WO2004090771A1

WO2004090771A1 - Electronic commerce method, electronic commerce system, authentication terminal, and authentication method by agent

Info

Publication number: WO2004090771A1
Application number: PCT/JP2003/004271
Authority: WO
Inventors: Kimitaka Murashita; Takashi Shinzaki; Shoji Suzuki
Original assignee: Fujitsu Limited
Priority date: 2003-04-03
Filing date: 2003-04-03
Publication date: 2004-10-21
Also published as: JP4078352B2; JPWO2004090771A1

Abstract

Authentication information such as passwords and biometrics information communicated over a network when electronic commerce is carried out is reliably prevented from being misappropriated. In ordering a commodity, the orderer enters authentication information into an authentication terminal (1). The authentication terminal (1) encrypts the authentication information, transmits the encrypted authentication information to an order receiver, and holds the authentication information and a decryption key. The person in charge of delivery enters the encrypted authentication information received from the authentication terminal (1) when receiving the order into the authentication terminal (1). The orderer enters data on terminal authentication representing that the orderer is the normal owner of the authentication terminal (1). The authentication terminal (1), if authenticates the orderer as the normal owner of the authentication terminal (1) by using the data, decrypts the encrypted authentication information entered by the person in charge of delivery with the decryption key in the authentication terminal (1), and collates the decrypted authentication information with the authentication information in the authentication terminal (1). The person in charge of delivery delivers the commodity to the orderer if the decrypted authentication information matches the authentication information in the authentication terminal (1).

Description

Description Electronic commerce method, electronic commerce system and authentication terminal

Authentication method by agent and technical field

The present invention relates to a technique used for electronic commerce in which personal authentication is performed using personal authentication information such as a password or digital data (biometric information) representing physical characteristics of the personal. Background art

In electronic commerce, PKI (Public Key Infrastructure) is one of the methods to authenticate a person. In this PKI, ¾ί, a Certificate Authority (hereinafter referred to as CA) issues a private key and a public key to registered users. When a user places an order for a product or the like with a trader, the user's electronic signature is encrypted with a private key and sent to the trader along with a public key. The vendor verifies that the transmitted electronic signature can be decrypted with the public key, and verifies the user against CA using the public key to authenticate that the sender is the user. PKI guarantees that user information transmitted on the network has not been altered, and that no third party has impersonated the user.

PKI uses public key encryption to ensure security on the network path. However, if a third party steals and uses the user's private key, PKI cannot determine whether it is an authorized user or an unauthorized use by a third party. Therefore, in addition to PKI, personal authentication that can certify that the individual is using the private key is required. "Words" such as passwords can only confirm whether they know or not, and cannot determine who they are or who they are.

Therefore, as an alternative to passwords, verification using biometric information has been proposed. Biometric information converts the physical characteristics of a user into data Typical biometric information includes fingerprints, palm prints, retina, iris, signs, and voice. By comparing the biometric information registered in advance with the biometric information input by the user, it is possible to confirm that the person who has input the biometric information is the user himself. As a personal authentication means using biometrics data, for example, a method disclosed in Japanese Patent Application Laid-Open No. 2001-297927 (Patent Document 1) is known. In this method, when placing an order for a product, the orderer (user) sends its biometrics information from the ordering terminal to the e-commerce server at the supplier (orderer). Then, the e-commerce server sends the orderer's biometric information to an identity verification terminal (verification terminal) located at the store designated by the orderer as the recipient. Thereafter, when the recipient requests delivery of the goods, the store clerk collects the biometric information of the recipient using the personal identification terminal, and obtains the biometric information of the orderer sent from the e-commerce server. Compare with the metrics information, and deliver the product if the biometric information matches.

However, in such electronic commerce, the biometric information must be delivered to the trader, and the biometric information may leak out by mistake. There is a possibility that fraudulent orders can be made and fraudulent transactions can be carried out. In the above-mentioned e-commerce, authentication is performed using biometric information, so that only the orderer can receive the product, and if the orderer cannot receive the product, the agent can receive the product. There was no way to receive the product.

SUMMARY OF THE INVENTION The present invention has been made in view of the above problems, and reliably prevents misuse of authentication information such as pass-through biometrics information exchanged on a network when performing electronic commerce. The first purpose is to enable the receipt of goods, etc., by not only the ordering person but also the agent designated by the ordering person.

Patent Document 1

Unexamined Japanese Patent Publication No. 2000-2997269 Disclosure of the invention

In order to achieve the above object, an electronic commerce method [1] of the present invention is a method in which an orderer places an order for goods to a contractor via a network and receives the goods. At the time of ordering, the orderer inputs authentication information for identifying the orderer to the authentication terminal. (1-2) The authentication terminal encrypts the authentication information with a predetermined encryption key, and Sends the encrypted authentication information together with the order slip of the product to the order-receiving party via the network, and holds the authentication information and a decryption key for decrypting the encrypted authentication information; At the time of delivery of the product, the delivery person on the order receiving side inputs the encrypted authentication information received from the authentication terminal at the time of ordering the product to the authentication terminal, and the orderer sets the authentication terminal Of terminal authentication to show that it is the legitimate owner of (1-4) When the authentication terminal verifies that the orderer is an authorized owner of the authentication terminal by the data transmission, the authentication terminal is input by the delivery person. The encrypted authentication information is decrypted with the decryption key held in the authentication terminal, and the decrypted authentication information is compared with the authentication information stored in the authentication terminal. If they match, the ordering person, the delivery person and the order receiving party are notified of the fact. (1-5) Upon receiving the matching check notification from the authentication terminal, the delivery person notifies the ordering person of the product. It is characterized by carrying out delivery.

The electronic commerce method [2] of the present invention is a method in which an orderer places an order for a product to a contractor via a network and receives the product. (2-1) When ordering the product, the orderer The first orderer biometric information for identifying the orderer himself is input to the authentication terminal, and (2-2) the authentication terminal encrypts the first orderer biometric information with a predetermined encryption key. Sending the encrypted first orderer biometrics information together with the ordering slip for the product to the orderer via the network, and a decryption key for decrypting the encrypted first orderer biometrics information. (2-3) At the time of delivery of the product, the delivery person in charge of the order receiving party sends the encrypted first orderer biometrics information received from the authentication terminal at the time of ordering the product, to the authentication terminal. And the ordering party The second orderer biometrics information for identifying the purchaser himself entered in the authentication terminal, (2-4) the authentication terminal is input by 該納 products responsible The PC leakage 003 is decrypted using the decryption key held in the authentication terminal, and decrypts the encrypted first orderer biometrics information, and decrypts the first orderer's biometrics information and the second orderer's biometrics. If the biometrics information matches, the orderer, the delivery person and the orderer are notified of the fact, and (2-5) a check match notification from the authentication terminal Upon receipt of the request, the delivery person in charge delivers the product to the orderer.

The electronic commerce method [3] of the present invention is a method in which an orderer places an order for a product to a contractor via a network, and an agent delegated by the orderer receives the product, (3-1) When ordering the product, the orderer inputs first orderer biometrics information for identifying the orderer to the authentication terminal, and (3-2) the authentication terminal transmits the first orderer biometric information to the authentication terminal. (3-3) When the orderer delegates the receipt of the product to an agent, the orderer transmits the metric information together with the order slip of the product to the orderer via the network. The second orderer biometrics information for identifying the orderer himself is input to the authentication terminal, and the agent sends the first agent biometrics information for identifying the agent himself to the authentication terminal. (3-4) The authentication terminal transmits the second orderer's biometric information. (3-5) At the time of delivery of the product, the delivery person in charge of the order receiving party receives the information received from the authentication terminal at the time of ordering the product. The first orderer biometrics information is input to the authentication terminal, and the agent inputs second agent biometrics information for identifying the agent himself to the authentication terminal. -6) The authentication terminal compares the second agent biometric information with the first agent biometric held in the authentication terminal, and when these agent biometric information match, The first orderer's biometric information input by the delivery person is compared with the second orderer's biometric information held in the authentication terminal, and when these orderer's biometric information match, To that effect the agent (3-7) Upon receiving a notice of matching from the authentication terminal, the delivery person executes delivery of the product to the agent. And

The electronic commerce method [4] of the present invention is a method of borrowing and borrowing money as a product between a borrower as an orderer and a financial institution as a contractor via a network, (4-1) At the time of the loan contract between the orderer and the contractor, the orderer inputs authentication information for identifying the orderer to the authentication terminal, and (4-2) the authentication terminal. Encrypts the authentication information with a predetermined encryption key, sends the encrypted authentication information to the contractor via the network, and decrypts the authentication information and the encrypted authentication information. (4-3) When the orderer refunds the money to the orderer, the orderer receives the encrypted certificate received from the authentication terminal at the time of the loan contract. While inputting authentication information to the authentication terminal, the orderer inputs data necessary for decrypting the encrypted authentication information to the authentication terminal, and (4-4) the authentication terminal inputs the data to the authentication terminal. -In the evening, the encrypted authentication information input by the contractor is stored in the authentication terminal. Decoded by the decoding key which collates the authentication information stored in the decoded authentication information and authentication in the terminal, it is characterized by storing the verification result in the authentication in the terminal.

The e-commerce method [5] of the present invention is a method of borrowing or borrowing money as a product between a borrower as an orderer and a financial institution as a contractor via a network. At the time of the loan contract between the orderer and the contractor, the orderer inputs the first orderer biometric information for identifying the orderer to the authentication terminal, and (5-2) the authentication terminal Encrypting the first orderer's biometrics information with a predetermined encryption key, sending the encrypted first orderer's biometrics information to the orderer via the network, and encrypting the first orderer's biometrics information; Holding the decryption key for decrypting the biometric information, (5-3) when the orderer refunds the money to the orderer, the orderer receives the authentication terminal at the time of the money consumption loan contract. The encrypted first ordering party biometric received from And inputting the second orderer biometrics information for identifying the orderer to the authentication terminal, and (5-4) the authentication terminal: The encrypted first issuer biometric information input by the contractor is decrypted by the decryption key held in the authentication terminal, and the decrypted first orderer biometric information and the decrypted first orderer biometric information are decrypted. (2) It is characterized by collating with the orderer biometric information and storing the collation result in the authentication terminal.

The electronic commerce method [6] of the present invention is a method in which a remitter requests a financial institution via a network from a terminal of the remitter to transfer money from an account of the remitter to a receiver. (6-1) The recipient inputs authentication information for identifying the recipient to an authentication terminal of the recipient, and (6-2) the authentication terminal uses a predetermined encryption key. The authentication information is encrypted, the encrypted authentication information is sent to the terminal of the remitter via the network, and the authentication information and a decryption key for decrypting the encrypted authentication information are held. (6-3) The sender terminal sends the encrypted authentication information from the authentication terminal to the financial institution via the network together with a remittance request, and (6-4) the recipient When receiving the money from the sender, the remittance officer of the financial institution inputs the encrypted authentication information received from the terminal of the sender to the authentication terminal, and Enter the data necessary to decrypt the encrypted authentication information into the authentication terminal, and (6-5) The terminal decrypts the encrypted authentication information input by the remittance officer with the decryption key held in the authentication terminal in response to the data transfer, and stores the decrypted authentication information and the decrypted authentication information in the authentication terminal. The stored authentication information is compared with the stored authentication information, and when the authentication information matches, the receiver and the remittance representative are notified of the fact. (6-6) The verification matching notification from the authentication terminal is received. The remittance manager transfers the money from the sender to the recipient.

An e-commerce method [7] of the present invention is a method in which a remitter requests a financial institution via a network by a terminal of the remitter to transfer money from an account of the remitter to a receiver. (7-1) The recipient inputs first recipient biometrics information for identifying the recipient to an authentication terminal of the recipient, and (7-2) the authentication terminal performs a predetermined encryption. Encrypts the first recipient biometrics information with a key, sends the encrypted first recipient biometrics information to the remitter's terminal via the network, and Holding the decryption key for decrypting the metrics information, (7-3) the remitter's terminal transmits the encrypted first recipient biometrics information from the authentication terminal together with the remittance request to the network, (7-4) The recipient When receiving money from the remitter, the remittance officer of the financial institution inputs the encrypted first recipient biometrics information received from the remitter's terminal to the authentication terminal, and Inputs the second recipient biometric information for identifying the recipient to the authentication terminal, and (7-5) the authentication terminal transmits the encrypted first reception information entered by the remittance officer. Human biometrics information, Decrypting with the decryption key held in the authentication terminal, collating the decrypted first recipient biometrics information with the second recipient biometrics information, and if these biometrics information match, it indicates so. (7-6) Notifying the receiver and the remittance clerk, (7-6) receiving the collation match notification from the authentication terminal, the remittance clerk transfers the money from the remitter to the receiver. I have.

The e-commerce method [8] of the present invention is a method in which a remitter requests a financial institution via a network using a recipient's authentication terminal to transfer money from the remitter's account to the recipient. (8-1) The receiver inputs authentication information for identifying the receiver to the receiver's authentication terminal, and (8-2) the authentication terminal uses the predetermined encryption key to Encrypts the authentication information, sends the encrypted authentication information and the remittance request to the financial institution via the network, and holds the authentication information and a decryption key for decrypting the encrypted authentication information. (8-3) When the receiver receives money from the sender, the remittance officer of the financial institution inputs the encrypted authentication information received from the authentication terminal to the authentication terminal. In addition, the recipient receives the data necessary to decrypt the encrypted authentication information. (8-4) The authentication terminal inputs the encrypted authentication information input by the person in charge of the remittance in accordance with the data, and stores the encrypted authentication information in the authentication terminal. Decrypting with the decryption key, comparing the decrypted authentication information with the authentication information held in the authentication terminal, and when the authentication information matches, notifies the recipient and the remittance officer of the fact, (8-5) The remittance officer transfers the money from the remitter to the recipient in response to the collation coincidence notification from the authentication terminal.

The electronic commerce method [9] of the present invention is a method in which a remitter requests a financial institution via a network by a recipient's authentication terminal to transfer money from the remitter's account to the recipient. (9-1) the recipient inputs first recipient biometrics information for identifying the recipient to an authentication terminal of the recipient, and (9-2) the authentication terminal Encrypting the first recipient biometrics information with the encryption key of (1), sending the encrypted first recipient biometrics information and the remittance request to the financial institution via the network, and (1) Holding a decryption key for decrypting the recipient biometrics information, (9-3) When the recipient receives money from the remitter, the remittance manager of the financial institution receives the decryption key from the authentication terminal. The encrypted first recipient biome While inputting the Trix information to the authentication terminal, the recipient inputs second recipient biometric information for identifying the recipient to the authentication terminal, and (9-4) the authentication terminal Decrypting the encrypted first recipient biometric information input by the remittance officer with the decryption key held in the authentication terminal, and decrypting the first recipient biometric information and the second recipient The biometrics information is compared with the biometrics information. If the biometrics information matches, the receiver and the remittance officer are notified of the fact. (9-5) Upon receiving the matching match notification from the authentication terminal, The remittance officer is characterized by transferring money from the sender to the recipient.

