WO2001048648A1 - Communication system and communication terminal used therefor - Google Patents

Abstract

A communication system and communication terminal enable safe electronic settlement and electronic commerce while protecting individual secret information. Information about confirmation and confirmation result is communicated between a shop terminal (4) and a central management center (1) by relay using a user terminal (3) that a user has. When a user purchases a commodity at the shop, confirmation information to which user's signature information is added is created through a shop terminal (4) and transferred. The confirmation information is received by the user terminal (3), and user's signature information is further added to the information, which is transferred to the central management center (1). After the central management center (1) confirms the confirmation information, it conducts settlement with a settlement center (2). After the central management center (1) conducts the settlement, result information representing the results sent from the central managing center (1) for settlement confirmation by the shop is sent to the shop terminal (4) via the user terminal (3).

Description

 Technical Field Communication system and communication terminal device used therefor

 The present invention relates to a communication system for performing, for example, electronic commerce and a communication terminal device used for the communication system. Technology background

 2. Description of the Related Art Conventionally, as a case of performing electronic settlement using a communication path such as a telephone line, a method using a so-called credit card or cash card has been known. When a customer purchases a product using these forces, the customer is presented with the force and the product, and the store clerk uses the card reader of the communication terminal installed in the store. Device) and read the information on the card, and then entered the customer's password into the communication terminal.

 As a result, the information read from the customer's card and the information of the personal identification number are transmitted to a predetermined management center via a telephone line, and the management center, based on the transmitted information, determines whether the customer presenting the card has a valid place. After performing collation processing such as whether or not it is a voter, if it is determined that the owner is a valid owner, information such as the determination result is returned to the communication terminal device in the store via a telephone line. When the clerk checks the returned information, he or she accepts the purchase of the product using the customer's card without selling cash and sells the product.

 It is also known to use an IC card with a semiconductor memory enclosed. In this IC card as well, just as a PIN number (personal identification number) is used instead of a PIN (personal identification number), the same as a credit card or cash card Method was adopted.

However, when making electronic payments using the various cards mentioned above, those cards must be Owners, such as customers, who have their own personal information on personal information related to business transactions, such as personal identification numbers and communication lines, are disclosed in communication systems including communication terminals and communication lines that are not under their control. Was a weakness for In other words, in the conventional electronic payment method, if the cardholder's confidential information (especially, a PIN) is entered into a terminal (store terminal) that is not under the control of the cardholder, the cardholder will be able to perform any subsequent processing. There was no way to know if the information would be sent, so there was a problem that confidential information would escape from the secret state.

 In addition, as described above, the information of the security code input to the store terminal is transmitted to the management center via a communication line, where the information is compared with a preset security code, and the result is compared with the store terminal. It was a mechanism to be returned to.

 For this reason, the management center had to securely store the confidential information of the cardholder, which was also a security weakness.

 The present invention has been made in order to overcome such a conventional problem, and enables a person who intends to perform electronic payment and the like to process the information under his / her own control, and to provide secret information to an unauthorized third party. It is an object of the present invention to provide a communication system capable of preventing leakage of communication and the like and a communication terminal device used for the communication system. Disclosure of the invention

A communication system according to the present invention according to claim 1 includes first and second terminal devices and management means, and has a first owner who owns the first terminal device and owns the second terminal device. Confirmation information having inter-owner information generated by an act with the second owner is transferred to the above-mentioned management means, and the above-mentioned management means transfers the above-mentioned inter-owner information contained in the transferred confirmation information. A communication system for confirming an action between the owners on the basis of the confirmation information transferred from the first terminal device to the management device via the second terminal device. When the management means confirms the act between the owners based on the act information in the confirmation information, the information of the confirmation And transmitting the result information including the report to the first terminal device via the second terminal device.

 The communication system of the present invention according to claim 2 is the communication system according to claim 1, wherein the first terminal device adds its own signature information to the confirmation information and transfers the information to the second terminal device. In addition, based on the signature information of the management means included in the confirmation information transferred from the second terminal device, it is determined whether the confirmation information is information returned from the management means. The second terminal device appends its signature information to the confirmation information from the first terminal device and transfers the information to the management means, and the management means reads the confirmation information from the transmitted confirmation information. Confirming the action between the owners based on the signature information of the first and second terminal devices, adding their own signature information to the result information, and returning the result information to the second terminal device. Features.

