WO2009098774A1

WO2009098774A1 - Transaction method and transaction system

Info

Publication number: WO2009098774A1
Application number: PCT/JP2008/052126
Authority: WO
Inventors: Taiji Okamoto
Original assignee: Fujitsu Limited
Priority date: 2008-02-08
Filing date: 2008-02-08
Publication date: 2009-08-13

Abstract

Safe transaction is aimed without having personal information known to a trading partner or trading agency. To solve the problem, a virtual personality managing device (400) storing a virtual personality ID and handling of a real personality managing device (300) generates instruction data for instructing an owner of first virtual personality ID to send money or goods to a predetermined mediate means, and the real personality managing device (300) sends the instruction data to real personality corresponding to the first virtual personality ID. The virtual personality managing device (400) generates instruction data to instruct an owner of a second virtual personality ID to accept the money or goods from the mediate means, and the real personality managing device (300) sends the instruction data to real personality corresponding to the second virtual personality ID based on personal information stored in the device (300) itself.

Description

Transaction method and transaction system

The present invention relates to a transaction method and a transaction system for performing a transaction between an owner of a first virtual personality ID and an owner of a second virtual personality ID, and in particular, provides personal information to a transaction partner or a transaction broker. The present invention relates to a transaction method and a transaction system capable of performing transactions safely without being known.

On the Internet, various services are available anonymously. For example, in an auction site, if you register for use on the auction site and obtain a user ID, information about buying and selling products while identifying each other by user ID without revealing personal information such as real names Can be exchanged between seller and buyer.

However, in the past, when a sales contract was established using an auction site, it was necessary to communicate personal information such as address and name between the seller and the buyer in order to exchange the price and goods. For this reason, when one of the seller and the buyer is malicious or careless, personal information may be leaked to a third party. Patent Document 1 discloses a technique for preventing such leakage of personal information.

In the technique disclosed in Patent Document 1, all exchanges between a seller and a buyer are performed through a sales brokerage site. That is, not only exchange of information on the network until a transaction is established between the seller and the buyer, but also exchange of prices and goods is performed via the sales mediation site. For this reason, the seller and the buyer can make a transaction without informing the other party of personal information at all, and there is no fear of leakage of personal information.

JP 2002-133163 A

However, in the technique disclosed in Patent Document 1, the seller and buyer have the same contract through a series of exchanges so that the sales brokerage site can identify which merchandise the exchange between the seller and the buyer relates to. It is necessary to provide a number. For this reason, this contract number may reveal to the third party who the seller and buyer are actually.

For example, if the carrier that transports the goods from the seller's source to the sales intermediary site is the same as the carrier that transports the goods from the sales intermediary site to the buyer's site, the carrier will be given a contract written on the slip. By matching the numbers, the seller's address and name can be associated with the buyer's address and name.

The present invention has been made in order to solve the above-described problems caused by the prior art, and a transaction method and transaction capable of performing a transaction safely without knowing personal information by a transaction partner or a transaction intermediary. The purpose is to provide a system.

In order to solve the above-described problems and achieve the object, in one aspect of the transaction method disclosed in the present application, the owner of the first virtual personality ID and the owner of the second virtual personality ID are anonymous. A virtual personality management means for storing, for each virtual personality ID, a correspondence between a virtual personality ID and a real personality management means for storing personal information of a real personality corresponding to the virtual personality ID. A first instruction data generation step for generating instruction data for instructing the owner of the first virtual personality ID to send money or information to a predetermined mediator based on pre-stored setting information; The first real personality management means for storing the personal information of the real personality corresponding to the first virtual personality ID uses the instruction data generated in the first instruction data generating step based on the personal information as the instruction data. First virtual personality ID The first instruction data transmission step for transmitting to the corresponding real personality and the virtual personality management means, based on the setting information, the owner of the second virtual personality ID of the money or information from the mediation means A second instruction data generating step for generating instruction data for instructing reception, and second real personality management means for storing personal information of a real personality corresponding to the second virtual personality ID, based on the personal information And a second instruction data transmission step of transmitting the instruction data generated in the second instruction data generation step to the real personality corresponding to the second virtual personality ID.

Moreover, in another aspect of the transaction method disclosed in the present application, in the above aspect, the first instruction data generation step and the second instruction data generation step are different as identification numbers for identifying instruction data. Issue a number.

Further, in another aspect of the transaction method disclosed in the present application, in the above aspect, real personality management means for executing the first instruction data transmission step and real personality management for executing the second instruction data transmission step The virtual personality management means further includes a real personality management means selection step of selecting the real personality management means so that the real personality management means is different from the means.

Further, in another aspect of the transaction method disclosed in the present application, in the above aspect, the real personality management means selection step is based on a priority set in advance by an owner of the first virtual personality ID. The real personality management means for executing the first instruction data transmission step is selected, and then the second instruction data transmission step is performed based on the priority set in advance by the owner of the second virtual personality ID. Select the actual personality management method to be executed.

Moreover, in one aspect of the transaction system disclosed in the present application, the transaction system performs an anonymous transaction between the owner of the first virtual personality ID and the owner of the second virtual personality ID, the virtual personality Virtual personality management that stores, for each virtual personality ID, a correspondence between a plurality of real personality management devices that store personal information of a real personality corresponding to the ID, a virtual personality ID, and a real personality management device that manages the virtual personality ID And the virtual personality management device instructs the owner of the first virtual personality ID to send money or information to a predetermined mediation means based on pre-stored setting information. Instruction data, instruction data generating means for generating second instruction data for instructing the owner of the second virtual personality ID to receive money or information from the mediating means, and the first virtual personality ID Manage the real Instruction data transmitting means for transmitting the first instruction data to one of the personality management devices and transmitting the second instruction data to one of the real personality management devices for managing the second virtual personality ID; The real personality management device includes instruction data transfer means for transferring the instruction data transmitted by the instruction data transmission means to a real personality corresponding to the virtual personality ID to be designated.

According to the transaction method disclosed in the present application, it is decided to deliver money, etc. via the intermediary means, and independently send instructions to the intermediary means and receive instructions from the intermediary means. There is an effect that transactions can be performed safely without the personal information being known to the other party or intermediary.

In addition, according to the transaction method disclosed in the present application, each process is identified by a different identification number, so even if the same contractor mediates delivery of money, etc. There is an effect that it is possible to trade safely without knowing the relation.

Further, according to the transaction method disclosed in the present application, since the work instruction is transmitted via the different real personality management means for each party, the real personality management means does not know the relationship of each process. There is an effect that transactions can be performed safely.

FIG. 1 is a diagram illustrating an example of the configuration of the transaction system according to the first embodiment. FIG. 2 is a diagram illustrating a flow of processing up to contract management data creation in the transaction method according to the first embodiment. FIG. 3 is a diagram illustrating an example of contract information. FIG. 4 is a diagram illustrating an example of a process master. FIG. 5 is a diagram illustrating an example of contract management data. FIG. 6 is a diagram illustrating a flow of processing up to payment in the transaction method according to the first embodiment. FIG. 7 is a diagram illustrating an example of a template included in the instruction data template. FIG. 8 is a diagram illustrating an example of instruction data transmitted to the real personality management device. FIG. 9 is a diagram illustrating a flow of processing up to price reception in the transaction method according to the first embodiment. FIG. 10 is a diagram illustrating a flow of processing up to article delivery in the transaction method according to the first embodiment. FIG. 11 is a diagram illustrating a flow of processing up to receipt of an article in the transaction method according to the first embodiment. FIG. 12 is a functional block diagram illustrating the configuration of the real personality management device according to the first embodiment. FIG. 13 is a functional block diagram illustrating the configuration of the virtual personality management apparatus according to the first embodiment. FIG. 14 is a functional block diagram illustrating the configuration of the mediation apparatus according to the first embodiment. FIG. 15 is a flowchart illustrating a processing procedure of contract information reception processing of the virtual personality management device. FIG. 16 is a flowchart showing a processing procedure of contract management data monitoring processing of the virtual personality management device. FIG. 17 is a flowchart showing the process procedure of the process management process of the virtual personality management apparatus. FIG. 18 is a functional block diagram illustrating a computer that executes a virtual personality management program. FIG. 19 is a diagram showing an outline of the transaction management function of the virtual personality management device. FIG. 20A is a diagram logically illustrating an example of information registered in the virtual personality management apparatus in order to manage an article sales contract between virtual personalities. FIG. 20B is a diagram logically illustrating an example of information registered in the virtual personality management apparatus in order to manage an article sales contract between the virtual personality and the real personality. FIG. 20C is a diagram logically illustrating an example of information registered in the virtual personality management apparatus in order to manage a reservation service contract. FIG. 20-4 is a diagram logically illustrating an example of information registered in the virtual personality management device in order to manage the reservation service contract when the providing party has a real personality. FIG. 20-5 is a diagram logically illustrating an example of information registered in the virtual personality management apparatus 400 in order to manage fraud recovery contracts. FIG. 21A is a diagram illustrating an example of a process flow in the article delivery interaction. FIG. 21B is a diagram illustrating an example of a processing flow in the article delivery interaction when the sending party has an actual personality. FIG. 21C is a diagram illustrating an example of a flow of processing in the article delivery interaction when the receiving party has an actual personality. FIG. 22 is a diagram showing an example of the flow of processing in the money delivery interaction. FIG. 23A is a diagram illustrating an example of a flow of processing in the interaction of person confirmation. FIG. 23-2 is a diagram illustrating an example of a flow of processing in the interaction of person confirmation when the providing party has a personality. FIG. 24 is a diagram illustrating an example of the flow of processing in the article posting interaction. FIG. 25 is a diagram illustrating an example of a processing flow in the mail communication interaction. FIG. 26 is a diagram showing an example of the flow of processing in the telephone contact interaction.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Transaction system 2

Network

3a,

3b Financial institution

4a,

4b Broker center

5a, 5b Forwarder 11

Contract information

12a, 12b Agreement certificate 21a-24a, 21b-24b Instruction data 31 Remittance exchange 41

Successful bid

100a,

100b User terminal

200a, 200b

Service providing device

300a, 300b, 300c Real personality management device 310 Control unit 311 Real personality information acquisition unit 312 Instruction data transfer unit 320 Storage unit 321 Real personality information 330 Network interface unit 400 Virtual personality management device 410 Control unit 411 Real Personality management device response unit 412 Contract information reception unit 413 Contract management data generation unit 414 Progress management unit 415 Instruction data generation unit 416 Instruction data transmission unit 420 Storage unit 421 Virtual personality 422 Step master 423 contract management data 424 processed contract management data 425 indicating data template 430 network interface unit 500a ~ 500f intermediary device 510 the control unit 511 completion notification unit 512 instructs ID Distribution unit 520 network interface unit 1000 computer 1010 CPU
1020 Input device 1030 Monitor 1040 Media reader 1050 Network interface device 1060 RAM
1061 Virtual personality management process 1070 Hard disk device 1071 Virtual personality management program 1072 Virtual personality management data 1080 Bus

Hereinafter, preferred embodiments of a transaction method and a transaction system according to the present invention will be described in detail with reference to the accompanying drawings.