An electronic commerce system [10] of the present invention includes: an orderer-side authentication terminal that performs ordering of goods to a contractor and authenticates the orderer when receiving the goods; A network for exchanging information between the authentication terminal and an order information holding unit for holding the order information sent from the authentication terminal via the network. At the time of ordering, an authentication information input unit for inputting authentication information for identifying the orderer; an encryption unit for encrypting the authentication information input from the authentication information input unit with a predetermined encryption key; An output interface unit for sending the encrypted authentication information encrypted by the encryption unit together with an order slip as the order information to the contractor via the network; and an authentication information input unit. An authentication information holding unit for holding the authentication information input from the server; a decryption key holding unit for holding a decryption key for decrypting the encrypted authentication information encrypted by the encryption unit; A data storage unit for storing data for authenticating that the terminal is an authorized owner of the authentication terminal necessary for decrypting the authenticated authentication information in advance; and A data input section for inputting the evening, an input interface for inputting the encrypted authentication information held in the order receiving information holding section when the product is delivered, and a data input section for holding the data in the data holding section. The decrypted data is compared with the decrypted data input from the decryption input unit, and when these data match, the use of the decryption key stored in the decryption key storage unit is permitted. Receiving the verification result by the orderer authentication unit A decryption unit that decrypts the encrypted authentication information input from the input interface unit using the decryption key; and stores the authentication information decrypted by the decryption unit and the authentication information storage unit. And verify the verification result with the And a collating unit for notifying the orderer of the delivery of the product and the orderer.

An electronic commerce system [11] according to the present invention includes: an orderer-side authentication terminal that places an order for a product with a contractor and authenticates the orderer when receiving the product; A network for exchanging information between the authentication terminal and an order information holding unit for holding order information sent from the authentication terminal via the network. A biometrics information input unit for collecting and inputting the biometric information of the orderer; and, when ordering the product, encrypting the first orderer biometric information input from the biometrics information input unit by the orderer in a predetermined code. An encryption unit for encrypting with the key, and the encrypted first orderer biometric information encrypted by the encryption unit together with the order slip as the order information. An output interface unit for sending to the contractor via the network; a decryption key holding unit for holding a decryption key for decrypting the encrypted first biometrics information encrypted by the encryption unit. An input interface unit for inputting the encrypted first biometric information held in the order information holding unit when the product is delivered, and the decryption key held in the decryption key holding unit. A decryption unit for decrypting the encrypted first orderer biometrics information input from the input / output interface; a first orderer biometrics information decrypted by the decryption unit and delivery of the product At times, the orderer checks the second orderer's biometrics information input from the biometrics information input section by the orderer, and compares the check result with the orderer, the person in charge of delivery of the product, and It is characterized by comprising a collating unit for notifying the contractor.

An electronic commerce system [1 2] of the present invention includes: an orderer-side authentication terminal, which performs ordering of goods to a contractor and authenticates the goods received by an agent delegated by the orderer; And a network for exchanging information with the contractor and an order information holding unit on the contractor side for holding order information sent from the authentication terminal via the network. The authentication terminal includes: a biometrics information input unit that collects and inputs biometrics information; and a first ordering party input by the orderer input from the biometrics information input unit when ordering the product. An encrypting unit for encrypting the metric information with a predetermined encryption key; and the encrypted first orderer biometrics information encrypted by the encrypting unit together with the ordering slip as the order receiving information. An output interface unit to be sent to the contractor via the first order, a decryption key holding unit for holding a decryption key for decrypting the encrypted first biometric information encrypted by the encryption unit, An orderer biometric information holding unit that holds the second orderer biometric information input from the biometric information input unit by the orderer when the orderer delegates the receipt of the product to the agent; When the orderer delegates the receipt of the goods to the agent, the agent holds the first agent biometrics information input by the agent from the pyrometric information input unit. An agent biometrics information holding unit, an input interface unit for inputting the encrypted first orderer biometrics information held in the order information holding unit when the product is delivered, and the agent biometrics The first agent biometric information stored in the metric information storage unit is compared with the second agent biometric information input from the biometric information input unit by the agent at the time of delivery of the product. When the agent biometrics information matches, the agent authentication unit that permits the use of the decryption key held in the decryption key holding unit, and the verification result by the agent authentication unit is received. A decryption unit that decrypts the encrypted first orderer biometrics information input from the input interface unit; and a decryption unit that decrypts the encrypted first orderer biometrics information. The first orderer's biometric information is compared with the second orderer's biometric information held in the orderer's biometric information holding unit, and the matching result is compared with the orderer, the delivery person in charge of the product, and the It is characterized by comprising an orderer authentication section that notifies the contractor.

The authentication terminal [13] of the present invention is such that the orderer places an order for goods to the orderer via the network and authenticates the orderer himself when receiving the goods. This corresponds to the authentication terminal in [10].

The authentication terminal [14] of the present invention is such that the orderer places an order for goods to the orderer via a network and authenticates the orderer himself when receiving the goods. It corresponds to the authentication terminal in [1 1]. You.

The authentication terminal [15] of the present invention is for the orderer to place an order for the goods to the orderer via the network, and to authenticate the goods at the time of receiving the goods by the agent delegated by the orderer. This corresponds to the authentication terminal in the commerce system [12] described above.

The personal authentication method by an agent of the present invention [16] is a method in which the authenticator is authenticated by an agent delegated by the authenticator, and (16-1) the authenticator is the authenticator. (16-2) The authentication terminal inputs the first certifier biometric information for identifying the principal to the authentication terminal, and transmits the first certifier biometric information to the authentication terminal via a network. (16-3) When the certifier delegates to the agent, the certifier sends the second certifier biometric information for identifying the certifier himself. While inputting to the authentication terminal, the agent inputs first agent biometrics information for identifying the agent himself / herself to the authentication terminal. (16-4) The authentication terminal 2 Correspondence between certifier biometric information and the first proxy biometric information (16-5) At the time of authentication of the authenticator, the first certifier biometric information sent to the trader is input to the authentication terminal, and the agent (16-6) The authentication terminal inputs the second agent biometrics information for identifying the person into the authentication terminal, and the authentication terminal stores the second agent biometrics information and the authentication information held in the authentication terminal. The first biometrics information is compared with the first biometrics information, and if the biometrics information matches, the first biometrics biometric information input and the second biometrics biometric stored in the authentication terminal are input. The method is characterized in that the certifier is authenticated by collating with the metrics information.

According to the present invention described above, the orderer / recipient authentication information and the biometrics information are encrypted and passed to the contractor Z financial institution at the time of ordering the product, and the encrypted information is transmitted to the orderer. / Decrypted only at the recipient's authentication terminal. When the orderer / recipient receives the goods or money, the person in charge of delivery, the person in charge of the remittance, or the person who places the order Z enters the predetermined information including the above-mentioned encrypted information into the authentication terminal. The encrypted information is decrypted, and the identity of the orderer Z recipient is authenticated. Therefore, passwords and biometrics exchanged on the network when conducting e-commerce It is possible to reliably prevent authentication information such as index information from being misused.

Further, according to the present invention, the biometrics information of the agent and the biometrics information of the orderer are stored in the authentication terminal in advance, and the product is delivered (at the time of authenticating the orderer who is the certifier). In addition, the delivery person (contractor) inputs the biometric information of the orderer sent from the authentication terminal to the authentication terminal, and the agent inputs his or her own biometric information to the authentication terminal. Once the identity of the person is verified by authenticating the person, the biometric information of the orderer entered by the delivery person and the biometrics of the orderer stored in the authentication terminal in advance With the information, the identity of the orderer (certifier) is verified. Therefore, it is possible to receive the goods, etc. not only by the ordering party but also by the agent designated by the ordering party while securing security, and the convenience is greatly improved. As described above, according to the present invention, the following operation and effect can be obtained for each of the ordering party Z recipient (user), contractor / financial institution (trader), and settlement institution.

For the orderer / recipient (user), the use of PKI (key management, encryption execution) can be simplified, the use of biometrics information and impersonation due to improper ordering can be reliably prevented, and the Internet, etc., can be used. Electronic commerce can be performed with confidence. In addition, the identity of the orderer can be authenticated by an agent, greatly improving the convenience.

With regard to the contractor / financial institution (trader), it is possible to detect fraudulent orders and reliably prevent the fraudulent orders from being placed, and to reliably prevent fraudulent fraud of products due to fraudulent transactions.

As for the clearing house, fraudulent payments can be detected, and payments unintended by the ordering user (user) can be reliably prevented from being performed. BRIEF DESCRIPTION OF THE FIGURES

FIGS. 1A and 1B are diagrams for explaining a first example of the electronic commerce method of the present invention.

FIG. 2 is a flowchart for explaining the procedure of the first example of the electronic commerce method of the present invention. FIG. 3 is a diagram for explaining a second example of the electronic commerce method of the present invention.

FIG. 4A and FIG. 4B are diagrams for explaining a third example of the electronic commerce method of the present invention.

FIG. 5 is a flowchart for explaining the procedure of the third example of the electronic commerce method of the present invention.

FIG. 6A and FIG. 6B are diagrams for explaining a fourth example of the electronic commerce method of the present invention.

FIG. 7 is a flowchart for explaining the procedure of the fourth example of the electronic commerce method of the present invention.

FIG. 8 is a diagram for explaining a fifth example of the electronic commerce method of the present invention.

FIG. 9 is a diagram for explaining a sixth example of the electronic commerce method of the present invention.

FIG. 10 is a diagram for explaining a seventh example of the electronic commerce method of the present invention.

FIG. 11A, FIG. 11B and FIG. 11C are diagrams for explaining an eighth example of the electronic commerce method (identity authentication method by an agent) of the present invention.

FIG. 12A, FIG. 12B and FIG. 12C are diagrams for explaining a ninth example of the electronic commerce method (authentication method by an agent) of the present invention.

FIG. 13 is a block diagram showing a first configuration example of the electronic commerce system and the authentication terminal of the present invention.

FIG. 14 is a block diagram showing a second configuration example of the electronic commerce system and the authentication terminal of the present invention.

FIG. 15 is a block diagram showing a third configuration example of the electronic commerce system and the authentication terminal of the present invention.

FIG. 16 is a block diagram showing a fourth configuration example of the electronic commerce system and the authentication terminal of the present invention. BEST MODE FOR CARRYING OUT THE INVENTION

Hereinafter, embodiments of the present invention will be described with reference to the drawings.

[1] Electronic commerce method of the present invention (identity authentication method by agent)

The basic procedure of the electronic commerce method of the present invention, and the personal authentication method by the agent of the present invention The basic procedure of the e-commerce method including is described below.

[1-1] First Example of Electronic Commerce Method of the Present Invention

FIGS. 1A and 1B are diagrams for explaining a first example of the electronic commerce method of the present invention, and FIG. 2 is a flowchart (step S 11 to S20, S16a, S19a). The first example of this e-commerce method is a method in which an orderer places an order for goods to a contractor via a network, and the orderer himself receives the goods.

When placing an order for a product, as shown in Fig. 1A, the orderer enters authentication information for identifying the orderer into the authentication terminal 1 owned by the orderer (arrow A11 and step S1). 1). In the authentication terminal 1, the input authentication information is encrypted by a predetermined encryption key (encryption key) held in the authentication terminal 1 (block

B11 and step S12), the encrypted authentication information is sent to the contractor via the network together with the order slip (order data) of the product (see arrow A12 and step S13). At this time, the authentication information input in step S11 and a decryption key (decryption key) for decrypting the encrypted authentication information encrypted in step S12 are stored in the authentication terminal 1. Is done. In the authentication terminal 1, an authentication key (for example, a pass password) for performing user authentication as described later when the product is delivered is also stored in advance.

Next, when the contractor delivers the product, as shown in Fig. 1B, the delivery person on the contractor side owns the encrypted authentication information received from the authentication terminal 1 when ordering the product. Send to authentication terminal 1 · Enter (see arrow A 13 and step S 14). The authentication terminal 1 is equipped with a medium slot (for example, an input interface unit 20 in FIG. 13) such as a CompactFlash (registered trademark) card. The user stores the encrypted authentication information, inserts the medium into the slot, and inputs the encrypted authentication information to the authentication terminal 1. The medium for transporting the encrypted authentication information to the authentication terminal 1 is not limited to the compact flash, but may be a PC card, an IC card, a smart media (registered trademark), or a memory stick (registered trademark). It may be a medium.

In addition, the Ordering Party shall provide the data required to decrypt the encrypted authentication information (here, Inputs the personal authentication data for user authentication) to the authentication terminal 1 (arrow A 14). The authentication terminal 1 verifies whether the authentication data entered as indicated by the arrow A 14 matches the authentication key stored in the authentication terminal 1 in advance, and attempts to receive the product. The authenticating party authenticates that it is an authorized user of the authentication terminal 1 (see block B12 and step S15).

If the authentication data and the authentication key do not match and it is determined that the orderer is not a legitimate user of the authentication terminal 1 (NO route in step S16), the authentication terminal 1 informs the user of that fact and places an order. Notifying the supplier and contractor, the delivery person finishes the procedure without delivery (see step S16a). On the other hand, if the authentication data and the authentication key match and the orderer is authenticated as an authorized user of the authentication terminal 1 (YES route in step S16), the authentication terminal 1 delivers the product in step S14. The encrypted authentication information input by the person in charge is decrypted with the decryption key held in the authentication terminal 1 (see block B13 and step S17), and the decrypted authentication information and the authentication at the time of ordering are performed. The authentication information stored in the terminal 1 is checked (see block B14 and step S18).

If the authentication information does not match (NO route in step S19), the authentication terminal 1 recognizes that the current order is not made by the current user of the authentication terminal 1, and determines the collation result. The delivery person, the ordering party and the contractor are notified, and the delivery person ends the procedure without delivery (see arrow A15 and step S19a). On the other hand, if the authentication information matches (YES route in step S19), the authentication terminal 1 notifies the collation result to the delivery person, the orderer or the orderer (see arrow A15). The delivery person delivers the goods to the orderer, and the contractor executes settlement of the current transaction (see step S20).