 According to a third aspect of the present invention, in the communication system according to the second aspect, the first terminal device includes a random number generation unit, and a random number generated by the random number generation unit is added to the confirmation information. Then, the information is transferred to the first terminal device, and the management means confirms the inter-owner information based on the random number and the current time information included in the confirmation information.

 The communication system of the present invention according to claim 4 is the communication system according to claim 3, wherein the second terminal device adds information of a current time to the confirmation information from the first terminal device. The information is transferred to the management means.

 In the communication system according to the present invention according to claim 5, in the communication system according to claim 4, the first terminal device adds its own identification information to the confirmation information and transfers the identification information to the second terminal device. The second terminal device adds its own identification information to the confirmation information from the first terminal device and transfers the information to the management unit.

A communication system according to a sixth aspect of the present invention is the communication system according to any one of the first to fifth aspects, wherein the first and second terminal devices and the management unit are configured to transmit the confirmation information and the When the result information is encrypted by a predetermined encryption method and transferred, In addition, it is characterized in that each of the confirmation information and the result information is decoded by a predetermined decoding method.

 A communication system according to a seventh aspect of the present invention is the communication system according to the first aspect, wherein the second terminal device includes a display unit that displays the transferred confirmation information or the result information. It is characterized by having.

 According to the communication system of the present invention according to claims 1 to 7, communication is always performed with the second terminal device interposed between the first terminal device and the management means. As a result, for example, when a user (purchaser) who owns the second terminal device purchases a product from a seller at the store owning the first terminal device, the user (purchaser) receives the second terminal device from the first terminal device side. When confirmation information such as sales confirmation is transferred to the management means and the user is confirmed, the confirmation information is transferred to the management means via the user's second terminal device (relay). . Also, when the management means confirms and returns the result information, it is returned to the first terminal via the user's second terminal (relay).

 For this reason, the user can check the information passing through the second terminal device. In other words, payment can be made in a closed communication system between the first and second terminal devices and the management means, and the protection of confidential information of users and the protection of information related to sales by sellers are extremely reliable. It can be realized with the nature.

The communication terminal device of the present invention according to claim 8, comprising a terminal device and management means, wherein an owner generated by an act between a first owner who owns the terminal device and another second owner. Transfer the confirmation information having the inter-information from the terminal device to the management means, and confirm the action between the owners based on the inter-owner information included in the transferred confirmation information by the management means. And a communication terminal device owned by the second owner used in the communication system configured to return result information of the confirmation to the terminal device, wherein the communication terminal device is transferred from the terminal device to the management means. It is characterized in that the confirmation information is relayed and transferred to the management means, and the result information returned from the management means to the terminal device is relayed and transferred to the terminal device. The communication terminal device according to the ninth aspect of the present invention is the communication terminal device according to the eighth aspect, wherein the first transmitting / receiving means for performing bidirectional communication with the first terminal device, and the management means And a second transmitting / receiving means for performing two-way communication with the device, and transmitting the confirmation information and the result information through the first and second transmitting / receiving means. According to a tenth aspect of the present invention, there is provided the communication terminal device according to the ninth aspect, wherein the second transmitting / receiving means for performing bidirectional communication with the management means is detachable. It is a module.

 In the communication terminal device of the present invention according to claims 8 to 10, communication is always performed between the terminal device and the management means with the communication terminal device of the present invention interposed. Thus, for example, when a user (purchaser) who owns the communication terminal device of the present invention purchases a product from a seller at the store that owns the terminal device, the terminal device side confirms information such as sales confirmation. Is transferred to the management means side to confirm the user, the confirmation information is transferred to the management means side via the user's communication terminal device (relay). Also, when the management means confirms and returns the result information, it is returned to the seller's terminal via the user's communication terminal (relay).

 For this reason, the user can check the information via the communication terminal device. In other words, payment can be performed in a closed communication system between the communication terminal device of the present invention, the terminal device, and the management means, and protection of confidential information of users and protection of information on sales of sellers can be achieved. It can be realized with extremely high reliability. BRIEF DESCRIPTION OF THE FIGURES

 FIG. 1 is a block diagram showing a basic configuration of a communication system according to an embodiment of the present invention.