First, the transaction system according to this embodiment will be described. FIG. 1 is a diagram illustrating an example of a configuration of a transaction system according to the present embodiment. A transaction system 1 shown in the figure is a system in which the transaction method according to the present embodiment is implemented.

User terminals

100a and 100b,

service providing devices

200a and 200b, real personality management devices 300a to 300c, virtual The personality management device 400 and the

mediation devices

500a and 500b are connected via a network 2 such as the Internet. In the following description, for example, the expression “real personality management device 300” is used as a general term for the real personality management devices 300a to 300c.

User terminals

100a and 100b are terminals used by users to receive services provided through the network 2, and are, for example, personal computers. Here, the user of the user terminal 100a is the user A who uses the virtual personality ID “ABC”, and the user of the user terminal 100b is the user B who uses the virtual personality ID of “XYZ”. Suppose that

The virtual personality ID is an identifier used to identify a user who receives a service provided on the network. In the transaction system 1, the correspondence between the virtual personality ID and the user who uses the virtual personality ID is managed by the real personality management devices 300a to 300c, and a product purchased on the network is delivered to the user. Surprisingly, the personal information of the user corresponding to the virtual personality ID is operated so as not to be known to any third party. For this reason, the user can use the service on the network anonymously and safely as a virtual personality that does not know who the entity is by using the virtual personality ID.

Service providing apparatuses

200a and 200b are apparatuses that provide services to users through a network, and correspond to, for example, an auction site, an online shopping site, a ticket reservation site, an electronic bulletin board rental site, and the like. The user does not need to register personal information such as name and address in the

service providing apparatuses

200a and 200b when using the service provided by the

service providing apparatuses

200a and 200b, but only presents the virtual personality ID. Services provided by the device can be used.

The real personality management devices 300a to 300c are devices that manage the correspondence between the virtual personality ID and the real personality using the virtual personality ID, and are referred to as “# 01”, “# 02”, and “# 03”, respectively. Identified by an identifier. Specifically, the real personality management devices 300a to 300c store, as the real personality information 321, personal information such as the name, address, and mail address of the real personality using the virtual personality ID for each virtual personality ID. The real personality information 321 also stores attribute information as a virtual personality, for example, electronic signature information for performing an electronic signature as a virtual personality, an action history as a virtual personality, and the like for each virtual personality ID.

The user can freely select the real personality management device 300 that manages the correspondence between the virtual personality ID used by the user and the personal information of the user, in consideration of cost, safety, and the like. . Further, the user can manage the correspondence between the virtual personality ID used by the user and his / her personal information by using the plurality of real personality management devices 300. For example, the user A manages the correspondence between the virtual personality ID “ABC” and the personal information in the real

personality management devices

300a and 300b, and the user B uses the virtual personality ID “XYZ” and the personal information. The correspondence is managed by the real

personality management devices

300a and 300c.

The virtual personality management device 400 is a device that manages the correspondence between the virtual personality ID and the real personality management device 300. Specifically, the real personality management device 300 that manages the correspondence between the virtual personality ID and personal information is prioritized for each virtual personality ID and stored in the virtual personality information 421. The virtual personality information 421 shown in FIG. 1 has the highest personality management device 300 identified by the identifier “# 01” when personal information corresponding to the virtual personality ID “ABC” is required. This indicates that the actual personality management device 300 that is used in the priority order and identified by the identifier “# 02” should be used in the next highest priority order. When personal information corresponding to the virtual personality ID “XYZ” is required, the real personality management device 300 identified by the identifier “# 01” is used with the highest priority, and “# 03 This means that the real personality management device 300 identified by the identifier “” should be used with the next highest priority.

Intermediary devices

500a and 500b are devices that mediate exchanges of goods and money between virtual personalities. When the mediating

devices

500a and 500b mediate, the user can exchange goods and money without revealing personal information.

Next, a transaction method implemented in the transaction system 1 shown in FIG. 1 will be described with reference to FIGS. Here, the service providing apparatus 200a functions as an auction site, and the case where the user A is the seller and the user B is the buyer as the purchase contract on the auction site will be described as an example. I will do it.

FIG. 2 is a diagram showing a flow of processing until contract management data creation in the transaction method according to the present embodiment. User A uses the auction service provided by the service providing apparatus 200a to list the product, and user B makes a successful bid for this product (step S11). User A and user B can use the auction service by using their own virtual personality ID, and do not need to register personal information in the service providing apparatus 200a.

When a contract regarding the sale of a product is established between user A and user B, the service providing apparatus 200a allows the user A and the user B to exchange the price and the product without disclosing personal information to the other party. In this way, the contract information 11 and the

agreement certificates

12a and 12b are transmitted to the virtual personality management device 400, and a request is made to manage the contract (step S12). The contract information 11 is information indicating the contents of the contract agreed between the user A and the user B. The agreement certificate 12a is a certificate indicating that the user A has agreed to the contract, and the agreement certificate 12b is a certificate indicating that the user B has agreed to the contract.

An example of contract information 11 in XML (eXtensible Markup Language) format is shown in FIG. As shown in the figure, the contract information 11 includes items such as service provider code, contract type, seller, buyer, price, article name, and agreement certificate. The service provider code item is an item in which an identification code for identifying the service provided by the service providing apparatus 200a is set, and the contract type item is set in a code representing the agreed contract type. It is an item. The seller's item is an item in which the seller's virtual personality ID is set, and the buyer's item is an item in which the buyer's virtual personality ID is set. The attribute value “type =“ ID ”” in the seller and buyer items indicates that virtual personality IDs are set in these items.

The price item and the item name item are items in which the winning bid price and name of the product for which a successful bid is made are set, respectively. The item of the agreement certificate is an item in which the file name of the agreement certificate is set, and the file name of the agreement certificate 12a by the seller and the file name of the agreement certificate 12b by the buyer are set separately. It has become. The items included in the contract information 11 vary depending on the type of contract.

The agreement certificate 12a may include any content, but it is preferable that an electronic signature by the user A is given to indicate that the agreement is made by the user A. Similarly, the agreement certificate 12b may include any content, but it is preferable that an electronic signature by the user B is given to indicate that the agreement has been agreed by the user B.

When the virtual personality management device 400 receives the contract information 11 and the

agreement certificates

12a and 12b, the virtual personality management device 400 confirms their validity (step S13). Specifically, the virtual personality management device 400 checks whether or not the format of the contract information 11 is correct and whether or not the virtual personality ID included in the contract information 11 is registered in the virtual personality information 421. In addition, when the digital signature is applied to the

agreement certificates

12a and 12b, the virtual personality management device 400 verifies the digital signatures.

Then, when the virtual personality management device 400 confirms the validity of the contract information 11 or the like, the virtual personality management apparatus 400 extracts data related to a process necessary for completing the contract represented by the contract information 11 from the process master 422, and extracts the extracted data and the contract information. 11, data for managing the progress of each process is generated and stored in the contract management data 423 (step S14).

The process master 422 is master data in which processes necessary for completing a contract are defined for each type of contract. An example of the process master 422 is shown in FIG. As shown in the figure, the process master 422 has items such as contract type, process number, process name, starting point, next process, deadline, recovery process, instruction data type, instruction data parameter, and the process number for each contract type. -It is configured so that a plurality of combinations of instruction data parameters can be registered.

The contract type is a code indicating the type of contract. The process number is an identification number for identifying the process, and the process name is the name of the process. The starting point is a flag indicating whether or not the process is the first process in the contract. If the process is the first process, the value is “Y”; otherwise, the value is “N”. Take. The next process is a process number of a process to be executed after the process is completed. If the next step is blank, it means that there is no next step, that is, the step is the last step.

The deadline is the number of days that the process must be completed from the start of the process, and the recovery process is recovered when the process is not completed after the number of days indicated by the deadline. Is the process number of the process to be executed. The instruction data type is a type of instruction data issued to one of the parties to execute the process, and the instruction data parameter is a parameter necessary for issuing instruction data.

The 1st to 7th lines in the example shown in FIG. 4 are data defining a process for completing a contract identified by the contract type “T001”. The contract identified by the contract type “T001” is specifically a contract for exchanging goods and prices based on an agreement between the seller and the buyer in the auction service.

Of these processes, the process with the process number “10001” in the first line and the process name “payment” is the process to be executed first with the starting value “Y”. The process “payment of money” represents a process in which the buyer pays the price. The values of the next process, the deadline, and the recovery process of this process are “10002”, “10”, and “10011”, respectively. If this process is completed within 10 days from the start, “10002” The process identified by the process number “” should be executed, otherwise the process identified by the process number “10011” should be executed.

The process with the process number “10002” on the second line is a process executed when the “payment of money” process is completed within the time limit, and the process name is “payment of money”. The process of “payment of money” represents the process of receiving the price paid by the buyer by the seller. The values of the next process, the deadline, and the recovery process of this process are “10003”, “10”, and “10002”, respectively. If this process is completed within 10 days after the start, “10003” "Indicates that the process identified by the process number should be executed, otherwise the same process should be re-executed.