Note that the delivery and notification of the result of authentication and verification in steps S16 and S19 to the orderer is performed, for example, by turning on an LED (Light Emitting Diode) of the authentication terminal 1.

In the first example of the electronic commerce method of the present invention, the input of information and the encryption have been completed in the authentication terminal 1 owned by the user (orderer). The decryption key for decrypting the encrypted data (encrypted authentication information) is not output to the outside of the authentication terminal 1, and the order is placed. Since the individual does not need to know what the decryption key is, the risk that the encrypted authentication information is decrypted by a third party can be reduced.

As described above, according to the first example of the electronic commerce method of the present invention, by using the authentication information (for example, the passcode and the biometrics information), it is verified that the recipient of the product is the orderer. As well as performing all processing in the authentication terminal 1 owned by the orderer, it is possible to prevent information leakage.

It is also conceivable to prepare an authentication terminal at the contractor and store the necessary information (authentication information, decryption key, authentication key) on the medium (for example, an IC card) owned by the orderer. In such a method, it is necessary to pass information to the authentication terminal possessed by the contractor. If the contractor is a malicious trader, this information may be misused. Therefore, as in the present invention, it is desirable that such information be held in the authentication terminal 1 owned by the orderer himself and not output to the outside at all.

Also, when ordering a product, in the first example above, the authentication information input by the orderer was unconditionally encrypted. However, as in the process at the time of delivery of the product, user authentication was performed using an authentication key. May be performed, and encryption may be executed when the orderer authenticates that the user is an authorized user of the authentication terminal 1. In this way, if a third party other than the owner acquires authentication terminal 1, authentication information cannot be encrypted, and this third party cannot use authentication terminal 1.

[1-2] Second example of electronic commerce method of the present invention

FIG. 3 is a diagram for explaining a second example of the electronic commerce method of the present invention.

In the second example of the electronic commerce method of the present invention, the authentication terminal 1 previously holds the orderer's own biometric information instead of the personal authentication key of the first example.

In this second example, the ordering procedure is almost the same as that of the first example (see steps 311 to 314 in Fig. 1A and Fig. 2). As shown in Fig. 3, the orderer enters his or her own biometric information instead of the authentication data in the first example (see arrow A14a). Then, the authentication terminal 1 verifies whether the biometric information input as described above matches the biometric information stored in the authentication terminal 1 in advance, and receives the product. Authenticates that he is an authorized user of authentication terminal 1 (see block B 1 2a). See).

Subsequent steps are the same as in the first example above.If the two biometrics information match and the orderer is authenticated as an authorized user of the authentication terminal 1, input is made by the delivery terminal at the authentication terminal 1. The encrypted authentication information (see arrow A13) is decrypted with the decryption key held in authentication terminal 1 (see block B13), and the decrypted authentication information and the authentication terminal at the time of order are placed. The authentication information stored in 1 is checked (see block B14). If the authentication information matches, the authentication terminal 1 notifies the collation result to the delivery person, the orderer or the orderer (see arrow A15), and the delivery person receives the product from the orderer. At the same time, the contractor will settle the transaction.

As described above, the second embodiment of the electronic commerce method of the present invention can provide the same operation and effect as those of the first embodiment. However, in the first example described above, user authentication is performed using an authentication key at the time of delivery, but if the authentication key is a password, if the password is known to a third party, the user is authenticated. The authentication terminal 1 is used by three parties. On the other hand, in the second example, the user authentication at the authentication terminal 1 is performed not by a password but by biometric information (for example, fingerprint data), so that only the owner of the authentication terminal 1 uses the authentication terminal 1. It is possible to realize e-commerce with higher security performance.

[1-3] Third Example of Electronic Commerce Method of the Present Invention

4A and 4B are diagrams for explaining a third example of the electronic commerce method of the present invention, and FIG. 5 is a flowchart for explaining the procedure of the third example of the electronic commerce method of the present invention (step S2). 1 to S29, S28a). The third example of this e-commerce method is also a method in which the orderer places an order for goods to the contractor via the network, and the orderer himself receives the goods.

When ordering a product, as shown in Fig. 4A, the orderer enters the first orderer biometric information for identifying the orderer into the authentication terminal 4 owned by the orderer (arrow A 2 1). And step S21). In the authentication terminal 4, the input first orderer biometric information is encrypted by a predetermined encryption key (encryption key) held in the authentication terminal 4 (block B21 and step S2). Two ), And the encrypted first orderer biometric information is sent to the contractor via the network together with the order slip (ordering data) for the product (see arrow A22 and step S23). At this time, a decryption key (decryption key) for decrypting the encrypted first orderer biometrics information encrypted in step S22 is held in the authentication terminal 4.

Next, when the contractor delivers the product, as shown in Fig. 4B, the delivery person on the contractor side sends the encrypted first orderer biometric information received from the authentication terminal 4 when ordering the product, Send to and input the authentication terminal 4 owned by the orderer (see arrow A23 and step S24). The authentication terminal 4 is provided with a medium slot (for example, an input interface section 46 in FIG. 15) for a compact flash (registered trademark) card or the like, as in the first example described above. Store and bring the encrypted first orderer biometrics information into a medium such as, insert the medium into the slot and input the encrypted first orderer biometrics information to the authentication terminal 4 . Then, the encrypted first orderer biometrics information input to the authentication terminal 4 is decrypted by the decryption key held in the authentication terminal 4 (see block B22 and step S25).

In addition, the orderer enters the second orderer biometric information for identifying the orderer himself into the authentication terminal 4 again at the time of delivery (see arrow A24 and step S26). Note that the decoding timing in step S25 and the input timing in step S26 may be reversed.

Thereafter, the authentication terminal 4 compares the first orderer biometric information decrypted in step S25 with the second orderer biometric information input to the authentication terminal 4 at the time of delivery in step S26. (See block B23 and step S27). If the orderer biometrics information does not match (NO route in step S28), the authentication terminal 4 recognizes that the current order is not from the current user of the authentication terminal 4, and performs the verification. The result is notified to the person in charge of delivery, the orderer or the order receiver, and the person in charge of delivery finishes the procedure without performing delivery (see arrow A25 and step S28a). On the other hand, if the orderer biometrics information matches (YES route in step S28), the authentication terminal 4 sends the collation result to the person in charge of delivery, Notify the orderer and contractor (see arrow A25), the delivery person delivers the goods to the orderer, and the contractor executes the settlement of this transaction (see step S29).

In step S28, notification of the result of authentication and verification to the delivery person and the orderer is performed by, for example, turning on the LED (Light Emitting Diode) of the authentication terminal 4, as in the first example. It is.

As described above, according to the third example of the e-commerce method of the present invention, since the orderer verification is performed using the biometric information, not only the same operation and effect as in the first example but also the password can be obtained. It is possible to secure higher security performance than the case where orderer verification is performed using such authentication information.

[1-1-4] Fourth example of electronic commerce method of the present invention

6A and 6B are diagrams for explaining the fourth example of the electronic commerce method of the present invention, and FIG. 7 is a flowchart for explaining the procedure of the fourth example of the electronic commerce method of the present invention (step S3). 1 to S42, S40a). The fourth example of this e-commerce method is also a method in which the orderer places an order for goods to the contractor via the network and the orderer himself receives the goods. This fourth example is shown in Figs. 4A and 4 In the e-commerce method shown in B, the encryption key is automatically generated and the decryption key is deleted at the timing described later.

When placing an order for a product, as shown in Fig. 6A, the orderer enters the first orderer biometric information for identifying the orderer into the authentication terminal 4 owned by the orderer (arrow A21). And step S31). In the authentication terminal 4, each time the first orderer's biometrics information is input, a predetermined encryption key (encryption key) and an encryption key for decrypting the encryption information encrypted by the encryption key are used. A decryption key (decryption key) is automatically generated (see block B20 and step S32). Then, the first orderer biometric information entered in step S31 is encrypted by the encryption key generated in step S32 (see block B21 and step S33), Upon completion of the encryption, the encryption key is deleted (see block B20 and step S34). Also, the encrypted first orderer biometric information is sent to the ordering party via the network together with the ordering slip for the product (orders received overnight) (see arrow A22 and step S35). Step S 3 The decryption key generated in 2 is held in the authentication terminal 4.

Next, as shown in Fig. 6B, when the contractor delivers the product, as in the third example, the contractor on the contractor side receives the encrypted first item received from the authentication terminal 4 when ordering the product, as shown in Fig. 6B. Send and input the orderer biometric information to the authentication terminal 4 owned by the orderer (see arrow A23 and step S36). The delivery person also stores the encrypted first orderer biometrics information in a medium such as compact flash, and authenticates the encrypted first orderer biometrics information from the medium. Input to terminal 4. Then, the encrypted first orderer biometrics information input to the authentication terminal 4 is decrypted by the decryption key held in the authentication terminal 4 (see block B22 and step S37).

Further, the orderer inputs the second orderer biometric information for identifying the orderer himself into the authentication terminal 4 again at the time of delivery (see arrow A24 and step S38). As in the third example, the decoding timing in step S37 and the input timing in step S38 may be reversed.

After that, the authentication terminal 4 verifies the first orderer biometric information decrypted in step S37 with the second orderer biometric information input to the authentication terminal 4 at the time of delivery in step S38. (See block B23 and step S39). If the orderer biometrics information does not match (NO route in step S40), the authentication terminal 4 recognizes that the current order is not from the current user of the authentication terminal 4 and checks the order. The result is notified to the person in charge of delivery, the orderer or the order receiver, and the person in charge of delivery finishes the procedure without performing delivery (see arrow A25 and step S40a). On the other hand, if the orderer biometrics information matches (YES route in step S40), the authentication terminal 4 deletes the decryption key (see block B24 and step S41 in FIG. 7). ), And notifies the collation result to the delivery person, the ordering party and the order receiving party (see arrow A25), and the delivery person delivers the product to the ordering party, and the ordering party executes the settlement of this transaction (step S42).

In step S40, notification of the result of authentication and verification to the delivery person and the orderer is performed by, for example, turning on the LED (Light Emitting Diode) of the authentication terminal 4, as in the third example. It is. As described above, in the fourth example of the e-commerce method of the present invention, the first orderer biometrics information is encrypted and transmitted to the ordering party when ordering the product, but the encryption key required at that time is used.ゃ A decryption key is automatically generated in the authentication terminal 4 every time a product is ordered, and the encryption key is deleted when the encryption is completed, and the decryption key is deleted when the orderer verification is completed at the time of delivery. I have. As a result, the encrypted first orderer biometrics information is valid only for one order, and the encrypted first orderer biometrics information that has completed the prescribed e-commerce is the authentication that generated it. Even terminal 4 will not be able to decrypt.

Therefore, even if the encrypted first orderer biometrics information is leaked to a third party, even if the orderer himself / herself cannot complete the transaction after the transaction is completed, it cannot be decrypted. There is no risk of being misused by the three parties. In addition, when a delivery is performed that is not intended by the user (the orderer), the encrypted first issuer biometrics information brought by the orderer (the person in charge of the delivery) cannot be decrypted by the authentication terminal 4. The orderer can establish that it is not a legitimate order.

As described above, according to the fourth example of the electronic commerce method of the present invention, not only the same operation and effect as those of the third example described above can be obtained, but also higher security performance can be ensured.

In the fourth example, the method of automatically generating an encryption key and a decryption key as described above and erasing these keys at a predetermined timing was applied to the e-commerce method shown in FIGS. 4A and 4B. Although the case has been described, the present invention is not limited to this, and the above-described method is applied to the electronic commerce method shown in FIGS. 1A and 1B and the electronic commerce method shown in FIG. The same operation and effect as in the fourth example can be obtained.

[1-1-5] Fifth example of electronic commerce method of the present invention

FIG. 8 is a diagram for explaining a fifth example of the electronic commerce method of the present invention. The fifth example of this e-commerce method is also a method in which the orderer places an order for goods to the contractor via the network, and the orderer himself receives the goods. This fifth example is shown in Figs. 4A and 4 In the e-commerce method shown in B, PKI is incorporated at the time of order placement, as described later. As shown in Fig. 8, prior to ordering the product, the orderer receives the orderer's private key A and public key A from the certificate authority (CA) (see arrow A31), and places it in the authentication terminal 4. Hold. Similarly, the contractor receives the contractor's private key B and public key B from the certificate authority (see arrow A32).

When placing an order for a product, the orderer receives the contractor's public key B from the contractor and stores it in the authentication terminal 4 owned by the orderer (see arrow A33). Enter the first orderer's biometric information to identify the principal (see arrow A34). The authentication terminal 4 encrypts the first orderer's biometrics information (authentication information in the case of the method shown in FIG. 1A) with an encryption key (see block B31), and also signs the orderer's electronic signature. Encrypt with the client's private key A (see block B32). Then, the encrypted first orderer biometric information, the encrypted electronic signature, and the orderer's public key A are further encrypted using the orderer's public key B (see block B33). (See arrow A35). The contractor decrypts the information received from the client (authentication terminal 4) with the contractor's private key B, and confirms that the data has not been tampered with or impersonated on the network.

The subsequent procedure for the contractor to deliver the product is as described with reference to Fig. 4A.

As described above, according to the fifth example of the e-commerce method of the present invention, not only the same operation and effect as in the third example described above can be obtained, but also the information Falsification and spoofing can be prevented, and higher security performance can be secured.

In the fifth example, in the electronic commerce method shown in FIGS. 4A and 4B, the case where the PKI is incorporated at the time of ordering the product has been described. However, the present invention is not limited to this. The method shown is the same as the fifth example in the e-commerce method shown in FIGS. 1A and 1B, the e-commerce method shown in FIG. 3, and the e-commerce method shown in FIGS. 6A and 6B. This is applied, and the same operation and effect as the fifth example can be obtained.

[11-6] Sixth example of electronic commerce method of the present invention

FIG. 9 is a diagram for explaining a sixth example of the electronic commerce method of the present invention. This electron The sixth example of the commercial transaction method is also a method in which the orderer places an order for goods via the network to the contractor, and the orderer himself receives the goods.In this sixth example, the ordering method shown in FIGS. 4A and 4B is used. The following describes the settlement procedure after delivery in the electronic commerce bow I method shown in more detail. After ordering the product in accordance with the procedure shown in Fig. 4A, when the contractor delivers the product, as shown in Fig. 9, the delivery person on the contractor side receives the encryption received from the authentication terminal 4 when ordering the product. Send the converted first orderer biometric information to the authentication terminal 4 owned by the orderer and enter it (see arrow A41). Then, the encrypted first orderer biometrics information input to the authentication terminal 4 is decrypted with the decryption key held in the authentication terminal 4 (see block B41). In addition, the orderer inputs the second orderer's pyometrics information for identifying the orderer to the authentication terminal 4 again upon delivery (see arrow A42).