 FIG. 2 is a block diagram showing a configuration of a central management center according to the embodiment of the present invention.

FIG. 3 is a block diagram showing the configuration of the store terminal device according to the embodiment of the present invention. You.

 FIG. 4 is a block diagram showing a configuration of the user terminal device according to the embodiment of the present invention.

 FIG. 5 is a plan view showing an external configuration of the user terminal device.

 FIG. 6 is a plan view showing an external configuration of a user terminal device having a detachable module.

 FIG. 7 is a flowchart for explaining operations of the communication system, the central management center, the shop terminal device, and the user terminal device according to the embodiment of the present invention.

 FIG. 8 is a flowchart for explaining the operation following FIG.

 FIG. 9 is a flowchart for explaining the operation following FIG.

 FIG. 10 is a flowchart for explaining the operation following FIG.

 FIG. 11 is a flowchart for explaining the operation following FIG. FIG. 12 is a flowchart for explaining the operation following FIG. FIG. 13 is a flowchart for explaining the operation following FIG. BEST MODE FOR CARRYING OUT THE INVENTION

 Hereinafter, embodiments of the present invention will be described with reference to the drawings. Although the present invention is applicable to a wide range of applications, an embodiment in which electronic commerce is performed will be described as a specific example that is easier to understand.

 Figure 1 is a system configuration diagram showing the basic configuration of a communication system, Figure 2 is a block diagram showing the configuration of a central management center, Figure 3 is a block diagram showing the configuration of a store terminal device, and Figure 4 is a user. FIG. 3 is a block diagram illustrating a configuration of a terminal device.

 In Fig. 1, this communication system is a central management center installed in a management company, etc.

1, a settlement center 2 that performs final settlement processing between the central management center 1, a user terminal device 3 owned by a user such as a customer, and a store terminal device 4 installed in a store or the like. Have been. The central management center 1 is called a NOC (Network Operation Center) and communicates with the settlement terminal 2 and with the user terminal device 3 to perform, for example, a process for a commercial transaction described later.

 The user terminal device 3 manages communication between the central management center 1 and the store terminal device 4, and, for example, in the case of a commercial transaction to be described later, it is necessary for the commercial transaction between the user and the central management center 1 and the store terminal device 4 to be performed. It has a function to manage the transfer of various types of information from an independent standpoint. That is, in the communication system shown in FIG. 1, the user terminal device 3 is located between the central management center 1 and the shop terminal device 4. As a result, the information communication between the central management center 1 and the store terminal device 4 has a system configuration in which the user terminal device 3 is interposed.

 In the store terminal device 4, when a customer (user) purchases a product, a store clerk or the like performs processing such as requesting the central management center 1 for customer authentication and final settlement. However, as described above, various requests from the shop terminal device 4 to the central management center 1 and information returned in response to the requests are performed via the user terminal device 3.

 When a user makes a commercial transaction with a seller or the like who owns the store terminal device 4 using the user terminal device 3, the settlement center 2 sends information indicating that the commercial transaction has been performed to the central management center 1. If supplied from, it will act for final settlement processing.

 Next, the configuration of the central management center 1 will be described with reference to FIG.

The central management center 1 includes a control unit 5 having an arithmetic function, a memory unit 6 for storing arithmetic data, a public key database 7 for storing public key data, a key management unit 8, a telephone line communication processing unit 9, A transmission / reception unit 10 for communication via the mobile telephone network NT1, a communication processing unit 11, a communication via a local area network (LAN) and various other communication networks NT1. It is configured by a computer system having a so-called communication function provided with a transmission / reception unit 12 for performing communication. Here, the control unit 5 centrally manages the entire central management center 1. The key management unit 8 performs data encryption and decryption processing. The telephone line communication unit 9 modulates the data supplied from the control unit 5 and supplies the data to the transmission / reception unit 10, and demodulates the data supplied from the transmission / reception unit 10 and supplies the data to the control unit 5. The transmission / reception unit 10 transmits the modulated data from the telephone line communication processing unit 9 to the mobile telephone network NT1, and receives the data from the mobile telephone network NT1 and transfers it to the telephone line communication processing unit 9. I do.