The process with the process number “10003” on the third line is a process that is executed when the “payment of money” process is completed within the time limit, and the process name is “send goods”. The process of “article sending” represents a process in which a seller sends a product. The values of the next process, the deadline, and the recovery process of this process are “10004”, “10”, and “10021”, respectively. If this process is completed within 10 days from the start, “10004” The process identified by the process number “” should be executed, otherwise the process identified by the process number “10021” should be executed.

The process with the process number “10004” on the fourth line is a process executed when the “article delivery” process is completed within the time limit, and the process name is “article receipt”. The process of “goods reception” represents a process in which a buyer receives a product sent from a seller. The values of the next process, deadline, and recovery process of this process are blank, “10”, and “10031”, respectively. This means that if this process is completed within 10 days after the start, the contract is completed. Otherwise, it indicates that the process identified by the process number “10031” should be executed.

The process with the process number “10011” on the fifth line is a process that is executed when the “payment of money” process is not completed within the time limit, and the process name is “price withdrawal”. The process of “price withdrawal” represents a process of forcibly withdrawing the price from the buyer's account. The values of the next process, the deadline, and the recovery process of this process are “10002”, “10”, and “99999”, respectively. If this process is completed within 10 days from the start, “10002” "Indicates that the process identified by the process number" 9 "should be executed, otherwise the process identified by the process number" 99999 "should be executed. The process identified by the process number “99999” is a process of executing a predetermined error process on the assumption that the contract has not been established.

The process of the process number “10021” on the sixth line is a process that is executed when the “article delivery” process is not completed within the time limit, and the process name is “send reminder”. The process of “Delivery Sending” represents a process of prompting the seller to ship the product. The values of the next process, the deadline, and the recovery process of this process are “10003”, “10”, and “10021”, respectively. If this process is completed within 10 days after the start, “10003” "Indicates that the process identified by the process number should be executed, otherwise the same process should be re-executed.

The process with the process number “1003” on the seventh line is a process that is executed when the “article reception” process is not completed within the time limit, and the process name is “reception receipt”. The process of “prompting to receive” represents a process of prompting the buyer to receive the product. The values of the next process, deadline, and recovery process of this process are blank, “10”, and “10031”, respectively. This means that if this process is completed within 10 days after the start, the contract is completed. Otherwise, the same process should be re-executed.

As described above, in the first to seventh lines in the example shown in FIG. 4, the contract identified by the contract type “T001” is “price payment”, “price receipt”, “goods delivery”, “goods receipt”. If these steps are not completed within the specified time limit, the steps of "Price withdrawal", "Send reminder", and "Receive receipt" are for recovery. Is shown to be executed.

The 8th to 14th lines in the example shown in FIG. 4 are data defining a process for executing a contract identified by the contract type “T002”. The contract identified by the contract type “T002” is specifically a contract in which the perpetrator who slandered on the electronic bulletin board rental site apologizes the victim and pays the apology. .

The 8th to 14th lines in the example shown in FIG. 4 show that the contract identified by the contract type “T002” is an “apology request” requesting the perpetrator to post an apology, and the apology posted by the perpetrator. In this order, the process of confirming the sentence is confirmed by the victim, the process of confirming the apology, the process of paying the apology by the perpetrator, and the process of receiving the apology by the victim. If these steps are completed by execution, and the steps are not completed within the predetermined time limit, the steps of “confirmation reminder”, “price withdrawal”, and “receipt receipt” will be executed for recovery. Show.

An example of the contract management data 423 is shown in FIG. The contract management data 423 is data for managing the progress of a process necessary for completing a contract. The contract management data 423 includes data having the same contract type as the contract type included in the contract information 11 whose validity is confirmed. It is generated by extracting from the master 422 and combining the extracted data and the contents of the contract information 11. As shown in FIG. 5, the contract management data 423 includes items such as a contract number, a process number, an instruction ID, an instruction data issue date, an instruction data processing date, a status, a shipping request destination, and an instruction data parameter. In addition, a plurality of combinations of process number to instruction data parameter can be registered.

The contract number is a number for identifying a contract, and is issued for each contract information 11 whose validity has been confirmed. The process number is an identification number for identifying a process and corresponds to the process number of the process master 422. The instruction ID is a number for identifying instruction data issued to one of the parties to execute the process. The instruction data issue date is the date when the instruction data is issued, and the instruction data processing date is the date when the instruction data is processed.

The status indicates the state of the instruction data, “not issued” indicating that the instruction data has not been issued, “issued” indicating that the instruction data has been issued, and “ It takes one of the values “Processed” and “Expired” indicating that the instruction data has expired. The shipping request destination is a number for identifying the real personality management device 300 that requests the sending of the instruction data, and the instruction data parameter is a parameter necessary for issuing the instruction data.

Here, the instruction data will be described. The instruction data is issued to transmit the contents and deadline of the process necessary for completing the transaction included in the contract to one of the parties and to execute the process. Each instruction data is assigned a unique instruction ID, and when reaching one side of the party, this instruction ID is described in the instruction data, but the contract number and the virtual personality ID of the party are described in the instruction data. Not. In addition, in each instruction data, only information on one party is described, and information on the other party is not described. For this reason, even if a third party such as a carrier is involved in the process of delivering the instruction data to the parties, the third party will not know the correspondence between the parties and the virtual personality ID and the relationship between the parties involved in the transaction. .

In addition, when sending goods from the seller to the buyer, the process is set so that the goods are sent via the brokerage center, which will be described later, instead of sending the goods directly from the seller to the buyer, and the seller sends the goods to the brokerage center. Different instruction data with different instruction IDs are issued for the process and the process in which the buyer receives the product from the broker center. For this reason, even if the carrier that delivers the product from the seller's hand to the broker's center is the same as the carrier that delivers the product from the broker's center to the buyer's hand, it is not possible to know the correspondence between the buyer and the seller from the instruction ID. Can not.

The first to seventh lines of the contract management data 423 shown in FIG. 5 show examples of data generated based on the contract information 11 shown in FIG. 3 and the process master 422 shown in FIG. The instruction data parameter in the contract management data 423 is obtained by replacing the parameter name portion surrounded by “<” and “>” of the instruction data parameter in the process master 422 with the value of the item of the same name included in the contract information 11. Is set.

For example, in the process data 422 shown in FIG. 4, the first “destination = <buyer>, amount = <price>” instruction data parameter indicates that the “buyer” portion is in the contract information 11 shown in FIG. 5 is replaced with “XYZ” which is the value of the buyer item, and “¥ 25,000” which is the value of the price item in the contract information 11 shown in FIG. The instruction data parameter “destination = <XYZ>, amount = ¥ 25,000” on the first line of the contract management data 423 shown in FIG.

The instruction data parameter on the first line in FIG. 5 means that the instruction data should be created with the virtual personality ID “XYZ” as the destination and the amount “¥ 25,000”. In addition, “XYZ” is surrounded by “<” and “>” to indicate that this value is a virtual personality ID. That “XYZ” is a virtual personality ID is determined from the attribute value “type =“ ID ”” in the contract information 11.

As will be described later, each instruction data is generated from the template included in the instruction data template 425 and the instruction data parameter of the contract management data 423. The virtual personality management device 400 corresponds to the virtual personality ID of the transmission destination. Since the personal information of the actual personality is not held, the instruction data cannot be transmitted directly to the transmission destination. Therefore, the virtual personality management device 400 requests the real personality management device 300 to transmit instruction data to the transmission destination.

The virtual personality management device 400 determines which real personality management device 300 is requested to transmit the instruction data before registering the data in the contract management data 423, and the result is sent to the shipping request destination of the contract management data 423. Set to item. The virtual personality management device 400 selects the real personality management device 300 so that the transmission of the instruction data is performed by the real personality management device 300 that is different for each party in determining the real personality management device 300 that requests transmission of the instruction data. . For example, if the real personality management device 300 that requests transmission of instruction data to the seller and the real personality management device 300 that requests transmission of instruction data to the buyer are the same, the product name and price included in the instruction data This is because the correspondence between the seller and the buyer may be known to the operator of the real personality management device 300.

In addition, when the data registered in the contract management data 423 includes a transaction for paying money, such as “payment”, the virtual personality management device 400 gives priority to the transmission destination in the transaction. The personality management device 300 is selected. In the example of the virtual personality information 421 shown in FIG. 1, the real personality management device 300 of “# 01” has the highest priority for both the virtual personality ID “ABC” and the virtual personality ID “XYZ”. In the contract management data 423 shown in FIG. 5, only the shipping request destination of the process whose destination is “XYZ” as the buyer is set as “# 01” in the contract management data 423 shown in FIG. This is the reason why the delivery request destination of the process whose “ABC” is the destination is “# 02”, which is the real personality management device 300 having the second priority. The reason for giving priority to the transmission destination in the transaction for paying money is to ensure that payment is made using personal information that is expected to be properly maintained.

In this way, after registering the data for managing the process in the contract management data 423, the virtual personality management device 400 issues instruction data corresponding to each process in a predetermined order, and performs the process to the issuer party. Instruct to run.

FIG. 6 is a diagram showing a flow of processing up to payment of a price in the transaction method according to the present embodiment. When the data shown in FIG. 5 is registered in the contract management data 423, the virtual personality management device 400 identifies a process as a starting point, and generates instruction data 21a for executing the process. In this example, the starting process is a process in which the value of the starting point of the data retrieved from the process master 422 using the process number as a key is “Y”, that is, the process having the process number “10001”.

The virtual personality management device 400 acquires the value of the instruction data type corresponding to the process number “10001” from the process master 422 and acquires the template corresponding to this value from the instruction data template 425. Then, the virtual personality management device 400 generates instruction data 21a by replacing a predetermined portion of the acquired template with the value of the instruction data parameter of the relevant process (step S21).