Thereafter, the authentication terminal 4 checks the decrypted first orderer biometric information and the second orderer biometric information input to the authentication terminal 4 at the time of delivery (see block B42). When the orderer biometrics information matches, the authentication terminal 4 notifies the collation result to the person in charge of delivery, the orderer or the contractor (see arrow A43), and the person in charge delivers the product to the orderer. At the same time, the contractor executes the settlement of this transaction.

At that time, the verification result by the authentication terminal 4 is sent from the contractor to the clearing house along with the payment request (see arrow A44), and the clearing house receives the verification result and executes the payment of the product. Notify the ordering party (see arrow A45).

As described above, according to the sixth example of the electronic commerce method of the present invention, not only the same operation and effect as in the third example described above can be obtained, but also when the settlement institution executes the settlement, Payment by receiving the payment, it is possible to prevent the payment from being executed before the delivery of the product, and to prevent the execution of the payment due to improper ordering, thereby ensuring higher security performance. .

Note that, in the sixth example, the delivery and settlement procedure after ordering the product according to the procedure shown in FIG. 4A has been described. However, the present invention is not limited to this, and the delivery and settlement procedure shown in FIG. The settlement methods include the e-commerce method shown in Figs. 1A and 1B, the e-commerce method shown in Fig. 3, the e-commerce method shown in Figs. 6A and 6B, and the e-commerce method shown in Fig. 8. The same is applied to the commercial transaction method as in the sixth example, and the same operation and effect as in the sixth example can be obtained.

[1-7] Seventh example of electronic commerce method of the present invention

FIG. 10 is a diagram for explaining a seventh example of the electronic commerce method of the present invention. The seventh example of this e-commerce method is also a method in which the orderer places an order for goods to the contractor via the network, and the orderer himself receives the goods. In the child commerce method, the PKI mechanism is applied not only to the ordering party and contractor, but also to the decision-making body.

As shown in FIG. 10, the orderer-owned authentication terminal 4 holds the orderer's private key A and public key A issued by the certificate authority (CA), as in the fifth example above. The public key of the clearing house issued by the CA to the clearing house is sent from the clearing house to the authentication terminal 4 of the ordering party and is retained (see arrow A51).

Then, after ordering the goods according to the procedure shown in Fig. 8, when the contractor delivers the goods, as shown in Fig. 10, the delivery person in charge of the contractor receives the order from the authentication terminal 4 at the time of ordering the goods. Send the received encrypted first orderer biometrics information to the authentication terminal 4 owned by the orderer and enter it (see arrow A52). Then, the encrypted first orderer biometrics information input to the authentication terminal 4 is decrypted with the decryption key held in the authentication terminal 4 (see block B51). In addition, the orderer inputs the second orderer biometric information for identifying the orderer himself into the authentication terminal 4 again at the time of delivery (see arrow A53).

Thereafter, the authentication terminal 4 checks the decrypted first orderer biometrics information against the second orderer biometrics information input to the authentication terminal 4 at the time of delivery (see block B51). If the orderer biometrics information matches, the authentication terminal 4 notifies the collation result to the delivery person, the orderer and the contractor (see arrow A54), and the delivery person delivers the product to the orderer. .

The authentication terminal 4 encrypts the electronic signature of the ordering party with the ordering party's private key A when notifying the ordering result or the settlement institution (see block B 52). , The encrypted electronic signature and the public key A of the ordering party are further encrypted using the public key C of the clearing house (see block B53), and transmitted to the clearing house via the contractor. Send (see arrow A55).

Then, the clearing house decrypts the encrypted verification result from the authentication terminal 4 with the private key C of the clearing house (which is paired with the public key C issued by the certificate authority in advance) and decrypts the verification result. And executes the settlement of the product according to the decryption and collation result. As described above, according to the seventh example of the electronic commerce method of the present invention, not only the same operation and effect as those of the fifth example described above can be obtained, but also the PKI mechanism can be provided not only to the ordering party and the order receiving party but also to a decision-making body. By using the result of decryption and collation by the payment institution, the falsification and impersonation on the network can be removed, and electronic commerce that can perform more reliable personal authentication can be realized.

Note that, in the seventh example, the delivery and settlement procedure after placing an order for a product according to the procedure shown in FIG. 8 has been described. However, the present invention is not limited to this, and the delivery and settlement shown in FIG. The method is applied to the e-commerce method shown in Fig. 1A and Fig. 1B, the e-commerce method shown in Fig. 3, and the e-commerce method shown in Figs. 6A and 6B in the same way as in the seventh example. Thus, the same function and effect as those of the seventh example can be obtained.

In the first to seventh examples of the e-commerce method of the present invention described above, at the time of product delivery, the encrypted authentication information or the encrypted first orderer biometrics in the authentication terminals 1 and 4 owned by the orderer. The information is decrypted, and the decrypted information is compared with the authentication information or the second orderer biometric information entered by the orderer at the time of delivery. As a result, the orderer can place an order that can authenticate himself only by inputting authentication information or biometrics information into the authentication terminals 1 and 4 when ordering a product. At this time, the authentication information and biometrics information are encrypted and sent to the contractor, so even if the encrypted information leaks out, it can be prevented from being misused by a malicious third party. . In addition, when using PKI, by maintaining private keys and public keys in the authentication terminals 1 and 4 and managing them with authentication information or biometric information, key management with high security performance can be performed easily. . On the other hand, the contractor can reliably perform the identity authentication of the orderer at the time of delivery and settlement of the product, thereby eliminating fraudulent transactions by a malicious person and reducing business risk.

[1-1 8] Eighth Example of Electronic Commerce Method of the Present Invention By the way, in the e-commerce method described above, the ordering party must always receive the delivery, and the agent cannot receive the goods. In general, the orderer and the recipient of the product are often different, and an authorized representative delegated by the orderer should be able to receive the item ordered by the orderer.

FIG. 11A, FIG. 11B and FIG. 11C are diagrams for explaining the eighth example of the electronic commerce method (authentication method by an agent) of the present invention. This is a method in which the orderer places an order for goods to the contractor via the network, and the agent appointed by the orderer receives the goods.

When placing an order for a product, as shown in Fig. 11A, the ordering party (certifier) uses the authentication terminal 7A owned by the ordering party to identify the ordering party (certifier) as the first orderer. Enter biometrics information (first certifier biometrics information) A (see arrow A61). At the authentication terminal 7A, the entered first orderer biometric information A is sent to the orderer (a company that requires the authentication result of the certifier) along with the order slip (order data) for the product via the network. (See arrow A62 and block B61).

Thereafter, if the orderer cannot authenticate the user when receiving the goods, the orderer will delegate the goods to an agent. At this time (at the time of agent registration), as shown in Fig. 11B, the authentication terminal 7A sends the orderer's second orderer biometric information (the second certifier (Biometrics information) Enter B again (see arrow A63), and the agent delegated by the orderer inputs the first agent biometrics information C for identifying the agent himself (arrow A6). 4), the authentication terminal 7A stores and holds the second orderer biometrics information B and the first agent biometrics information C in association with each other (see block B62).

Next, when the contractor delivers the product (at the time of authentication of the certifier), as shown in Fig. 11C, the delivery person on the contractor side receives the first item received from the authentication terminal 7A when ordering the product. Send the orderer biometrics information A to the authentication terminal 7A owned by the agent on behalf of the orderer (certifier) and enter it (see arrow A65). At this time, the authentication terminal 7A is equipped with a medium slot such as a CompactFlash (registered trademark) card, as in the first example, and the delivery person is in charge of a medium such as a CompactFlash. The first orderer's biometrics information A is stored and brought into the slot, the medium is inserted into the slot, and the first orderer's biometrics information A is input to the authentication terminal 7A. At the time of delivery (at the time of authentication), the agent again inputs the second agent biometrics information D for identifying the agent itself to the authentication terminal 7A (see arrow A66). Then, the authentication terminal 7A compares the first agent biometric information C held in the authentication terminal 7A with the second agent biometric information D newly input by the agent at the time of delivery. Authenticate that the agent trying to receive the goods is an authorized agent delegated by the client (see block B63). If the proxy biometrics information C and D do not match and the receipt is recognized as not an authorized representative, the authentication terminal 7A informs the delivery staff, the recipient (agent) and the contractor of the fact. Notify and the delivery person ends the procedure without delivery. On the other hand, if these agent biometric information C and D are matched and the recipient is authenticated as an authorized agent, the authenticating terminal 7A uses the first biometric information entered by the delivery person in charge. The metric information A is compared with the biometric information of the second orderer stored in the authentication terminal 7A, and the identity of the orderer (authenticater) is authenticated (see block B64).

If the orderer biometrics information A and B do not match, the authentication terminal 7A recognizes that this order is not from the current user of the authentication terminal 7A, and the verification result (authentication result). ) Is notified to the delivery person, agent or contractor (see arrow A67), and the delivery person ends the procedure without delivery. On the other hand, if the orderer biometrics information A and B match, the authentication terminal 7A notifies the collation result (authentication result) to the delivery person, agent or contractor (arrow A67). Delivery) hands over the goods to the agent, and the contractor setstle the transaction.

As described above, according to the eighth example of the e-commerce method of the present invention, the authentication terminal 7A stores the biometric information C of the agent and the biometric information B of the orderer in advance, and At the time (at the time of authentication of the orderer who is the certifier), the delivery person (business person) inputs the biometric information A of the orderer sent from the authentication terminal 7A to the authentication terminal 7A, and the agent Use own biometrics information D as authentication terminal The authentication terminal 7A first performs identity authentication of the agent, and if the agent is authenticated as the authorized person (authorized agent), the biometric information of the issuer entered by the delivery person Based on A and the biometric information B of the orderer stored in the authentication terminal 7A in advance, the identity of the orderer (authenticater) is authenticated. Therefore, it is possible to receive not only the ordering person but also the agent designated by the ordering person while receiving the product, etc., while ensuring security, and the convenience is greatly improved.

Although not shown in FIGS. 11A to 11C, it is desirable to delete the biometric information B and C in the authentication terminal 7A after the authentication of the orderer in block B64 is completed. As a result, authentication by the agent can be performed only once, and abuse by the agent can be controlled.

In the eighth example, the orderer inputs the biometric information A and B at the time of ordering the product and at the time of registering the agent, respectively. The input information A for the first time (at the time of ordering the product) may be stored in the authentication terminal 7A, and when the agent is registered, the stored biometrics information A may be used as the biometrics information B. Unauthorized acts such as registering an agent without the authentication terminal 7A being authenticated by an unauthorized agent without obtaining the orderer's authentication may occur. Therefore, as described above, it is desirable that the biometrics information B of the ordering party be input and stored again when the agent is registered.

[11-9] Ninth Example of Electronic Commerce Method of the Present Invention

FIG. 12A, FIG. 12B and FIG. 12C are diagrams for explaining a ninth example of the electronic commerce method (identity authentication method by an agent) of the present invention. The ninth example is also a method in which the orderer places an order for goods to the contractor via a network, and the agent commissioned by the orderer receives the goods. In the eight cases, the first orderer biometrics information A sent directly from the ordering party to the order receiving party is encrypted. That is, the ninth example is a combination of the methods of the first to seventh examples (particularly, the first or third example) and the method of the eighth example. When placing an order for a product, as shown in Figure 12A, the ordering party (certifier) sends the first ordering party biome- ter to identify the ordering party (certifier) to the authentication terminal 7 owned by the orderer. Matrix information (1st certifier biometrics information) Enter A (see arrow A 71) See). At the authentication terminal 7, the input first orderer biometric information A is encrypted by a predetermined encryption key (encryption key) held in the authentication terminal 7 (see block B71), and The encrypted first orderer biometrics information A is sent to the contractor (a company that requires the authentication result of the certifier) via the network together with the order slip for the product (order receipt) (arrow A7). 2 and block B 71). At this time, a decryption key (decryption key) for decrypting the encrypted first orderer biometrics information A encrypted in the block B 71 is held in the authentication terminal 7.

Thereafter, if the orderer cannot authenticate the user when receiving the goods, the orderer will delegate the goods to an agent. At this time (at the time of agent registration), as shown in FIG. 12B, the authentication terminal 7 previously sends the ordering party's second ordering party pieometrics information (the second authenticating party) to identify the ordering person himself / herself. Biometrics information) B is input again (see arrow A73), and the agent delegated by the orderer inputs the first agent biometrics information C for identifying the agent itself (arrow A74), the authentication terminal 7 stores and holds the decryption key, the second orderer biometrics information B, and the first agent biometrics information C in association with each other (see block B72). Next, when the contractor delivers the product (at the time of authentication of the certifier), as shown in Fig. 12C, the contractor on the contractor side receives the encrypted product received from the authentication terminal 7 when ordering the product. The first orderer biometrics information A is sent to the authentication terminal 7 owned by the agent on behalf of the orderer (certifier) and entered (see arrow A75). At this time, the authentication terminal 7 is equipped with a medium slot such as a compact flash (registered trademark) card, as in the first example, and the delivery person is responsible for encrypting the medium in a medium such as a compact flash. The stored first orderer biometrics information A is stored and brought into the slot, and the encrypted first orderer biometrics information A is input to the authentication terminal 7.

At the time of delivery (at the time of authentication), the agent again inputs the second agent pyrometrics information D for identifying the agent himself / herself to the authentication terminal 7 (see arrow A76).

Then, the authentication terminal 7 compares the first agent biometric information C held in the authentication terminal 7 with the second agent biometric information newly input by the agent at the time of delivery. Verifies Rix information D and authenticates that the agent trying to receive the goods is an authorized agent authorized by the orderer (see block B73).