 The communication processing unit 11 modulates the data supplied from the control unit 5 and supplies it to the transmission unit 12, and demodulates the data from the transmission unit 12 and supplies it to the control unit 5. The transmission section 12 transmits data from the communication processing section 11 to the network NT 2, and receives data from the network NT 2 and transfers the data to the communication processing section 11.

 The central management center 1 performs two-way wireless communication with the user terminal 3 via the mobile telephone network NT 1 and bi-directional communication with the settlement center 2 via the network NT 2. I'm going to do it.

 In FIG. 3, the store terminal device 4 includes a control unit 13 having an arithmetic function, a memory unit 14 for storing arithmetic data, a key management unit 15, an input unit 16, a display unit 17, A communication processing unit 18 and a transmission / reception unit 19 are provided.

Here, the control unit 5 centrally manages the entire store terminal device 4. The key management unit 15 performs data encryption and decryption processing. The input unit 16 is formed of a keyboard touch panel or the like for a store clerk to input data, and the display unit 17 is formed of, for example, a liquid crystal display or the like. Do. The communication processing section 18 modulates the data supplied from the control section 13 and supplies the modulated data to the transmission / reception section 19, and demodulates the data from the transmission / reception section 19 and supplies the data to the control section 13. The transmission / reception unit 19 performs bidirectional communication with the user terminal device 3 via either the wireless antenna 20 or the optical communication port 21. In the present embodiment, communication with the user terminal device 3 is performed wirelessly, but communication may be performed using a wire. In FIG. 4, the user terminal device 3 includes a control unit 22, a memory unit 23, an input unit 24, a display unit 25, a telephone line communication processing unit 27, and a transmission / reception unit 28. You. Further, the control section 29 includes a control section 29, a memory section 30, a key management section 31, a communication processing section 32, and a transmission / reception section 33.

 The first control unit 22 centrally manages the operation of the entire user terminal device 3 and, via the telephone line communication processing unit 27, the transmission / reception unit 28, and the wireless antenna 34, the mobile telephone network. Two-way communication with Central Management Center 1 via NT1.

 The second control unit 29 transmits the data encrypted by the key management unit 3 to the store terminal device 4 via the communication processing unit 32 and the transmission / reception unit 33, and communicates with the transmission / reception unit 33. The data transmitted from the store terminal device 4 via the processing unit 32 is transferred to the key management unit 31 for decryption processing.

 The transmitting / receiving unit 33 performs bidirectional communication with the store terminal device 4 through the wireless antenna 35 or the optical communication port 36. In addition, relatively more communication is performed than in mobile communication. In the present embodiment, the communication between the user terminal device 3 and the shop terminal device 4 is performed wirelessly as described above, but may be performed by wire.

 Here, as shown in the plan view of FIG. 5, the user terminal device 3 has the same shape as a small portable telephone having portability, and a portion 1 A surrounded by a dotted line in FIG. The components 29 to 33, 35, and 36 have the function of performing the electronic settlement described below, and the remaining components 22 to 28, 34 have the well-known wireless telephone function. It is built into the housing (symbol is omitted).

Further, when the user operates the operation buttons or the like of the input unit 24 to give a command for the telephone function, the first control unit 22 performs a wireless communication process according to the command. Further, when the user operates the operation buttons or the like of the input unit 24 to issue a command for electronic payment, the first control unit 22 controls the second control unit 29 in accordance with the command, and the store terminal device 4 It communicates with the central management center 1 via the mobile communication telephone network NT1. As a modification, as shown in the plan view of FIG. 6, the components 29 to 33, 35, and 36 in the portion 1A surrounded by the dotted line in FIG. A, and by attaching this module 1A to the existing mobile phone itself, the user terminal device 3 can be realized.

 Next, the operation of the communication system having such a configuration and the central management center 1, the settlement center 2, the user terminal device 3, and the store terminal device 4 will be described with reference to the flowcharts of FIGS. 7 to 13. I do. As an example, the operation when a user purchases a product at a store will be described.

 In FIG. 7, when a sales negotiation is concluded between the user (customer) and the store (seller), the seller operates the input unit 16 to store the sales information ( Enter the product name, price, quantity, transaction time, etc. (step S100). In response, the control unit 13 creates the sales data DSEL (step S102).