An example of a template included in the instruction data template 425 is shown in FIG. The template shown in the figure is a template corresponding to “money payment” which is an instruction data type of the process having the process number “10001”. This template is based on the premise that instruction data is transmitted by e-mail, and includes a header part such as Subject, From, To, and a body part that conveys the contents of the instruction data.

The virtual personality management apparatus 400 replaces the parameter name part enclosed by “<” and “>” in the template with the value of the item of the same name of the instruction data parameter or a value determined by a predetermined rule. Data 21a is generated. In the template illustrated in FIG. 7, parameter names “delivery destination”, “due date”, “amount”, and “instruction ID” are embedded. Among these parameter names, “Due Date” and “Instruction ID” are parameter names to be replaced according to a predetermined rule, respectively, the date obtained by adding the number of days in the deadline to the current date, and the instruction ID of the relevant process. Is replaced by Also, “Destination” and “Amount” are replaced by the value of the item of the same name in the instruction data parameter.

FIG. 8 is a diagram showing an example of the instruction data 21a generated based on the template shown in FIG. As shown in the figure, “<Destination>” is replaced with “<XYZ>” by the instruction data parameter, and “<Date”> is replaced with “2007/8/30” by a predetermined rule. Yes. Further, “<amount>” is replaced with “¥ 25,000” by the instruction data parameter, and “<instruction ID>” is replaced with “vw74tb24” by a predetermined rule.

When the virtual personality management apparatus 400 generates the instruction data 21a, the virtual personality management apparatus 400 transmits the instruction data 21a to the real personality management apparatus 300a indicated by the value of the shipping request destination (step S22). As shown in FIG. 8, a value “<XYZ>: mail address” is set in the To header of the header portion of the instruction data 21a to be transmitted. Originally, the mail address of the destination user should be set in the To header. However, since the virtual personality management device 400 only knows the virtual personality ID of the user, it cannot set the mail address itself. . For this reason, the virtual personality management device 400 embeds the above value in the instruction data 21a and replaces the value with the real personality management device 300a that stores the personal information of the real personality corresponding to the virtual personality ID. Let

If the expression “<A>: B” is included in the instruction data 21 a transmitted from the virtual personality management device 400, the real personality management device 300 a executes the personal information corresponding to the virtual personality ID “A”. Obtained from the personality information 321, the value of the item “B” in the personal information is embedded in the part “<A>: B”. That is, when the personality management device 300a receives the instruction data 21a shown in FIG. 8 from the virtual personality management device 400, the expression “<XYZ>: mail address” is converted into the real personality corresponding to the virtual personality ID “XYZ”. To email address.

The instruction data 21b subjected to this conversion does not include the virtual personality ID of the transmission destination. For this reason, even if a third party looks into the contents of the instruction data 21b in the process of transmitting the instruction data 21b to the user B who has the real personality corresponding to the virtual personality ID “XYZ”, The correspondence of the virtual personality ID “XYZ” is not known to the third party.

As described above, when receiving the instruction data 21a having the virtual personality ID “XYZ” as the transmission destination, the real personality management device 300a generates the instruction data 21b having the user B as the transmission destination by performing necessary replacement. This is sent by mail (step S23). In sending the instruction data 21b by e-mail, it is preferable to apply an electronic signature to the body part in order to prevent tampering.

When the user B receives the instruction data 21b at the user terminal 100b, the user B requests the financial institution 3a to transfer the amount indicated by the instruction data 21b to a predetermined account opened by the broker center 4a (step S24). ). At this time, the user B designates “vw74tb24”, which is an instruction ID, instead of his / her name as the transfer person name. And the financial institution 3a performs transfer according to a request (step S25).

The mediation center 4a is a mechanism provided to enable exchange of goods and money between users who use the virtual personality ID without notifying each other of personal information, and includes a mediation device 500a. When the transfer is performed from the financial institution 3a, the brokerage center 4a specifies the instruction ID from the transfer person name, associates the specified instruction ID with the transferred amount, and registers it as the remittance exchange 31 in the brokerage device 500a. When the registration is completed, the mediation device 500a transmits the instruction ID “vw74tb24” to the virtual personality management device 400 and notifies that the process corresponding to the instruction ID is completed (step S26).

When receiving the notification from the intermediary device 500a, the virtual personality management device 400 searches the contract management data 423 for data corresponding to the instruction ID “vw74tb24”, and updates the status value of the retrieved data to “processed”. And record that the process is complete. Then, the virtual personality management device 400 identifies the next process. In this example, the next process is the process of the process number “10002” that is the next process of the process of the process number “10001”.

Subsequently, the virtual personality management device 400 instructs the mediation device 500a to replace “vw74tb24”, which is the instruction ID of the completed process, with “g5u6uw56”, which is the instruction ID of the next process. Accordingly, the instruction ID of the remittance exchange 31 is changed from “vw74tb24” to “g5u6uw56” (step S27).

In the above description, the instruction data 21b is transmitted as an e-mail from the real personality management device 300a to the user B. However, the transmission method of the instruction data 21b is not limited to this. For example, the instruction data 21b may be printed and mailed, or the user B may refer to the instruction data 21b on a password-managed WEB page.

In the above description, the user B requests the financial institution 3a to transfer the money. However, the user B receives the instruction data 21a based on the settings registered in the real personality management device 300a in advance. The actual personality management device 300a may request the transfer to the financial institution 3a without notifying the user B of the contents.

In the above description, the instruction ID is notified to the broker center 4a because the instruction ID is given as the transfer person name at the time of transfer, but the instruction ID is notified to the broker center 4a using another method. You may do that.

FIG. 9 is a diagram showing a flow of processing up to receipt of payment in the transaction method according to the present embodiment. When the virtual personality management apparatus 400 specifies that the next process of the process with the process number “10001” is the process with the process number “10002”, the virtual personality management device 400 instructs the instruction data type “money receipt” to execute this process. Data 22a is generated (step S31).

When the virtual personality management apparatus 400 generates the instruction data 22a, the virtual personality management apparatus 400 transmits the instruction data 22a to the real personality management apparatus 300b indicated by the value of the shipping request destination (step S32). Upon receipt of the instruction data 22a having the virtual personality ID “ABC” as the transmission destination, the real personality management device 300b generates necessary instruction data 22b having the user A as the transmission destination, and sends the instruction data 22b to the mail. Transmit (step S33).

When the user A receives the instruction data 22b at the user terminal 100a, the user A presents the information such as the instruction ID “g5u6uw56” included in the instruction data 22b and the information of the account opened by the user A to the financial institution 3b. Request for withdrawal of the price (step S34). Then, the financial institution 3b notifies the intermediary center 4a of the instruction ID “g5u6uw56” and requests that the money be deposited into the account of the user A (step S35).

The mediation center 4a is requested when it confirms that the remittance exchange 31 corresponding to the notified instruction ID “g5u6uw56” is registered in the intermediary device 500a and the amount requested for depositing matches the remittance exchange 31. Deposit the amount into the designated account (step S36). Then, the intermediary device 500a transmits the instruction ID “g5u6uw56” to the virtual personality management device 400 and notifies that the process corresponding to the instruction ID has been completed (step S37).

When receiving the notification from the intermediary device 500a, the virtual personality management device 400 searches the contract management data 423 for data corresponding to the instruction ID “g5u6uw56”, and updates the status value of the retrieved data to “processed”. And record that the process is complete. Then, the virtual personality management device 400 identifies the next process. In this example, the next process is the process of the process number “10003” which is the next process of the process of the process number “10002”.

In the above description, the instruction data 22b is transmitted as an e-mail from the real personality management device 300b to the user A. However, the transmission method of the instruction data 22b is not limited to this. In the above description, the user A requests the financial institution 3b to withdraw the money. However, based on the setting that the user A has registered in the real personality management device 300b in advance, the instruction data 22a is changed. The received personality management device 300b may request the withdrawal to the financial institution 3b without notifying the user A of the contents.

FIG. 10 is a diagram illustrating a flow of processing up to article delivery in the transaction method according to the present embodiment. When the virtual personality management apparatus 400 specifies that the next process of the process with the process number “10002” is the process with the process number “10003”, the virtual personality management apparatus 400 instructs the instruction data type “article delivery” to execute this process. Data 23a is generated (step S41).

When the virtual personality management apparatus 400 generates the instruction data 23a, the virtual personality management apparatus 400 transmits the instruction data 23a to the real personality management apparatus 300b indicated by the value of the shipping request destination (step S42). Upon receiving the instruction data 23a having the virtual personality ID “ABC” as the transmission destination, the real personality management device 300b generates necessary instruction data 23b having the user A as the transmission destination, and sends the instruction data 23b to the mail. Transmit (step S43).

When user A receives instruction data 23b at user terminal 100a, user A designates instruction ID “hg64uoh3” included in instruction data 23b and requests delivery of successful bid item 41 to carrier 5a (step S44). Then, the carrier 5a affixes a delivery tag indicating that the instruction ID is “hg64uoh3” to the successful bid product 41 and transports it to the broker center 4b (step S45).

When the successful bid item 41 is carried in, the broker center 4b specifies the instruction ID from the delivery tag, and associates the specified instruction ID with the storage location of the successful bid item 41 and registers them in the broker device 500b. When the registration is completed, the mediation device 500b transmits the instruction ID “hg64uoh3” to the virtual personality management device 400, and notifies that the process corresponding to the instruction ID is completed (step S46).

When receiving the notification from the intermediary device 500b, the virtual personality management device 400 searches the contract management data 423 for data corresponding to the instruction ID “hg64uoh3”, and updates the status value of the retrieved data to “processed”. And record that the process is complete. Then, the virtual personality management device 400 identifies the next process. In this example, the next process is a process with a process number “10004” that is the next process after the process with the process number “10003”.

Subsequently, the virtual personality management device 400 instructs the mediation device 500b to replace “hg64uoh3”, which is the instruction ID of the completed process, with “j54u7567”, which is the instruction ID of the next process, and the mediation device 500b And the stored instruction ID “hg64uoh3” is changed to “j54u7567”, and the delivery tag affixed to the successful bid product 41 is replaced with another delivery tag with an instruction ID “j54u7567”. It is replaced (step S47).