If the proxy biometrics information C and D do not match and the recipient is recognized as not an authorized representative, the authentication terminal 7 informs the delivery person, the recipient (agent) and the contractor of the fact. Then, the delivery person finishes the procedure without delivery. On the other hand, if the proxy biometrics information C and D are matched and the recipient is authenticated as an authorized proxy, the authentication terminal 7 converts the encrypted biometrics information A input by the delivery person into the authentication information. It is decrypted with the decryption key held in the terminal 7 (see block B 74), and the first orderer biometrics information A decrypted in the block B 74 and the decryption key stored in the authentication terminal Ί. (2) The ordering party biometrics information B is compared with, and the identity of the ordering party (certifier) is verified (see block B75). If the orderer biometrics information A and B do not match, the authentication terminal 7A recognizes that this order is not from the current user of the authentication terminal 7, and the verification result (authentication result) Is notified to the delivery person, agent or contractor (see arrow A77), and the delivery person ends the procedure without delivery. On the other hand, if the orderer biometrics information A and B match, the authentication terminal 7 notifies the collation result (authentication result) to the delivery person, agent or contractor (see arrow A77). ), The delivery person delivers the goods to the agent, and the contractor executes the settlement of this transaction. As described above, according to the ninth example of the electronic commerce method of the present invention, not only the same operation and effect as the eighth example but also the same operation and effect as the first and third examples can be obtained. Can be

Also in the ninth example, a method of automatically generating an encryption key and a decryption key and erasing these keys at a predetermined timing as in the fourth example may be applied. The methods described in the examples to the seventh example may be applied.

[111] 10th Example of Electronic Commerce Method of the Present Invention

In the tenth example (not shown) of the e-commerce method of the present invention, when the orderer authentication (see blocks B64 and B75) of the eighth and ninth examples described above is performed, the first orderer If the biometrics information A and the second orderer's biometrics information B match exactly the same, the authentication terminals 7A and 7 will recognize that the matching does not match (authentication is not possible). It has become.

Generally, different biometric information is collected each time. For example, if the biometrics information is fingerprint data, the fingerprint data that is collected will differ every time depending on the finger pressure, humidity, temperature, humidity, etc. at the time of fingerprint data collection. Therefore, if the two fingerprint data completely match, it is expected that fingerprint data obtained illegally by some means (for example, by collecting a fingerprint and digitizing it) is used.

In order to eliminate such misconduct, in Example 10, if the biometrics information A and B at the time of orderer authentication at the authentication terminals 7A and 7 completely match, "authentication is not possible" . As a result, higher security performance can be ensured. ·

[111] 1st Example of Electronic Commerce Method of the Present Invention

In the eleventh example (not shown) of the e-commerce method of the present invention, among the e-commerce methods described above, the first orderer biometric information (first certifier biometric information) is encrypted and the orderer ( The authentication terminal owned by the ordering party (certifier) must encrypt the first ordering party biometric information before encrypting the first ordering party biometric information when ordering the product. A specific reversible process is performed, and when the product is delivered (at the time of authentication), the decrypted first orderer biometrics information is processed in the reverse order to the reversible process performed when the product was ordered, and the first orderer is processed. Restore biometric information.

As a result, even if the encryption of the encrypted first metric biometrics information is broken, it can be prevented from being diverted by a third party, and higher security performance can be secured. be able to.

Specifically, when the biometric information is a fingerprint image, the fingerprint image is expanded and contracted in a specific pattern. For example, the top of the image is stretched vertically, and the bottom of the image is stretched horizontally. At this time, the parameters of the applied processing (weighting factors for enlargement) are stored in the authentication terminal. With this processing, the fingerprint data is different from the original fingerprint, and the original fingerprint image cannot be obtained by a third party. Furthermore, by changing the processing parameters every time, It becomes a fingerprint image, making it more difficult to analogize the original fingerprint image.

[111] 1st and 2nd examples of the electronic commerce method of the present invention

In a first example (not shown) of the e-commerce method according to the present invention, in the first to eleventh examples of the e-commerce method described above, the contractor (trader) is a financial institution and the orderer is a financial institution. A borrower who borrows money from an institution, and rents money as a product between the ordering party and the contractor. In this case, the time of ordering the product corresponds to the time of the loan contract between the borrower and the financial institution, and the time of the above-mentioned ordering of the product corresponds to the time when the borrower or agent borrows money from the financial institution. This corresponds to the time of delivery (at the time of certification). As described above, by using the first to eleventh examples of the electronic commerce method of the present invention, it is possible to establish a money borrowing business by exchanging money as commodities.

Specifically, the borrower (the ordering party) applies for a loan (money consumption loan contract) to a loan company (a contractor, a financial institution) through a network such as the Internet. At that time, the borrower's biometrics information (first orderer's biometrics information) is sent to the loan company along with the application. When delivering money to the borrower, the loan company inputs the biometric information received from the borrower at the time of application to the borrower's authentication terminal, and the beneficiary of the loan uses the biometric information to Authentication of the identity of the applicant is performed.

Until now, when lending or lending money, the borrower (the ordering party) had to go to the teller's window or the ATM (Automated Teller Machine) terminal of the leasing company to make a money consumption loan agreement. 12 As explained in the second example, by applying the first to eleventh examples above, a loan contract for money consumption can be made at home using the Internet, etc. The agent designated by the borrower (the ordering party) can receive the money.

Until now, a leading company (financial institution) has acquired customers by arranging unmanned stores and other places in the city. However, ATM terminals in unmanned stores had problems such as being robbed at night, and such problems had become a business risk for loan companies. Therefore, the method described in the first and second examples described above should be used. If the borrower has an authentication terminal, he or she can apply for a loan at an Internet cafe or other location that can be connected to the Internet, and the loan company dispatches a clerk from a manned store (branch) to make money. Can be delivered. Therefore, loan companies do not need to open unmanned stores, which can significantly reduce business risks such as robbery.

[111] 13th Example of Electronic Commerce Method of the Present Invention

A thirteenth example (not shown) of the e-commerce method of the present invention is a method of lending and borrowing money as a product between a borrower as an orderer and a financial institution as an orderer through a network. It relates to a method of leaving a history of the borrower making a refund. In the thirteenth example, as will be described below as first to third embodiments, electronic commerce is basically performed in substantially the same procedure as in the first to third examples.

The first embodiment of the thirteenth example is executed according to the same procedure as in the first example, and specifically, is executed in the following procedures I-1 to I-4.

① -1 At the time of the loan contract between the borrower and the financial institution, the borrower inputs the authentication information for identifying the borrower to the borrower's authentication terminal 1 (see FIGS. 1A and 1B). I do.

① -2 Authentication terminal 1 encrypts the authentication information with a predetermined encryption key, sends the encrypted authentication information to the financial institution via the network, and decrypts the authentication information and the encrypted authentication information. And hold the key.

① -3 When the borrower refunds money to the financial institution, the financial institution inputs the encrypted authentication information received from the authentication terminal 1 to the authentication terminal 1 at the time of the monetary loan contract, and the borrower Data required to decrypt encrypted authentication information

(For example, a personal authentication key such as a password) is input to the authentication terminal 1.

①-4 The authentication terminal 1 checks the data entered in the above step ②-3 against the personal authentication key stored in the authentication terminal 1 in advance, and if they match, it is input by the financial institution. Decrypts the encrypted authentication information with the decryption key held in the authentication terminal 1, compares the decrypted authentication information with the authentication information held in the authentication terminal 1, and compares the matching result with the authentication terminal 1. Store in. As a result, it is authenticated that the borrower has made the refund, and the refund history is left in the authentication terminal 1. The second embodiment of the thirteenth example is executed by applying the same procedure as that of the second example to the first embodiment of the thirteenth example. That is, in the second embodiment, in step ①-2 above, the authentication terminal 1 (see FIG. 3) holds the borrower's biometric information together with the authentication information and the decryption key, and in step ①-3 above. However, the borrower inputs his / her biometric information to the authentication terminal 1 as data necessary for decrypting the encrypted authentication information, and in the above procedure ①-4, the authentication terminal 1 The input biometrics information is compared with the biometrics information stored in the authentication terminal 1 in advance, and if the biometrics information matches, the encrypted authentication information is stored in the authentication terminal 1. Decrypt with the decryption key.

Furthermore, the third embodiment of the thirteenth example is executed according to the same procedure as that of the third example, and specifically, is executed in the following procedures I-1 to I-4.

②-1 At the time of the loan contract between the borrower and the financial institution, the borrower (the ordering party) sends the first ordering party's pyrometrics information for identifying the borrower to the borrower's authentication terminal 4 ( (See Figure 4A and 4B).

② -2 authentication terminal 4 encrypts the first orderer's biometrics information with a predetermined encryption key, sends the encrypted first orderer's biometrics information to the financial institution via the network, and encrypts it. Holds the decryption key for decrypting the first orderer's biometrics information.

②-3 When the borrower refunds money to the financial institution, the financial institution inputs the encrypted first orderer biometrics information received from the authentication terminal 4 at the time of the monetary loan contract to the authentication terminal 4, The borrower (the ordering party) inputs the second ordering party biometrics information for identifying the borrower into the authentication terminal 4.

② -4 Authentication terminal 4 decrypts the encrypted first orderer biometrics information input by the financial institution with the decryption key held in authentication terminal 4, and decrypts the first orderer biometrics information. It is compared with the second orderer biometrics information input in the above procedure ②-3, and the matching result is stored in the authentication terminal 4. As a result, it is authenticated that the borrower has made the refund, and the refund history is left in the authentication terminal 4. By using the method of the 13th example, when the borrower who borrowed money by the method of the 12th example described above returns to the loan company (financial institution), as described above, the authentication information including the biometric information is used. It is authenticated that the borrower has made a refund by using, and the refund history can be reliably left in the authentication terminals 1 and 4.

In addition, by further applying the methods described in the eighth to tenth examples to the thirteenth example, the agent designated by the borrower can authenticate the refund on behalf of the borrower and refund the money. The history can be left in the authentication terminal. The method described in the fourth to seventh examples may be further applied to the thirteenth example. In this case, the same operation and effect as those in the fourth to seventh examples are obtained. Can be.

[1-1 4] 14th Example of Electronic Commerce Method of the Present Invention

The 14th example (not shown) of the e-commerce method of the present invention is a method in which a remitter requests a financial institution via a network from a remitter's terminal to transfer money from a remitter's account to a receiver. is there. Specifically, the case where the sender and the receiver are separated from each other.-The terminal owned by the sender and the authentication terminal owned by the receiver are connected to be able to communicate with each other via a network. This is a method for remittance to recipients who do not have an account with the above financial institution. In the fourteenth example, as will be described below as first to third embodiments, electronic commerce is basically performed in substantially the same procedure as in the first to third examples.

The first embodiment of the 14th example is executed according to the same procedure as the above-mentioned first example, and specifically, is executed in the following steps ③-1 to ③-6.

③ -1 The recipient inputs authentication information for identifying the recipient to the recipient's own authentication terminal 1 (see Fig. 1A and Fig. 1B).

③ -2 The authentication terminal 1 encrypts the authentication information with a predetermined encryption key, sends the encrypted authentication information to the sender's terminal via the network, and sends the authentication information and the encrypted authentication information. And a decryption key for decrypting.

③ -3 The sender's terminal sends the encrypted authentication information from authentication terminal 1 together with the remittance request to the financial institution via the network.

③ -4 When the receiver receives the money from the sender, the remittance officer of the financial institution enters the encrypted authentication information received from the sender's terminal into the authentication terminal 1 owned by the receiver. And the recipient has the data needed to decrypt the encrypted credentials

③ -5 Authentication terminal 1 checks the data entered in step ③-4 above against the authentication key stored in authentication terminal 1 in advance, and if they match, it is entered by the person in charge of remittance. Decrypts the encrypted authentication information with the decryption key held in the authentication terminal 1, compares the decrypted authentication information with the authentication information held in the authentication terminal 1, and the authentication information matches. If so, notify the recipient and remittance officer.

(3) Upon receiving the matching notification from the -6 authentication terminal 1, the remittance officer hands over the money from the sender to the recipient.

Further, the second embodiment of the fourteenth example is executed by applying the same procedure as that of the second example to the first embodiment of the fourteenth example described above. That is, in the second embodiment, in step ③-2 above, the authentication terminal 1 (see FIG. 3) holds the biometric information of the orderer along with the authentication information and the decryption key, and in step ③-4 above. The recipient inputs his / her biometric information to the authentication terminal 1 as a necessary data for decrypting the encrypted authentication information, and in the above step ③-5, the authentication terminal 1 receives the money at the time of receiving the money. The biometric information input by a person is compared with the biometric information stored in the authentication terminal 1 in advance, and if the biometric information matches, the encrypted authentication information is stored in the authentication terminal 1. Decrypt with the decryption key.

Further, the third embodiment of the fourteenth example is executed according to the same procedure as that of the third example, and specifically, is executed by the following procedures I-1 to I-6.

④-1 The recipient inputs the first recipient biometric information for identifying the recipient to the recipient's authentication terminal 4 (see FIGS. 4A and 4B).

④-2 The authentication terminal 4 encrypts the first recipient biometric information with a predetermined encryption key, sends the encrypted first recipient biometric information to the sender terminal via the network, and encrypts the first recipient biometric information. Holds a decryption key for decrypting the encrypted first recipient biometric information. '

④-3 The sender's terminal sends the encrypted first recipient biometrics information from the authentication terminal 4 together with the remittance request to the financial institution via the network. -4 -4 When the receiver receives the money from the sender, the remittance officer of the financial institution inputs the encrypted first receiver biometrics information received from the sender's terminal to the authentication terminal 4 and receives it. The person inputs the second recipient biometric information for identifying the recipient to the authentication terminal 4.

④ -5 The authentication terminal 4 decrypts the encrypted first recipient biometrics information input by the remittance officer with the decryption key held in the authentication terminal 4, and decrypts the decrypted first recipient biometrics information. The information is compared with the second recipient's biometrics information input in step IV-4 above, and if the pieces of the biometrics information match, the fact is notified to the recipient and the person in charge of remittance.

④-6 Upon receiving the matching match notification from the authentication terminal 4, the remittance officer hands over the money from the sender to the recipient.

As in the 14th example, the electronic commerce method of the present invention is used not only for renting money as described in the 12th and 13th examples, but also for remittance from a sender to a receiver. Until now, when a sender remits cash to a recipient, it is common practice to transfer money from the sender's account to the recipient's account, or to transfer the cash held by the sender by registered mail. However, by using the method of the 14th example, it is possible to transfer money directly from the sender's account to the receiver without going through the receiver's account. This allows remittance even if the recipient does not have an account that can transfer money between accounts. In particular, the 14th example is applied when the sender and the receiver are separated from each other as described above. Specifically, this applies to the case where the sender remits money to a shop (recipient) due to, for example, online shopping on the Internet, or to send money to a remote family member. In this case, the terminals owned by the recipient are used as the authentication terminals 1 and 4 as described above. Also, if the recipient goes to the counter of the financial institution with the authentication terminals 1 and 4 and receives money by performing the above steps ③ -4 to ③ -6 or ④ -4 to この -6 at this counter. Alternatively, the remittance staff of the financial institution may visit the recipient's home and perform the above steps ③ -4 to ③ -6 or ④ -4 to -6 -6 to transfer the money.