 Next, the key management unit 15 generates a random number RD (step S104). Further, by encrypting this random number with a public key (hereinafter referred to as N0C public key) DKYN0C0PEN issued by the central management center 1, encrypted random number data RDSH0P is generated (step S106).

 The control unit 13 combines the above-mentioned encrypted random number data RDSH0P, store identification data IDSHOP, and sales data DSEL to create sales message data DTSEL (step S108).

 Next, the operator of the store terminal device inputs a PIN code (personal identification code) from the input section 16 (step S110).

 The key management unit 15 confirms the validity of this PIN code (step S112), and if it is incorrect (if not valid), it is re-entered from step S110. On the other hand, if the validity of the PIN code is confirmed, the process proceeds to step S114.

In step S114, the key management unit 15 stores the secret of the store in the sales message data DTSEL. An electronic signature is performed using the key DKYSHOP, and signed sales message data DSELsig is generated (step S114).

 Then, in step S116, the control unit 13 supplies the signed sales message data DSELsig to the communication processing unit 18 and transmits it to the user terminal device 4 through the transmission / reception unit 19.

 The store terminal device 4 performs the processing of steps S100 to S116 as described above, thereby ensuring the security of the information related to the commercial transaction and ensuring the legitimate commercial transaction. In other words, during the above process, by encrypting the random number data RD SHOP generated by the key management unit 15 in the store terminal device 4 with the NOC public key DKYN0C0PEN, `` really communicating with the central management center 1 '' Or whether the user terminal device 3 has not been completed at the central management center 1. The store can confirm the strength. 1 receives the sales message data DSELsig via the user terminal device 3 and decrypts the encrypted random number data RD SHOP with the secret key DKYSHOP of the store known only by the central management center 1 to obtain the same random number RD. The processing result message data to store terminal device 4 is embedded in DRTN and returned.

 Accordingly, the store terminal device 4 checks that the random number RD generated by itself is included in the processing result message data DRTN returned from the central management center 1, and thus, the sales terminal data DSELsig transmitted by itself. Can be confirmed to have been processed by the real central management center 1.

 The encryption function using the NOC public key DKYN0C0PEN is used to exchange management information between the store terminal device 4 and the central management center 1 in addition to random numbers without the customer (user terminal device operator) exchanging information. Is also used.

Also, since the input of the PIN code and the confirmation of the value are performed by the built-in key management unit 15, the PIN code cannot be leaked to the user terminal device 3 or the central management center 1. As a result, the security of the secret information on the side of the store terminal device 4 is enhanced. Next, when transmission is performed from the shop terminal device 4 to the user terminal device 3 in step S116, the user terminal device 3 starts the processing shown in FIG.

 First, in step S200, the transmitted sales message data DSELsig is received by the transmission / reception unit 2. Next, the display unit 25 displays the sales data D SEL in the received sales message data D SELs ig and a display for confirming whether or not there is an intention to purchase the product (step S202).

 Next, in step S203, when the user inputs a purchase intention using the input unit 24, the control unit 2 confirms the purchase intention (step S204), and if there is a purchase position, the process proceeds to step S206. . On the other hand, if the user inputs that the purchase is not to be made by the input unit 24, the control unit 2 detects this and the processing is terminated, and the negotiation is not established.

 Next, in step S206, the control unit 29 adds data (hereinafter, referred to as duplicate detection data) DTM representing a value for duplicate detection to the sales message data DSELsig. Further, the control unit 29 adds the user identification data IDUSER to the sales message data DSELsig (step S208).

 Next, when the user inputs the PIN code from the input unit 24 (step S210), the key management unit 31 confirms the validity of the PIN code (step S212), and when the PIN code is incorrect (step S210). If “incorrect”, the process proceeds to step S210 for re-input, and if the validity of the PIN code is confirmed (if “correct”), the process proceeds to step S21.

 In step S2114, the key management unit 31 digitally signs the sales message data DSELsig with the user's private key DKYUSER, thereby generating electronically signed sales message data DSELUSERsigl. Further, the signed sales message data DSELUSERsig2 is generated by encrypting the signed sales message data DSELUSERsig1 with the NOC public key DKYN0C0PEN (step S216).

Then, in step S 218, the control unit 22 sends the sales message data D SELUSERsig2 is transferred to the telephone line communication processing unit and the transmission / reception unit 28, and is transmitted to the central management center 1 via the mobile telephone network NT1.