In the above description, the instruction data 23b is transmitted as an e-mail from the real personality management device 300b to the user A. However, the transmission method of the instruction data 23b is not limited to this.

FIG. 11 is a diagram showing a flow of processing up to receiving an article in the transaction method according to the present embodiment. When the virtual personality management apparatus 400 specifies that the next process of the process with the process number “10003” is the process with the process number “10004”, the virtual personality management apparatus 400 instructs the instruction data type “article receipt” to execute this process. Data 24a is generated (step S51).

When the virtual personality management apparatus 400 generates the instruction data 24a, the virtual personality management apparatus 400 transmits the instruction data 24a to the real personality management apparatus 300a indicated by the value of the shipping request destination (step S52). Upon receiving the instruction data 24a having the virtual personality ID “XYZ” as the transmission destination, the real personality management device 300a generates necessary instruction data 24b having the user B as the transmission destination, and sends the instruction data 24b to the mail. Transmit (step S53).

User B, when receiving the instruction data 24b at the user terminal 100b, designates the instruction ID “j54u7567” included in the instruction data 24b and requests the carrier 5b to transport the successful bid item 41 (step S54). Then, the carrier 5b goes to the broker center 4b and requests to deliver the successful bid product 41 corresponding to the instruction ID “j54u7567” (step S55).

When the mediation center 4b confirms that the requested instruction ID “j54u7567” is registered in the mediation device 500b, the mediation center 4b delivers the requested successful bid item 41 to the carrier 5b, and the shipping agent 5b delivers the successful bid item 41 to the user. Transport to B (step S56). Then, the intermediary device 500b transmits the instruction ID “j54u7567” to the virtual personality management device 400, and notifies that the process corresponding to this instruction ID has been completed (step S57).

When receiving the notification from the mediation device 500b, the virtual personality management device 400 searches the contract management data 423 for data corresponding to the instruction ID “j54u7567” and updates the status value of the retrieved data to “processed”. And record that the process is complete. Then, the virtual personality management device 400 identifies the next process. In this example, the next step does not exist, so the contract is completed here.

In the above description, the instruction data 24b is transmitted from the real personality management device 300a to the user B as an e-mail, but the transmission method of the instruction data 24b is not limited to this. In the above description, the user B requests the carrier 5b to transport the successful bid item 41. However, the instruction data 24a is based on the settings that the user B has previously registered in the real personality management device 300a. The personality management device 300a that has received the message may request transportation to the carrier 5b without notifying the contents to the user B.

Thus, in the transaction method according to the present embodiment, the process is subdivided so that only one of the parties involved in the transaction participates in the work, and a unique instruction ID is assigned to each subdivided process. Each process is identified only by the ID. Also, the instruction data for instructing the execution of the process is transmitted to the user via the actual personality management device 300 at different timings. Therefore, the user can use the service anonymously and safely without the third person such as a financial institution or a carrier knowing the correspondence between the real personality and the virtual personality ID and the correspondence between the process and the virtual personality ID. it can.

Next, the configuration of the real personality management device 300a, the virtual personality management device 400, and the mediation device 500a shown in FIG. 1 will be described. The real

personality management devices

300b and 300c have the same configuration as the real personality management device 300a, and the mediation device 500b has the same configuration as the mediation device 500a.

FIG. 12 is a functional block diagram showing the configuration of the real personality management device 300a. As shown in the figure, the real personality management device 300 a includes a control unit 310, a storage unit 320, and a network interface unit 330. The network interface unit 330 is an interface device for exchanging information with other devices via the network 2.

The control unit 310 is a control unit that totally controls the real personality management device 300a, and includes a real personality information acquisition unit 311 and an instruction data transfer unit 312. The real personality information acquisition unit 311 is a processing unit that acquires personal information of a real personality corresponding to the virtual personality ID from the real personality information 321 stored in the storage unit 320. When the instruction data is transmitted from the virtual personality management device 400, the instruction data transfer unit 312 causes the real personality information acquisition unit 311 to acquire the personal information of the real personality corresponding to the virtual personality ID included in the instruction data. The processing unit transfers instruction data subjected to necessary replacement processing based on the received personal information to a transmission destination.

The storage unit 320 is a storage device that stores various types of information, and stores real personality information 321. Since the actual personality information 321 has already been described, description thereof is omitted.

FIG. 13 is a functional block diagram showing the configuration of the virtual personality management device 400. As shown in FIG. As shown in the figure, the virtual personality management device 400 includes a control unit 410, a storage unit 420, and a network interface unit 430. The network interface unit 430 is an interface device for exchanging information with other devices via the network 2.

The control unit 410 is a control unit that totally controls the virtual personality management device 400, and includes a real personality management device response unit 411, a contract information reception unit 412, a contract management data generation unit 413, a progress management unit 414, an instruction A data generation unit 415 and an instruction data transmission unit 416 are included. The real personality management device response unit 411 is stored in the storage unit 420 when there is an inquiry about which real personality management device 300 manages the personal information of the real personality corresponding to the virtual personality ID from another device. The processing unit responds to the corresponding real personality management device 300 with reference to the virtual personality information 421.

The contract information receiving unit 412 receives from the service providing apparatus 200 the contract information 11 indicating the contents of the contract and the agreement certificate 12 indicating that the user using the virtual personality ID has agreed to the contract. Is a processing unit for confirming the validity of The contract management data generation unit 413 generates data for managing processes necessary for executing the contract represented by the contract information 11 whose validity is confirmed by the service providing apparatus 200, and the contract management data stored in the storage unit 420. 423 is a processing unit to be stored.

The progress management unit 414 is a processing unit that manages the progress of each process based on the data stored in the contract management data 423 by the contract management data generation unit 413. Details of the processing procedure of the progress management unit 414 will be described later. The instruction data generation unit 415 is a processing unit that generates instruction data in accordance with an instruction from the progress management unit 414. The instruction data transmission unit 416 converts the instruction data generated by the instruction data generation unit 415 into a predetermined real personality management device 300. It is a processing part which transmits to.

The storage unit 420 is a storage device that stores various types of information, and stores virtual personality information 421, a process master 422, contract management data 423, processed contract management data 424, and an instruction data template 425. The processed contract management data 424 stores data that is deleted from the contract management data 423 when the contract is completed. Since the virtual personality information 421, the process master 422, the contract management data 423, and the instruction data template 425 have already been described, description thereof will be omitted.

FIG. 14 is a functional block diagram showing the configuration of the mediation apparatus 500a. As shown in the figure, the intermediary device 500a includes a control unit 510 and a network interface unit 520. The network interface unit 520 is an interface device for exchanging information with other devices via the network 2.

The control unit 510 is a control unit that totally controls the mediation device 500a, and includes a completion notification unit 511 and an instruction ID replacement unit 512. The completion notification unit 511 is a processing unit that notifies the virtual personality management device 400 when a process corresponding to a certain instruction ID is completed. The instruction ID replacement unit 512 is notified by the completion notification unit 511. Correspondingly, when an instruction ID replacement instruction is sent from the virtual personality management device 400, the instruction ID replacement process is performed according to the instruction.

Next, the processing procedure of the virtual personality management device 400 shown in FIG. 13 will be described. FIG. 15 is a flowchart showing a processing procedure of contract information reception processing of the virtual personality management device 400. The contract information receiving process is a process executed when the contract information receiving unit 412 receives the contract information 11 or the like.

As shown in FIG. 15, when the contract information receiving unit 412 receives the contract information 11 and the agreement certificate 12 from the service providing apparatus 200 (step S101), whether or not the virtual personality ID included in the contract information 11 is valid. This is verified with reference to the virtual personality information 421 (step S102). If the virtual personality ID is not valid (No at Step S103), a predetermined error process is executed (Step S104), and the process is terminated.

If the virtual personality ID is valid (Yes at Step S103), the contract information receiving unit 412 verifies whether the agreement certificate 12 is valid (Step S105). If the agreement certificate 12 is not valid (No at Step S106), a predetermined error process is executed (Step S104), and the process is terminated.

If the agreement certificate 12 is valid (Yes at Step S106), the contract management data generation unit 413 issues a contract number corresponding to the contract information 11 (Step S107), and the priority set in the virtual personality information 421 is set. Based on the degree, the real personality management device 300 that is the shipping request destination is determined for each virtual personality ID included in the contract information 11 (step S108). Here, when there are a plurality of virtual personality IDs with the same real personality management device 300 as the shipping request destination (Yes at step S109), the real personality as the shipping request destination so that the real personality management devices 300 are not the same. An attempt is made to reselect the management device 300 (step S110). Specifically, first, referring to the virtual personality information 421, the real personality management device 300 having the highest priority among the real personality management devices 300 corresponding to one virtual personality ID is shipped corresponding to the virtual personality ID. Select as a client. Then, among the real personality management devices 300 corresponding to the other virtual personality ID, the real personality management device 300 that has not been selected and has the highest priority is selected as a shipping request destination corresponding to the virtual personality ID. Here, if there is only one real personality management device 300 corresponding to the other virtual personality ID, whether or not the real personality management device 300 is not selected is used to send the real personality management device 300 to the shipping request destination corresponding to the virtual personality ID. Select as In addition, in the case of a transaction in which either side pays money, the shipping request destination corresponding to the virtual personality ID of the money paying side is selected first, otherwise, the real personality management registered in the virtual personality information 421 The shipping request destination corresponding to the virtual personality ID on the side with few devices 300 is selected first.

Then, the contract management data generation unit 413 acquires a line with the same contract type from the process master 422 (Step S111), and if there is a corresponding line (Yes in Step S112), issues a unique instruction ID (Step S113). ), The instruction data parameter is replaced using the information included in the contract information 11 (step S114), and the issued instruction ID, the instruction data parameter, and the like are added to the contract management data 423 (step S115). Then, the process is resumed from step S111, and if there is no corresponding line (No at step S112), the process is terminated.