In addition, by further applying the method described in the eighth example to the tenth example to the 14th example, the agent designated by the recipient replaces the money from the remitter on behalf of the recipient. It will be possible to receive. Further, the method described in the fourth to seventh examples may be further applied to the fourteenth example. In this case, the same operation and effect as those in the fourth to seventh examples are obtained. be able to.

[1-15-1] 15th example of electronic commerce method of the present invention

In the fifteenth example (not shown) of the e-commerce method of the present invention, the remittance is sent to a financial institution via a network by a recipient's authentication terminal instead of the sender's terminal as in the above-described 14th example. Requesting remittance from the recipient's account to the recipient. Specifically, when the sender and the receiver are in the same place, for example, a terminal (a terminal owned by the receiver) at a store such as a shop is used as an authentication terminal, and the account is sent to the financial institution. This is a method for sending money to recipients who do not have it. In the fifteenth example, as will be described below as first to third embodiments, electronic commerce is basically performed in substantially the same procedure as in the first to third examples.

The first embodiment of the fifteenth example is executed according to the same procedure as in the first example, and specifically, is executed in the following procedures I-1 to I-5.

⑤ -1 The recipient inputs authentication information for identifying the recipient to the recipient's own authentication terminal 1 (see FIGS. 1A and 1B).

⑤-2 The authentication terminal 1 encrypts the authentication information with a predetermined encryption key, sends the encrypted authentication information and the remittance request to the financial institution via the network, and authenticates the authentication information and the encrypted authentication information. And a decryption key for decrypting.

(D-3 When the receiver receives the money from the sender, the remittance officer of the financial institution inputs the encrypted authentication information received from the authentication terminal 1 to the authentication terminal 1, and the receiver The data necessary for decrypting the authenticated authentication information (for example, a personal authentication key such as a password) is input to the authentication terminal 1.

-4-4 The authentication terminal 1 checks the data entered in the above step -3-3 against the personal authentication key stored in the authentication terminal 1 in advance, and if they match, it is input by the person in charge of remittance. Decrypts the encrypted authentication information with the decryption key held in the authentication terminal 1, compares the decrypted authentication information with the authentication information held in the authentication terminal 1, and the authentication information matches. If so, notify the recipient and remittance officer.

-5 -5 Upon receipt of the matching notification from authentication terminal 1, remittance officer Deliver the money to the recipient.

Further, the second embodiment of the fifteenth example is executed by applying the same procedure as that of the second example to the first embodiment of the fifteenth example described above. That is, in the second embodiment, in the above procedure ⑤-2, the authentication terminal 1 (see FIG. 3) holds the biometric information of the orderer together with the authentication information and the decryption key, and in the above procedure ⑤-3, The recipient inputs his / her biometric information to the authentication terminal 1 as a necessary data for decrypting the encrypted authentication information, and in the above step ⑤-4, the authentication terminal 1 The biometric information input by a person is compared with the biometric information stored in the authentication terminal 1 in advance, and when the biometric information matches, the encrypted authentication information is stored in the authentication terminal 1. Decrypt with the stored decryption key.

Further, the third embodiment of the fifteenth example is executed according to the same procedure as that of the third example, and specifically, is executed by the following procedures I-1 to I-5.

⑥-1 The recipient inputs the first recipient biometric information for identifying the recipient to the recipient's own authentication terminal 4 (see FIGS. 4A and 4B).

⑥-2 Authentication terminal 4 encrypts the first recipient biometric information with a predetermined encryption key, and sends the encrypted first recipient biometric information and the remittance request to the financial institution via the network. And holds a decryption key for decrypting the encrypted first recipient biometric information.

-3 -3 When the receiver receives the money from the sender, the remittance officer of the financial institution inputs the encrypted first receiver biometrics information received from the authentication terminal 4 to the authentication terminal 4 and receives it. The person inputs second recipient biometrics information for identifying the recipient to the authentication terminal 4.

-4-4 The authentication terminal 4 decrypts the encrypted first recipient biometrics information input by the remittance officer with the decryption key held in the authentication terminal 4, and decrypts the decrypted first recipient biometrics information. The biometrics information is compared with the second recipient biometrics information entered in the above procedure III-3, and when the biometrics information matches, the fact is notified to the recipient and the remitter.

-5 -5 Receipt of a matching match from authentication terminal 4 Deliver the money to the recipient.

By using the method of the fifteenth example, it is possible to transfer money directly from the sender's account to the receiver without going through the receiver's account, as in the first example. This allows remittance even if the recipient does not have an account that allows remittance between accounts.

In particular, the fifteenth example applies when the sender and the recipient are at the same place as described above. Specifically, it is applied when the remitter purchases goods at stores such as shops. In this case, the owner of the shop becomes the recipient, and the terminals of the shop provided at the store are used as the authentication terminals 1 and 4. Also, in the 15th example, as in the 14th example, the recipient goes out with the authentication terminals 1 and 4 at the counter of the financial institution, and at this window, the above-mentioned procedures -3-3 to -5-5 orよい -3 to ⑥ -5 may be used to receive the money, or the remittance manager of the financial institution visits the recipient's home and performs the above procedure その -3 to ⑤ -5 or ⑥- You may transfer money by performing 3 ~ ⑥-5.

By further applying the method described in the eighth to tenth examples to the fifteenth example, the agent designated by the beneficiary can receive money from the remitter on behalf of the beneficiary. Becomes possible. Further, the method described in the fourth to seventh examples may be further applied to the fifteenth example, and in this case, the same operation and effect as those in the fourth to seventh examples are obtained. Can be.

[2] Electronic commerce system and authentication terminal of the present invention

A configuration example and operation of the electronic commerce system and the authentication terminal of the present invention will be described below.

[2-1] First configuration example of e-commerce system and authentication terminal

FIG. 13 is a block diagram showing a first configuration example of the electronic commerce system and the authentication terminal of the present invention. The first configuration example shown in FIG. 13 is for realizing the first and fourth examples of the electronic commerce method described above.

The e-commerce system of the first configuration example includes an orderer-side authentication terminal 1 that places an order for a product to a contractor and authenticates the orderer when the product is received, and a communication between the authentication terminal 1 and the contractor. Network 2 for exchanging information between It comprises an order information holding unit 3 on the order receiving side, which holds the order information sent from the certificate terminal 1 via the network 2.

The authentication terminal 1 in the first configuration example includes a data input unit 14, an authentication information storage unit 10, an encryption key generation unit 21, an encryption unit 11, an output interface unit 19, and a decryption key storage unit. 12, Password storage unit 13, Input interface unit 20, User authentication unit 15, Authentication information decryption unit 16, Authentication information collation unit 17, and decryption key deletion unit

It is configured with 22.

The data input section 14 functions as an authentication information input section for inputting authentication information (for example, a password) for identifying the orderer when placing an order for a product, and a password (encrypted when the product is delivered). It functions as a data input unit for inputting data necessary to decrypt authentication information.

The authentication information holding unit 10 holds the authentication information input from the data input unit 14.

Each time a product is ordered, an encryption key generation unit (encryption key generation unit) 21 includes a predetermined encryption key (encryption key) and a decryption key (decryption key for decrypting information encrypted by the encryption key). (Decryption key).

The encryption unit 11 encrypts the authentication information input from the data input unit 14 with the encryption key generated by the encryption key generation unit 21.

The output interface unit (output I / F) 19 uses the encrypted authentication information encoded by the encryption unit 11 1 together with the order slip (information on the product name, quantity, amount, delivery address, etc.) and the order information. In addition to sending to the contractor (order information holding unit 3) via the network 2 and notifying the contractor (order information holding unit 3) of the verification result by the authentication information matching unit 17 described later. .

The decryption key storage unit (decryption key storage unit) 12 stores the decryption key (decryption key) for decrypting the encrypted authentication information generated by the encryption key generation unit 21, and stores the password. The unit (data holding unit) 13 stores in advance a password (data necessary for permitting decryption of the encrypted authentication information; data for authenticating that the authentication terminal 1 is the authorized owner; an authentication key). To keep.

Input interface section (input IZF) 20 holds order information at the time of product delivery This is for inputting the encrypted authentication information held in the unit 3, and is, for example, a slot for a medium such as the compact flash (registered trademark) card described above.

The user authentication unit (orderer authentication unit) 15 compares the password stored in the password storage unit 13 with the password input from the data input unit 14 by the orderer at the time of delivery of the product, and checks the user of the authentication terminal 1. When these passwords match, the use of the decryption key held in the decryption key holding unit 12 is permitted.

The authentication information decryption unit (decryption unit) 16 receives the collation result from the orderer authentication unit 15 and uses the decryption key stored in the decryption key storage unit 12 to encrypt the data input from the input interface unit 20. The decrypted authentication information is decrypted.

The authentication information collating unit (collating unit) 17 collates the authentication information decrypted by the decrypting unit 16 with the authentication information held in the authentication information holding unit 10, and compares the collation result with the orderer, the delivery person of the product, and the order receipt. To notify the person.

The decryption key erasing unit (decryption key erasing unit) 22 erases the decryption key held in the decryption key holding unit 12 upon completion of the verification at the time of delivery of the product (verification by the authentication information verification unit 17). Is what you do.

Here, the authentication terminal 1 is, for example, a personal computer or the like, and the CPU or the like in the authentication terminal 1 executes a predetermined electronic commerce program, thereby obtaining the above-described encryption key generation unit 21, encryption unit 11, user authentication The functions as the section 15, the authentication information decrypting section 16, the authentication information collating section 17, and the decryption key erasing section 22 are realized. The electronic commerce program described above is provided in a form recorded on a computer-readable recording medium such as a flexible disk, a CD-ROM, a CD-R, a CD-RW, and a DVD. In this case, the CPU reads the electronic commerce program from the recording medium, transfers it to the internal storage device or the external storage device, and stores and uses it. Further, the electronic commerce program may be recorded on a storage device (recording medium) such as a magnetic disk, an optical disk, or a magneto-optical disk, and provided to the CPU from the storage device via a communication line. .

Further, as the recording medium in the present embodiment, the above-mentioned flexible disk, CD-ROM, CD-R, CD-RW, DVD, magnetic disk, optical disk, In addition to magneto-optical disks, IC cards, ROM cartridges, magnetic tapes, punch cards, computer internal storage devices (memory such as RAM and ROM), external storage devices, and codes such as bar codes are printed. Various computer-readable media such as printed materials can be used.

The data input unit 14 is constituted by, for example, a keypad touch panel in a personal computer or the like. The authentication information storage unit 10, the decryption key storage unit 12, and the password storage unit 13 are, for example, a personal computer or the like. Is composed of RAM.

In the first configuration example configured as described above, the password for authenticating the owner (user) of the authentication terminal 1 is input to the password holding unit 13 of the authentication terminal 1 in advance. The orderer inputs authentication information from the data input unit 14 to the authentication terminal 1 when placing an order. In the authentication terminal 1, the authentication information holding unit 10 holds the input authentication information, the encryption unit 11 encrypts the authentication information, outputs the encrypted authentication information from the output interface unit 19, and connects the network 2 The information is sent to the order receiving information holding unit 3 of the order receiving party via the Internet. At this time, the ordering party's ordering information (information on product name, quantity, amount, delivery address, etc.) is also sent to the contractor. The decryption key for decrypting the encrypted authentication information is stored in the decryption key storage unit 12 in the authentication terminal 1. The encryption key is deleted when the encryption by the encryption unit 11 is completed.

When the orderer is authenticated (when the product is delivered), the contractor (delivery manager) sends the encrypted authentication information held in the order information holding unit 3 to the orderer's authentication terminal 1 and enters the input interface unit. 2 Input from 0. At this time, the encrypted authentication information may be transmitted and input to the authentication terminal 1 via the network 2, or may be input using, for example, a flash compact (registered trademark) card as described above. In the authentication terminal 1, the orderer inputs a password from the data input unit 14, and the user authentication unit 15 determines whether the password in the password storage unit 13 matches the input password. judge.

When these passwords match, the user authentication unit 15 outputs a decryption permission signal for permitting decryption of the input encrypted authentication information to the authentication information decryption unit 16. The authentication information decryption unit 16 receives the decryption permission signal and receives the decryption key in the decryption key holding unit 12. To decrypt the encrypted authentication information. Then, the authentication information collating unit 17 collates the authentication information held in the authentication information holding unit 10 with the authentication information decrypted by the authentication information decrypting unit 16 and determines that the authentication information matches. Check. The authentication terminal 1 displays the authentication result on an LED, a liquid crystal panel, or the like, and transmits it as digital data to the order receiving information holding unit 3 of the recipient via the output interface unit 19 and the network 2.

Further, in the first configuration example, each time the orderer places an order with the authentication terminal 1, the encryption key generation unit 21 generates an encryption key and a decryption key. Then, when the verification by the authentication information collating unit 17 is completed, the decryption key erasing unit 22 erases the decryption key held in the decryption key holding unit 12.

Thus, according to the first configuration example shown in FIG. 13, the first example of the e-commerce method described with reference to FIGS. 1A, IB, and FIG. The fourth example of the e-commerce method described with reference to FIG. 7 is realized, and the same operation and effect as those of the first and fourth examples can be obtained.

C 2-2] Second configuration example of electronic commerce system and authentication terminal

FIG. 14 is a block diagram showing a second configuration example of the electronic commerce system and the authentication terminal of the present invention. The second configuration example shown in FIG. 14 is for realizing the second and fourth examples of the electronic commerce method described above. This second configuration example is also configured almost in the same way as the first configuration example shown in FIG. 13, but in this second configuration example, the biometric information storage unit 13 a is used instead of the password storage unit 13. , And a new biometric sensor 18 is provided. Note that in FIG. 14, the same reference numerals as those described above indicate the same or almost the same parts, and thus the description thereof will be omitted.

The data input unit 14 in the second configuration example only functions as an authentication information input unit for inputting authentication information (for example, a password) for identifying the orderer when ordering a product. The metric sensor 18 functions as a data input unit that collects and inputs biometrics information of the orderer (data required for decrypting the encrypted authentication information) when the product is delivered. is there. In addition, the biometric information storage unit (data storage unit) 13 a Biometric information to be specified (data required to decrypt encrypted authentication information)

-Data; authentication data as the terminal owner indicating that he is the authorized owner of the authentication terminal 1) is stored in advance.

Then, in the second configuration example, the user authentication unit 15 collates the biometric information stored in advance in the biometric information storage unit 13a with the biometric information input from the biometric sensor 18. .