 By performing the processing in steps S200 to S218 described above, the user can know that correct sales information has been transmitted from the shop terminal device 4 to the central management center 1. That is, since the display unit 25 of the user terminal device 3 displays the sales data DSEL generated by the store terminal device 4 (see step S202), the user (customer) can store the sales data of the correct product price at the store side. You can check whether you have entered it.

 Further, since the duplicate detection data DTM is added to the sales message data DSELsig in the user terminal device 3 (see step S206), the sales message data DSELUSERsig2 is duplicated and transmitted to the central management center 1 due to a communication error or the like. Even in such a case, the central management center 1 can respond based on the duplicate detection data DTM.

 Further, since the input of the PIN code and the confirmation of the value are performed by the built-in key management unit 31, the PIN code does not leak to the store terminal device 4 or the central management center 1. As a result, higher safety (toughness) is realized compared to the conventional forced cashless system.

 Next, when the sales message data DSELUSERsig2 is transmitted to the central management center 1 by the processing of the above step S218, the processing of the central management center 1 shown in FIG. 9 is performed.

 First, in step S300, the central management center 1 receives the sales message data DSELUSERsig2 from the user terminal device 3 through the transmission / reception unit 10. Then, the key management unit 8 decrypts the sales message data DSELUSERsig2 with the secret key data DKYN0C of the central management center 1 (step S302).

Next, the control unit 5 extracts the user identification data IDUSER from the decrypted sales message data and searches the public key database 7 (step S304). Furthermore, control The part 5 checks whether or not the user identification data ID USER exists in the public key database 7 (step S306), and if it does not exist, performs center-side error processing. On the other hand, if it exists, the process moves to the next step S307.

 In step S307, the duplication detection data DTM is checked. Then, it is determined whether or not the transmitted message information is duplicated. If the message information is duplicated, the center side error processing is performed. On the other hand, if the message is not duplicate message information, it is determined that the message is correct, and the process proceeds to the next step S308.

 In step S308, the control unit 5 retrieves the user's public key data D USEROPEN from the public key database 7 and verifies the user's electronic signature in the decrypted sales message data (step S312) ). Here, if the electronic signature is incorrect, the center side error processing is performed. On the other hand, if it is correct, the flow shifts to step S400 shown in FIG.

 In step S400, the control unit 5 extracts the shop identification data ID SHOP from the sales message data, and searches the public key database 7. Further, the control unit 5 checks whether or not the store identification data ID SH0P exists in the public key database 7 (step S402), and if it does not exist, performs center side error processing. On the other hand, if it exists, the process moves to the next step S404.

 In step S404, the control unit 5 retrieves the store's public key data DKYSH0P0PEN from the public key database 7, and then verifies the store's electronic signature of the sales message data (step S406). Then, it is determined whether or not the electronic signature is correct (step S408). If the electronic signature is not correct, the center side error processing is performed. On the other hand, if it is correct, the flow shifts to the next step S410.

 In step S410, the control unit 5 extracts the sales data D SEL and the transaction time data from the sales message data and stores them in the memory unit 6.

Further, the control unit 5 extracts the encrypted random number RD SHOP from the sales message data (step S412), and the key management unit 8 stores the random number RD SH0P in the secret key data of the central management center 1. Data is decrypted using the D KYNOC and stored in the memory (step S 414).

 As described above, when the processing in steps S300 to S414 in FIGS. 9 and 10 is performed, the following effects can be obtained. That is, in the present invention, the store terminal device 4 and the user terminal device 3 are authenticated by an electronic signature using public key encryption. Therefore, the central management center 1 only needs to maintain the public keys DKYSHOPOPEN and DKYUSEROPEN of the store terminal device 4 and the user terminal device 3, and the secret key DKYNOC of the central management center 1. Since the public key does not need to be managed in secret due to its nature, the central management center 1 needs to securely maintain only the central management center 1 private key. This makes it easier to secure the security of the center than in the conventional system.

