a two-way communication with the block for fixing the customer’s package and the bank connected to the inputs of the bank request generation unit, account formation unit, bank electronic digital signature control unit, the output of which and the output of the electronic digital generation unit the store’s signatures are connected to the input of the input-output block through the input signal output block; the outputs of the request generation block to the bank and the account generation block are connected to the inputs of the formative block Nia electronic digital signature of the store.

Images