In the first configuration example, the user authentication unit 15 performs the personal authentication of the user of the authentication terminal 1 using a password, but the user authentication unit 15 of the second configuration example uses biometric information. Authentication of the user of the authentication terminal 1 (that is, biometrics authentication). Here, biometric information refers to human physical characteristics (eg, fingerprint, palm print, retina, iris, capillary pattern, face image, voiceprint, etc.) and specific human actions (signs, gestures, etc.). This is what has been converted into data. The biometrics authentication is a method of using two pieces of biometrics information A and B to authenticate that the owner of the biometrics information A and the owner of the biometrics information B are the same. It should be noted that the biometric information described in the present invention includes not only the above-mentioned examples but also all data that can be authenticated by humans, such as physical characteristics of humans and specific actions of humans. It is a thing.

Also, in the second configuration example, similarly to the first configuration example, each time the orderer places an order with the authentication terminal 1, the encryption key generation unit 21 generates an encryption key and a decryption key. . When the verification by the authentication information verification unit 17 is completed, the decryption key deletion unit 22 deletes the decryption key stored in the decryption key storage unit 12.

Thus, according to the second configuration example shown in FIG. 14, the second example of the e-commerce method described with reference to FIG. 3 and the second example of the electronic commerce method described with reference to FIG. 6A, FIG. 6B, and FIG. The fourth example of the e-commerce method described above is realized, and the same operation and effect as those of the second and fourth examples can be obtained.

[2-3] Third configuration example of e-commerce system and authentication terminal

FIG. 15 is a block diagram showing a third configuration example of the electronic commerce system and the authentication terminal of the present invention. The third configuration example shown in FIG. 15 is for realizing the third and fourth examples of the electronic commerce method described above. The e-commerce system of the third configuration example includes an authentication terminal 4 on the orderer side, which places an order for goods to the contractor and authenticates the orderer when receiving the goods, and a communication between the authentication terminal 4 and the contractor. The system comprises a network 5 for exchanging information between them, and an order information holding unit 6 on the orderer side, which holds order information sent from the authentication terminal 4 via the network 5.

The authentication terminal 4 in the third configuration example includes a biometrics sensor 40, an encryption key generation unit 47, an encryption unit 41, an output interface unit 45, a decryption key holding unit 42, an input interface It comprises a unit 46, a biometrics information decryption unit 44, a biometrics authentication unit 43, and a decryption key erasure unit 48. The biometrics sensor (biometrics information input unit) 40 is for collecting and inputting the biometrics information of the orderer.

Each time a product is ordered, an encryption key generation unit (encryption key generation unit) 47 includes a predetermined encryption key (encryption key) and a decryption key for decrypting information encrypted by the encryption key. (Decryption key).

The encryption unit 41 encrypts the first orderer biometric information input from the biometric sensor 40 by the orderer at the time of ordering the product with the encryption key generated by the encryption key generation unit 47. It becomes something.

The output interface unit (output I / F) 45 is an ordering slip that contains the encrypted first orderer biometrics information encrypted by the encryption unit 41 (information such as product name, quantity, amount, and delivery destination). At the same time, the order information is sent to the order receiving party (order receiving information holding unit 6) via the network 5, and the result of authentication by the biometric authentication unit 43 described later is notified to the order receiving party (order receiving information holding unit 6). It is for doing.

The decryption key storage unit (decryption key storage unit) 42 stores a decryption key (decryption key) for decrypting the encrypted first orderer biometric information generated by the encryption key generation unit 47. Things.

The input interface section (input I / F) 46 is used for inputting the encrypted first orderer biometric information stored in the order information storage section 6 when the product is delivered. This is a slot for media such as compact flash (registered trademark) cards. The biometrics information decryption unit (decryption unit) 44 uses the decryption key stored in the decryption key storage unit 42 to convert the encrypted first orderer piometrics information input from the input interface unit 46. It is to decrypt.

The biometrics authentication unit (collation unit) 43 receives the first orderer's biometrics information decrypted by the biometrics information decryption unit 44 and the first orderer's biometrics information input from the biometric sensor 40 at the time of delivery of the product. (2) It compares the biometric information with the orderer, and notifies the orderer, the person in charge of delivery of the product, and the contractor of the result of the comparison.

The decryption key erasing unit (decryption key erasing unit) 48 stores the decryption key held in the decryption key holding unit 42 when the verification (authentication by the biometric authentication unit 43) at the time of delivery of the product is completed. Is to be erased.

Here, similarly to the first configuration example, the authentication terminal 4 of the third configuration example is, for example, a personal computer, and the above-described operation is performed by executing a predetermined electronic commerce program by the CPU or the like in the authentication terminal 4. The functions as an encryption key generation unit 47, an encryption unit 41, a biometrics information decryption unit 44, a biometrics authentication unit 43, and a decryption key erasure unit 48 are realized. The electronic commerce program described above is provided in a form recorded on a computer-readable recording medium such as a flexible disk, a CD-ROM, a CD-R, a CD-RW, and a DVD. Note that the decryption key holding unit 42 is composed of, for example, a RAM in a personal computer or the like.

In the authentication terminal 4 of the third configuration example configured as described above, the biometric sensor 40 obtains the first orderer biometrics information of the orderer at the time of ordering, and encrypts the information by the encryption unit 41. The information is transmitted to the order receiving information holding unit 6 of the contractor. Note that the encryption key is deleted when the encryption by the encryption unit 41 is completed.

On the other hand, when the orderer is authenticated (when the product is delivered), the contractor (delivery manager) sends the encrypted first orderer biometrics information in the order information holding unit 6 to the authentication terminal 4 and inputs the information. Enter from evening face part 4 6. At this time, the encrypted first orderer biometric information may be transmitted and input to the authentication terminal 4 via the network 5, or as described above, for example, by a flash compact (registered trademark) card. May be input. 'Then, in the authentication terminal 4, the encrypted first orderer's biometrics information is decrypted by the biometrics information decryption unit 44, and the decryption result is transmitted to the biometrics authentication unit 43. Here, the authentication terminal 4 collects the orderer's biometrics information (second orderer's biometrics information) again. Then, the second orderer's biometrics information is input to the biometrics authentication unit 43, and the biometrics authentication unit 43 collates the two pieces of biometrics information to authenticate the orderer. The authentication terminal 4 displays the authentication result on an LED, a liquid crystal panel, or the like, and transmits it as digital data to the order receiving information holding unit 6 of the contractor through the output interface unit 45 and the network 5.

Also, in the third configuration example, each time the orderer places an order with the authentication terminal 4, the encryption key generation unit 47 generates an encryption key and a decryption key. When the authentication by the biometrics authentication unit 43 is completed, the decryption key erasing unit 48 erases the decryption key stored in the decryption key storage unit 42.

Thus, according to the third configuration example shown in FIG. 15, the third example of the e-commerce method described with reference to FIGS. 4A, 4B and 5, and FIGS. 6A and 6B The fourth example of the e-commerce method described with reference to FIG. 7 is realized, and the same operation and effect as those of the third and fourth examples can be obtained.

[2-4] Fourth configuration example of e-commerce system and authentication terminal

FIG. 16 is a block diagram showing a fourth configuration example of the electronic commerce system and the authentication terminal of the present invention. The fourth configuration example shown in FIG. 16 is for realizing the ninth and fourth examples of the electronic commerce method described above.

The e-commerce system according to the fourth configuration example includes an authentication terminal 7 on the orderer side, which places an order for goods to the contractor and authenticates the goods received by an agent delegated by the orderer; It comprises a network 8 for exchanging information with the contractor, and an order information holding unit 9 on the contractor side, which holds the order information sent from the authentication terminal 7 via the network 8. ing.

The authentication terminal 7 in the fourth configuration example includes a biometrics sensor 70, an encryption key generation unit 79, an encryption unit 71, an output interface unit 77, a decryption key storage. Holding unit 72, biometric information holding unit 73, agent biometric information holding unit 74, input interface unit 78, biometric information decoding unit 76, biometric authentication unit 75, and decryption key erasing unit 80 It is configured with. The biometrics sensor (biometrics information input unit) 70 is for collecting and inputting biometrics information.

The encryption key generation unit (encryption key generation unit) 79 includes a predetermined encryption key (encryption key) and a decryption key for decrypting information encrypted by the encryption key each time a product is ordered. (Decryption key).

The encryption unit 71 converts the first orderer's biometrics information A input from the biometric sensor 70 by the orderer at the time of ordering the product with the encryption key generated by the encryption key generation unit 79. It is to be encrypted.

The output interface unit (output IZF) 77 sends the encrypted first orderer biometrics information A, which has been decrypted by the encryption unit 71, to the order slip (such as the product name, quantity, amount, and delivery destination). Information) and the order information to the order recipient (order information holding unit 9) via the network 8, and the authentication result by the biometric authentication unit 75 described later to the order recipient (order information holding unit 9). It is for notification. The decryption key storage unit (decryption key storage unit) 72 is a decryption key (decryption key) for decrypting the encrypted first orderer biometrics information A generated by the encryption key generation unit 79. Is held.

The biometric information storage unit 73 holds the second orderer biometric information B input from the biometric sensor 70 by the orderer when the orderer entrusts the receipt of the product to the agent. The agent biometric information storage unit 74 also stores the first agent biometric information C input from the biometric sensor 70 by the agent when the orderer delegates the receiving of the goods to the agent. To keep.

The input interface section (input I ZF) 78 is used to input the encrypted first orderer biometric information A stored in the order information storage section 9 when the product is delivered. For example, a slot for a medium such as the compact flash (registered trademark) force described above. The biometrics authentication unit 75 performs a function as an agent authentication unit (agent authentication function) and a function as an orderer authentication unit (orderer authentication function). The agent authentication function of the biometrics authentication unit Ί 5 is input from the biometric sensor 70 by the agent at the time of delivery of the first agent pieometrics information C stored in the agent biometrics information storage unit 74 and the product when delivered. When the proxy biometrics information A and B match each other, the use of the decryption key stored in the decryption key storage unit 72 is permitted. Function. The biometrics information decryption unit (decryption unit) 76 receives the result of the verification by the proxy authentication function of the biometrics authentication unit 75 and uses the decryption key held in the decryption key storage unit 72 to input an input interface. It decrypts the encrypted first orderer biometrics information A input from the part 78.

The orderer authentication function of the biometrics authentication unit 75 was held in the first orderer's biometrics information A decrypted by the biometrics information decryption unit 76 and the orderer's biometrics information storage unit 73. This function matches the second orderer's biometrics information B and notifies the orderer, the person in charge of delivery of the product, and the contractor of the result of the comparison.

The decryption key erasing unit (decryption key erasing unit) 80 stores the decryption key held in the decryption key holding unit 72 at the time of completion of verification at the time of product delivery (orderer authentication by the biometric authentication unit 75). Is to be erased.

Here, similarly to the first configuration example, the authentication terminal 7 of the fourth configuration example is, for example, a personal computer, etc., and the CPU or the like in the authentication terminal 7 executes a predetermined electronic commerce program. The functions as an encrypted key generation unit 79, an encryption unit 71, a biometrics information decryption unit 76, a biometrics authentication unit 75, and a decryption key erasure unit 80 are realized. The electronic commerce program described above is provided in a form recorded on a computer-readable recording medium such as a flexible disk, a CD-ROM, a CD-R, a CD-RW, and a DVD. The decryption key storage unit 72, the biometric information storage unit 73, and the agent biometric information storage unit 74 are composed of, for example, a RAM in a personal computer or the like. In the fourth configuration example configured as described above, the authentication of the orderer by the agent is realized. The authentication terminal 7 obtains the biometric information A of the orderer by the biometric sensor 70 at the time of ordering, encrypts the information by the encryption unit 71, and transmits the encrypted information to the order information storage unit 9 of the contractor. Note that the encryption key is deleted when the encryption by the encryption unit 71 is completed. Next, the orderer registers an agent acting on behalf of the orderer on the authentication terminal 7. The authentication terminal 7 acquires the biometric information B and C of the orderer and the agent, and holds them in the orderer's biometric information storage unit 73 and the agent biometric information storage unit 74, respectively.

On the other hand, when the orderer is authenticated (when the product is delivered), the contractor (delivery manager) sends the encrypted biometrics information in the order information holding unit 9 to the authentication terminal 7 and inputs it from the input interface unit 7 8 I do. At this time, the encrypted first orderer biometric information A may be transmitted and input to the authentication terminal 7 via the network 8, or as described above, for example, by a flash compact (registered trademark) card. May be entered.

Then, the agent reads the biometrics information D of the agent into the authentication terminal 7. For example, in the case of collation using a fingerprint, a finger is pressed against a fingerprint sensor as a biometric sensor 70 attached to the authentication terminal 7 and a fingerprint is read by this sensor to acquire a fingerprint image (biometric information). I do. The biometrics authentication unit 75 compares the biometrics information D input at the time of authentication with the biometrics information C stored in the agent biometrics information storage unit 74, and executes the authentication of the agent. The authentication result is output to the biometrics information decryption unit 76. If the proxy authentication result is "OK", the biometrics information decryption unit 76 converts the encrypted biometrics information A input from the input interface 78 into the decryption key stored in the decryption key storage unit 72. To decrypt. Thereafter, the biometric authentication unit 75 compares the decrypted pyrometric information A with the biometric information B stored in the orderer's biometric information storage unit 73, and authenticates the issuer. Execute The authentication terminal 7 displays the authentication result on an LED, a liquid crystal panel, or the like, and transmits it as digital data to the order receiving information holding unit 9 of the contractor via the output interface unit 77 and the network 8. Further, in the fourth configuration example, each time the orderer places an order with the authentication terminal 7, the encryption key generation unit 79 generates an encryption key and a decryption key. When the authentication by the biometrics authentication unit 75 is completed, the decryption key erasing unit 80 erases the decryption key stored in the decryption key storage unit 72.

Thus, according to the fourth configuration example shown in FIG. 16, the ninth example of the e-commerce method described with reference to FIGS. 12A to 12C, and FIGS. 6A and 6B The fourth example of the e-commerce method described with reference to FIG. 7 and FIG. 7 is realized, and the same operational effects as those in the ninth example and the fourth example can be obtained.

[3] Effects of the present invention

According to the above-described embodiment of the present invention, at the time of ordering a product or the like, the authentication information of the orderer / recipient and the biometric information are encrypted and passed to the contractor Z financial institution, and the encrypted information is The decryption is performed only at the orderer / recipient authentication terminals 1, 4, and 7. When the orderer / recipient receives goods or money, the person in charge of delivery Z and the person in charge of remittance or the orderer / receiver must input the specified information including the above-mentioned encrypted information into the authentication terminals 1, 4, and 7. Thus, in the authentication terminals 1, 4, and 7, the encrypted information is decrypted, and the identity of the orderer / recipient is authenticated. Therefore, it is possible to reliably prevent the abuse of authentication information such as passwords and biometrics information exchanged on the networks 2, 5, and 8 when conducting electronic commerce.