FIG. 16 is a flowchart showing a processing procedure of contract management data monitoring processing of the virtual personality management device 400. The contract management data monitoring process is a process periodically executed by the progress management unit 414. As illustrated in FIG. 16, the progress management unit 414 obtains one line of the contract management data 423 (step S201), and if it can be obtained (Yes in step S202), obtains a line having the same process number from the process master 422. (Step S203).

If the process corresponding to the acquired information is the starting point and the instruction data is not yet issued, that is, the starting point value in the line acquired from the process master 422 is “Y”, and the contract management data 423 is displayed. If the status value in the row acquired from “No” is issued (Yes in step S204), the instruction data generation unit 415 generates instruction data. Specifically, the instruction data generation unit 415 acquires a template corresponding to the value of the instruction data type in the line acquired from the process master 422 from the instruction data template 425, and the acquired template and the progress management unit 414 Instruction data is generated based on the acquired information. Then, the instruction data transmission unit 416 transmits the generated instruction data to the actual personality management device 300 indicated by the value of the shipping request destination in the line acquired from the contract management data 423 (step S205).

After transmitting the instruction data, the progress management unit 414 updates the status of the line acquired from the contract management data 423 in step S201 to “issued”, and sets the current date on the instruction data issuance date (step S206). Then, the progress management unit 414 returns to step S201 and restarts the process.

On the other hand, when the process corresponding to the acquired information is not the starting point, or when the instruction data has not been issued (No at step S204), the progress management unit 414 indicates the instruction data of the process corresponding to the acquired information. Is issued and expired, that is, the status value in the row acquired from the contract management data 423 is “issued”, and the instruction data issue date in the row acquired from the contract management data 423 It is confirmed whether the date obtained by adding the number of days for the deadline in the row acquired from the process master 422 is earlier than the current date. If the instruction data of the process corresponding to the acquired information has not been issued or has not expired (No at Step S207), the progress management unit 414 returns to Step S201 and restarts the process.

If the process instruction data corresponding to the acquired information has been issued and has expired (Yes in step S207), the progress management unit 414 sets the status of the line acquired from the contract management data 423 in step S201 to “ Update to “expired” (step S208). Then, by acquiring from the process master 422 a line having the same value as the process recovery number of the line acquired from the process master 422, the line corresponding to the recovery process is acquired from the process master 422 (step S209). , Having the same value as the contract number of the line acquired from the contract management data 423 in step S201 as the contract number, and having the same value as the process number of the line acquired from the process master 422 in step S203. By acquiring a row from the contract management data 423, a row corresponding to the recovery process is acquired from the contract management data 423 (step S210).

If the line acquired from the process master 422 in step S209 indicates that the contract has not been established (Yes in step S211), the progress management unit 414 executes predetermined error processing (step S212), and then proceeds to step S201. Return and resume processing.

On the other hand, if the line acquired from the process master 422 in step S209 does not indicate that the contract has not been established (No in step S211), the instruction data generation unit 415 generates instruction data. Specifically, the instruction data generation unit 415 acquires a template corresponding to the value of the instruction data type in the row acquired from the process master 422 in step S209 from the instruction data template 425, and the acquired template and step S209. Instruction data is generated based on the information acquired by the progress management unit 414 in step S210. Then, the instruction data transmission unit 416 transmits the generated instruction data to the actual personality management device 300 indicated by the value of the shipping request destination in the line acquired from the contract management data 423 in step S210 (step S213).

After transmitting the instruction data, the progress management unit 414 updates the status of the line acquired from the contract management data 423 in step S210 to “issued”, and sets the current date on the instruction data issue date (step S214). Then, the progress management unit 414 returns to step S201 and restarts the process.

Thus, the procedure is repeatedly executed, and when all the rows of the contract management data 423 are processed (No at Step S202), the processing is ended.

FIG. 17 is a flowchart showing the process procedure of the process management process of the virtual personality management device 400. The process management process is a process that is always executed by the progress management unit 414. As illustrated in FIG. 17, the progress management unit 414 waits for a process completion notification to be transmitted from the mediation device 500 or the like (step S301). When a completion notification is received (Yes at step S302), the line corresponding to the instruction ID notified of completion is searched from the contract management data 423, and the status of the corresponding line is updated to “processed” (step S303). ), The current date is set on the instruction data processing date (step S304).

Then, the progress management unit 414 acquires a line having the same value as the process number of the line searched from the contract management data 423 as the process number from the process master 422, and further, the same value as the next process of the acquired line. Is acquired from the process master 422, the line corresponding to the next process is acquired from the process master 422 (step S305), and the same value as the contract number of the line retrieved from the contract management data 423 is obtained. Is acquired from the contract management data 423 as a process number having the same value as the process number of the line acquired from the process master 422 in step S305, thereby contracting a line corresponding to the next process. Obtained from the management data 423 (step S306).

If there is a next process (Yes at step S307), the instruction data generation unit 415 generates instruction data. Specifically, the instruction data generation unit 415 acquires a template corresponding to the value of the instruction data type in the row acquired from the process master 422 in step S305 from the instruction data template 425, and the acquired template and step S305. Instruction data is generated based on the information acquired by the progress management unit 414 in step S306. Then, the instruction data transmission unit 416 transmits the generated instruction data to the real personality management device 300 indicated by the value of the shipping request destination in the line acquired from the contract management data 423 in step S306 (step S308), and step In step S306, the status of the row acquired from the contract management data 423 is updated to “issued”.

If the process notified of completion is a process corresponding to the deposit or receipt of money to the broker center (Yes at step S310), the progress management unit 414 enters the contract ID at the next process, that is, the contract at step S306. The value of the instruction ID in the line acquired from the management data 423 is transmitted to the mediation apparatus 500 that has notified the completion, and an instruction to change the instruction ID is instructed (step S311). Then, the progress management unit 414 returns to step S301 and restarts the process. If the process notified of completion is not a process corresponding to payment or receipt of money to the broker center (No at Step S310), the progress management unit 414 returns to Step S301 without instructing execution of the replacement process. To resume processing.

If there is no next process of the process notified of completion (No at step S307), there is no process being executed among the processes having the same contract number as that process, that is, the status is “ If there is no “issued” item, the progress management unit 414 moves the line having the same contract number as the process notified of completion from the contract management data 423 to the processed contract management data 424 (step S312). Then, the progress management unit 414 returns to step S301 and restarts the process.

1 can be variously modified without departing from the gist of the present invention. For example, the functions of the various apparatuses shown in FIG. 1 can be implemented as software and executed by a computer to realize functions equivalent to those of the various apparatuses shown in FIG. The configuration of a computer that executes the software 1000 will be described below by taking as an example the computer 1000 that executes the virtual personality management program 1071 that implements the functions of the virtual personality management device 400 as software.

FIG. 18 is a functional block diagram showing a computer 1000 that executes the virtual personality management program 1071. The computer 1000 includes a CPU (Central Processing Unit) 1010 that executes various arithmetic processes, an input device 1020 that receives input of data from a user, a monitor 1030 that displays various information, and a medium that reads a program from a recording medium. A bus 1080 includes a reading device 1040, a network interface device 1050 that exchanges data with other computers via a network, a RAM (Random Access Memory) 1060 that temporarily stores various information, and a hard disk device 1070. Connected and configured.

The hard disk device 1070 includes a virtual personality management program 1071 having the same function as that of the control unit 410 shown in FIG. 13 and a virtual personality management program corresponding to various data stored in the storage unit 420 shown in FIG. Data 1072 is stored. Note that the virtual personality management data 1072 can be appropriately distributed and stored in another computer connected via a network.

Then, when the CPU 1010 reads the virtual personality management program 1071 from the hard disk device 1070 and expands it in the RAM 1060, the virtual personality management program 1071 functions as the virtual personality management process 1061. Then, the virtual personality management process 1061 expands information read from the virtual personality management data 1072 and the like in an area allocated to itself on the RAM 1060 as appropriate, and executes various data processing based on the expanded data and the like.

The virtual personality management program 1071 does not necessarily have to be stored in the hard disk device 1070. The computer 1000 may read and execute the program stored in a storage medium such as a CD-ROM. Good. In addition, the computer 1000 stores the program in another computer (or server) connected to the computer 1000 via a public line, the Internet, a LAN (Local Area Network), a WAN (Wide Area Network), or the like. You may make it read and run a program from these.

As described above, in this embodiment, since goods and the like are transferred via the brokerage center, it is possible to safely trade without knowing personal information to the trading partner or broker. In addition, since instruction IDs with different values are issued for each process, even if the same supplier mediates the delivery of money items, the trader can safely trade without knowing the relationship of each process. It can be performed.

In Example 1, although the example which utilizes the transaction method and the transaction system which this application discloses in order to perform the transaction established by the net auction was shown, the transaction method and the transaction system which this application disclose are various in addition to this. Can be used for various purposes. In the present embodiment, another specific example will be shown regarding the use of the transaction method and the transaction system disclosed in the present application.

FIG. 19 is a diagram showing an outline of the transaction management function of the virtual personality management device 400. As shown in the figure, the virtual personality management device 400 manages the execution of various interactions necessary for completing a contract based on the contract management data 423. The term “interaction” here refers to the exchange of goods, money, information, etc. between the parties, and corresponds to a transaction in a broad sense. The virtual personality management device 400 can manage the execution of any combination of interactions included in the contract.

FIG. 20-1 is a diagram logically showing an example of information registered in the virtual personality management device 400 in order to manage an article sales contract between virtual personalities. The information shown in FIG. 20-1 includes the information about the parties to the contract and the information indicating the contract contents, as well as the information for the article delivery interaction, the information for the money delivery interaction, and the mail contact interaction. And information. That is, the information shown in FIG. 20-1 indicates that an article delivery interaction, a money delivery interaction, and an email contact interaction are required to manage an article sales contract. The flow of processing in each interaction is shown below.

FIG. 21A is a diagram illustrating an example of a processing flow in the article delivery interaction. In the example shown in the figure, first, the virtual personality management device 400 creates instruction data for instructing a sending party to send an article, and the real personality management device is a real personality management device corresponding to the party. It transmits to 300a (step S1101). Then, the personality management device 300a replaces the predetermined part of the instruction data with the personal information of the sending party and transfers it to that party (step S1102).