 Next, when the processing of step S414 is completed, the processing shown in FIG. 11 is started. First, in step S500, the control unit 5 combines the duplicate detection data DTM, the store identification data ID SH0P, the user identification data IDUSER, and the sales data DSEL to generate settlement message data DACK. The settlement message data D ACK is transmitted to the settlement center 2 via the transmission / reception unit 2 and the network NT 2 (step S502). As a result, so-called cash settlement is performed (step S504). When the return of the settlement is notified to the central management center 1, in step S506, the control unit 5 checks the processing result in the settlement center 2, and further in step S508, the check is performed. If the result is a settlement error, the center performs error processing. On the other hand, in the case of a normal result, the processing in the following steps S510 to S518 is performed to create processing result message data DRTN to the user terminal device 3 and the shop terminal device 4.

First, in step S510, the random number data stored in the memory unit 6 and transmitted from the store is encrypted with the store's public key data. Next, the encrypted random number, the payment message, and the result of the payment processing are combined to create processing result message data D RTN '(step S5 12). Further, the processing result message data D RTN 'is digitally signed with the secret key data of the central management center 1 (step S5 14), and the processing result By encrypting the entire message with the user's public key, processing result message data D RTN to be transmitted to the user terminal device 3 is generated (step S 5 16).

 Then, in step S 518, the control unit 5 transmits the processing result message data D RTN to the user terminal device 3 via the mobile communication network NT 1 through the telephone line communication processing unit 9 and the transmission / reception unit 10. .

 The following effects can be obtained by performing the processing in steps S500 to S518. In other words, by performing an electronic signature on the processing result message data with the secret key of the central management center 1, "falsification of the processing result message data D RTN on the communication path between the central management center 1 and the user terminal device 3" Has been prevented. Also, by performing an electronic signature on the processing result message data DRTN with the secret key of the central management center 1, "falsification of the processing result message data DRTN by the user terminal device 3" is prevented. Furthermore, by encrypting the processing result message data D RTN with the public key of the user terminal device 3, "Eavesdropping on the communication path between the central management center 1 and the user terminal device 3" is prevented. ing. Furthermore, by embedding the random number RD SHOP generated by the store terminal device 4 in the processing result message data D RTN and returning it, it is possible to prevent "the user terminal device 3 from becoming the central management center 1". You.

Next, when the processing result message data D RTN is transmitted from the central management center 1 to the central user terminal device 3, the processing of steps S600 to S612 shown in FIG. 12 is performed. Upon receiving the processing result message data D RTN from the central management center 1 by the transmission / reception unit 28 (step S600), the user terminal device 3 uses this processing result message data D RTN. After decryption with the private key of the third party (step S602), the validity is verified with the public key of the central management center 1 (step S604). Then, the verification result of step S606 is determined. Here, if the electronic signature of the central management center 1 is incorrect, error processing is performed, and if it is correct, the procedure moves to the next step S610. In step S610, the processing result message data D Sales data DSEL in the RTN and the processing results of the central management center 1 and the settlement center 2 are displayed on the display unit 25 of the user terminal device 3. Show. Then, in step S612, the processing result message data D RTN decrypted with the public key of the user terminal device 3 is transmitted to the store terminal device 4 via the transmission / reception unit 28.

 The following effects are obtained by the processing of steps S600 to S612. That is, the processing results of the central management center 1 and the settlement center 2 are displayed on the screen of the user terminal device 3. As a result, the result of the settlement process can be confirmed on the user terminal device 3 under the control of the user himself. For this reason, in the conventional system, the present invention can realize excellent reliability, as compared with the case where the payment result display can only be viewed on the terminal device at the store side.

 Next, when the processing result message data D RTN is transmitted to the store terminal device 4, the store terminal device 4 performs steps S700 to S710 shown in FIG.

 In step S700, the store terminal device 4 receives the processing result message data D RTN from the user terminal device 3 through the transmission / reception unit 19. Next, the control unit 13 verifies the digital signature of the received processing result message data D RTN using the public key of the central management center 1 (step S702), and determines the verification result (step S700). Four ) . Here, if the electronic signature is correct, the error processing is executed. If it is correct, go to the next step S706.

 In step S706, the encrypted random number RD SHOP in the processing result message D RTN is retrieved and decrypted with the secret key of the shop terminal device 3. Then, it is checked whether or not the decrypted random number RD 'is equal to the random number RD embedded in the sales message data D SEL by the store terminal device 3 (step S708), and if they are not equal, error processing is performed. . If they are the same, the flow shifts to the next step S710 to display the sales data DSEL in the processing result message data DRTN and the processing result data on the display unit 17.