Further, according to the embodiment of the present invention, the authentication terminals 7 and 7A hold the biometrics information C of the agent and the biometrics information B of the orderer in advance, and when the goods are delivered (the At the time of authentication of a certain orderer), the person in charge of delivery (contractor) inputs the orderer's biometric information A sent from the authentication terminals 7, 7A to the authentication terminals 7, 7A, and the agent himself The biometrics information D of the user is input to the authentication terminals 7 and 7A, and the authentication terminals 7 and 7A first authenticate the identity of the agent, and when the identity of the agent is authenticated, The orderer's biometrics information A and the orderer's biometrics information B stored in advance in the authentication terminals 7 and 7A are used to perform the authentication of the orderer (authenticater). Therefore, not only the ordering person but also the agent designated by the ordering person at the time of receiving the goods etc. can be received while ensuring security, and the convenience is greatly improved. As described above, according to the embodiment of the present invention, regarding the orderer Z and the recipient (user),

In addition to simplifying the use of PKI (key management and encryption), biometric information can be diverted and spoofing due to improper ordering can be reliably prevented, and electronic commerce using the Internet can be performed with confidence. it can. In addition, the agent can authenticate the identity of the ordering party, greatly improving convenience.

In addition, with respect to the contractor Z financial institution (trader), it is possible to reliably detect fraudulent orders and prevent the fraudulent orders from being placed, and to reliably prevent fraudulent fraud of products due to fraudulent transactions.

In addition, the settlement institution can detect fraudulent settlements, and can reliably prevent unsolicited settlement by the ordering party (user) user.

[4] Other

It should be noted that the present invention is not limited to the above-described embodiment, and can be implemented with various modifications without departing from the spirit of the present invention.

For example, in the above-described embodiment, the information (biometric information, decryption key, etc.) stored in the authentication terminals 1, 4, and 7 is described as only one set, but the present invention is not limited to this. Instead, multiple sets of information used for multiple orders may be stored in association with each order. In this case, for example, index information is added to a part of the information transmitted to the contractor, and the index information is received to determine which information in the memory is to be used for authentication. Industrial applicability

As described above, according to the present invention, the orderer / recipient authentication information and biometrics information are encrypted and passed to the contractor Z financial institution at the time of ordering the product, and the orderer Z recipient is When receiving goods or money, the person in charge of delivery, the person in charge of remittance, and the orderer / recipient input predetermined information including the above-mentioned encrypted information into the authentication terminal, and the encrypted information is It is decrypted and the identity of the orderer Z recipient is authenticated. As a result, it is possible to reliably prevent passwords and biometrics information exchanged on a network from being misused when conducting electronic commerce. Therefore, the present invention provides a method for transmitting power using a network such as the Internet. It is suitable for use in child commerce, and its usefulness is considered to be extremely high.

Claims

The scope of the claims

1. An e-commerce method in which an orderer places an order for goods to a contractor via a network and receives the goods.

When ordering the product, the orderer enters authentication information for identifying the orderer into the authentication terminal,

The authentication terminal encrypts the authentication information with a predetermined encryption key, sends the encrypted authentication information together with the order slip of the product to the orderer via the network, and transmits the authentication information and the encrypted Holding a decryption key for decrypting the authentication information,

At the time of delivery of the product, the delivery person on the order receiving side inputs the encrypted authentication information received from the authentication terminal to the authentication terminal when ordering the product, and the orderer enters the authentication terminal. Terminal authentication data indicating that the user is a legitimate owner of the authentication terminal,

When the authentication terminal authenticates that the orderer is a legitimate owner of the authentication terminal based on the data, the authentication terminal transmits the encrypted authentication information input by the delivery person in the authentication terminal. And decrypts the decryption authentication information with the authentication information stored in the authentication terminal. If the authentication information matches, the fact that the issuer, the delivery Notify the responsible person and the contractor,

An electronic commerce method, characterized in that the delivery person in charge of delivery receives the matching match notification from the authentication terminal and delivers the product to the orderer.

2. The authentication terminal holds the biometric information of the orderer together with the authentication information and the decryption key,

Upon delivery of the product, the orderer inputs his / her biometrics information to the authentication terminal as data for authentication as a terminal owner indicating that he is the authorized owner of the authentication terminal; Compares the biometric information entered at the time of delivery of the product with the biometric information stored in the authentication terminal in advance, and if the biometric information matches, the encrypted The authentication information is decrypted by using the decryption key held in the authentication terminal. The e-commerce method described.

3. An e-commerce method in which an orderer places an order for goods to a contractor via a network and receives the goods.

When ordering the product, the orderer inputs first orderer biometrics information for identifying the orderer to the authentication terminal,

The authentication terminal encrypts the first orderer biometric information with a predetermined encryption key, and transmits the encrypted first orderer biometric information together with the order slip of the product to the orderer via the network. Sending, and holding a decryption key for decrypting the encrypted first orderer biometrics information,

At the time of delivery of the product, the delivery person in charge of the order receiving party inputs the encrypted first orderer biometrics information received from the authentication terminal at the time of ordering the product to the authentication terminal, and Enters the second orderer biometric information for identifying the orderer into the authentication terminal,

The authentication terminal decrypts the encrypted first orderer biometrics information input by the delivery charge using the decryption key held in the authentication terminal, and decrypts the first orderer biometrics information and the decrypted first orderer biometrics information. The second orderer's biometrics information is compared with the second orderer's biometrics information. If the two orderer's biometrics information match, the fact is notified to the orderer, the delivery manager and the orderer,

4. The authentication terminal holds the private key and public key of the orderer issued by the certificate authority, and holds the public key of the orderer issued by the certificate authority sent from the orderer to the orderer. And

At the time of ordering the product, the authentication terminal is encrypted with the encrypted authentication information further encrypted with the orderer's public key, the orderer's public key, and the orderer's private key. Sending an electronic signature identifying the orderer to the orderer,

The contractor uses the contractor's secret key and encrypts the data with the predetermined encryption key. The electronic commerce method according to claim 1 or 2, wherein encrypted authentication information is obtained.

5. The authentication terminal holds the private key and public key of the orderer issued by the certificate authority, and also holds the public key of the orderer issued by the certificate authority sent from the orderer to the orderer. And

The authentication terminal, when ordering the product, encrypts the encrypted first orderer pieometric information further encrypted with the orderer's public key, the orderer's public key, and the orderer's secret. Sends an electronic signature, which is encrypted with a key and identifies the orderer, to the orderer,

The third orderer, using the contractor's secret key, obtains the encrypted first orderer biometrics information encrypted with the predetermined encryption key. Electronic commerce method described in the section.

6. The verification result by the authentication terminal is sent to a clearing house, and the clearing house executes the payment of the product in response to the verification result. The electronic commerce method according to any one of the above.

7. An electronic commerce method in which an orderer places an order for goods to a contractor via a network, and an agent delegated by the orderer receives the goods.

The authentication terminal sends the first orderer pieometrics information to the orderer via the network together with the order slip for the product;

When the orderer delegates the receipt of the product to an agent, the orderer inputs the second orderer biometric information for identifying the orderer into the authentication terminal, and inputs the second orderer biometric information to the authentication terminal. The person inputs first agent biometrics information for identifying the agent himself / herself into the authentication terminal,

The authentication terminal includes the second orderer biometric information and the first agent biometric information. Rix information in association with it,

At the time of delivery of the product, the delivery person on the orderer side inputs the first orderer biometrics information received from the authentication terminal at the time of ordering the product to the authentication terminal, and the agent Inputting the second agent biometric information for identifying the agent into the authentication terminal;

The authentication terminal compares the second agent biometric information with the first agent biometric held in the authentication terminal, and when the agent biometric information matches, the delivery terminal The first orderer's biometric information input is compared with the second orderer's biometric information held in the authentication terminal, and when these orderer's biometric information match, the fact is matched. Notify the agent, the delivery person and the contractor,

An electronic commerce method, characterized in that the delivery person in charge of delivery receives the matching match notification from the authentication terminal and delivers the product to the agent.

8. When ordering the product, the authentication terminal encrypts the first orderer biometric information with a predetermined encryption key, sends the encrypted first orderer biometric information to the orderer, and transmits the encrypted first orderer biometric information to the orderer. A decryption key for decrypting the converted first orderer biometrics information in association with the second orderer biometrics information and the first agent biometrics information, and

At the time of delivery of the product, the delivery person inputs the encrypted first orderer biometric information to the authentication terminal as the first orderer biometric information, and the authentication terminal transmits the agent biometric information. If they match, the encrypted first orderer biometric information input by the delivery person is decrypted with the decryption key held in the authentication terminal, and the decrypted first orderer biometric information and the decrypted first orderer biometric information are decrypted. 8. The electronic commerce method according to claim 7, wherein the e-commerce method is collated with the second orderer biometric information.

9. The authentication terminal is characterized in that when the first orderer's biometric information and the second orderer's biometric information are completely the same, the authentication terminal does not match. The electronic commerce method according to claim 7 or claim 8.

10. The authentication terminal performs reversible processing on the first orderer biometric information before encrypting the first orderer biometric information when ordering the product, and performs The decrypted first orderer biometric information is subjected to a process reverse to the reversible process performed when the product was ordered, and the first orderer biometric information is restored. The electronic commerce method according to any one of paragraphs 3, 5, and 8.

1 1. The contractor is a financial institution, the ordering party is a borrower who borrows money as the product from the financial institution, and the ordering of the product is made by the borrower and the financial institution. Claims 1 to 6 characterized in that at the time of the loan contract, the time of delivery of the product is the time at which the lessee receives money as the product from the financial institution. An electronic commerce method according to any one of the preceding claims.

1 2. The contractor is a financial institution, the orderer is a borrower who borrows the money as the product from the financial institution, and the ordering of the product is made between the borrower and the financial institution. Claims 7 to 9 characterized in that at the time of a loan contract, the time of delivery of the product is the time at which the agent receives money as the product from the financial institution. An electronic commerce method according to any one of the preceding claims.

13. The authentication terminal automatically generates the predetermined encryption key and the decryption key each time an order for the product is issued, and when the verification at the time of delivery of the product is completed, the decryption key in the authentication device. The electronic commerce method according to any one of claims 1 to 12, wherein the electronic commerce method is characterized in that:

1 4. An orderer-side authentication terminal (1) that places an order for goods to the contractor and authenticates the orderer when receiving the goods.

A network for exchanging information between the authentication terminal (1) and the contractor (2) and

An order information holding unit (3) for holding the order information sent from the authentication terminal (1) via the network (2);

The authentication terminal (1)

An authentication information input unit (14) for inputting authentication information for identifying the orderer when ordering the product;

An encryption unit (11) for encrypting the authentication information input from the authentication information input unit (14) with a predetermined encryption key;

An output interface unit (19) for sending the encrypted authentication information encrypted by the encryption unit (11) together with an ordering slip as the order receiving information to the order receiving party via the network (2). ) When,

An authentication information holding unit (10) for holding the authentication information input from the authentication information input unit (14);

A decryption key storage unit (12) for storing a decryption key for decrypting the encrypted authentication information encrypted by the encryption unit (11);

A data holding unit (13) for holding in advance data for authenticating that the terminal is an authorized owner of the authentication terminal necessary for decrypting the encrypted authentication information;

A data input unit (14, 18) for inputting the data by the orderer when the goods are delivered;

An input interface unit (20) for inputting the encrypted authentication information held in the order information holding unit (3) when delivering the product;

The data held in the data holding unit (13) is compared with the data input from the data input unit (14, 18), and when these data match, the decryption key holding unit (12 )), Receiving the collation result by the orderer authentication unit (15) for permitting use of the decryption key held in (1) and the orderer authentication unit (15), and using the decryption key, the input interface unit (20). ), A decryption unit (16) for decrypting the encrypted authentication information,

The authentication information decrypted by the decryption unit (16) is compared with the authentication information stored in the authentication information storage unit (10), and the result of the verification is referred to the orderer, the person in charge of delivery of the product. An electronic commerce system, comprising: a checker (17) for notifying the orderer.

15. An authentication terminal that allows the orderer to place an order for goods via the network (2) to the contractor, and to authenticate the orderer when receiving the goods.

An output interface unit (19) for sending the encrypted authentication information encrypted by the encryption unit (11) together with an ordering slip to the order receiver via the network (2);

A data storage unit (13) for storing in advance data for authenticating that the terminal is an authorized owner of the authentication terminal;

A data input unit (14, 18) for inputting the data by the orderer upon delivery of the product;

An input interface unit (20) for inputting the encrypted authentication information received by the contractor when ordering the product when the product is delivered;

The data held in the data holding unit (13) is compared with the data input from the data input unit (14, 18), and when these data match, the decryption key holding unit (12 )), Receiving the collation result by the orderer authentication unit (15) for permitting use of the decryption key held by the orderer authentication unit (15), and using the decryption key, the input interface unit (20). ), A decryption unit (16) for decrypting the encrypted authentication information,

The authentication information decrypted by the decryption unit (16) and the authentication information holding unit (10) It is characterized by comprising a collating unit (17) for collating with the held authentication information and notifying the collation result to the orderer, the person in charge of delivery of the product, and the orderer. , Authentication terminal.

1 6. A personal authentication method performed by an agent, in which the authenticator authenticates the individual by an agent delegated by the authenticator,

The certifier inputs first certifier biometric information for identifying the certifier into the authentication terminal,

The authentication terminal sends the first certifier biometrics information via a network to a company that requires the authentication result of the certifier,

When the certifier delegates to the agent,

The certifier inputs second certifier biometrics information for identifying the certifier to the authentication terminal, and the proxy sets a first proxy biometrics for identifying the proxy. Input information into the authentication terminal,

The authentication terminal holds the second certifier biometric information and the first proxy biometric information in association with each other,

At the time of authentication of the certifier, the first certifier biometrics information sent to the trader is input to the authentication terminal, and the agent is a second agent for identifying the agent. Inputting biometric information to the authentication terminal,

The authentication terminal compares the second agent biometrics information with the first agent biometrics held in the authentication terminal. Comparing the biometric information of the first certifier with the biometric information of the second certifier held in the authentication terminal, and performing identity authentication of the certifier. Authentication method.