The party who has received the instruction data from the real personality management device 300a transmits the instruction ID included in the received instruction data to the carrier A and requests transportation of the article (step S1103). The carrier A transports the article to the mediation center in a state where the correspondence between the article and the instruction ID is known by attaching a tag with the instruction ID written thereto (step S1104).

The brokerage center registers an instruction ID corresponding to the conveyed article in the brokerage device 500b. Thereby, the instruction ID corresponding to the transported article is transmitted from the mediation device 500b to the virtual personality management device 400 (step S1105). Then, the virtual personality management device 400 records in the contract management data 423 that the work corresponding to the received instruction ID has been completed, and transmits an instruction ID to be included in the instruction data addressed to the receiving party to the mediation device 500b. The instruction ID corresponding to the conveyed article is instructed to be replaced with the instruction ID (step S1106).

Subsequently, the virtual personality management device 400 creates instruction data for instructing the receiving party to receive the article, and transmits the instruction data to the real personality management device 300b, which is a real personality management device corresponding to the party (step). S1107). Then, the real personality management device 300b replaces the predetermined part of the instruction data with the personal information of the receiving party and transfers it to that party (step S1108).

The party who has received the instruction data from the real personality management device 300b transmits the instruction ID included in the received instruction data to the carrier B and requests transportation of the article (step S1109). The carrier B goes to the broker center, transmits the instruction ID, and requests delivery of an article corresponding to the instruction ID (step S1110). The mediation center inputs the instruction ID to the mediation device 500b to check whether the corresponding article is stored, and if there is a corresponding article, delivers it to the carrier (step S1111). Then, the carrier B delivers the delivered article to the party (step S1112).

Further, the intermediary device 500b that has confirmed that the article corresponding to the input instruction ID is stored transmits the input instruction ID to the virtual personality management device 400. Then, the virtual personality management device 400 records in the contract management data 423 that the work corresponding to the transmitted instruction ID has been completed (step S1113).

FIG. 22 is a diagram showing an example of the flow of processing in the money delivery interaction. In the example shown in the figure, first, the virtual personality management device 400 creates instruction data for instructing the sending party to send money, and the real personality management device is a real personality management device corresponding to the party. It transmits to 300a (step S1401). Then, the personality management device 300a replaces the predetermined part of the instruction data with the personal information of the sending party and transfers it to that party (step S1402).

The party who has received the instruction data from the real personality management device 300a transmits the instruction ID, the amount, and the account number included in the received instruction data to the financial institution A and requests the sending of money (step S1403). . The financial institution A transfers the designated amount of money to the mediation center and transmits the designated instruction ID to the mediation center (step S1404).

The brokerage center registers the amount of money transferred together with the corresponding instruction ID in the brokerage device 500a. Thereby, the instruction ID corresponding to the transferred money is transmitted from the intermediary device 500a to the virtual personality management device 400 (step S1405). Then, the virtual personality management apparatus 400 records in the contract management data 423 that the work corresponding to the received instruction ID has been completed, and transmits an instruction ID to be included in the instruction data addressed to the receiving party to the mediation apparatus 500a. The instruction ID corresponding to the transferred money is instructed to be replaced with the instruction ID (step S1406).

Subsequently, the virtual personality management device 400 creates instruction data for instructing the receiving party to receive money, and transmits the instruction data to the real personality management device 300b, which is a real personality management device corresponding to the party (step). S1407). Then, the personality management device 300b replaces the predetermined part of the instruction data with the personal information of the receiving party and transfers it to that party (step S1408).

The party who has received the instruction data from the real personality management device 300b informs the financial institution B of the instruction ID, the amount, and its own account number included in the received instruction data, and requests money withdrawal (step S1409). ). The financial institution B transmits an instruction ID or the like to the broker center and requests a withdrawal of money corresponding to the instruction ID (step S1410). The mediation center inputs the instruction ID and the money amount to the mediation device 500a to check whether the corresponding money is stored, and if there is the corresponding money, transfers it to the designated account (step S1411).

Further, the intermediary device 500 a that has confirmed that money corresponding to the input instruction ID is stored transmits the input instruction ID to the virtual personality management device 400. Then, the virtual personality management device 400 records in the contract management data 423 that the work corresponding to the transmitted instruction ID has been completed (step S1412).

FIG. 25 is a diagram showing an example of the flow of processing in the mail communication interaction. In the example shown in the figure, first, the virtual personality management device 400 creates instruction data for instructing the sending party to send mail, and the real personality management device is a real personality management device corresponding to the party. It transmits to 300a (step S1801). Then, the personality management device 300a replaces the predetermined part of the instruction data with the personal information of the sending party and transfers it to that party (step S1802).

The party who received the instruction data from the real personality management device 300a creates a mail text, adds the instruction ID included in the received instruction data, and transmits it to the broker center (step S1803).

The mediation device 500e of the mediation center acquires the instruction ID added to the transmitted mail and transmits it to the virtual personality management device 400 (step S1804). Then, the virtual personality management device 400 records in the contract management data 423 that the work corresponding to the received instruction ID has been completed, and transmits an instruction ID to be included in the instruction data addressed to the receiving party to the intermediary device 500e. Then, the instruction ID added to the mail transmitted from the transmitting party is instructed to be replaced with the instruction ID (step S1805).

The intermediary device 500e that replaced the instruction ID added to the mail transmits the replaced instruction ID to the virtual personality management device 400, and inquires the mail address of the party corresponding to the instruction ID, that is, the receiving party. (Step S1806). Then, the virtual personality management device 400 inquires of the real personality management device 300b, which is the real personality management device corresponding to the receiving party, for the mail address corresponding to the virtual personality ID of the receiving party. To the intermediary device 500e (step S1807). Then, the intermediary device 500e transfers the sent mail using the reply mail address as a destination. At this time, the intermediary device 500e replaces the mail source address with its own mail address in order to keep the sender of the mail confidential (step S1808).

The virtual personality management device 400 creates instruction data that informs the receiving party that there is a contact by e-mail at almost the same timing as creating the instruction data addressed to the sending party. It transmits to the real personality management apparatus 300b which is a corresponding real personality management apparatus (step S1809). Then, the personality management device 300b replaces the predetermined part of the instruction data with the personal information of the receiving party and transfers it to that party (step S1810).

The party who has received the instruction data from the real personality management device 300b acquires the mail, searches for the mail with the instruction ID included in the instruction data, and checks the content of the corresponding mail if there is one (step S1811). ).

It should be noted that the parties can be contacted by phone instead of email. FIG. 26 is a diagram showing an example of the flow of processing in the telephone contact interaction. In the example shown in the figure, first, the virtual personality management device 400 creates instruction data for notifying that there is a telephone contact to the called party, and is an actual personality management device corresponding to that party. It transmits to personality management apparatus 300b (step S1901). Then, the personality management device 300b replaces the predetermined part of the instruction data with the personal information of the called party and transfers it to that party (step S1902).

Further, the virtual personality management device 400 creates instruction data for instructing the calling party to perform telephone contact, and transmits the instruction data to the real personality management device 300a which is a real personality management device corresponding to the party ( Step S1903). Then, the actual personality management device 300a replaces the predetermined part of the instruction data with the personal information of the calling party and transfers it to that party (step S1904). The party who has received the instruction data for carrying out the telephone contact from the real personality management device 300a calls the mediation device 500f and inputs the instruction ID included in the received instruction data with a dial key (step S1905).

The mediation device 500f acquires the input instruction ID and transmits it to the virtual personality management device 400 (step S1906). The virtual personality management apparatus 400 transmits the instruction ID included in the instruction data addressed to the called party to the mediation apparatus 500f (step S1907).

The intermediary device 500f transmits the received instruction ID to the virtual personality management device 400, and inquires the telephone number of the party corresponding to the instruction ID, that is, the called party (step S1908). Then, the virtual personality management device 400 inquires the telephone number corresponding to the virtual personality ID of the called party to the real personality management device 300b, which is the real personality management device corresponding to the called party. The telephone number is returned to the mediation device 500f (step S1909).

Then, the intermediary device 500f makes a call by designating the responded telephone number. When the call is established, the caller's instruction ID responded from the virtual personality management device 400 is notified by voice, and then the caller's call and the callee's call are connected, and the call between the parties is made. Enable (step S1910). Then, the intermediary device 500f transmits the instruction IDs of the calling side and the called side to the virtual personality management device 400 to notify that the telephone contact has been performed, and the virtual personality management device 400 transmits the received instruction ID. Is recorded in the contract management data 423 (step S1911).

In the above description, an example in which both parties have a virtual personality in the article sales contract is shown, but one party may have a real personality. FIG. 20B is a diagram logically illustrating an example of information registered in the virtual personality management device 400 in order to manage an article sales contract between the virtual personality and the real personality. In the information shown in the figure, the sending party has an actual personality.

FIG. 21-2 is a diagram showing an example of the flow of processing in the article delivery interaction when the sending party has a real personality. In the example shown in the figure, the virtual personality management device 400 creates instruction data for instructing the sending party to send the article, and the created instruction data is sent to the party without using the real personality management device 300. (Step S1201). This is because the party on the sending side has an actual personality, and necessary personal information is disclosed in the contract information 11 and the like, and the replacement of the personal information in the actual personality management device 300 is not necessary. Note that the processing from step S1202 to step S1212 is the same as the processing from step S1103 to step S1113 shown in FIG.

Note that the receiving party may have an actual personality instead of the sending party. FIG. 21C is a diagram illustrating an example of a flow of processing in the article delivery interaction when the receiving party has an actual personality. In the example shown in the figure, the virtual personality management device 400 creates instruction data for instructing the receiving party to receive the article, and the created instruction data is transmitted to the party without using the real personality management device 300. (Step S1307). This is because the receiving party has an actual personality, and necessary personal information is disclosed in the contract information 11 and the like, and the replacement of the personal information in the actual personality management apparatus 300 is not necessary. The processing from step S1301 to step S1306 is the same as the processing from step S1101 to step S1106 shown in FIG. 21-1, and the processing from step S1308 to step S1312 is the same as the processing from step S1109 to step S1310 shown in FIG. This is the same as the processing in S1113.