By performing the processing of steps S700 to S710, the seller at the store can confirm that the appropriate settlement processing has been performed between the central management center 1 and the settlement center 2. It has become. Industrial applicability

 The communication system of the present invention is configured to perform communication by always interposing, for example, a second terminal device used as a user terminal device between a first terminal device used as a store terminal device and management means. Therefore, information communication can be performed in a closed communication system between the first and second terminal devices and the management means. This makes it possible to protect personal confidential information and the like with extremely high reliability when conducting electronic commerce. That is, the confidential information of the owner of the second terminal device can be protected.

 The communication terminal device of the present invention, for example, relays the confirmation information transferred from the terminal device used as the store terminal device to the management device and transfers it to the management device, and transfers the confirmation information from the management device to the terminal device used as the store terminal device. Since the returned result information is relayed and transferred to the terminal device, information communication can be performed in a closed communication system between the communication terminal device, the terminal device, and the management means of the present invention. This makes it possible to protect personal confidential information and the like with extremely high reliability when conducting electronic commerce. That is, it is possible to protect the private information of the owner who owns the communication terminal device of the present invention.

Claims

The scope of the claims 1. An action between a first owner who owns the first terminal device and a second owner who owns the second terminal device, comprising first and second terminal devices and management means. Transferring the confirmation information having the inter-owner information generated in the above to the management means, and the management means confirms the action between the owners based on the inter-owner information included in the transferred confirmation information. A communication system to perform,  The confirmation information transferred from the first terminal device to the management unit is transferred to the management unit via the second terminal device, and the management unit adds the confirmation information to the action information in the confirmation information. A communication system that, when the act between the owners is confirmed based on the result, returns result information including information of the confirmation to the first terminal device via the second terminal device. 2. The first terminal device adds its own signature information to the confirmation information and transfers it to the second terminal device, and is included in the confirmation information transferred from the second terminal device. Based on the signature information of the management means, determine whether the confirmation information is information returned from the management means,  The second terminal device adds its own signature information to the confirmation information from the first terminal device, and transfers it to the management unit.  The management means confirms an action between the owners based on the signature information of the first and second terminal devices in the transferred confirmation information, and adds its own signature information to the result information. 2. The communication system according to claim 1, wherein the communication is sent back to the second terminal device. 3. The first terminal device includes a random number generation unit, adds a random number generated by the random number generation unit to the confirmation information, and transfers the confirmation information to the first terminal device. 3. The communication system according to claim 2, wherein the management unit confirms the inter-owner information based on the random number included in the confirmation information and the current time information. 4. The communication method according to claim 3, wherein the second terminal device adds the current time information to the confirmation information from the first terminal device and transfers the information to the management unit.  5. The first terminal device adds its own identification information to the confirmation information and transfers it to the second terminal device,  The communication according to claim 4, wherein the second terminal device adds its own identification information to the confirmation information from the first terminal device and transfers the information to the management unit. 6. The first and second terminal devices and the management means encrypt the check information and the result information by a predetermined encryption method and transfer the encrypted information, and furthermore, each of the check information and the result information by a predetermined decryption method. The communication system according to claim 1, wherein the result information is decoded. 7.The communication according to claim 1, wherein the second terminal device comprises a display unit for displaying the transferred confirmation information or the result information. 8. A terminal device and a management unit, and confirmation information having inter-owner information generated by an act between a first owner who owns the terminal device and another second owner is transmitted from the terminal device. The action is transferred to the management means, and the management means confirms the action between the owners based on the inter-owner information included in the transferred confirmation information. A communication terminal device owned by the second owner used in a communication system configured to return result information to the terminal device,  The confirmation information transferred from the terminal device to the management device is relayed to the management device, and the result information returned from the management device to the terminal device is relayed to the terminal device. A communication terminal device. 9. A first transmitting / receiving means for performing bidirectional communication with the first terminal device, and a second transmitting / receiving means for performing bidirectional communication with the management means, 9. The communication terminal device according to claim 8, wherein said confirmation information and said result information are transferred through said transmission / reception means. 10. The communication terminal device according to claim 9, wherein the second transmission / reception unit that performs bidirectional communication with the management unit is a detachable module.