FIG. 20-3 is a diagram logically illustrating an example of information registered in the virtual personality management device 400 in order to manage a reservation service contract. The information shown in FIG. 20-3 is information for managing the contract of the hotel reservation service. In addition to the information about the parties to the contract and the information indicating the contract content, the information for the person identification interaction, And information for email contact interaction. That is, the information shown in FIG. 20-3 indicates that the person confirmation interaction and the mail contact interaction are necessary to manage the reservation service contract. Since the flow of the mail communication interaction has already been described, the flow of the process in the person confirmation interaction will be described below.

FIG. 23-1 is a diagram showing an example of a processing flow in the person confirmation interaction. In the example shown in the figure, first, the virtual personality management device 400 creates instruction data for instructing the person concerned to confirm the identity of the providing party (hotel), and is an actual personality management device corresponding to that party. It transmits to personality management apparatus 300b (step S1501). Then, the real personality management device 300b replaces the predetermined part of the instruction data with the personal information of the providing party and transfers it to that party (step S1502).

The virtual personality management device 400 creates instruction data for instructing the use party (guest) to confirm the identity at almost the same timing as creating the instruction data addressed to the providing party. It transmits to the real personality management apparatus 300a which is a real personality management apparatus corresponding to the party (step S1503). Then, the actual personality management device 300a replaces the predetermined part of the instruction data with the personal information of the party on the use side, and transfers it to that party (step S1504).

Then, the using party visits the providing party and offers to provide the reserved service (step S1505). On the other hand, the providing party generates identity verification data consisting of a unique character string, and the generated identity verification data is transferred to the mediation device together with the instruction ID included in the instruction data corresponding to the requested service. It transmits to 500c (step S1506).

Also, the providing party presents the generated identity verification data to the using party (step S1507). The user party transmits the presented identity verification data together with the instruction ID included in the instruction data transmitted to itself to the mediation apparatus 500c using its own mobile terminal or the like (S1508).

The mediation device 500c transmits the transmitted instruction ID to the virtual personality management device 400 and requests provision of the instruction ID of the corresponding providing party (step S1509). Then, the virtual personality management device 400 refers to the contract management data 423 and responds to the mediation device 500c with the instruction ID included in the instruction data addressed to the providing party in the corresponding contract (step S1510). Then, the intermediary device 500c includes the instruction ID transmitted from the provider user together with the same user identification data as the user identification data transmitted from the user party, and the instruction ID returned from the virtual personality management device 400. If they match, it responds to the user on the providing side that it is the person who made the reservation (step S1511). Then, the mediation device 500c transmits the instruction IDs of the use side and the provision side to the virtual personality management device 400 to notify that the person identification is completed, and the virtual personality management device 400 corresponds to the transmitted instruction ID. The fact that the work to be completed is completed is recorded in the contract management data 423 (step S1512).

In the above description, an example of a hotel reservation service is shown. However, person identification in an airplane or theater seat reservation service can also be realized by the same processing procedure. In the above description, an example in which both parties have a virtual personality in the reservation service contract is shown, but one party may have a real personality. FIG. 20-4 is a diagram logically illustrating an example of information registered in the virtual personality management device 400 in order to manage a reservation service contract when the providing party has a real personality. In the information shown in the figure, the sending party has an actual personality.

FIG. 23-2 is a diagram showing an example of the flow of processing in the person confirmation interaction when the providing party has a real personality. In the example shown in the figure, the virtual personality management device 400 creates instruction data for instructing the providing party to send an article, and the created instruction data is transmitted to the party without using the real personality management device 300. (Step S1601). This is because the providing party has a real personality, the necessary personal information is disclosed in the contract information 11 and the like, and the replacement of the personal information in the real personality management device 300 is not necessary. Note that the processing from step S1602 to step S1611 is the same as the processing from step S1503 to step S1512 shown in FIG.

The above description is based on the premise that the instruction ID is not disclosed between the parties, but if the party on the use side may disclose its own instruction ID, the processing procedure should be simplified. Can do. That is, if the party on the use side visits the party on the providing side and offers the provision of the reserved service, the instruction party discloses the instruction ID. To confirm that the correspondence is correct, and it becomes unnecessary for the user party to transmit the instruction ID to the mediation apparatus 500c.

In addition, the above description shows an example of identity verification in a reservation service in which a user party visits a provider party, but identity verification in a visit service in which a provider party visits a consumer party. Can be realized by the same processing procedure. The visit service here is, for example, a home delivery service for foods or a gift delivery service.

FIG. 20-5 is a diagram logically showing an example of information registered in the virtual personality management device 400 in order to manage fraud recovery contracts. The information shown in FIG. 20-5 includes the information related to the parties to the contract and the information indicating the contract contents, as well as the information for the article posting interaction, the information for the money sending interaction, and the mail communication interaction. And information. That is, the information shown in FIG. 20-5 indicates that an article posting interaction, a money sending interaction, and an email communication interaction are necessary to manage a fraud recovery contract. Since the flow of interaction between money sending and email communication has already been described, the flow of processing in the interaction of article posting will be shown below.

FIG. 24 is a diagram showing an example of the flow of processing in the article posting interaction. In the example shown in the figure, first, the virtual personality management device 400 creates instruction data for instructing the posting party to post an article, and the real personality management device 300a which is a real personality management device corresponding to the party. (Step S1701). Then, the personality management device 300a replaces the predetermined part of the instruction data with the personal information of the sending party and transfers it to that party (step S1702).

The party who has received the instruction data from the real personality management device 300a transmits the instruction ID included in the received instruction data to the designated mass media company and requests article posting (step S1703). The mass media company posts the requested article (step S1704). Then, the posting party transmits the instruction ID to the mediation apparatus 500d and notifies that the request has been executed (step S1705).

The mediation device 500d transmits the transmitted instruction ID to the virtual personality management device 400 (step S1706). The virtual personality management device 400 then responds to the mediation device 500d with an instruction ID included in the instruction data addressed to the receiving party (step S1707).

Subsequently, the virtual personality management device 400 creates instruction data for instructing the confirming party to confirm the article, and transmits the instruction data to the real personality management device 300b, which is a real personality management device corresponding to the party (step). S1708). Then, the actual personality management device 300b replaces the predetermined part of the instruction data with the personal information of the receiving party and transfers it to that party (step S1709).

The party who received the instruction data from the real personality management device 300b confirms the posting of the article according to the information included in the received instruction data (step S1710). Then, the party on the confirmation side transmits the instruction ID to the mediation apparatus 500d and notifies that the confirmation has been performed (step S1711). Then, the intermediary device 500d confirms that the transmitted instruction ID matches the instruction ID returned from the virtual personality management device 400, and transmits the instruction IDs on the posting side and the confirmation side to the virtual personality management device 400. The virtual personality management device 400 notifies that the article posting and confirmation are completed, and records in the contract management data 423 that the work corresponding to the transmitted instruction ID is completed (step S1712).

Claims

A transaction method for performing an anonymous transaction between an owner of a first virtual personality ID and an owner of a second virtual personality ID,
The virtual personality management means for storing the correspondence between the virtual personality ID and the real personality management means for storing the personal information of the real personality corresponding to the virtual personality ID for each virtual personality ID is based on setting information stored in advance. A first instruction data generating step for generating instruction data for instructing the owner of the first virtual personality ID to send money or information to a predetermined mediator;
The first real personality management means for storing the personal information of the real personality corresponding to the first virtual personality ID, based on the personal information, the instruction data generated in the first instruction data generating step, A first instruction data transmission step of transmitting to the real personality corresponding to the first virtual personality ID;
A second instruction data generating step in which the virtual personality management means generates instruction data for instructing the owner of the second virtual personality ID to receive money or information from the mediating means based on the setting information; When,
The second real personality management means for storing the personal information of the real personality corresponding to the second virtual personality ID, based on the personal information, the instruction data generated in the second instruction data generating step, And a second instruction data transmission step of transmitting to the real personality corresponding to the second virtual personality ID.
The transaction method according to claim 1, wherein the first instruction data generation step and the second instruction data generation step issue different numbers as identification numbers for identifying the instruction data.
The virtual personality management means is such that the real personality management means for executing the first instruction data transmission step and the real personality management means for executing the second instruction data transmission step are different real personality management means. The transaction method according to claim 1, further comprising a real personality management means selection step of selecting real personality management means.
The real personality management means selection step selects a real personality management means for executing the first instruction data transmission step based on a priority set in advance by an owner of the first virtual personality ID, and then The actual personality management means for executing the second instruction data transmission step is selected based on a priority set in advance by an owner of the second virtual personality ID. Transaction method.
The virtual personality management means further includes a replacement instruction step for instructing the mediation means to change the identification number of the instruction data corresponding to the sent money item. The transaction method according to any one of the above.
A transaction system for performing an anonymous transaction between an owner of a first virtual personality ID and an owner of a second virtual personality ID,
A plurality of real personality management devices that store personal information of real personalities corresponding to virtual personality IDs;
A virtual personality management device that stores a correspondence between a virtual personality ID and a real personality management device that manages the virtual personality ID for each virtual personality ID;
The virtual personality management device is:
Based on pre-stored setting information, first instruction data for instructing the owner of the first virtual personality ID to send money or information to a predetermined mediating means, and the second virtual personality ID Instruction data generating means for generating second instruction data for instructing the owner to receive money or information from the mediating means;
The first instruction data is transmitted to one of the real personality management devices that manages the first virtual personality ID, and the second instruction data is transmitted to one of the real personality management devices that manage the second virtual personality ID. An instruction data transmitting means for transmitting the instruction data,
The real personality management device is:
A transaction system comprising: instruction data transfer means for transferring the instruction data transmitted by the instruction data transmission means to a real personality corresponding to the virtual personality ID to be designated.